@cenk1cenk2/renovate-config (>=2.3.132 <=2.3.148), @jamietanna/patch-testing (>=0.1.0 <=0.2.28) +7 more potentially affected by unknown CVE via renovate (>=36.109.4 <=40.21.2)

renovate NPM version =36.109.4, =2.3.132, =0.1.0, =0.14.0, =0.5.0, =0.1.0, =0.1.0, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-RENOVATE-14927385...

@alstar/studio (=0.0.0-beta.20), @better-auth/cli (>=1.3.4 <=1.4.0-beta.28) +16 more potentially affected by unknown CVE via better-auth (>=1.3.34 <=1.4.0-beta.9)

better-auth NPM version =1.3.34, =1.3.4, =0.18.9, =0.5.2, =7.0.9-canary.2, =7.0.9-canary.2, =0.1.8, =0.1.0, =0.0.22, =0.10.0, =0.11.1-canary.15, =0.8.2, =0.0.10, =1.0.0, =1.0.4, =3.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WMJR-V86C-M9JJ...

@achinet/nestjs-async (>=0.1.0 <=0.2.0), @aligov/clark-core (>=3.0.0 <=3.0.1) +74 more potentially affected by unknown CVE via @asyncapi/parser (>=3.0.0-next-major-spec.8 <=3.4.0)

@asyncapi/parser NPM version =3.0.0-next-major-spec.8, =0.1.0, =3.0.0, =4.1.3, =0.24.0, =1.15.0, =0.2.0, =0.1.0, =0.2.57, =3.0.0, =4.0.0, =2.1.1, =0.16.0, =0.41.0-rc.2, =2.1.4, =3.0.0, =4.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-ASYNCAPIPARSER-14103272...

aenvironment (=0.1.7rc1), agentic-ai-engineering-course (>=0.4.6 <=0.4.7) +164 more potentially affected by unknown CVE via fastmcp (>=2.0.0 <=2.12.5)

fastmcp PYPI version =2.0.0, =0.4.6, =1.8.0, =3.2.0, =3.2.0, =4.2.2, =3.0.2, =0.2.7, =1.0.0rc1, =0.2.7, =1.7.3, =0.1.12, =0.9.30, =0.14.3, =0.18.5 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-FASTMCP-13776148...

@imagina/n8n-nodes-iwhatsapp (>=0.1.0 <=0.2.7), @mosano-tech/n8n (=0.3.0) +19 more potentially affected by unknown CVE via n8n-nodes-base (>=0.101.0 <=0.9.0)

n8n-nodes-base NPM version =0.101.0, =0.1.0, =0.216.1, =0.1.0, =0.1.0, =0.18.0, =0.1.0, =1.0.0, =0.1.0, =0.2.14, =0.2.16 and more Source cves: unknown CVE Source advisory: OSV:GHSA-365G-VJW2-GRX8...

EUVD-2020-17969

Malware in sbrugna...

ABC_Game_Engine (>=0.1.0 <=0.1.2), GuiNistRs (=0.1.0) +3955 more potentially affected by unknown CVE via fxhash (>=0.1.2 <=0.2.1)

fxhash CARGO version =0.1.2, =0.1.0, =0.1.0, =3.2.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.0.1, =0.0.59 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0057...

duba (>=0.0.0 <=0.0.2), userbook (>=0.1.0 <=0.2.6) potentially affected by unknown CVE via checkfor (>=0.0.3 <=0.0.4)

checkfor NPM version =0.0.3, =0.0.0, =0.1.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16880...

brick (=0.0.0), bud (>=0.0.0 <=0.1.2) +16 more potentially affected by unknown CVE via first-val (=0.0.0)

first-val NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick =0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves...

io.github.andrekurait.trafficcapture:dockerSolution (>=0.1.3 <=0.1.5), io.github.andrekurait.trafficcapture:trafficCaptureProxyServer (>=0.1.3 <=0.1.5) +6 more potentially affected by unknown CVE via org.opensearch.plugin:opensearch-security (=2.11.1.0)

org.opensearch.plugin:opensearch-security MAVEN version =2.11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opensearch.plugin:opensearch-security and may be impacted: - io.github.andrekurait.trafficcapture:dockerSolution =0.1.3, =0.1.3, =0.1....

accelerometry-annotator (>=3.2.0 <=3.5.3), africanwhisper (>=0.2.1 <=0.9.0) +54 more potentially affected by unknown CVE via panel (>=1.2.3 <=1.7.5)

panel PYPI version =1.2.3, =3.2.0, =0.2.1, =2.3.0, =0.3.1.1, =0.2.0, =0.1.0, =0.1.0, =1.0.2, =0.2.2, =0.2.1, =1.1.0, =2.1.29, =0.1.1.dev0, =0.1.1.dev2 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-PANEL-11356594...

CVE-2020-25281

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings such as the package verifier application mishandle unknown-source installations. The LG ID is LVE-SMP-190002 September 2020...

BELL-CVE-2025-37984

Bulletin has no description...

alloy-rs (=0.2.1), anndata (=0.2.0) +98 more potentially affected by unknown CVE via arrow2 (>=0.10.1 <=0.9.2)

arrow2 CARGO version =0.10.1, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.0.1, =0.1.0, =0.2.1, =0.2.2, =0.4.0, =0.1.0, =0.1.3 - datap =0.0.1 - erc725-rs =0.1.0 - ezel =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0038...

AskAI (=0.1.0), abbegm (=0.5.0) +609 more potentially affected by unknown CVE via tokio (>=0.2.5 <=1.38.1)

tokio CARGO version =0.2.5, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =4.0.0, =0.2.0, =0.6.0, =0.1.0, =0.1.7 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0023...

io.github.robothy:local-s3-jupiter (>=1.2 <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0 <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.10 <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.10, =1.2, =6.0.0, =7.3.7 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOGITHUBROBOTHY-9399376...

Malicious code in tenable-universal-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a06fb3037f4c830e070f05524b0e4d6e3cb5adec2e77bc06f20ee92a42742689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1380 Malicious code in tenable-universal-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a06fb3037f4c830e070f05524b0e4d6e3cb5adec2e77bc06f20ee92a42742689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-5339 · Fastd +1 · Fastd +1

Name of the Vulnerable Software and Affected Versions: fastd versions prior to v23 Description: fastd is a VPN daemon that tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd initiates a reconnect by sending a handshake...

biosimulator-processes (>=0.1.0 <=0.1.1), eulerpi (>=0.1.5 <=0.5.0) potentially affected by unknown CVE via amici (>=0.16.1 <=0.25.2)

amici PYPI version =0.16.1, =0.1.0, =0.1.5, =0.5.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-AMICI-8600633...