10by10-react-app (1.2.1), 192.168.0.172 (4.6.1) +13877 more potentially affected by CVE-2025-7339 via on-headers (>=1.0.0, <=1.0.2)

on-headers NPM version =1.0.0, =1.0.2, =1.0.0, =0.30.0, =0.2.0, =0.0.28, =4.11.0, =4.11.46 and more Source cves: CVE-2025-7339 Source advisory: OSV:GHSA-76C9-3JPH-RJ3Q...

@ascua/electron (>=0.4.2, <=0.4.6), @kumologica/kumologica-contrib-amazonbedrock (0.0.1-beta) +3 more potentially affected by CVE-2024-46992 via electron (>=30.0.0, <=30.0.3)

electron NPM version =30.0.0, =0.4.2, =3.6.0-alpha10, =2.0.131, =0.1.1, =0.1.3 Source cves: CVE-2024-46992 Source advisory: OSV:GHSA-XW5Q-G62X-2QJC...

com.ing.baker:bakery-interaction-k8s-interaction-manager_2.13 (>=3.6.2, <=5.0.0), com.ing.baker:bakery-state-k8s_2.13 (3.5.0) +8 more potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_2.13 (>=2.6.11, <=2.9.0-m2)

com.typesafe.akka:akka-cluster-metrics2.13 MAVEN version =2.6.11, =3.6.2, =3.5.0, =22.10.0-m1, =0.1.6, =0.1.0-alpha1, =2.9.1, =3.30.0, =3.31.0 Source cves: CVE-2025-53393 Source advisory: SNYK:JAVA-COMTYPESAFEAKKA-10567746...

better-auth-cloudflare (0.1.0) potentially affected by CVE-2025-6087 +1 more via @opennextjs/cloudflare (1.0.1)

@opennextjs/cloudflare NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @opennextjs/cloudflare and may be impacted: - better-auth-cloudflare 0.1.0 Source cves: CVE-2025-6087, CVE-2026-3125 Source advisory: OSV:GHSA-RVPW-P7VW-WJ3M...

org.webjars.npm:nestjs__platform-express (>=8.4.7, <=9.0.0-next.2) potentially affected by CVE-2025-47944 via org.webjars.npm:multer (1.4.4-lts.1)

org.webjars.npm:multer MAVEN version 1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2025-47944 Source advisory:...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +16507 more potentially affected by CVE-2025-46392 via commons-configuration:commons-configuration (>=1.0-rc1, <=1.10)

commons-configuration:commons-configuration MAVEN version =1.0-rc1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 and more Source cves:...

@dm3-org/delivery-service (>=1.4.0, <=1.7.1), @dm3-org/dm3-backend (>=1.0.1, <=1.7.1) +18 more potentially affected by unknown CVE via @dm3-org/dm3-lib-shared (1.7.2)

@dm3-org/dm3-lib-shared NPM version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @dm3-org/dm3-lib-shared and may be impacted: - @dm3-org/delivery-service =1.4.0, =1.0.1, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =0.0.1-alpha1, =1.0.5, =1.4.0,...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.4), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.4) +3 more potentially affected by CVE-2025-46812 via trix (>=2.0.8, <=2.1.13)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: CVE-2025-46812 Source advisory: OSV:GHSA-MCRW-746G-9Q8H...

at.reilaender.asciidoctorj.bootconfig2adoc:bootconfig2adoc-adoc (>=0.1.2, <=0.1.3), at.reilaender.asciidoctorj.bootconfig2adoc:bootconfig2adoc-core (>=0.1.2, <=0.1.3) +516 more potentially affected by CVE-2025-43857 via org.jruby:jruby-stdlib (>=1.6.7.2, <=10.1.1.0)

org.jruby:jruby-stdlib MAVEN version =1.6.7.2, =0.1.2, =0.1.2, =1.0.2, =1.0.0, =1.0, =2.0, =0.1.0, =0.1.0, =1.0.0, =1.0.2, =1.4.0, =2.0.0-m3, =2.0.0-m4 and more Source cves: CVE-2025-43857 Source advisory: SNYK:JAVA-ORGJRUBY-10557729...

a3mo_lib (>=0.1.0, <=0.1.1), abra (0.0.1) +4425 more potentially affected by unknown CVE via rustc-serialize (>=0.1.5, <=0.3.25)

rustc-serialize CARGO version =0.1.5, =0.1.0, =0.1.7, =0.2.0-beta.4, =0.0.6, =0.1.0, =0.2.1, =0.1.4, =0.1.1, =0.1.0, =0.9.0, =0.1.0, =0.3.3, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0025...

@andesite-lab/andesite-core (>=1.60.2, <=1.62.0), @bechara/crux (>=6.0.0-alpha.1, <=6.6.2) +151 more potentially affected by CVE-2025-32442 +1 more via fastify (>=5.0.0, <=5.3.1)

fastify NPM version =5.0.0, =1.60.2, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.11, =1.9.4, =2.0.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 and more Source cves: CVE-2025-32442, CVE-2026-33806 Source advisory:...

org.webjars.npm:class-validator (>=0.8.5, <=0.14.0), org.webjars.npm:image-thumbnail (1.0.15) +8 more potentially affected by CVE-2025-56200 via org.webjars.npm:validator (>=3.43.0, <=13.12.0)

org.webjars.npm:validator MAVEN version =3.43.0, =0.8.5, =3.1.2, =3.18.2, =3.25.1 Source cves: CVE-2025-56200 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14102004...

ibc (>=0.11.0, <=0.19.0), ibc-client-tendermint (>=0.48.0, <=0.55.1) +11 more potentially affected by unknown CVE via tendermint-light-client-verifier (>=0.23.5, <=0.38.1)

tendermint-light-client-verifier CARGO version =0.23.5, =0.11.0, =0.48.0, =0.48.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.15.0, =0.1.0, =0.23.5, =0.32.0, =0.23.0, =0.1.0-pre.1, =0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-6JRF-4JV4-R9MW...

gix-fs (>=0.1.0, <=0.9.1), gix-lock (>=5.0.0, <=12.0.1) +1 more potentially affected by CVE-2025-31130 via gix-features (>=0.29.0, <=0.37.2)

gix-features CARGO version =0.29.0, =0.1.0, =5.0.0, =5.0.3, =12.0.1 Source cves: CVE-2025-31130 Source advisory: OSV:RUSTSEC-2025-0021...

@diffuse-dev/particles-ui (0.0.53), @react-router/serve (>=7.0.0-pre.0, <=7.4.0) +2 more potentially affected by CVE-2025-31137 via @react-router/express (>=7.0.0, <=7.4.0-pre.0)

@react-router/express NPM version =7.0.0, =7.0.0-pre.0, =0.1.0-xyd.22, =0.1.0-xyd.20, =0.1.0-xyd.29 Source cves: CVE-2025-31137 Source advisory: OSV:GHSA-4Q56-CRQP-V477...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +62 more potentially affected by CVE-2025-26619 via vega-functions (>=5.5.0, <=5.15.0)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.0, =1.0.7, =0.1.4, =0.6.2, =0.6.4 and more Source cves: CVE-2025-26619 Source advisory: OSV:GHSA-RCW3-WMX7-CPHR...

fprime-ci (0.0.1a1), fprime-fpy (>=0.0.1a1, <=0.3.2) +1 more potentially affected by CVE-2024-55030 via fprime-gds (4.3.0)

fprime-gds PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on fprime-gds and may be impacted: - fprime-ci 0.0.1a1 - fprime-fpy =0.0.1a1, =0.1.0, =0.1.5 Source cves: CVE-2024-55030 Source advisory: SNYK:PYTHON-FPRIMEGDS-9749309...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +425 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.188.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =3.1.28 and more Source cves: unknown CVE Source advisory:...

123-x-ed-eied (>=1.0.5, <=1.0.6), @a11ywatch/web (0.3.0) +614 more potentially affected by CVE-2025-29927 via next (>=12.0.0, <=12.3.4)

next NPM version =12.0.0, =1.0.5, =1.0.0, =1.1.1, =0.0.2-beta.0, =0.0.2-beta.0, =0.0.7, =0.0.0, =1.2.4, =3.6.2, =1.0.0, =2.0.0-bundle-perf-test.2 and more Source cves: CVE-2025-29927 Source advisory: OSV:GHSA-F82V-JWR5-MFFW...

3llm (0.0.1), @3bitmt/3bit-sidebar-dashboard (1.1.4) +609 more potentially affected by CVE-2025-29927 via next (>=15.0.0, <=15.2.2-canary.0)

next NPM version =15.0.0, =1.5.0-beta.1, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =1.0.19, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.1.0, =0.1.20 and more Source cves: CVE-2025-29927 Source advisory: OSV:GHSA-F82V-JWR5-MFFW...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8524 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8524 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511411...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8556 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8556 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511154...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +209 more potentially affected by CVE-2024-11041 via vllm (>=0.1.3, <=0.28.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =0.2.0, =0.3.0 and more Source cves: CVE-2024-11041 Source advisory: SNYK:PYTHON-VLLM-9513025...

llama-index-llms-openllm (>=0.0.1, <=0.4.0) potentially affected by CVE-2024-8982 via openllm (>=0.4.44, <=0.6.30)

openllm PYPI version =0.4.44, =0.0.1, =0.4.0 Source cves: CVE-2024-8982 Source advisory: SNYK:PYTHON-OPENLLM-9599694...

@boxyhq/saml-jackson (>=1.3.2, <=1.11.1), @boxyhq/saml20 (>=1.0.11, <=1.2.3) +4 more potentially affected by CVE-2025-29775 via xml-crypto (>=3.0.0, <=3.2.0)

xml-crypto NPM version =3.0.0, =1.3.2, =1.0.11, =1.13.3, =1.13.5, =2.1.0, =1.0.0, =1.0.1 Source cves: CVE-2025-29775 Source advisory: OSV:GHSA-X3M8-899R-F7C3...

@boxyhq/saml-jackson (>=1.3.2, <=1.11.1), @boxyhq/saml20 (>=1.0.11, <=1.2.3) +4 more potentially affected by CVE-2025-29774 via xml-crypto (>=3.0.0, <=3.2.0)

xml-crypto NPM version =3.0.0, =1.3.2, =1.0.11, =1.13.3, =1.13.5, =2.1.0, =1.0.0, =1.0.1 Source cves: CVE-2025-29774 Source advisory: OSV:GHSA-9P8X-F768-WP2G...

ai.superstream:kafka-clients (>=3.0.1-alpha, <=3.6.1-alpha1), ai.superstream:spring-kafka (>=2.8.4-alpha1, <=3.0.1-alpha1) +1854 more potentially affected by CVE-2020-36843 via net.i2p.crypto:eddsa (>=0.1.0, <=0.3.0)

net.i2p.crypto:eddsa MAVEN version =0.1.0, =3.0.1-alpha, =2.8.4-alpha1, =0.0.1-alpha1, =0.0.6, =2.1.2, =2.1.2, =2.2b1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.23 and more Source cves: CVE-2020-36843 Source advisory: SNYK:JAVA-NETI2PCRYPTO-9402849...

3nit-utils (>=0.24.0, <=1.0.2), 6ix (0.0.0-canary.0) +564 more potentially affected by CVE-2025-27789 via @babel/runtime-corejs2 (>=7.0.0, <=7.22.11)

@babel/runtime-corejs2 NPM version =7.0.0, =0.24.0, =0.0.0-canary.0, =0.0.1, =0.4.0-next.8, =7.0.2, =0.0.1-canary.49, =1.0.0, =0.4.0, =2.0.0-5, =2.1.0, =1.0.22, =2.0.0-5, =2.0.0-6 and more Source cves: CVE-2025-27789 Source advisory: OSV:GHSA-968P-4WVH-CQC8...

adbdgl-adapter (>=1.0.0, <=3.0.1), alignn (>=2021.9.29, <=2025.4.1) +94 more potentially affected by unknown CVE via dgl (>=0.5.3, <=2.2.1)

dgl PYPI version =0.5.3, =1.0.0, =2021.9.29, =2022.10.23, =0.0.4, =1.0.0a2, =0.1.0, =1.0.21, =0.1.1, =1.0.0b3, =0.0.1, =0.2.0, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DGL-9295806...

adversarial-attacks-white-black-box (0.1.7), americodraws (>=0.1.0, <=0.1.5) +105 more potentially affected by CVE-2025-25302 via rembg (>=2.0.57, <=2.0.83)

rembg PYPI version =2.0.57, =0.1.0, =0.0.64, =0.3.3, =0.1.0, =0.4.0, =0.1.0, =0.1.4 - cinewiz 2.0.0 and more Source cves: CVE-2025-25302 Source advisory: SNYK:PYTHON-REMBG-9296365...

adversarial-attacks-white-black-box (0.1.7), americodraws (>=0.1.0, <=0.1.5) +105 more potentially affected by CVE-2025-25301 via rembg (>=2.0.57, <=2.0.83)

rembg PYPI version =2.0.57, =0.1.0, =0.0.64, =0.3.3, =0.1.0, =0.4.0, =0.1.0, =0.1.4 - cinewiz 2.0.0 and more Source cves: CVE-2025-25301 Source advisory: SNYK:PYTHON-REMBG-9296372...

@alell/azure-pipelines-task-jsonpath-plus (1.1.3), @appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11) +260 more potentially affected by CVE-2025-1302 via jsonpath-plus (>=10.0.0, <=10.2.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.4 and more Source cves: CVE-2025-1302 Source advisory: OSV:GHSA-HW8R-X6GR-5GJP...

lemmy_api (>=0.18.0-rc.4, <=0.18.0), lemmy_api_crud (>=0.18.0-rc.4, <=0.18.0) +3 more potentially affected by CVE-2025-25194 +1 more via activitypub_federation (0.4.7)

activitypubfederation CARGO version 0.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on activitypubfederation and may be impacted: - lemmyapi =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0 Source cves: CVE-2025-25194,...

org.webjars.npm:github-com-xdan-datetimepicker (2.5.20), org.webjars.npm:jquery-datetimepicker (>=2.5.4, <=2.5.21) potentially affected by CVE-2024-57063 via org.webjars.npm:php-date-formatter (1.3.6)

org.webjars.npm:php-date-formatter MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:php-date-formatter and may be impacted: - org.webjars.npm:github-com-xdan-datetimepicker 2.5.20 - org.webjars.npm:jquery-datetimepick...

@better-auth/cli (>=0.0.1, <=1.1.15), @vxrn/better-auth (>=1.1.368, <=1.1.416) +2 more potentially affected by CVE-2025-71404 via better-auth (>=0.4.9, <=1.1.15-beta.7)

better-auth NPM version =0.4.9, =0.0.1, =1.1.368, =1.1.0, =1.1.2 - better-auth-monitor 1.0.0 Source cves: CVE-2025-71404 Source advisory: OSV:GHSA-9X4V-XFQ5-M8X5...

@armit/eslint-config-bases (>=0.1.1, <=0.1.5), @bpinternal/expresso (0.2.4) +47 more potentially affected by CVE-2025-24964 via vitest (>=1.0.0-beta.0, <=1.6.0)

vitest NPM version =1.0.0-beta.0, =0.1.1, =1.2.3, =1.7.0, =1.7.0, =1.7.0, =0.10.0-vitest-0.0.2, =1.0.295, =8.22.0, =0.0.0, =1.4.0, =4.7.0, =4.21.0 and more Source cves: CVE-2025-24964 Source advisory: OSV:GHSA-9CRC-Q9X8-HGQQ...

gpt-cli (>=0.0.13, <=0.0.20), htmlentity (>=0.1.0, <=1.2.0) +5 more potentially affected by unknown CVE via grcov (>=0.5.15, <=0.8.13)

grcov CARGO version =0.5.15, =0.0.13, =0.1.0, =0.2.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0005...

@alell/azure-pipelines-task-jsonpath-plus (1.1.3), @appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11) +260 more potentially affected by CVE-2025-1302 via jsonpath-plus (>=10.0.0, <=10.2.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.4 and more Source cves: CVE-2025-1302 Source advisory: SNYK:JS-JSONPATHPLUS-8719585...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.5), @vxrn/better-auth (>=1.1.368, <=1.1.416) potentially affected by CVE-2024-56734 +1 more via better-auth (>=1.0.0, <=1.1.5)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =1.1.368, =1.1.416 Source cves: CVE-2024-56734, CVE-2025-27143 Source advisory: OSV:GHSA-8JHW-6PJJ-8723...

data-agora (0.1.1), dtx (>=0.31.0, <=0.34.0) +9 more potentially affected by CVE-2024-10044 via fastchat (0.1.0)

fastchat PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastchat and may be impacted: - data-agora 0.1.1 - dtx =0.31.0, =0.2.0, =0.18.3, =0.0.2, =0.4.0, =0.0.1, =0.1.3, =0.1.0, =0.1.20 Source cves: CVE-2024-10044 Source advisory:...

@alfaris/scratch-vm (1.0.0), @antv/g6 (>=5.0.0-beta.33, <=5.0.44) +83 more potentially affected by unknown CVE via hull.js (>=0.2.10, <=1.0.6)

hull.js NPM version =0.2.10, =5.0.0-beta.33, =5.1.12, =1.8.20, =1.0.2, =0.1.0, =0.0.1739797164641, =1.3.0, =0.1.0, =0.5.7, =1.0.0, =0.1.0-raspberrypifoundation.20210805151219, =1.0.0, =1.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q849-WXRC-VQRP...

@litcore/cli (>=1.0.1, <=1.0.2) potentially affected by unknown CVE via litcore (0.0.1-security)

litcore NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on litcore and may be impacted: - @litcore/cli =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2024-10936...

acia (>=0.3.0, <=0.4.0), ai-parrot (>=0.22.0, <=0.24.0) +239 more potentially affected by CVE-2024-30896 via influxdb-client (>=1.3.0, <=1.50.0)

influxdb-client PYPI version =1.3.0, =0.3.0, =0.22.0, =0.0.7, =1.0.0rc1, =0.1.0, =1.0.8, =0.0.1, =0.1.6, =0.1.0a1, =1.0.37, =0.1.0, =0.5.0, =0.12.0, =1.6.0b0, =1.14.1 and more Source cves: CVE-2024-30896 Source advisory: SNYK:PYTHON-INFLUXDBCLIENT-8422793...

@0xgg/echomd (>=1.0.0, <=1.0.4), @accelbyte/widgets (>=0.2.0-beta.9, <=0.2.10) +858 more potentially affected by CVE-2024-48910 via dompurify (>=2.0.0, <=2.4.1)

dompurify NPM version =2.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.13, =6.2.3, =6.4.3, =0.0.2-next.4, =0.1.0, =1.0.0, =0.0.18, =6.8.0, =9.3.14, =9.5.4 and more Source cves: CVE-2024-48910 Source advisory: OSV:GHSA-P3VF-V8QC-CWCR...

@amazeelabs/publisher (>=2.4.28, <=2.5.8), @angular-devkit/build-angular (>=18.0.0-next.3, <=19.0.0-next.9) +65 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=3.0.0, <=3.0.2)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =18.0.0-next.3, =18.0.0-next.39, =18.0.0-next.39, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =8.10.0-nightly.20240906232837, =3.11.0-beta.6, =1.1.0, =0.0.26, =0.0.26, =8.0.0-canary.984, =9.0.0-canary.203 and more...

@semic/testing (2.2.11) potentially affected by CVE-2024-48914 via @vendure/asset-server-plugin (3.0.0)

@vendure/asset-server-plugin NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @vendure/asset-server-plugin and may be impacted: - @semic/testing 2.2.11 Source cves: CVE-2024-48914 Source advisory: OSV:GHSA-R9MQ-3C9R-FMJQ...

0.2-ui (0.0.1), 1k-tasks (>=2.3.0, <=3.0.2) +2349 more potentially affected by CVE-2024-47068 via rollup (>=2.0.0, <=2.79.1)

rollup NPM version =2.0.0, =2.3.0, =1.0.17, =1.0.0-canary.1, =1.0.0, =0.0.10, =0.0.3, =1.0.1, =1.0.12, =1.0.0, =0.0.4, =3.1.0-next.7, =3.1.0-next.7, =3.1.0-rc.2 and more Source cves: CVE-2024-47068 Source advisory: OSV:GHSA-GCX4-MW62-G8WM...

directus (>=11.0.0, <=11.0.1) potentially affected by CVE-2024-46990 via @directus/api (>=22.0.0, <=22.1.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.0.1 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +46 more potentially affected by CVE-2024-45812 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 an...

@akrc/vidocs (>=0.0.0, <=0.0.2), @alexzzz/npms (>=0.0.5, <=0.2.0) +136 more potentially affected by CVE-2024-45812 via vite (>=3.0.0, <=3.2.8)

vite NPM version =3.0.0, =0.0.0, =0.0.5, =1.0.1, =1.0.1, =3.2.0, =1.11.2, =0.0.37, =0.0.35, =0.2.3, =0.0.0-canary-20220718083044, =0.0.6, =0.1.0, =0.0.3, =6.24.0, =7.12.2 and more Source cves: CVE-2024-45812 Source advisory: OSV:GHSA-64VR-G452-QVP3...