a2 (>=0.5.0-alpha.1, <=0.5.0), a_chat (0.1.0) +2623 more potentially affected by unknown CVE via async-std (>=0.99.4, <=1.13.2)

async-std CARGO version =0.99.4, =0.5.0-alpha.1, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...

2d-json-schema-editor-visual (>=1.0.2, <=1.0.7), 37sy-build (>=1.0.0, <=1.3.3) +4368 more potentially affected by CVE-2025-9288 via sha.js (>=2.1.1, <=2.4.11)

sha.js NPM version =2.1.1, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =0.1.6, =1.0.0, =0.0.4, =0.1.0, =7.13.4, =18.0.0, =18.1.2 - @ajhyndman/relay 1.6.0-1 - @aldendaniels/react-scripts 0.8.3 and more Source cves: CVE-2025-9288 Source advisory: OSV:GHSA-95M3-7Q98-8XR5...

@5ht/express (>=1.0.6, <=2.2.0), @audius/sdk (>=0.0.3-beta.1, <=7.1.1) +7 more potentially affected by CVE-2025-9287 via cipher-base (1.0.4)

cipher-base NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cipher-base and may be impacted: - @5ht/express =1.0.6, =0.0.3-beta.1, =6.0.4, =1.0.1, =1.5.2-beta.1, =1.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.11 Source cves: CVE-2025-9287...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @deconz-community/directus-extension-ddf-store (0.1.0) +5 more potentially affected by CVE-2025-55746 via @directus/api (>=14.1.0, <=28.0.1)

@directus/api NPM version =14.1.0, =1.6.3, =1.2.2, =10.8.0, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-55746 Source advisory: OSV:GHSA-MV33-9F6J-PFMC...

choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2025-55207 via @astrojs/node (>=9.2.2, <=9.3.0)

@astrojs/node NPM version =9.2.2, =0.3.1, =0.4.0 Source cves: CVE-2025-55207 Source advisory: OSV:GHSA-9X9C-GHC5-JHW9...

srb2kartjs (>=2.2.7, <=2.2.9) potentially affected by unknown CVE via ldoash (0.0.1-security)

ldoash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldoash and may be impacted: - srb2kartjs =2.2.7, =2.2.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25007...

fstlncomponent (>=1.0.1, <=1.0.7) potentially affected by unknown CVE via plugin-sass (0.0.1-security)

plugin-sass NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-sass and may be impacted: - fstlncomponent =1.0.1, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29416...

common-media (1.0.0), common-soundcloud (>=1.0.0, <=1.1.0) +14 more potentially affected by unknown CVE via require-sdk (>=0.0.0, <=0.0.2)

require-sdk NPM version =0.0.0, =1.0.0, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.4, =0.0.2, =0.0.3, =0.0.1, =0.0.1, =0.0.0, =0.1.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-32119...

cli-form (>=0.1.0, <=0.1.4), cli-qa (>=2.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0, <=0.0.1)

comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...

node-27285e17 (1.0.0) potentially affected by unknown CVE via undesrcore (0.0.1-security)

undesrcore NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on undesrcore and may be impacted: - node-27285e17 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37738...

devel_core (>=0.0.1, <=0.0.8) potentially affected by unknown CVE via requets (0.0.1-security)

requets NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32115...

s-collection.js (1.0.0) potentially affected by unknown CVE via lodash.js (0.0.1-security)

lodash.js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash.js and may be impacted: - s-collection.js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25506...

very_good_package (>=1.0.8, <=1.0.12) potentially affected by unknown CVE via testing054dfas (0.0.1-security)

testing054dfas NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on testing054dfas and may be impacted: - verygoodpackage =1.0.8, =1.0.12 Source cves: unknown CVE Source advisory: OSV:MAL-2025-36728...

bud-live-server (>=0.0.0, <=0.0.5), just-a-browserify-server (>=0.0.0, <=1.0.0) potentially affected by unknown CVE via just-a-server (>=0.0.0, <=0.0.1)

just-a-server NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24109...

08cms (1.0.0), 1.1.0 (1.0.0) +8977 more potentially affected by unknown CVE via orchestrator (>=0.0.5, <=0.3.8)

orchestrator NPM version =0.0.5, =1.0.0, =1.0.0, =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-28475...

eksi-server (>=0.0.7, <=0.0.8) potentially affected by unknown CVE via json-resources (0.0.1)

json-resources NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on json-resources and may be impacted: - eksi-server =0.0.7, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23956...

after-time (>=0.0.0, <=0.0.1), every-time (0.0.0) +17 more potentially affected by unknown CVE via english-time (>=0.0.1, <=2.0.0)

english-time NPM version =0.0.1, =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1, =0.0.2, =0.0.0, =0.0.6, =0.0.0, =0.0.5 - taky-cache-loop 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-19656...

kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)

cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

gulp-jsify (0.1.0) potentially affected by unknown CVE via jsify (0.0.4)

jsify NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on jsify and may be impacted: - gulp-jsify 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23947...

brick (0.0.0), fox (>=0.0.9, <=1.6.2) +2 more potentially affected by unknown CVE via core-modules (0.0.0)

core-modules NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on core-modules and may be impacted: - brick 0.0.0 - fox =0.0.9, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17577...

@baosight/xinrong (>=0.0.36, <=0.0.37), npm_1st_publish (1.0.0) +1 more potentially affected by unknown CVE via jqeury (0.0.1-security)

jqeury NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jqeury and may be impacted: - @baosight/xinrong =0.0.36, =0.0.37 - npm1stpublish 1.0.0 - wypulldom 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23891...

generator-anyms-ms (>=1.0.7, <=2.0.4), generator-diy (1.0.0) +1 more potentially affected by unknown CVE via yoeman-generator (0.0.1-security)

yoeman-generator NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on yoeman-generator and may be impacted: - generator-anyms-ms =1.0.7, =2.0.4 - generator-diy 1.0.0 - generator-owngen 1.0.0 Source cves: unknown CVE Source advisor...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +2 more potentially affected by unknown CVE via on-key-press (0.0.0)

on-key-press NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on on-key-press and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28228...

com.prototyper.openai-editor-tool (0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (0.0.1-security)

com.unity.nuget.newtonsoft-json NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool 0.1.3 Source cves: unknown CVE Source advisory:...

03_node_1 (1.0.0), 111nodejs03 (1.0.0) +97 more potentially affected by unknown CVE via math (0.0.3)

math NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on math and may be impacted: - 03node1 1.0.0 - 111nodejs03 1.0.0 - @daostack/arc =0.0.1-rc.21, =0.0.1-rc.41-v2, =1.0.1, =1.0.0, =2.0.11, =0.8.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

-price-checker (>=1.0.0, <=1.0.5), 003-gas-convert (1.0.1) +17827 more potentially affected by unknown CVE via fs (>=0.0.0, <=0.0.2)

fs NPM version =0.0.0, =1.0.0, =1.0.0, =0.0.21, =1.0.0, =0.3.96, =1.0.2 - 2.4-qr-code-project 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-21003...

licensefile (1.1.1), myprick (>=1.0.0, <=1.1.0) potentially affected by unknown CVE via prick (0.0.1-security)

prick NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prick and may be impacted: - licensefile 1.1.1 - myprick =1.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29641...

@kash_tt/common (>=1.0.1, <=1.1.236), @topperdev17/common (>=1.0.0, <=2.0.1) +6 more potentially affected by unknown CVE via typecript (0.0.1-security)

typecript NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on typecript and may be impacted: - @kashtt/common =1.0.1, =1.0.0, =1.0.3, =1.0.53, =0.0.1, =1.0.5, =1.0.14 - tant-intl-new 1.0.14 Source cves: unknown CVE Source advisor...

tea07-xokohero (1.0.1) potentially affected by unknown CVE via api-chatfb-test (0.0.1-security)

api-chatfb-test NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on api-chatfb-test and may be impacted: - tea07-xokohero 1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14640...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +11 more potentially affected by unknown CVE via new-struct (>=0.0.4, <=0.1.1)

new-struct NPM version =0.0.4, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27369...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via read-cli-input (1.0.1)

read-cli-input NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on read-cli-input and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31878...

atd-browser-support (>=1.0.0, <=1.0.11), atd-deprecated-polyfills (>=0.0.3, <=1.0.8) +3 more potentially affected by unknown CVE via placeholder.js (>=2.0.1, <=3.1.0)

placeholder.js NPM version =2.0.1, =1.0.0, =0.0.3, =0.0.1, =0.0.2 - vue-placeholder.js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29354...

swagger-koa88 (>=1.0.2, <=1.0.5-0), windows10-electron-vibrancy (>=1.0.0, <=1.0.1) +1 more potentially affected by unknown CVE via coffe-script (0.0.1-security)

coffe-script NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on coffe-script and may be impacted: - swagger-koa88 =1.0.2, =1.0.0, =1.0.5, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17263...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +13 more potentially affected by unknown CVE via mix-objects (>=0.0.2, <=0.0.3)

mix-objects NPM version =0.0.2, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =2.0.0, =0.0.4-1.1, =4.5.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26507...

attr (>=0.0.0, <=0.0.1), door (>=0.0.5, <=0.0.6) +3 more potentially affected by unknown CVE via new-prop (2.0.0)

new-prop NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-prop and may be impacted: - attr =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27365...

memoize-with-leveldb (>=0.0.0, <=0.0.1), radio-paradise-api (>=0.0.0, <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0, <=2.0.0)

level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25200...

helper_project (1.3.0), twitter-buddy (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via requst (0.0.1-security)

requst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject 1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32121...

eksi-server (>=0.0.0, <=0.0.8), eksi-sozluk (>=0.0.0, <=0.0.13) +2 more potentially affected by unknown CVE via new-range (0.0.0)

new-range NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-range and may be impacted: - eksi-server =0.0.0, =0.0.0, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27367...

@artemislunapatron/common (>=1.0.4, <=1.0.14), pwp-core (>=1.0.0, <=1.2.4) +1 more potentially affected by unknown CVE via exprss (0.0.1-security)

exprss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exprss and may be impacted: - @artemislunapatron/common =1.0.4, =1.0.0, =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20100...

kik (>=0.0.0, <=1.3.0), kik-starter (2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0, <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter 2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23249...

vce-terminal (>=1.2.4, <=1.2.8) potentially affected by unknown CVE via eletron (0.0.1-security)

eletron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eletron and may be impacted: - vce-terminal =1.2.4, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19514...

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...

jones-mysql (1.0.0), jones-ndb (1.0.0) potentially affected by unknown CVE via database-jones (1.2.8)

database-jones NPM version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on database-jones and may be impacted: - jones-mysql 1.0.0 - jones-ndb 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17995...

my-first-vue-project (0.1.0), react-responsive-data-table (>=1.0.0, <=1.0.5) potentially affected by unknown CVE via bootstrap4 (0.0.1-security)

bootstrap4 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap4 and may be impacted: - my-first-vue-project 0.1.0 - react-responsive-data-table =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15992...

failing-line (0.0.1), mp3s (0.0.0) +3 more potentially affected by unknown CVE via findall (0.0.4)

findall NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on findall and may be impacted: - failing-line 0.0.1 - mp3s 0.0.0 - ourtunes =0.0.0, =0.0.2, =0.0.3, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20572...

brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +8 more potentially affected by unknown CVE via stream-format (0.0.3)

stream-format NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on stream-format and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34079...

@rustybrooks/eslint-config-prettier (>=1.0.0, <=1.0.18) potentially affected by unknown CVE via eslint-plugin-airbnb-base (0.0.1-security)

eslint-plugin-airbnb-base NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eslint-plugin-airbnb-base and may be impacted: - @rustybrooks/eslint-config-prettier =1.0.0, =1.0.18 Source cves: unknown CVE Source advisory:...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) +2 more potentially affected by unknown CVE via h1-cli-core (1.0.1-alpha.1)

h1-cli-core NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-core and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Sourc...

kik (>=0.2.0, <=1.3.0) potentially affected by unknown CVE via to-class-name (0.0.0)

to-class-name NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-class-name and may be impacted: - kik =0.2.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37001...

@simplyjoe/private-package (1.0.1), antra567 (1.0.0) +1 more potentially affected by unknown CVE via lodashh (0.0.1-security)

lodashh NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodashh and may be impacted: - @simplyjoe/private-package 1.0.1 - antra567 1.0.0 - cfn-resolver-lib =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory:...