@jazuli/terakhir558 (1.1.4), abufda-muyu-bgagfaug (1.1.0) +4949 more potentially affected by unknown CVE via terakhir558 (1.1.5)

terakhir558 NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on terakhir558 and may be impacted: - @jazuli/terakhir558 1.1.4 - abufda-muyu-bgagfaug 1.1.0 - bufa-muyu-bgagfaug 1.1.0 - bufai-muyu-bgagfaug 1.1.0 - bufani-muiyau-fafu 1.1.0 -...

@miftaikyy/tehkontol (1.1.4), abubni-nikamia-luahuubi (1.1.3) +3302 more potentially affected by unknown CVE via tehkontol (1.1.5)

tehkontol NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on tehkontol and may be impacted: - @miftaikyy/tehkontol 1.1.4 - abubni-nikamia-luahuubi 1.1.3 - abulbani-nikamia-luahuubi 1.1.3 - abuni-niaia-luhubi 1.1.3 - abuni-niaia-luhuubi...

siddheshtea (1.1.6) potentially affected by unknown CVE via @miftaikyy/depentts (1.0.0)

@miftaikyy/depentts NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @miftaikyy/depentts and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-172043...

@abbeey/beypremtea (1.0.0), beypremtea (1.0.0) potentially affected by unknown CVE via beypremtea (1.1.5)

beypremtea NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on beypremtea and may be impacted: - @abbeey/beypremtea 1.0.0 - beypremtea 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170970...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-31 (1.0.0)

muklis-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160816...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-darae-naha (1.0.0)

nuilava-darae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-darae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163876...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-nahahgsa (1.0.0)

nudela-rahfeg-nahahgsa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-nahahgsa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163841...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafheg-ga (1.0.0)

nudela-rahafheg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafheg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163828...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaof-gafi (1.0.0)

nudela-aaof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163715...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala88 (1.0.0)

nokire-nakala88 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala88 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163045...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala38 (1.0.0)

nokire-nakala38 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala38 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162991...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala83 (1.0.0)

nokire-nakala83 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala83 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163040...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-36 (1.0.0)

ruji-36 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-36 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165262...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakaogfrae-nffahaha (1.0.0)

nuilava-dakaogfrae-nffahaha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakaogfrae-nffahaha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163866...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aff-gafai (1.0.0)

nudela-aff-gafai NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aff-gafai and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163725...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala33 (1.0.0)

nokire-nakala33 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala33 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162986...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala13 (1.0.0)

nokire-nakala13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162964...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfaeg-naahgsa (1.0.0)

nudela-rahfaeg-naahgsa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfaeg-naahgsa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163830...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-4 (1.0.0)

muklis-4 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-4 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160824...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-13 (1.0.0)

muklis-13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160796...

acamar-aether-bunyan-postgres (1.2.4), acamar-chai-command-inquirer (1.2.4) +1002 more potentially affected by unknown CVE via teaphahitqq (1.2.4)

teaphahitqq NPM version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on teaphahitqq and may be impacted: - acamar-aether-bunyan-postgres 1.2.4 - acamar-chai-command-inquirer 1.2.4 - acamar-link-backend-miranda 1.2.4 - acamar-perseus-leda-cors 1.2...

absolute_woodpecker_dumbs (1.2.1), academic_eel_dumbs (3.3.1) +2428 more potentially affected by unknown CVE via arts-dao (1.1.5)

arts-dao NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on arts-dao and may be impacted: - absolutewoodpeckerdumbs 1.2.1 - academiceeldumbs 3.3.1 - academicmolluskdumbs 1.4.1 - acceptablefishdumbs 2.4.4 - acceptablemoledumbs 1.3.3 -...

dhrav1 (1.1.2), irma-dodol78-riris (3.3.4) +2 more potentially affected by unknown CVE via dhrafortea (>=1.1.2, <=4.1.4)

dhrafortea NPM version =1.1.2, =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dhrafortea and may be impacted: - dhrav1 1.1.2 - irma-dodol78-riris 3.3.4 - joko-tek48-riris 4.3.2 - kurnia-sambel16-riris 2.3.1 Source cves: unknown CVE Source...

tandem_garble_interop (>=0.1.0, <=0.3.0) potentially affected by unknown CVE via tandem (>=0.1.0, <=0.3.0)

tandem CARGO version =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0117...

create-bamboo (>=1.0.1, <=1.0.2) potentially affected by unknown CVE via bamboo-init (1.0.7)

bamboo-init NPM version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on bamboo-init and may be impacted: - create-bamboo =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-50934...

0xble (>=22.0.0, <=23.2.2), @activepieces/ai-providers-shared (0.0.1) +529 more potentially affected by CVE-2025-48985 via ai (>=5.0.0, <=5.0.51)

ai NPM version =5.0.0, =22.0.0, =0.0.1, =0.2.5, =0.3.0, =0.0.4, =0.0.5 - @activepieces/piece-aircall 0.0.5 - @activepieces/piece-airtable 0.4.22 - @activepieces/piece-airtop 0.0.4 - @activepieces/piece-amazon-ses 0.0.1 - @activepieces/piece-apitable 0.0.23 - @activepieces/piece-apitemplate-io 0.0...

@dargmuesli/nuxt-vio (>=16.0.5, <=18.3.14) potentially affected by CVE-2025-52662 via @nuxt/devtools (>=2.0.0, <=2.6.3)

@nuxt/devtools NPM version =2.0.0, =16.0.5, =18.3.14 Source cves: CVE-2025-52662 Source advisory: SNYK:JS-NUXTDEVTOOLS-13849298...

@adobe/helix-deploy-plugin-edge (>=1.1.10, <=1.1.16), @cyclonedx/cdxgen (>=11.9.0, <=11.11.0) +22 more potentially affected by CVE-2025-64118 via tar (7.5.1)

tar NPM version 7.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tar and may be impacted: - @adobe/helix-deploy-plugin-edge =1.1.10, =11.9.0, =2.0.27, =5.0.51, =0.45.2, =1.0.0-beta.2, =0.3.1, =4.4.2, =1.9.0, =1.6.1, =0.0.11, =1.0.1, =0.1.0, =0.2.2...

@142vip/midway (>=0.1.6-alpha.9, <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1, <=0.0.1-alpha.13) +2728 more potentially affected by CVE-2025-60542 via typeorm (>=0.0.2-alpha.43, <=0.3.25)

typeorm NPM version =0.0.2-alpha.43, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood 0.10.1 and more Source cves: CVE-2025-60542 Source advisory: OSV:GHSA-Q2PJ-6V73-8RGJ...

org.jenkins-ci.plugins:maven-artifact-choicelistprovider (>=1.0.3, <=398.v2733b_b_16677c) potentially affected by CVE-2025-64133 via jp.ikedam.jenkins.plugins:extensible-choice-parameter (>=1.3.3, <=255.vfa_41f46828ef)

jp.ikedam.jenkins.plugins:extensible-choice-parameter MAVEN version =1.3.3, =1.0.3, =398.v2733bb16677c Source cves: CVE-2025-64133 Source advisory: SNYK:JAVA-JPIKEDAMJENKINSPLUGINS-13775577...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +223 more potentially affected by unknown CVE via hono (>=4.0.0, <=4.10.2)

hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.7.1, =0.2.1, =0.6.1, =0.5.2, =0.0.3, =1.3.2, =0.1.0, =0.75.0, =0.81.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-HONO-13720736...

@afif_hh/composable (1.0.2), @afif_hh/ui_components (>=1.0.5, <=1.0.30) +67 more potentially affected by CVE-2025-62517 via rollbar (>=2.1.0, <=2.26.4)

rollbar NPM version =2.1.0, =1.0.5, =1.0.0, =0.0.2, =0.0.5, =0.0.2-beta.1, =1.0.0-alpha.1, =1.0.5, =1.1.12, =1.3.10, =1.1.11, =1.0.3, =2.1.0-alpha.3, =2.1.0-alpha.3, =2.1.3 and more Source cves: CVE-2025-62517 Source advisory: SNYK:JS-ROLLBAR-13703255...

cargo-kconfig (0.0.1), cli-todo (>=0.2.0, <=0.7.0) potentially affected by unknown CVE via ncurses (6.0.1)

ncurses CARGO version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - cargo-kconfig 0.0.1 - cli-todo =0.2.0, =0.7.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X77X-7MMH-CXV3...

@certd/commercial-core (>=1.25.9, <=1.43.0), @certd/lib-server (>=1.36.25, <=1.43.0) +32 more potentially affected by CVE-2025-62595 +1 more via koa (2.16.2)

koa NPM version 2.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @certd/commercial-core =1.25.9, =1.36.25, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =0.19.3, =3.20.11,...

@akash-aw/aw-wizard-forms (4.14.0), @alfresco/aca-generators (>=1.0.0, <=1.0.1) +80 more potentially affected by CVE-2025-62595 +1 more via koa (3.0.1)

koa NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @akash-aw/aw-wizard-forms 4.14.0 - @alfresco/aca-generators =1.0.0, =1.0.0, =0.44.0, =2.23.0, =3.10.0-beta.6, =0.4.0, =0.30.0, =0.3.0-alpha.1, =0.4.3,...

@certd/commercial-core (>=1.25.9, <=1.43.0), @certd/lib-server (>=1.36.25, <=1.43.0) +32 more potentially affected by CVE-2025-62595 via koa (2.16.2)

koa NPM version 2.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @certd/commercial-core =1.25.9, =1.36.25, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =0.19.3, =3.20.11,...

org.webjars.npm:vitepress (1.0.0-draft.8) potentially affected by CVE-2025-62522 via org.webjars.npm:vite (3.0.0-beta.9)

org.webjars.npm:vite MAVEN version 3.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vite and may be impacted: - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2025-62522 Source advisory:...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-62522 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-62522 Source advisory: OSV:GHSA-93M4-6634-74Q7...

@afif_hh/composable (1.0.2), @afif_hh/ui_components (>=1.0.5, <=1.0.30) +67 more potentially affected by CVE-2025-57325 via rollbar (>=2.1.0, <=2.26.4)

rollbar NPM version =2.1.0, =1.0.5, =1.0.0, =0.0.2, =0.0.5, =0.0.2-beta.1, =1.0.0-alpha.1, =1.0.5, =1.1.12, =1.3.10, =1.1.11, =1.0.3, =2.1.0-alpha.3, =2.1.0-alpha.3, =2.1.3 and more Source cves: CVE-2025-57325 Source advisory: OSV:GHSA-R8C2-2QWQ-94P6...

box-bin (0.3.1), box-format (>=0.3.0, <=0.3.3) +11 more potentially affected by unknown CVE via unic-normal (>=0.1.2, <=0.9.0)

unic-normal CARGO version =0.1.2, =0.3.0, =0.2.4-beta, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.5.0, =0.7.0, =0.1.1, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0082...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +322 more potentially affected by unknown CVE via unic-common (>=0.7.0, <=0.9.0)

unic-common CARGO version =0.7.0, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0080...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +29 more potentially affected by unknown CVE via unic-ucd-hangul (>=0.8.0, <=0.9.0)

unic-ucd-hangul CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.2.4-beta, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0079...

rustpython-vm (>=0.1.0, <=0.1.1), unic (>=0.8.0, <=0.9.0) +3 more potentially affected by unknown CVE via unic-char-basics (>=0.8.0, <=0.9.0)

unic-char-basics CARGO version =0.8.0, =0.1.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0093...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +20 more potentially affected by unknown CVE via unic-ucd-case (>=0.6.0, <=0.9.0)

unic-ucd-case CARGO version =0.6.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.1.0, =0.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0092...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +19 more potentially affected by unknown CVE via unic-ucd-block (>=0.8.0, <=0.9.0)

unic-ucd-block CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.1.0, =1.1.1, =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0099...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +18 more potentially affected by unknown CVE via unic-ucd (>=0.5.0, <=0.9.0)

unic-ucd CARGO version =0.5.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.0.0, =0.1.0, =1.1.1, =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0077...

audio-processor-analysis (>=0.1.0-alpha.4, <=2.4.0), chalkboard (0.1.0) +73 more potentially affected by unknown CVE via unic-bidi (>=0.1.0, <=0.9.0)

unic-bidi CARGO version =0.1.0, =0.1.0-alpha.4, =0.4.0, =0.7.0, =0.4.0, =0.7.0, =0.2.0, =0.2.3 - frui 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0096...

nuxt-spec (>=0.1.10, <=0.1.11) potentially affected by CVE-2025-62410 via happy-dom (20.0.0)

happy-dom NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on happy-dom and may be impacted: - nuxt-spec =0.1.10, =0.1.11 Source cves: CVE-2025-62410 Source advisory: SNYK:JS-HAPPYDOM-13559227...

@nasa-jpl/stellar-svelte (>=2.1.9, <=2.1.10), @scouterdev/ui (0.0.1) +2 more potentially affected by CVE-2025-62381 via sveltekit-superforms (>=2.16.1, <=2.27.1)

sveltekit-superforms NPM version =2.16.1, =2.1.9, =1.3.0, =0.0.2-dev.80, =1.0.9 Source cves: CVE-2025-62381 Source advisory: SNYK:JS-SVELTEKITSUPERFORMS-13559331...