@everreal/react-charts (>=1.0.0 <=1.0.1-ff20697), @everreal/web-analytics (>=0.0.3 <=0.0.12) +1 more potentially affected by unknown CVE via undefsafe-typed (=1.0.2)

undefsafe-typed NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on undefsafe-typed and may be impacted: - @everreal/react-charts =1.0.0, =0.0.3, =1.1.17, =1.2.5 Source cves: unknown CVE Source advisory: SNYK:JS-UNDEFSAFETYPED-14103745...

@abtnode/blocklet-services (>=1.16.6 <=1.17.13-beta-20260512-042419-7b556a38), @abtnode/cli (>=1.0.0 <=1.16.34-beta-20241113-102431-65542b84) +446 more potentially affected by unknown CVE via shell-exec (>=1.0.2 <=1.1.2)

shell-exec NPM version =1.0.2, =1.16.6, =1.0.0, =1.16.6, =1.0.0, =0.3.35, =1.5.0, =0.0.0-beta.0, =0.0.0, =2.49.0, =1.0.0, =2.0.0-0, =2.0.0-0, =1.0.16, =1.0.0, =1.2.1, =1.3.16 and more Source cves: unknown CVE Source advisory: SNYK:JS-SHELLEXEC-14103722...

0pflow (>=0.1.0-dev.0de2bc6 <=0.1.0-dev.f5622ac), @adhisang/minecraft-modding-mcp (=1.0.0) +20 more potentially affected by unknown CVE via mcp-use (>=1.0.0 <=1.4.1)

mcp-use NPM version =1.0.0, =0.1.0-dev.0de2bc6, =1.0.0, =0.2.0, =2.0.3, =0.2.2, =0.0.1, =0.9.2, =0.3.0, =1.0.1, =1.14.0 - ask262 =0.0.15 - chrome-devtools-cli =1.0.0 - mcp-marketers =3.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-MCPUSE-14103656...

@nmime/nestjs-asyncapi (>=2.0.0 <=2.0.7) potentially affected by unknown CVE via @asyncapi/nodejs-ws-template (=0.10.0)

@asyncapi/nodejs-ws-template NPM version =0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/nodejs-ws-template and may be impacted: - @nmime/nestjs-asyncapi =2.0.0, =2.0.7 Source cves: unknown CVE Source advisory:...

@zapier/babel-preset-zapier (>=5.0.0 <=6.4.0), babel-preset-zapier (>=2.0.0 <=4.0.0) +1 more potentially affected by unknown CVE via @zapier/browserslist-config-zapier (=1.0.2)

@zapier/browserslist-config-zapier NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @zapier/browserslist-config-zapier and may be impacted: - @zapier/babel-preset-zapier =5.0.0, =2.0.0, =4.0.0, =9.0.0 Source cves: unknown CVE Source...

@amorist/gatsby-theme-antd (=1.0.0), @antv/f2-site (>=4.0.0-4.0.0-alpha.3.0 <=5.0.1-beta.0) +16 more potentially affected by unknown CVE via gatsby-plugin-cname (=1.0.0)

gatsby-plugin-cname NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby-plugin-cname and may be impacted: - @amorist/gatsby-theme-antd =1.0.0 - @antv/f2-site =4.0.0-4.0.0-alpha.3.0, =0.9.81, =1.0.0, =1.1.18-beta.0, =0.0.1, =0.0.4,...

financelabsutilities (>=0.0.8 <=0.0.10) potentially affected by unknown CVE via react-hook-form-persist (=3.0.0)

react-hook-form-persist NPM version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-hook-form-persist and may be impacted: - financelabsutilities =0.0.8, =0.0.10 Source cves: unknown CVE Source advisory: SNYK:JS-REACTHOOKFORMPERSIST-141036...

@asyncapi/server-api (>=0.16.0 <=0.16.23) potentially affected by unknown CVE via @asyncapi/java-template (=0.2.10)

@asyncapi/java-template NPM version =0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/java-template and may be impacted: - @asyncapi/server-api =0.16.0, =0.16.23 Source cves: unknown CVE Source advisory:...

@digifox/providers (=5.0.3), @wowpay/react-native-sdk (>=1.0.3 <=1.0.21) +3 more potentially affected by unknown CVE via react-native-websocket (=1.0.2)

react-native-websocket NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on react-native-websocket and may be impacted: - @digifox/providers =5.0.3 - @wowpay/react-native-sdk =1.0.3, =1.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE...

@asyncapi/cli (>=1.4.0 <=2.16.7) potentially affected by unknown CVE via @asyncapi/studio (=0.20.2)

@asyncapi/studio NPM version =0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/studio and may be impacted: - @asyncapi/cli =1.4.0, =2.16.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190863...

flowise (>=1.6.1 <=2.2.8), flowise-birat (>=1.0.0 <=1.2.5) +2 more potentially affected by unknown CVE via flowise-ui (>=1.8.4 <=2.2.8)

flowise-ui NPM version =1.8.4, =1.6.1, =1.0.0, =0.0.1, =0.0.2, =0.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-X39M-3393-3QP4...

@akunsansan0/batu (=1.1.7), @akunsansan0/batu1 (=1.1.7) +32 more potentially affected by unknown CVE via amis_pisan99 (>=0.1.0 <=1.1.9)

amispisan99 NPM version =0.1.0, =1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on amispisan99 and may be impacted: - @akunsansan0/batu =1.1.7 - @akunsansan0/batu1 =1.1.7 - @akunsansan0/batu10 =1.1.7 - @akunsansan0/batu11 =1.1.7 - @akunsansan0/batu...

@akunsansan0/pucukharum (>=1.1.4 <=2.1.1), pucukharum (=2.1.1) potentially affected by unknown CVE via pucukharum (=1.1.4)

pucukharum NPM version =1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on pucukharum and may be impacted: - @akunsansan0/pucukharum =1.1.4, =2.1.1 - pucukharum =2.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181514...

@akunsansan0/baso (=1.0.0), @akunsansan0/biru (=1.1.4) +284 more potentially affected by unknown CVE via tea_nextgun (>=1.1.7 <=2.1.1)

teanextgun NPM version =1.1.7, =2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on teanextgun and may be impacted: - @akunsansan0/baso =1.0.0 - @akunsansan0/biru =1.1.4 - @akunsansan0/biru1 =1.1.4 - @akunsansan0/biru10 =1.1.4 - @akunsansan0/biru11...

tea_gunfinal (>=1.1.2 <=1.1.5) potentially affected by unknown CVE via tea_gunfinal (=1.1.6)

teagunfinal NPM version =1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on teagunfinal and may be impacted: - teagunfinal =1.1.2, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181568...

@akunsansan0/cewe (=1.0.0), @akunsansan0/teaguntur99 (>=1.1.4 <=1.1.5) +10 more potentially affected by unknown CVE via teaguntur99 (=1.1.4)

teaguntur99 NPM version =1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teaguntur99 and may be impacted: - @akunsansan0/cewe =1.0.0 - @akunsansan0/teaguntur99 =1.1.4, =1.1.5 - @satria9897/air =1.0.0 - air1 =1.1.0 - air10 =1.1.0 - air2 =1.1.0 -...

1-mutfru-muytio (=1.0.0), 12-mutfru-muytio (=1.0.0) +12193 more potentially affected by unknown CVE via tehtehteh (>=1.1.10 <=1.3.3)

tehtehteh NPM version =1.1.10, =1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on tehtehteh and may be impacted: - 1-mutfru-muytio =1.0.0 - 12-mutfru-muytio =1.0.0 - @miftaikyy/teateatea =1.0.0 - @mipta1/depents =1.0.0 - @mipta1/dsfd =1.0.0 -...

trevora-cissa-cir7 (=1.0.0) potentially affected by unknown CVE via @mipta1/tehtehteh (=1.1.4)

@mipta1/tehtehteh NPM version =1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @mipta1/tehtehteh and may be impacted: - trevora-cissa-cir7 =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-179418...

@miftaikyy/miftaikyy (=1.0.0), @mipta19/nitrotea (=1.1.4) +5 more potentially affected by unknown CVE via nitrotea (=1.0.0)

nitrotea NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nitrotea and may be impacted: - @miftaikyy/miftaikyy =1.0.0 - @mipta19/nitrotea =1.1.4 - @miptaa02/jisfd =1.1.4 - aibopna-mobile-aramafaui =1.0.0 - aibopna-mobile-aramaui =1.0....

siddheshtea (=1.1.6) potentially affected by unknown CVE via @miftaikyy/depentts (=1.0.0)

@miftaikyy/depentts NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @miftaikyy/depentts and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-172043...