@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2026-24052 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2026-24052 Source advisory: OSV:GHSA-VHW5-3G5M-8GGF...

@backstage/plugin-techdocs-backend (>=0.0.0-nightly-20260123025240, <=0.0.0-nightly-20260126030220), @techdocs/cli (>=0.0.0-nightly-20260123025240, <=0.0.0-nightly-20260126030220) potentially affected by CVE-2026-25153 via @backstage/plugin-techdocs-node (1.14.0)

@backstage/plugin-techdocs-node NPM version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-techdocs-node and may be impacted: - @backstage/plugin-techdocs-backend =0.0.0-nightly-20260123025240, =0.0.0-nightly-20260123025240,...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-23864 via react-server-dom-webpack (>=19.0.0, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @adenta/cms (>=0.0.6, <=1.1.1-0) +333 more potentially affected by CVE-2026-24842 via tar (>=7.0.0, <=7.5.6)

tar NPM version =7.0.0, =0.1.8-fix.3, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =0.1.1, =0.1.1, =2.17.11, =1.9.5, =8.8.3, =8.11.4 - @altipla/directus-sdk-utils 0.7.2 - @applitools/core 4.20.0 - @applitools/core-base 1.17.0 - @applitools/ec-client 1.9.6 - @applitools/eyes 1.23.0 and more Source cves:...

browserstack-cypress-cli (>=1.14.1, <=1.36.3) potentially affected by CVE-2025-57283 via browserstack-local (>=1.5.1, <=1.5.4)

browserstack-local NPM version =1.5.1, =1.14.1, =1.36.3 Source cves: CVE-2025-57283 Source advisory: SNYK:JS-BROWSERSTACKLOCAL-15149317...

@agentforce/adk (>=0.9.0, <=0.12.1), @agentkit-ai/bff-hono (1.0.0) +356 more potentially affected by CVE-2026-24472 via hono (>=4.0.0, <=4.11.6)

hono NPM version =4.0.0, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.8.0 and more Source cves: CVE-2026-24472 Source advisory: SNYK:JS-HONO-15123484...

@kyuda/n8n-nodes-databricks (>=2.0.0, <=2.0.6), @kyuda/n8n-nodes-databricks-simplified (1.0.0) +14 more potentially affected by CVE-2026-1470 via n8n-workflow (>=2.0.0, <=2.4.2)

n8n-workflow NPM version =2.0.0, =2.0.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =1.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.4.2 - n8n-nodes-cheerio-html-parser 0.5.9 and more Source cves: CVE-2026-1470 Source advisory:...

com.github.liuyueyi.media:svg-core (>=2.5, <=3.0.0) potentially affected by CVE-2026-24807 via com.github.liuyueyi.media:batik-codec-fix (>=2.5, <=3.0.0)

com.github.liuyueyi.media:batik-codec-fix MAVEN version =2.5, =2.5, =3.0.0 Source cves: CVE-2026-24807 Source advisory: SNYK:JAVA-COMGITHUBLIUYUEYIMEDIA-15127915...

9remote (>=0.1.0, <=0.1.8), @alecpapierniak/mcp-manager (>=0.1.0, <=0.1.2) +105 more potentially affected by CVE-2025-59471 +1 more via next (>=16.1.1, <=16.1.4)

next NPM version =16.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.0.0-canary-20260113162409, =1.53.0 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15105315...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2026-22709 via vm2 (>=3.0.0, <=3.10.1)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2026-22709 via vm2 (>=3.0.0, <=3.10.1)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accounter/server (>=0.0.0, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @aligent/auth-module (1.0.1) +1 more potentially affected by CVE-2026-23735 via graphql-modules (>=2.3.0, <=2.4.0)

graphql-modules NPM version =2.3.0, =0.0.0, =1.0.7, =1.0.9 Source cves: CVE-2026-23735 Source advisory: OSV:GHSA-53WG-R69P-V3R7...

@cenk1cenk2/renovate-config (>=2.0.0, <=2.3.148), @jamietanna/patch-testing (>=0.1.0, <=0.2.28) +9 more potentially affected by CVE-2026-76232 via renovate (>=31.97.3, <=40.21.2)

renovate NPM version =31.97.3, =2.0.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =1.1.130, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config 1.0.3 Source cves: CVE-2026-76232 Source advisory: OSV:GHSA-3F44-XW83-3PMG...

@cenk1cenk2/renovate-config (>=2.0.0, <=2.3.148), @jamietanna/patch-testing (>=0.1.0, <=0.2.28) +8 more potentially affected by CVE-2026-76231 via renovate (>=32.241.11, <=40.21.2)

renovate NPM version =32.241.11, =2.0.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config 1.0.3 Source cves: CVE-2026-76231 Source advisory: OSV:GHSA-36J9-MX87-2CFF...

@cenk1cenk2/renovate-config (>=2.0.0, <=2.3.148), @jamietanna/patch-testing (>=0.1.0, <=0.2.28) +8 more potentially affected by unknown CVE via renovate (>=32.241.11, <=42.66.1)

renovate NPM version =32.241.11, =2.0.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config 1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-RENOVATE-14927386...

@haxtheweb/create (>=11.0.3, <=25.0.0), @haxtheweb/open-apis (11.0.3) potentially affected by CVE-2026-22704 via @haxtheweb/haxcms-nodejs (11.0.15)

@haxtheweb/haxcms-nodejs NPM version 11.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on @haxtheweb/haxcms-nodejs and may be impacted: - @haxtheweb/create =11.0.3, =25.0.0 - @haxtheweb/open-apis 11.0.3 Source cves: CVE-2026-22704 Source advisory:...

@buttery/studio (>=0.2.3, <=0.3.7), @c0va23/react-router-dev (>=7.8.3-alpha.1, <=7.8.3-alpha.2) +18 more potentially affected by CVE-2025-61686 via @react-router/node (>=7.0.0, <=7.9.3-pre.0)

@react-router/node NPM version =7.0.0, =0.2.3, =7.8.3-alpha.1, =0.1.0, =0.0.1-dev.8, =0.0.1-0, =0.0.1-alpha.6, =3.8.8, =7.0.0-pre.0, =7.0.0-pre.0, =7.0.0-pre.0, =0.0.1-alpha.23, =0.0.1, =0.1.0-xyd.22, =0.1.0-xyd.20, =0.1.0-xyd.29 and more Source cves: CVE-2025-61686 Source advisory:...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1) +77 more potentially affected by CVE-2026-21877 via n8n-workflow (>=1.0.0, <=1.118.1)

n8n-workflow NPM version =1.0.0, =0.2.0, =0.1.5, =0.0.17, =1.0.2, =1.0.1, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =1.57.1 and more Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NWORKFLOW-14894273...

careful (>=0.1.0, <=0.2.0), dxh-test-package (1.1.2) +7 more potentially affected by CVE-2025-15095 via httpbin (0.10.4)

httpbin PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on httpbin and may be impacted: - careful =0.1.0, =0.1.4, =0.1.6, =0.3.2, =0.0.1, =0.7.1, =2.2.1, =2.7.5 Source cves: CVE-2025-15095 Source advisory: SNYK:PYTHON-HTTPBIN-14723357...

@071yoon/log-console-core (0.1.0), @3bitmt/3bit-sidebar-dashboard (1.2.0) +149 more potentially affected by CVE-2025-55183 +1 more via next (>=16.0.0, <=16.0.8)

next NPM version =16.0.0, =1.0.0, =0.3.128, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =1.0.4186, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.19 and more Source cves: CVE-2025-55183, CVE-2025-55184 Source advisory: SNYK:JS-NEXT-14400636...

cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (>=1.0.0, <=1.0.1), com.alibaba.fastjson2:fastjson2-extension (>=2.0.27, <=2.0.65) +46 more potentially affected by CVE-2025-12183 +1 more via org.lz4:lz4-pure-java (1.8.0)

org.lz4:lz4-pure-java MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.lz4:lz4-pure-java and may be impacted: - cc.ddrpa.dorian.polystash:polystash-spring-boot-starter =1.0.0, =2.0.27, =0.3.1, =0.40.8-public, =0.40.8-public,...

agentic-fleet (0.1.6), composio (0.1.1) +41 more potentially affected by CVE-2025-56427 via composio-core (>=0.3.13, <=0.7.21)

composio-core PYPI version =0.3.13, =0.7.1, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.7.1, =0.5.26, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.7.15, =0.3.13, =0.7.20 and more Source cves: CVE-2025-56427 Source advisory: SNYK:PYTHON-COMPOSIOCORE-14191990...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.0.0-rc-6230622a1a-20240610)

react-server-dom-webpack NPM version 19.0.0-rc-6230622a1a-20240610 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @amazeelabs/bridge-waku =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245,...

@doist/ui-extensions-server (3.5.7), @fdm-monster/server (1.9.1) +29 more potentially affected by CVE-2025-65944 via @sentry/node-core (>=10.11.0, <=10.26.0)

@sentry/node-core NPM version =10.11.0, =0.0.22, =0.1.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.0.19, =10.11.0, =10.11.0, =10.11.0, =10.26.0 and more Source cves: CVE-2025-65944 Source advisory: SNYK:JS-SENTRYNODECORE-14105055...

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.49.5-alpha) +10 more potentially affected by CVE-2025-64755 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.27)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.31.0-alpha, =0.5.2, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =0.10.2, =0.11.2, =0.13.22 Source cves: CVE-2025-64755 Source advisory: OSV:GHSA-7MV8-J34Q-VP7Q...

@apollo/gateway (>=2.11.0-preview.0, <=2.11.4), @dfanchon/gateway (2.11.0) +1 more potentially affected by unknown CVE via @apollo/composition (>=2.11.0, <=2.11.4)

@apollo/composition NPM version =2.11.0, =2.11.0-preview.0, =11.1.14, =11.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-M8JR-FXQX-8XX6...

@apollo/gateway (>=2.11.0-preview.0, <=2.11.4), @dfanchon/gateway (2.11.0) +1 more potentially affected by CVE-2025-64530 via @apollo/composition (>=2.11.0, <=2.11.4)

@apollo/composition NPM version =2.11.0, =2.11.0-preview.0, =11.1.14, =11.2.0 Source cves: CVE-2025-64530 Source advisory: OSV:GHSA-MX7M-J9XF-62HW...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21366 more potentially affected by CVE-2025-64718 via js-yaml (>=3.0.0, <=3.14.1)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2025-64718 Source advisory: OSV:GHSA-MH29-5H37-FV8M...

3rd-party-cpu-abuser (>=1.0.0, <=1.4.0), @2lkit/devtools (0.0.1-0) +163 more potentially affected by CVE-2024-7017 via chrome-devtools-frontend (>=1.0.377119-1, <=1.0.746710)

chrome-devtools-frontend NPM version =1.0.377119-1, =1.0.0, =1.2.2-beta, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =1.3.0-1, =1.0.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2024-7017 Source advisory: SNYK:JS-CHROMEDEVTOOLSFRONTEND-14038292...

@react-native-community/cli (18.0.0) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (18.0.0)

@react-native-community/cli-server-api NPM version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @react-native-community/cli-server-api and may be impacted: - @react-native-community/cli 18.0.0 Source cves: CVE-2025-11953 Source advisory:...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +396 more potentially affected by CVE-2025-58179 +1 more via @astrojs/internal-helpers (>=0.0.0-markdoc-config-changes-20230626153541, <=0.7.2)

@astrojs/internal-helpers NPM version =0.0.0-markdoc-config-changes-20230626153541, =0.0.1, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.0-ast-20240419160649, =0.0.0-10745-20240410180016, =6.2.0, =4.1.0, =4.3.5 and more Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (>=1.3.0-b03, <=10.7) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (>=1.3.0, <=10.7)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version =1.3.0, =1.3.0-b03, =10.7 Source cves: CVE-2025-62710 Source advisory: SNYK:JAVA-ORGSAKAIPROJECTKERNEL-13669871...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-62522 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-62522 Source advisory: OSV:GHSA-93M4-6634-74Q7...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +322 more potentially affected by unknown CVE via unic-ucd-version (>=0.7.0, <=0.9.0)

unic-ucd-version CARGO version =0.7.0, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0098...

p2panda-rs (>=0.4.0, <=0.9.0) potentially affected by unknown CVE via openmls (0.4.1)

openmls CARGO version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openmls and may be impacted: - p2panda-rs =0.4.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-QR9H-X63W-VQFM...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10952 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10952 Source advisory: SNYK:PYTHON-MLLOGGER-13110030...

@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +150 more potentially affected by CVE-2025-57317 via apidoc-core (>=0.2.2, <=0.12.0)

apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =0.0.3, =0.0.12 and more Source cves: CVE-2025-57317 Source advisory: OSV:GHSA-5Q53-78F2-6GF8...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +6214 more potentially affected by CVE-2025-57330 via web3-core-subscriptions (>=1.0.0, <=3.0.0-rc.5)

web3-core-subscriptions NPM version =1.0.0, =1.0.0-3, =0.0.3, =0.0.3, =0.0.31, =1.1.0, =0.9.9, =0.1.0, =0.1.1 - 55tools-block 1.0.0 - 55tools-block-ext 1.0.0 - 84447xe5t8 1.0.0 and more Source cves: CVE-2025-57330 Source advisory: SNYK:JS-WEB3CORESUBSCRIPTIONS-13110022...

ai-sdk-provider-claude-code (>=0.2.0, <=1.0.0-beta.1), locadex (0.0.2-alpha.1) potentially affected by CVE-2025-59828 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =1.0.0-beta.1 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59828 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13109605...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +48 more potentially affected by CVE-2025-59414 via nuxt (>=3.6.2, <=3.18.1)

nuxt NPM version =3.6.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =4.0.3, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2025-59414 Source advisory: SNYK:JS-NUXT-12878602...

@tessl/cli (>=0.21.0, <=0.21.2), @zed-industries/claude-code-acp (0.1.7) +8 more potentially affected by CVE-2025-59041 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.98)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59041 Source advisory: OSV:GHSA-J4H9-WV2M-WRF7...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.9.4-iocd.1), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.9.4-iocd.1) +17 more potentially affected by CVE-2025-55305 via electron (>=37.0.0, <=37.2.6)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.0, =0.0.29, =0.0.38 and more Source cves: CVE-2025-55305 Source advisory: OSV:GHSA-VMQV-HX8Q-J7MG...

@_sh/strapi-plugin-ckeditor (>=5.0.0, <=6.0.1), @abcxyz123321555/ckeditor5-build-test-version (>=0.7.0, <=0.10.2) +132 more potentially affected by CVE-2025-58064 via @ckeditor/ckeditor5-clipboard (>=44.2.0, <=45.2.1-alpha.10)

@ckeditor/ckeditor5-clipboard NPM version =44.2.0, =5.0.0, =0.7.0, =0.0.2, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.3.0 and more Source cves:...

2dev (0.1.3), @actualwave/traceability-matrices (1.0.7) +51 more potentially affected by CVE-2026-9495 via @koa/router (14.0.0)

@koa/router NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @koa/router and may be impacted: - 2dev 0.1.3 - @actualwave/traceability-matrices 1.0.7 - @bbc/sofie-server-core-integration...

org.webjars.bower:jspdf-autotable (>=2.0.2, <=2.1.0) potentially affected by CVE-2025-57810 via org.webjars.bower:jspdf (>=1.0.272, <=1.4.1)

org.webjars.bower:jspdf MAVEN version =1.0.272, =2.0.2, =2.1.0 Source cves: CVE-2025-57810 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-12205534...

02.koa-demo (1.0.0), 0510test (1.0.0) +13632 more potentially affected by unknown CVE via koa (>=0.0.1, <=3.2.1)

koa NPM version =0.0.1, =1.3.7, =1.0.0, =0.0.1, =1.0.0, =1.0.1 - 2-26 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-KOA-12143256...

choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2025-55207 via @astrojs/node (>=9.2.2, <=9.3.0)

@astrojs/node NPM version =9.2.2, =0.3.1, =0.4.0 Source cves: CVE-2025-55207 Source advisory: OSV:GHSA-9X9C-GHC5-JHW9...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +11 more potentially affected by unknown CVE via new-struct (>=0.0.4, <=0.1.1)

new-struct NPM version =0.0.4, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27369...

xiaojs-5tools (>=1.0.5, <=1.0.6) potentially affected by unknown CVE via reatc (0.0.1-security)

reatc NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reatc and may be impacted: - xiaojs-5tools =1.0.5, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31897...

memoize-with-leveldb (>=0.0.0, <=0.0.1), radio-paradise-api (>=0.0.0, <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0, <=2.0.0)

level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25200...