@atonis/cli (3.0.15) potentially affected by CVE-2025-65513 via mcp-fetch-server (1.1.2)

mcp-fetch-server NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-fetch-server and may be impacted: - @atonis/cli 3.0.15 Source cves: CVE-2025-65513 Source advisory: SNYK:JS-MCPFETCHSERVER-14287685...

cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (>=1.0.0, <=1.0.1), com.alibaba.fastjson2:fastjson2-extension (>=2.0.27, <=2.0.64) +40 more potentially affected by CVE-2025-12183 +1 more via org.lz4:lz4-pure-java (1.8.0)

org.lz4:lz4-pure-java MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.lz4:lz4-pure-java and may be impacted: - cc.ddrpa.dorian.polystash:polystash-spring-boot-starter =1.0.0, =2.0.27, =0.3.1, =0.40.8-public, =0.40.8-public,...

@bigchaindb/jwt (>=0.0.18, <=0.0.20), @compas/store (>=0.0.172, <=0.20.0) +36 more potentially affected by CVE-2025-65945 via jws (4.0.0)

jws NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jws and may be impacted: - @bigchaindb/jwt =0.0.18, =0.0.172, =11.8.0, =1.0.0-beta.2, =1.1.0, =0.0.22-snapshot.0, =15.2.0, =17.1.6, =13.0.0, =10.1.0, =10.4.0, =10.1.0,...

@adenta/cms (>=0.0.6, <=1.1.1-0), @alisonquinter17/alieta-ui (0.1.0) +124 more potentially affected by CVE-2025-55182 +1 more via next (>=15.4.0-canary.17, <=15.4.7)

next NPM version =15.4.0-canary.17, =0.0.6, =1.2.4-main.7f918ee.29, =1.0.0, =1.0.0-beta.3, =1.0.2, =0.0.1, =0.0.4, =0.0.1, =1.1.0, =0.1.3, =0.0.0-dev-20250910232631, =0.1.7, =0.1.8 and more Source cves: CVE-2025-55182, CVE-2025-66478 Source advisory: SNYK:JS-NEXT-14173355...

ai-sdk-provider-claude-code (>=0.2.0, <=1.1.1), claude-code-webui (>=0.1.34, <=0.1.50) +6 more potentially affected by CVE-2025-66032 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.90)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.27, =0.0.28 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-66032 Source advisory: OSV:GHSA-XQ4M-MC3C-VVG3...

@0xfutbol/id (>=2.0.0, <=2.0.200), @0xkamal7/sui-agent (>=1.1.2, <=1.1.5) +1724 more potentially affected by CVE-2025-66020 via valibot (>=0.31.0, <=1.1.0)

valibot NPM version =0.31.0, =2.0.0, =1.1.2, =1.2.0-pre.92, =1.2.0-pre.24, =1.2.0-pre.24, =0.0.1, =0.0.1, =0.0.1, =1.2.0-pre.64, =0.0.1, =0.0.1, =0.5.9, =0.5.18, =0.0.2-beta.0, =0.2.0 - @0xsquid/mpp 0.2.0 and more Source cves: CVE-2025-66020 Source advisory: SNYK:JS-VALIBOT-14122017...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +28 more potentially affected by CVE-2025-64757 via astro (>=5.0.0-beta.5, <=5.14.1)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.0-dev-20250414184926, =1.13.2, =0.0.1, =0.0.1, =1.0.21, =1.0.22 and more Source cves: CVE-2025-64757 Source advisory: OSV:GHSA-X3H8-62X9-952G...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +28 more potentially affected by CVE-2025-64757 via astro (>=5.0.0-beta.5, <=5.14.1)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.0-dev-20250414184926, =1.13.2, =0.0.1, =0.0.1, =1.0.21, =1.0.22 and more Source cves: CVE-2025-64757 Source advisory: SNYK:JS-ASTRO-14059139...

@apollo/gateway (>=2.3.0-beta.2, <=2.9.4), @genesisx/graphql (>=3.0.0-beta.1, <=4.0.1) +8 more potentially affected by CVE-2025-64530 via @apollo/composition (>=2.3.0, <=2.9.4)

@apollo/composition NPM version =2.3.0, =2.3.0-beta.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.13.8-alpha-20230126151930-d229ec52b, =0.0.1, =9.2.0, =2.8.54, =0.0.0-preview-20230314213245, =1.3.3, =0.0.8, =1.0.48 Source cves: CVE-2025-64530 Source advisory: OSV:GHSA-MX7M-J9XF-62HW...

@apollo/gateway (>=2.10.0-alpha.0, <=2.10.3), @lenne.tech/nest-server (>=10.8.3, <=11.1.13) +2 more potentially affected by CVE-2025-64530 via @apollo/composition (>=2.10.0, <=2.10.3)

@apollo/composition NPM version =2.10.0, =2.10.0-alpha.0, =10.8.3, =11.1.13 - @pothos-examples/federation 3.1.13 - @pothos-examples/prisma-federation 3.1.24 Source cves: CVE-2025-64530 Source advisory: OSV:GHSA-MX7M-J9XF-62HW...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +267 more potentially affected by CVE-2025-64525 via astro (>=3.0.12, <=5.15.1)

astro NPM version =3.0.12, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.1, =0.0.1, =0.1.3, =0.1.0, =0.1.1 and more Source cves: CVE-2025-64525 Source advisory: OSV:GHSA-HR2Q-HP5Q-X767...

@0xgg/echomd (>=1.0.2, <=1.0.4), @ajuhos/malloy-tests (>=0.0.332, <=0.0.334) +175 more potentially affected by CVE-2025-59840 via vega-expression (>=5.0.1, <=5.1.2)

vega-expression NPM version =5.0.1, =1.0.2, =0.0.332, =0.0.332, =1.1.5, =0.4.1-canary.195, =0.1.0, =3.0.0-alpha.2, =0.0.2, =0.0.1, =0.0.5, =0.0.1, =0.0.8 and more Source cves: CVE-2025-59840 Source advisory: SNYK:JS-VEGAEXPRESSION-13961124...

com.salesforce.perfeng.uiperf:imageoptimization (2.0.1), org.webjars:imagemin (>=0.4.6-1, <=3.1.0) +2 more potentially affected by CVE-2025-64718 via org.webjars:js-yaml (3.0.2)

org.webjars:js-yaml MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:js-yaml and may be impacted: - com.salesforce.perfeng.uiperf:imageoptimization 2.0.1 - org.webjars:imagemin =0.4.6-1, =0.1.0-1, =4.0.0 - org.webjars:svg...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-24 (1.0.0)

manda-24 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-24 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159620...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaa (1.0.0)

nudela-aahaf0gf-gaa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163707...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala14 (1.0.0)

nokire-nakala14 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala14 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162965...

flowflops (>=0.0.1.post2211140919, <=0.0.1.post2211151211) potentially affected by CVE-2025-63397 via oneflow (0.9.0)

oneflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oneflow and may be impacted: - flowflops =0.0.1.post2211140919, =0.0.1.post2211151211 Source cves: CVE-2025-63397 Source advisory: SNYK:PYTHON-ONEFLOW-13876667...

@accounter/server (>=0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @dossierhq/test-data (1.0.1) +4 more potentially affected by CVE-2025-12613 via cloudinary (>=2.0.3, <=2.6.1)

cloudinary NPM version =2.0.3, =0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, =7.1.0, =1.0.0-alpha.88, =1.0.0-alpha.88, =0.0.1, =0.0.6 Source cves: CVE-2025-12613 Source advisory: OSV:GHSA-G4MF-96X5-5M2C...

0xble (>=22.0.0, <=23.2.2), @activepieces/ai-providers-shared (0.0.1) +521 more potentially affected by CVE-2025-48985 via ai (>=5.0.0, <=5.0.51)

ai NPM version =5.0.0, =22.0.0, =0.0.1, =0.2.5, =0.3.0, =0.0.4, =0.0.5 - @activepieces/piece-aircall 0.0.5 - @activepieces/piece-airtable 0.4.22 - @activepieces/piece-airtop 0.0.4 - @activepieces/piece-amazon-ses 0.0.1 - @activepieces/piece-apitable 0.0.23 - @activepieces/piece-apitemplate-io 0.0...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +407 more potentially affected by CVE-2025-58179 +1 more via @astrojs/internal-helpers (>=0.0.0-markdoc-config-changes-20230626153541, <=0.7.2)

@astrojs/internal-helpers NPM version =0.0.0-markdoc-config-changes-20230626153541, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.0-ast-20240419160649, =0.0.0-10745-20240410180016, =6.2.0, =6.3.6 and more Source cves:...

@afif_hh/composable (1.0.2), @afif_hh/ui_components (>=1.0.5, <=1.0.30) +67 more potentially affected by CVE-2025-62517 via rollbar (>=2.1.0, <=2.26.4)

rollbar NPM version =2.1.0, =1.0.5, =1.0.0, =0.0.2, =0.0.5, =0.0.2-beta.1, =1.0.0-alpha.1, =1.0.5, =1.1.12, =1.3.10, =1.1.11, =1.0.3, =2.1.0-alpha.3, =2.1.0-alpha.3, =2.1.3 and more Source cves: CVE-2025-62517 Source advisory: OSV:GHSA-XCG2-9PP4-J82X...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @abyedev/hono-dotenv (1.0.0) +493 more potentially affected by CVE-2025-62610 via hono (>=1.6.4, <=4.10.1)

hono NPM version =1.6.4, =0.0.2, =5.0.0, =0.9.0, =0.1.9, =0.0.1, =0.0.2-a, =0.0.1, =0.1.22, =1.1.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.7.1, =0.2.1, =0.2.3 and more Source cves: CVE-2025-62610 Source advisory: SNYK:JS-HONO-13669873...

@akash-aw/aw-wizard-forms (4.14.0), @alfresco/aca-generators (>=1.0.0, <=1.0.1) +80 more potentially affected by CVE-2025-62595 via koa (3.0.1)

koa NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @akash-aw/aw-wizard-forms 4.14.0 - @alfresco/aca-generators =1.0.0, =1.0.0, =0.44.0, =2.23.0, =3.10.0-beta.6, =0.4.0, =0.30.0, =0.3.0-alpha.1, =0.4.3,...

rev-up-your-harley (>=0.1.0, <=1.0.1), rustpython-vm (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via unic-char (>=0.6.0, <=0.9.0)

unic-char CARGO version =0.6.0, =0.1.0, =0.1.0, =0.6.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0086...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +22 more potentially affected by unknown CVE via unic-ucd-age (>=0.5.0, <=0.9.0)

unic-ucd-age CARGO version =0.5.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.0.0, =0.3.0, =0.3.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0102...

@happy-dom/global-registrator (>=19.0.0, <=19.0.2), @happy-dom/jest-environment (>=19.0.0, <=19.0.2) +4 more potentially affected by CVE-2025-62410 via happy-dom (>=19.0.2, <=20.0.0)

happy-dom NPM version =19.0.2, =19.0.0, =19.0.0, =19.0.0, =1.0.0, =0.1.9, =1.1.81, =1.1.82 Source cves: CVE-2025-62410 Source advisory: OSV:GHSA-QPM2-6CQ5-7PQ5...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +25 more potentially affected by unknown CVE via n8n (>=0.81.0, <=2.33.7)

n8n NPM version =0.81.0, =0.1.13, =2.35.2, =0.216.1, =2.34.0, =23.1.4, =0.0.1, =0.1.0, =0.1.0, =0.18.0, =0.25.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8N-13524400...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +36 more potentially affected by unknown CVE via n8n-nodes-base (>=0.1.0, <=2.34.2)

n8n-nodes-base NPM version =0.1.0, =0.1.13, =0.1.0, =2.35.2, =2.32.0, =0.216.1, =2.34.0, =0.1.4, =23.1.4, =0.1.0, =0.0.1, =0.0.10 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-13524401...

p2panda-rs (>=0.3.0, <=0.9.0) potentially affected by unknown CVE via openmls (0.4.1)

openmls CARGO version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openmls and may be impacted: - p2panda-rs =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-QR9H-X63W-VQFM...

@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +162 more potentially affected by CVE-2025-57317 via apidoc-core (>=0.2.2, <=0.15.0)

apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.4.3, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =1.0.10 - @comodinx/api-doc 1.0.0 and more Source cves: CVE-2025-57317 Source advisory: SNYK:JS-APIDOCCORE-13110017...

@diningcity/capacitor-qr-scanner (>=0.0.7, <=0.0.8), @mojitonft/hooks (1.0.1-alpha.4) +93 more potentially affected by CVE-2025-26278 via dref (0.0.6)

dref NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on dref and may be impacted: - @diningcity/capacitor-qr-scanner =0.0.7, =1.7.0, =0.0.1, =11.1.1, =3.3.3, =0.0.0-beta, =0.0.2, =1.0.2, =0.0.40, =0.0.2, =0.0.1, =0.0.1, =0.1.0, =0.1.19 a...

graphos-cli (>=1.0.0, <=1.0.1), panshi-client (>=0.0.7, <=0.0.8) potentially affected by CVE-2025-57320 via json-schema-editor-visual (>=1.1.1, <=2.0.0)

json-schema-editor-visual NPM version =1.1.1, =1.0.0, =0.0.7, =0.0.8 Source cves: CVE-2025-57320 Source advisory: SNYK:JS-JSONSCHEMAEDITORVISUAL-13110010...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +6202 more potentially affected by CVE-2025-57329 via web3-core-method (>=1.0.0-beta.52, <=3.0.0-rc.5)

web3-core-method NPM version =1.0.0-beta.52, =1.0.0-3, =0.0.3, =0.0.3, =0.0.31, =1.1.0, =0.9.9, =0.1.0, =0.1.1 - 55tools-block 1.0.0 - 55tools-block-ext 1.0.0 - 84447xe5t8 1.0.0 and more Source cves: CVE-2025-57329 Source advisory: SNYK:JS-WEB3COREMETHOD-13110028...

ai-sdk-provider-claude-code (>=0.2.0, <=1.0.0-beta.1), locadex (0.0.2-alpha.1) potentially affected by CVE-2025-59828 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =1.0.0-beta.1 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59828 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13109605...

ai-sdk-provider-claude-code (>=0.2.0, <=1.0.0-beta.1), locadex (0.0.2-alpha.1) potentially affected by CVE-2025-59828 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =1.0.0-beta.1 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59828 Source advisory: OSV:GHSA-2JJV-QF24-VFM4...

0wcc9yywcywy (1.0.0), 0wu8yw8by8cw (1.0.0) +2434 more potentially affected by CVE-2025-59343 via tar-fs (>=3.0.2, <=3.1.0)

tar-fs NPM version =3.0.2, =0.0.1, =2.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-59343 Source advisory: SNYK:JS-TARFS-13045213...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +48 more potentially affected by CVE-2025-59414 via nuxt (>=3.6.2, <=3.18.1)

nuxt NPM version =3.6.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =4.0.3, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2025-59414 Source advisory: SNYK:JS-NUXT-12878602...

@sit-onyx/demo-app (>=0.0.0, <=0.1.0-dev-20250919122003), @zach-mac/zachscommoncomponents (1.0.4) potentially affected by CVE-2025-59414 via nuxt (>=4.0.0-rc.0, <=4.0.3)

nuxt NPM version =4.0.0-rc.0, =0.0.0, =0.1.0-dev-20250919122003 - @zach-mac/zachscommoncomponents 1.0.4 Source cves: CVE-2025-59414 Source advisory: SNYK:JS-NUXT-12878602...

@aarc-dev/auth-widget (>=0.0.1, <=0.0.20), @aarc-dev/wallet-auth (>=0.0.11, <=0.0.20) +9 more potentially affected by unknown CVE via @metamask/sdk-react (>=0.16.0, <=0.30.2)

@metamask/sdk-react NPM version =0.16.0, =0.0.1, =0.0.11, =0.0.12, =0.16.0, =0.3.0, =0.5.6, =0.9.0, =0.0.7, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-QJ3P-XC97-XW74...

trivet (>=2.1.0, <=2.1.1) potentially affected by CVE-2025-57520 via decap-cms (3.0.12)

decap-cms NPM version 3.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on decap-cms and may be impacted: - trivet =2.1.0, =2.1.1 Source cves: CVE-2025-57520 Source advisory: OSV:GHSA-XP8G-32QH-MV28...

@tessl/cli (>=0.21.0, <=0.21.2), @zed-industries/claude-code-acp (0.1.7) +8 more potentially affected by CVE-2025-58764 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.98)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-58764 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-12705383...

@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.2), @angular/build (>=20.2.0-next.3, <=21.0.0-next.2) +30 more potentially affected by CVE-2025-58751 via vite (>=7.1.0, <=7.1.4)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =2.14.0, =30.0.0, =16.0.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =2.19.8, =2.19.8, =14.314.0, =14.314.0, =9.6.3, =0.0.0-snapshot-0360a7c2f707db55df213993503b56c6a1d96d0e, =0.4.0-dev.8 and more Source cves: CVE-2025-58751 Sourc...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +463 more potentially affected by CVE-2025-58752 via vite (>=5.0.0, <=5.4.19)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-58752 Source advisory: OSV:GHSA-JQFW-VQ24-V9C3...

a2d (>=0.1.0, <=0.1.11), aa2nucaln (0.1.1) +3929 more potentially affected by unknown CVE via fxhash (>=0.1.2, <=0.2.1)

fxhash CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1-dev.10, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0057...

a3s-lane (>=0.1.0, <=0.4.0), abci-rs (>=0.7.0, <=0.11.3) +4221 more potentially affected by CVE-2025-58160 via tracing-subscriber (>=0.1.6, <=0.3.19)

tracing-subscriber CARGO version =0.1.6, =0.1.0, =0.7.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0, =0.1.5, =0.0.1-dev.10, =1.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.1, =0.5.0, =0.7.0-rc.2 and more Source cves: CVE-2025-58160 Source advisory: OSV:RUSTSEC-2025-0055...

mysticcelestial (1.0.1) potentially affected by CVE-2025-58047 via @plone/volto (18.10.1)

@plone/volto NPM version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @plone/volto and may be impacted: - mysticcelestial 1.0.1 Source cves: CVE-2025-58047 Source advisory: SNYK:JS-PLONEVOLTO-12239874...

@cedarjs/api-server (>=0.0.4, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=5.0.7-next.219, <=6.0.0-rc.221) +51 more potentially affected by unknown CVE via @escape.tech/graphql-armor-max-depth (>=2.0.0, <=2.4.1)

@escape.tech/graphql-armor-max-depth NPM version =2.0.0, =0.0.4, =5.0.7-next.219, =0.0.4, =5.0.4-next.167, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =0.0.4, =0.0.4, =0.0.2, =2.0.0, =3.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-224P-V68G-5G8F...

@5ht/express (>=1.0.6, <=2.2.0), @audius/sdk (>=0.0.3-beta.1, <=7.1.1) +7 more potentially affected by CVE-2025-9287 via cipher-base (1.0.4)

cipher-base NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cipher-base and may be impacted: - @5ht/express =1.0.6, =0.0.3-beta.1, =6.0.4, =1.0.1, =1.5.2-beta.1, =1.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.11 Source cves: CVE-2025-9287...

@bookshop/browser (3.11.0-rc.0), @bookshop/generate (3.11.0-rc.0) +24 more potentially affected by CVE-2025-55303 via astro (>=4.0.3, <=4.16.18)

astro NPM version =4.0.3, =0.40.5, =0.38.0, =0.38.0, =2.8.4, =0.2.0, =0.0.0-dev-20231211183354, =0.0.3, =0.0.3, =0.0.5, =0.0.1, =1.0.2, =1.0.9 - @thewebforge/astro-og-images 3.0.0 and more Source cves: CVE-2025-55303 Source advisory: SNYK:JS-ASTRO-12027668...

dep_grap_gen (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via shalk (0.0.1-security)

shalk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on shalk and may be impacted: - depgrapgen =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33056...