@toolsdk.ai/registry (=1.0.83) potentially affected by CVE-2025-53355 +1 more via mcp-server-kubernetes (=2.4.3)

mcp-server-kubernetes NPM version =2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-server-kubernetes and may be impacted: - @toolsdk.ai/registry =1.0.83 Source cves: CVE-2025-53355, CVE-2025-54073 Source advisory: OSV:GHSA-GJV4-GHM7-Q58Q...

aiqtoolkit-llama-index (>=1.1.0 <=1.2.0rc4), airunner (>=3.0.0 <=3.1.14) +34 more potentially affected by CVE-2025-3046 via llama-index (>=0.10.0 <=0.12.22)

llama-index PYPI version =0.10.0, =1.1.0, =3.0.0, =1.7.0, =0.1.3, =0.1.169, =0.1.0, =0.3.0, =0.0.52, =1.0.9, =1.0.3.post1, =0.1.2, =0.1.7.dev20240924104148, =0.1.0, =0.2.0 and more Source cves: CVE-2025-3046 Source advisory: SNYK:PYTHON-LLAMAINDEX-10645583...

app.valuationcontrol:library (>=0.5.8 <=0.5.9), at.aimon.ops:aimon-ops-api (>=0.0.1 <=0.0.2) +2667 more potentially affected by CVE-2025-41232 via org.springframework.security:spring-security-core (>=6.4.0 <=6.4.5)

org.springframework.security:spring-security-core MAVEN version =6.4.0, =0.5.8, =0.0.1, =55.v51410e712e0c, =1.5.4.RELEASE, =1.0.1, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =1.10.0, =1.10.0, =1.10.0, =1.15.1 and more Source cves: CVE-2025-41232 Source advisory: OSV:GHSA-9PP5-9C7G-4R83...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-47285 via vyper (>=0.1.0b12 <=0.4.1)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.21.0 and more Source cves: CVE-2025-47285 Source advisory: OSV:GHSA-QHR6-MGQR-MCHM...

org.activecomponents.jadex:jadex-distribution-standard (>=4.0.244 <=4.0.267), org.activecomponents.jadex:jadex-tools-runtimetools-web (>=4.0.244 <=4.0.267) +11 more potentially affected by CVE-2025-1647 via org.webjars.bowergithub.twbs:bootstrap (>=3.4.1 <=4.0.0-beta.3)

org.webjars.bowergithub.twbs:bootstrap MAVEN version =3.4.1, =4.0.244, =4.0.244, =2.4.0, =1.3.0, =1.3.1 Source cves: CVE-2025-1647 Source advisory: SNYK:JAVA-ORGWEBJARSBOWERGITHUBTWBS-10176069...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0 <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0 <=6.1.0) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (>=6.0.0 <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.16 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGGRAYLOG2-10121303...

com.chutneytesting:chutney-kotlin-dsl (>=0.1.18 <=1.0.1), com.codbex.aion:codbex-aion-platform (>=0.5.6 <=0.5.7) +157 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.17.0 <=5.17.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.17.0, =0.1.18, =0.5.6, =0.5.6, =0.5.6, =0.3.0, =0.3.0, =0.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.4.0 and more Source cves: CVE-2025-27533 Source advisory:...

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1691 more potentially affected by CVE-2025-1194 via transformers (>=2.10.0 <=4.4.2)

transformers PYPI version =2.10.0, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.1, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.2 and more Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...

@andesite-lab/andesite-core (=1.60.2), @bechara/crux (>=6.0.0 <=6.6.2) +137 more potentially affected by CVE-2025-32442 via fastify (>=5.0.0 <=5.3.1)

fastify NPM version =5.0.0, =6.0.0, =0.2.305, =1.0.6, =1.0.11, =1.9.4, =2.0.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.8.3 - @citrineos/ocpi-base =2.0.1 - @citrineos/ocpi-cdrs =2.0.1 and more Source cves: CVE-2025-32442 Source advisory: OSV:GHSA-MG2H-6X62-WPWC...

ai.h2o:h2o-orc-parser (>=3.10.0.5 <=3.10.3.6), co.cask.hydrator:hive-plugins (>=1.2.0 <=2.1.2) +548 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (>=0.4.0 <=1.2.2)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version =0.4.0, =3.10.0.5, =1.2.0, =1.0.1, =1.5.17 and more Source cves: CVE-2025-3588 Source advisory: OSV:GHSA-66RC-VG9F-48M7...

com.atomikos:transactions-spring-boot-integration-tests (>=5.0.9 <=6.0.1), com.atomikos:transactions-spring-boot3-integration-tests (>=6.0.0 <=6.0.1) +167 more potentially affected by CVE-2025-27391 via org.apache.activemq:artemis-server (>=1.5.1 <=2.3.0)

org.apache.activemq:artemis-server MAVEN version =1.5.1, =5.0.9, =6.0.0, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =2018.9.23, =2018.12.15, =2018.9.23, =2018.9.23, =0.0.1, =0.0.2, =1.14.2, =2.0.0, =6u3 and more Source cves: CVE-2025-27391 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-9689864...

elyra (>=4.0.0rc0 <=4.0.0rc4), elyra-code-snippet-extension (>=3.0.0rc3 <=4.0.0rc2) +12 more potentially affected by CVE-2025-30370 via jupyterlab-git (>=0.24.0 <=0.50.2)

jupyterlab-git PYPI version =0.24.0, =4.0.0rc0, =3.0.0rc3, =3.14.0, =3.0.0rc3, =3.0.0rc3, =3.0.0rc3, =3.14.0, =4.0.0rc0, =0.4.0, =2.1.0, =0.1.30, =1.3.19, =3.16.1, =0.1.0, =0.2.9 Source cves: CVE-2025-30370 Source advisory: OSV:GHSA-CJ5W-8MJF-R5F8...

RuStream (>=0.0.1 <=0.0.2), abd-clam (>=0.23.1 <=0.25.3) +244 more potentially affected by unknown CVE via pyo3 (>=0.1.0 <=0.23.5)

pyo3 CARGO version =0.1.0, =0.0.1, =0.23.1, =0.12.2, =0.2.1, =48.0.0, =0.1.0, =0.3.3, =0.0.1-a1, =0.0.1-a1, =0.1.0, =0.2.37, =1.0.5-beta.1 - bilbyrust =0.1.0 - bitbazaar =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PPH8-GCV7-4QJ5...

app.cybrid:cybrid-api-bank-java (>=v0.16.1 <=v0.123.652), app.cybrid:cybrid-api-id-java (>=v0.16.1 <=v0.123.652) +815 more potentially affected by CVE-2025-29908 via io.netty.incubator:netty-incubator-codec-classes-quic (>=0.0.21.Final <=0.0.70.Final)

io.netty.incubator:netty-incubator-codec-classes-quic MAVEN version =0.0.21.Final, =v0.16.1, =v0.16.1, =v0.16.1, =1.1.9, =17.16.0, =2.0.0, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.485 and more Source cves: CVE-2025-29908 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (=0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-Carbon <=0.7.4) +19 more potentially affected by CVE-2025-29314 via org.opendaylight.sfc:odl-sfc-ovs (>=0.10.0 <=0.9.3)

org.opendaylight.sfc:odl-sfc-ovs MAVEN version =0.10.0, =0.5.0-Carbon, =0.5.0-Carbon, =0.5.0-Carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-Carbon, =0.5.0, =0.4.0-Carbon, =0.4.4-Carbon and more Source cves: CVE-2025-29314 Source advisory:...

ai.h2o:sparkling-water-api-generation_2.11 (>=3.34.0.3-1-2.2 <=3.46.0.1-1-2.4), ai.h2o:sparkling-water-api-generation_2.12 (>=3.34.0.3-1-3.0 <=3.46.0.1-1-3.5) +9 more potentially affected by CVE-2024-10572 via ai.h2o:h2o-ext-xgboost (>=3.34.0.1 <=3.46.0.1)

ai.h2o:h2o-ext-xgboost MAVEN version =3.34.0.1, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.1-1-2.2, =3.34.0.1-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =2.0.0, =2.1.1 Source cves: CVE-2024-10572 Source advisory:...

@boxyhq/saml-jackson (>=1.11.2 <=1.40.2), @boxyhq/saml20 (>=1.2.4 <=1.8.0) +8 more potentially affected by CVE-2025-29775 via xml-crypto (>=4.1.0 <=6.0.0)

xml-crypto NPM version =4.1.0, =1.11.2, =1.2.4, =1.0.0, =4.0.0, =1.0.0, =0.0.1, =0.0.2 - saml-nofs =3.0.2 - verifactu-utils =1.1.0 Source cves: CVE-2025-29775 Source advisory: OSV:GHSA-X3M8-899R-F7C3...

at.asitplus.wallet:vck-openid-ktor (>=5.2.0 <=5.7.2), com.apadmi:mockzilla (>=2.1.0 <=2.1.2) +54 more potentially affected by CVE-2025-29904 via io.ktor:ktor-client-cio (>=3.0.0-beta-1 <=3.1.0)

io.ktor:ktor-client-cio MAVEN version =3.0.0-beta-1, =5.2.0, =2.1.0, =0.0.1, =0.11.0, =0.11.0, =0.1.5, =0.16.0, =0.17.1 - com.inkapplications.shade:auth =2.2.1 - com.inkapplications.shade:core =2.2.1 - com.inkapplications.shade:devices =2.2.1 - com.inkapplications.shade:discover =2.2.1 -...

abgrouponline (>=1.0.0 <=1.0.4), abismal (>=0.0.6 <=0.0.7) +1625 more potentially affected by CVE-2025-1550 via keras (>=3.0.0 <=3.8.0)

keras PYPI version =3.0.0, =1.0.0, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.3.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.3.0 - aegis-model =0.1.0 and more Source cves: CVE-2025-1550 Source advisory: OSV:GHSA-48G7-3X6R-XFHP...

@24hr/content-next (>=1.0.0 <=3.0.17), @akemona-org/strapi (>=3.10.1 <=3.17.2) +775 more potentially affected by CVE-2025-25200 via koa (>=2.0.0 <=2.15.3)

koa NPM version =2.0.0, =1.0.0, =3.10.1, =3.7.0, =4.25.19-patch.1, =0.0.1, =0.3.1, =0.0.1, =0.0.50, =0.0.7, =1.0.1, =0.0.0, =0.4.2-alpha.0, =0.15.0 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...

@code-dungeon/yardstick (>=0.0.3 <=0.0.17), @kcutils/color (=0.2.0-rc.3) +39 more potentially affected by CVE-2024-57085 via @stryker-mutator/util (>=0.0.1 <=8.7.0)

@stryker-mutator/util NPM version =0.0.1, =0.0.3, =0.2.0-rc.0, =1.1.0, =1.0.0-alpha.3, =1.1.59, =1.0.0, =1.0.0, =5.2.0, =8.7.0 and more Source cves: CVE-2024-57085 Source advisory: OSV:GHSA-9J5Q-479X-43G2...

@alvori/app (>=1.0.0-beta.11 <=1.0.0-beta.12), @chumager/itdfw (>=5.5.0 <=5.5.3) +113 more potentially affected by CVE-2024-57072 via module-from-string (>=2.3.0 <=3.3.1)

module-from-string NPM version =2.3.0, =1.0.0-beta.11, =5.5.0, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.9 and more Source cves: CVE-2024-57072 Source advisory: OSV:GHSA-Q5J8-9M9G-X2JH...

org.webjars.bowergithub.xdan:datetimepicker (=2.5.20) potentially affected by CVE-2024-57063 via org.webjars.bowergithub.kartik-v:php-date-formatter (=1.3.6)

org.webjars.bowergithub.kartik-v:php-date-formatter MAVEN version =1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.kartik-v:php-date-formatter and may be impacted: - org.webjars.bowergithub.xdan:datetimepicker =2.5.20 Sour...

com.baidu.hugegraph:hugegraph-cassandra (>=0.7.4 <=0.11.2), com.baidu.hugegraph:hugegraph-dist (>=0.7.4 <=0.11.2) +97 more potentially affected by CVE-2025-23015 +1 more via org.apache.cassandra:cassandra-all (>=3.10 <=3.11.17)

org.apache.cassandra:cassandra-all MAVEN version =3.10, =0.7.4, =0.7.4, =0.7.4, =0.7.4, =0.7.4, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =6.5.13, =6.5.13, =6.5.250 and more Source cves: CVE-2025-23015, CVE-2025-26467 Source advisory:...

com.instaclustr:cassandra-4 (=1.0), com.instaclustr:cassandra-kerberos-4 (=1.0.0) +24 more potentially affected by CVE-2025-24860 via org.apache.cassandra:cassandra-all (>=4.0-alpha3 <=4.0.13)

org.apache.cassandra:cassandra-all MAVEN version =4.0-alpha3, =1.0.2, =1.1, =1.0.0, =1.0.0, =4.4.0.0, =4.4.0.1 and more Source cves: CVE-2025-24860 Source advisory: OSV:GHSA-3CJF-FWCQ-XH22...

a2grunnerp (>=0.1.0 <=0.1.8), a62-emotion (>=0.9.2 <=0.11.4) +2603 more potentially affected by CVE-2024-55459 via keras (>=1.2.1 <=3.7.0)

keras PYPI version =1.2.1, =0.1.0, =0.9.2, =1.0.0, =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.3, =0.3.0, =1.0.1 and more Source cves: CVE-2024-55459 Source advisory: OSV:PYSEC-2025-121...

@9troisquarts/ant-form (>=2.3.0 <=6.0.1), @bigbinary/neeto-email-notifications-frontend (=1.1.0) +58 more potentially affected by CVE-2024-53847 via trix (>=2.0.10 <=2.1.19)

trix NPM version =2.0.10, =2.3.0, =1.3.0, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =0.1.0, =1.0.0, =1.0.0, =0.2.0, =4.1.1, =3.2.0, =3.2.2 and more Source cves: CVE-2024-53847 Source advisory: OSV:GHSA-6VX4-V2JW-QWQH...

@_unit/unit (>=1.0.44 <=1.0.58), @abtnode/blocklet-services (>=1.16.33 <=1.17.12-beta-20260420-061403-d7b5c4e6) +651 more potentially affected by CVE-2024-52798 via path-to-regexp (>=0.0.2 <=0.1.11)

path-to-regexp NPM version =0.0.2, =1.0.44, =1.16.33, =1.16.33, =16.7.2, =1.0.1, =1.11.282, =1.1.55, =0.1.5-alpha.0, =1.13.0, =1.13.0, =0.25.10, =1.0.31, =1.0.32 and more Source cves: CVE-2024-52798 Source advisory: OSV:GHSA-RHX6-C78J-4Q9W...

org.apache.hive.hcatalog:hive-hcatalog-core (=4.0.0-alpha-1), org.apache.hive.hcatalog:hive-hcatalog-pig-adapter (=4.0.0-alpha-1) +18 more potentially affected by CVE-2022-41137 via org.apache.hive:hive-exec (=4.0.0-alpha-1)

org.apache.hive:hive-exec MAVEN version =4.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - org.apache.hive.hcatalog:hive-hcatalog-core =4.0.0-alpha-1 -...

io.github.openfeign.querydsl:querydsl-collections (>=5.0.1 <=5.6), io.github.openfeign.querydsl:querydsl-hibernate-search (>=5.0.1 <=5.6) +6 more potentially affected by CVE-2024-49203 via io.github.openfeign.querydsl:querydsl-apt (>=5.0.1 <=5.6)

io.github.openfeign.querydsl:querydsl-apt MAVEN version =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.6 Source cves: CVE-2024-49203 Source advisory: OSV:GHSA-6Q3Q-6V5J-H6VG...

abracadabra (>=0.0.0 <=0.0.7), ac-solver (=0.1.0) +537 more potentially affected by CVE-2024-52804 via tornado (>=6.0.0 <=6.4.1)

tornado PYPI version =6.0.0, =0.0.0, =0.7.3, =0.0.5, =1.0.0, =1.0.0, =0.31.0, =1.3.0, =0.0.9.1, =0.20.0, =0.9.5, =22.5.13, =0.0.2, =0.1.0, =0.1.3 and more Source cves: CVE-2024-52804 Source advisory: SNYK:PYTHON-TORNADO-8400708...

litestar-htmx (>=0.1.0 <=0.2.4), niapi (>=0.2.0 <=0.5.0) +1 more potentially affected by CVE-2024-52581 via litestar (>=2.0.0b2 <=2.12.1)

litestar PYPI version =2.0.0b2, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2024-52581 Source advisory: SNYK:PYTHON-LITESTAR-8400286...

accutuning-helpers (>=1.0.32 <=1.1.0), al-for-design (=0.0.1) +245 more potentially affected by CVE-2024-43598 via lightgbm (>=2.0.12 <=4.5.0)

lightgbm PYPI version =2.0.12, =1.0.32, =1.1.2, =0.1.0, =0.10.0.dev0, =0.3.8.2, =0.2.7, =0.3.2, =0.0.1, =1.0.71, =2.9.0, =0.1.0, =0.1.1 and more Source cves: CVE-2024-43598 Source advisory: OSV:GHSA-2586-F3P4-HQ84...

org.apache.nifi:nifi-server-nar (=2.0.0-M3), org.apache.nifi:nifi-system-test-suite (>=2.0.0-M1 <=2.0.0-M3) potentially affected by CVE-2024-45477 via org.apache.nifi:nifi-web-ui (>=2.0.0-M1 <=2.0.0-M3)

org.apache.nifi:nifi-web-ui MAVEN version =2.0.0-M1, =2.0.0-M1, =2.0.0-M3 Source cves: CVE-2024-45477 Source advisory: OSV:GHSA-7MQJ-XGF8-P59V...

africanwhisper (>=0.2.1 <=0.9.0), agentx (>=0.0.6 <=0.0.27) +56 more potentially affected by CVE-2024-47168 via gradio (>=4.0.0b15 <=4.43.0)

gradio PYPI version =4.0.0b15, =0.2.1, =0.0.6, =0.4.0, =25.3.1, =1.1.0, =0.1.0, =25.3.1, =0.1.2, =0.2.11, =25.3.4, =0.1.1, =0.5.0, =0.0.41, =0.0.65 and more Source cves: CVE-2024-47168 Source advisory: SNYK:PYTHON-GRADIO-8180438...

org.glassfish.main.admingui:console-commandrecorder-plugin (=7.0.16), org.glassfish.main.featuresets:debug (>=6.2.5 <=7.0.16) +3 more potentially affected by CVE-2024-9329 via org.glassfish.main.admin:rest-service (>=5.0.1 <=7.0.16)

org.glassfish.main.admin:rest-service MAVEN version =5.0.1, =6.2.5, =5.0.1, =5.0.1, =5.0.1, =7.0.16 Source cves: CVE-2024-9329 Source advisory: OSV:GHSA-JQ3F-MFMG-747X...

@3t-transform/threeteeui (>=1.5.1 <=1.10.0), @accelbyte/sdk-legal (>=0.0.0-dev-20240828032938 <=6.0.2) +291 more potentially affected by CVE-2024-45801 via dompurify (>=3.0.0 <=3.1.2)

dompurify NPM version =3.0.0, =1.5.1, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =6.4.10, =5.1.1, =1.0.22, =1.0.12, =1.0.0, =1.0.22, =1.0.25, =0.0.1, =0.0.0-nightly-2022042277, =0.9.4-next.2 and more Source cves: CVE-2024-45801 Source advisory: OSV:GHSA-MMHX-HMJR-R674...

@aws-cdk/integ-runner (>=2.142.0-alpha.0 <=2.148.0-alpha.0), @jill64/sveltekit-adapter-aws (>=1.9.3 <=1.9.45) +3 more potentially affected by CVE-2024-45037 via aws-cdk (>=2.142.0 <=2.148.0)

aws-cdk NPM version =2.142.0, =2.142.0-alpha.0, =1.9.3, =3.1.6, =2.142.0, =2.148.0 Source cves: CVE-2024-45037 Source advisory: OSV:GHSA-QJ85-69XF-2VXQ...

@9troisquarts/ant-form (>=2.3.0 <=6.0.1), @beliantech/bt-components (>=0.8.0 <=0.33.11) +105 more potentially affected by CVE-2024-43368 via trix (>=0.10.2 <=2.1.19)

trix NPM version =0.10.2, =2.3.0, =0.8.0, =0.1.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =0.1.18, =0.1.85, =0.1.0, =0.2.0, =1.0.0, =1.1.1-beta.44 and more Source cves: CVE-2024-43368 Source advisory: OSV:GHSA-QM2Q-9F3Q-2VCV...

a-simple-llm-kit (>=0.3.0 <=0.4.2), aa-rag (>=0.1.0 <=0.4.3) +4123 more potentially affected by CVE-2024-40647 via sentry-sdk (>=2.0.0rc4 <=2.7.1)

sentry-sdk PYPI version =2.0.0rc4, =0.3.0, =0.1.0, =1.1.3, =0.3.4, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.0, =0.2.0a0, =1.0.5, =1.1.15 - abilian-sbe-next =1.0.4 and more Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

de.fraunhofer.iem:CryptoAnalysis (>=2.8.1 <=3.1.1), de.fraunhofer.iem:CryptoAnalysis-Android (>=2.8.1 <=3.1.1) +16 more potentially affected by CVE-2024-30172 via org.bouncycastle:bctls-jdk18on (>=1.73 <=1.77)

org.bouncycastle:bctls-jdk18on MAVEN version =1.73, =2.8.1, =2.8.1, =1.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.3, =2.0.0, =1.0.5, =1.0.10 and more Source cves: CVE-2024-30172 Source advisory: OSV:GHSA-M44J-CFRM-G8QC...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1 <=1.0.2), aero.m-click:mcpdf (>=0.2.3 <=0.2.10) +30376 more potentially affected by CVE-2024-30171 via org.bouncycastle:bcprov-jdk15on (>=1.46 <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2024-30171 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-8731360...

org.apache.pulsar:pulsar-broker-auth-athenz (>=3.1.0 <=3.1.3), org.apache.pulsar:pulsar-broker-auth-sasl (>=3.1.0 <=3.1.3) +2 more potentially affected by CVE-2024-29834 via org.apache.pulsar:pulsar-broker (>=3.1.0 <=3.1.3)

org.apache.pulsar:pulsar-broker MAVEN version =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.3 Source cves: CVE-2024-29834 Source advisory: OSV:GHSA-7MG2-6C6V-342R...

grid2viz (>=1.1.0 <=1.3.1), lftakakura-mage-ai (=0.9.37a1) +2 more potentially affected by CVE-2024-28179 via jupyter-server-proxy (>=1.3.2 <=3.2.1)

jupyter-server-proxy PYPI version =1.3.2, =1.1.0, =0.0.6, =0.1.4, =0.2.1 Source cves: CVE-2024-28179 Source advisory: OSV:PYSEC-2024-234...

aind-airflow-jobs (>=0.2.1 <=0.2.6), airflow-tools (>=0.3.1 <=0.6.3) +5 more potentially affected by CVE-2024-28746 via apache-airflow (>=2.8.0 <=2.8.2)

apache-airflow PYPI version =2.8.0, =0.2.1, =0.3.1, =1.0.0rc1, =1.0.0rc1, =1.0.0, =1.1.0.post0.dev45, =1.1.3.post0.dev5 Source cves: CVE-2024-28746 Source advisory: OSV:GHSA-H574-6646-VFXX...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2024-26149 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2024-26149 Source advisory: OSV:PYSEC-2024-164...

br.com.zup.beagle:beagle-micronaut-starter (>=1.1.0 <=2.1.0), com.bertramlabs.plugins:asset-pipeline-micronaut (>=3.0.7 <=4.3.0) +40 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (>=1.0.1 <=3.8.0)

io.micronaut:micronaut-http-server-netty MAVEN version =1.0.1, =1.1.0, =3.0.7, =1.3.0, =3.1.1, =0.99.0, =1.3.12, =0.1.0, =0.1.0, =1.0.6, =1.0.0, =3.2.0 - io.micronaut.example:micronaut-graphql-example-chat =1.4.0 - io.micronaut.example:micronaut-graphql-example-hello-world-groovy =1.4.0 -...

admin-tool-button (>=1.0.1a0 <=1.0.5a0), aedttest (=0.0.2) +130 more potentially affected by CVE-2024-24680 via django (>=3.2.0 <=3.2.23)

django PYPI version =3.2.0, =1.0.1a0, =2.0.0, =0.0.1, =1.0.6, =3.2.17.0, =6.2.0, =0.2.0, =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev13, =22.0.0.dev14 and more Source cves: CVE-2024-24680 Source advisory: OSV:PYSEC-2024-28...

nautobot-device-resources (=1.0.0) potentially affected by CVE-2023-51649 via nautobot (=2.0.0)

nautobot PYPI version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-device-resources =1.0.0 Source cves: CVE-2023-51649 Source advisory: OSV:PYSEC-2023-287...

cc.ecore:spring-jfinal (=0.0.1), cc.ecore:spring-jfinal-plugin (>=0.1.0 <=0.1.2) +164 more potentially affected by CVE-2023-49382 via com.jfinal:jfinal (>=1.4 <=5.0.0)

com.jfinal:jfinal MAVEN version =1.4, =0.1.0, =0.1.1, =1.0.2, =1.0.0, =1.0, =3.30.7-RELEASE, =0.0.8, =0.0.8, =0.0.8, =1.29.1.trial, =1.29.1.trial, =1.45.0 - cn.dreampie:jfinal-akka =0.1 and more Source cves: CVE-2023-49382 Source advisory: OSV:GHSA-6V55-H6M5-2352...