siddheshtea (=1.1.6) potentially affected by unknown CVE via nokire-nakala62 (=1.0.0)

nokire-nakala62 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala62 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163017...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nokire-nakala33 (=1.0.0)

nokire-nakala33 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala33 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162986...

siddheshtea (=1.1.6) potentially affected by unknown CVE via muklis-31 (=1.0.0)

muklis-31 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-31 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160816...

siddheshtea (=1.1.6) potentially affected by unknown CVE via muklis-39 (=1.0.0)

muklis-39 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-39 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160823...

siddheshtea (=1.1.6) potentially affected by unknown CVE via aji-23 (=1.0.0)

aji-23 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-23 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152062...

siddheshtea (=1.1.6) potentially affected by unknown CVE via manda-3 (=1.0.0)

manda-3 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-3 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159626...

siddheshtea (=1.1.6) potentially affected by unknown CVE via ruji-9 (=1.0.0)

ruji-9 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-9 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165282...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nokire-nakala38 (=1.0.0)

nokire-nakala38 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala38 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162991...

siddheshtea (=1.1.6) potentially affected by unknown CVE via manda-26 (=1.0.0)

manda-26 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-26 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159622...

@ai-sdk/angular (>=1.1.0-beta.0 <=1.1.0-beta.28), @ai-sdk/langchain (>=1.1.0-beta.0 <=1.1.0-beta.28) +5 more potentially affected by CVE-2025-48985 via ai (>=5.1.0-beta.0 <=5.1.0-beta.8)

ai NPM version =5.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =2.1.0-beta.0, =1.1.0-beta.0, =3.1.0-beta.0, =2.1.0-beta.0, =2.1.0-beta.28 Source cves: CVE-2025-48985 Source advisory: OSV:GHSA-RWVC-J5JR-MGVH...

@andor83/mother-may-i (>=1.0.1 <=1.0.10), @aneoconsultingfr/armonik-docs-theme (>=0.6.4 <=0.6.15) +52 more potentially affected by CVE-2025-52662 via @nuxt/devtools (>=0.1.6 <=2.6.3)

@nuxt/devtools NPM version =0.1.6, =1.0.1, =0.6.4, =0.9.1, =1.1.1, =1.0.1, =1.1.0, =0.0.4, =8.3.3, =1.1.1, =0.0.1, =0.3.14, =9.8.3, =1.12.0-rc.5, =1.12.0-rc.7 - @hebilicious/form-actions-nuxt =0.3.0 - @itai-gendler/tairo =0.0.2 and more Source cves: CVE-2025-52662 Source advisory:...

@kontaa/subgraph (>=1.0.1 <=1.2.3), @kontaa/utils (>=1.2.1 <=1.2.3) +4 more potentially affected by CVE-2025-64430 via parse-server (>=5.6.0 <=6.5.11)

parse-server NPM version =5.6.0, =1.0.1, =1.2.1, =2.4.46, =1.0.0, =1.0.1, =1.0.23 - servable-publishable =1.1.0 Source cves: CVE-2025-64430 Source advisory: OSV:GHSA-X4QJ-2F4Q-R4RX...

@kontaa/subgraph (>=1.0.1 <=1.2.3), @kontaa/utils (>=1.2.1 <=1.2.3) +4 more potentially affected by CVE-2025-64430 via parse-server (>=5.6.0 <=6.5.11)

parse-server NPM version =5.6.0, =1.0.1, =1.2.1, =2.4.46, =1.0.0, =1.0.1, =1.0.23 - servable-publishable =1.1.0 Source cves: CVE-2025-64430 Source advisory: SNYK:JS-PARSESERVER-13843716...

ailite (>=6.0.0 <=6.1.10), automatic-goggles (>=0.1.0 <=0.8.0) +36 more potentially affected by CVE-2025-12695 via dspy (>=0.1.5 <=3.1.0)

dspy PYPI version =0.1.5, =6.0.0, =0.1.0, =2.5.5, =0.1.0, =2.8.0, =0.2.1, =0.1.6.dev17, =0.2.0, =0.2.5 and more Source cves: CVE-2025-12695 Source advisory: SNYK:PYTHON-DSPY-13832222...

com.liferay:com.liferay.adaptive.media.blogs.item.selector.web (>=1.0.0 <=1.0.1) potentially affected by CVE-2025-62275 via com.liferay:com.liferay.blogs.item.selector.web (=2.0.0)

com.liferay:com.liferay.blogs.item.selector.web MAVEN version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay:com.liferay.blogs.item.selector.web and may be impacted: - com.liferay:com.liferay.adaptive.media.blogs.item.selector.web...

abinitostudio (>=1.0.1 <=1.0.8), aicsshparam (>=0.0.6 <=0.0.12) +145 more potentially affected by CVE-2025-57107 via vtk (>=8.1.2 <=9.5.0)

vtk PYPI version =8.1.2, =1.0.1, =0.0.6, =0.1.8, =0.4.0, =0.13.1, =0.71.0, =0.2.0, =0.4.2, =2024.7.4, =0.0.4rc3, =0.2.5, =0.6.1, =0.6.3 and more Source cves: CVE-2025-57107 Source advisory: OSV:PYSEC-2025-225...

alertwise (=1.0.0), amusing-app (>=0.1.0 <=0.4.3) +213 more potentially affected by CVE-2025-6176 via brotli (>=0.6.0 <=1.1.0)

brotli PYPI version =0.6.0, =0.1.0, =22.5.13, =2.4.11, =0.72.2, =1.1.3, =8.3.1, =16.0.1b2, =9.1.2, =0.0.1, =0.0.6 and more Source cves: CVE-2025-6176 Source advisory: OSV:GHSA-2QFP-Q593-8484...

adpred (=1.3.2), bacpipe (>=1.2.0 <=1.3.2.dev0) +14 more potentially affected by CVE-2025-12060 +1 more via keras (>=3.0.0 <=3.11.3)

keras PYPI version =3.0.0, =1.2.0, =0.1.0, =0.0.4, =0.4.7, =1.0.3, =0.0.28, =0.2.0, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.10.0 and more Source cves: CVE-2025-12060, CVE-2025-4517 Source advisory: SNYK:PYTHON-KERAS-13786416...

@142vip/midway (>=0.1.6-alpha.9 <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1 <=0.0.1-alpha.13) +2697 more potentially affected by CVE-2025-60542 via typeorm (>=0.0.10 <=0.3.25)

typeorm NPM version =0.0.10, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood =0.10.1 and more Source cves: CVE-2025-60542 Source advisory: OSV:GHSA-Q2PJ-6V73-8RGJ...

@142vip/midway (>=0.1.6-alpha.9 <=0.1.6-alpha.12), @142vip/nest-starter (>=0.0.1-alpha.1 <=0.0.1-alpha.13) +2697 more potentially affected by CVE-2025-60542 via typeorm (>=0.0.10 <=0.3.25)

typeorm NPM version =0.0.10, =0.1.6-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.1, =1.0.1, =3.3.4, =1.0.1, =0.0.1, =0.9.3, =1.0.0, =1.1.126, =1.0.0, =1.0.0, =1.0.14 - @actonate/mirkwood =0.10.1 and more Source cves: CVE-2025-60542 Source advisory: SNYK:JS-TYPEORM-13746469...

aenvironment (=0.1.7rc1), agentfetch-mcp (>=1.0.0 <=1.0.1) +210 more potentially affected by CVE-2025-62801 via fastmcp (>=0.1.0 <=2.12.5)

fastmcp PYPI version =0.1.0, =1.0.0, =0.4.6, =1.8.0, =3.2.0, =3.2.0, =4.2.2, =3.0.2, =0.2.7, =1.0.0rc1, =0.2.7, =1.7.3, =0.1.12, =0.9.30, =0.9.77 and more Source cves: CVE-2025-62801 Source advisory: OSV:GHSA-RJ5C-58RQ-J5G5...

aenvironment (=0.1.7rc1), agentfetch-mcp (>=1.0.0 <=1.0.1) +210 more potentially affected by unknown CVE via fastmcp (>=0.1.0 <=2.12.5)

fastmcp PYPI version =0.1.0, =1.0.0, =0.4.6, =1.8.0, =3.2.0, =3.2.0, =4.2.2, =3.0.2, =0.2.7, =1.0.0rc1, =0.2.7, =1.7.3, =0.1.12, =0.9.30, =0.9.77 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C2JP-C369-7PVX...

@app-box/web (=1.0.0), @chirpy-dev/analytics (=0.0.1) +72 more potentially affected by unknown CVE via next-auth (>=0.0.0-manual.83c4ebd1 <=4.24.11)

next-auth NPM version =0.0.0-manual.83c4ebd1, =1.9.0, =3.0.0-canary.160.0, =2.0.1-canary.24.0, =0.1.0-0, =0.0.2, =1.0.0, =1.0.0, =4.0.0-alpha.24, =0.0.0-experimental-20260318092212, =0.0.0-experimental-20260318092212, =5.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5JPX-9HW9-2F...

anubis-policy-api (>=0.3.0 <=0.6.0), awsdf (=0.1.12) +29 more potentially affected by CVE-2025-61385 via pg8000 (>=1.12.1 <=1.31.4)

pg8000 PYPI version =1.12.1, =0.3.0, =2.0.0, =0.17.1, =0.4.0, =2050.0.0, =0.0.6, =1.0.5, =0.5.2, =0.1.0, =0.0.1, =2.40.0, =1.0.0, =0.2.2, =1.0.1, =1.0.3 and more Source cves: CVE-2025-61385 Source advisory: OSV:GHSA-WQ2G-R956-J8CC...

01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +2532 more potentially affected by CVE-2025-62708 via pypdf (>=3.10.0 <=6.1.1)

pypdf PYPI version =3.10.0, =0.0.5, =0.1.0, =0.0.1, =0.2.0, =0.4.0, =0.3.0, =0.3.0, =0.1.1, =0.1.0, =0.0.2, =0.2.0, =1.2.27, =3.0.145 and more Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

ai.tock:bot-test (>=25.9.0 <=26.3.2), ai.tock:bot-test-base (>=25.9.0 <=26.3.2) +287 more potentially affected by CVE-2025-11966 via io.vertx:vertx-web (>=5.0.0 <=5.0.4)

io.vertx:vertx-web MAVEN version =5.0.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.2 and more Source cves: CVE-2025-11966 Source advisory: OSV:GHSA-45P5-V273-3QQR...

ai.chronon:service_2.11 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:service_2.12 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +5641 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (>=3.0.0-milestone6 <=4.5.21)

io.vertx:vertx-web MAVEN version =3.0.0-milestone6, =0.0.86, =0.0.86, =0.0.86, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.3.0 - ai.konduit.serving:konduit-serving-python-config =0.0.2 and more Source cves: CVE-2025-11965 Source advisory:...

@aws/nx-plugin (>=0.44.0 <=0.59.0), @botonic/nx-plugin (>=2.23.0 <=2.29.0) +47 more potentially affected by CVE-2025-62595 via koa (=3.0.1)

koa NPM version =3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @aws/nx-plugin =0.44.0, =2.23.0, =3.10.0, =0.4.0, =0.1.0-next.717, =4.0.0-beta.2, =0.0.0-feat-support-bridge-react-router-v7-20251015102312,...

@angular/build (>=20.1.0 <=20.2.0-next.2), @atomazing-org/super-app-host (>=0.0.4 <=0.0.8) +55 more potentially affected by CVE-2025-62522 via vite (>=7.0.0 <=7.0.6)

vite NPM version =7.0.0, =20.1.0, =0.0.4, =0.2.9, =1.190.0, =0.1.0, =0.0.1750946288791, =0.0.2, =0.0.7, =0.0.2, =0.0.1, =0.1.34, =0.1.35 and more Source cves: CVE-2025-62522 Source advisory: OSV:GHSA-93M4-6634-74Q7...

@adhd/react-hooks (=2.2.1), @aklesky/vite-config (>=0.7.9 <=0.9.0) +466 more potentially affected by CVE-2025-62522 via vite (>=4.5.3 <=5.4.20)

vite NPM version =4.5.3, =0.7.9, =16.0.0, =16.0.0, =16.2.14, =18.0.0, =1.0.25-beta.0, =0.1.26, =0.1.25, =0.1.30, =0.1.32, =0.5.0, =0.5.5 - @avorati/strapi-plugin-preview =1.0.1 - @beardeddudes/strapi-types =0.1.1 and more Source cves: CVE-2025-62522 Source advisory: OSV:GHSA-93M4-6634-74Q7...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0 <=4.0.1), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0 <=4.0.1) +17 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-provisioning-java (>=4.0.0 <=4.0.1)

org.apache.syncope.core:syncope-core-provisioning-java MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 and mo...

Druid_task1 (=0.1.0), audio-processor-analysis (>=0.1.0-alpha.4 <=2.4.0) +72 more potentially affected by unknown CVE via unic-bidi (>=0.1.0 <=0.9.0)

unic-bidi CARGO version =0.1.0, =0.1.0-alpha.4, =0.4.0, =0.7.0, =0.4.0, =0.7.0, =0.2.0, =0.2.3 - frui =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0096...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1 <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0 <=26.3.3) +23 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (>=26.3.0 <=26.3.3)

org.keycloak:keycloak-account-ui MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.3 and more Source cves: CVE-2025-10044https://vulners.c...

@avorati/strapi-plugin-preview (=1.0.1), @futurebrand/helpers-strapi (>=2.0.2 <=2.5.4) +6 more potentially affected by CVE-2025-53092 via @strapi/core (>=5.0.0-alpha.0 <=5.1.1)

@strapi/core NPM version =5.0.0-alpha.0, =2.0.2, =0.0.1, =5.0.0, =5.19.0 - custom-strapi-plugin-socket =1.0.2 - stronges =0.1.1 - test-lead =0.1.0 Source cves: CVE-2025-53092 Source advisory: SNYK:JS-STRAPICORE-13601312...

@avorati/strapi-plugin-preview (=1.0.1), @catchmexz/fedin-cms (>=5.30.1 <=5.30.2) +26 more potentially affected by CVE-2024-56143 via @strapi/core (>=5.0.0 <=5.5.1)

@strapi/core NPM version =5.0.0, =5.30.1, =1.0.0, =2.3.1, =2.0.2, =0.1.0, =2.0.0, =1.0.1, =5.0.0, =0.1.0, =0.2.0, =0.5.0 - cypherscan-strapi =0.1.1 - keycloak-auth-plugin =0.0.1 - my-shopify-app-backend =0.1.0 and more Source cves: CVE-2024-56143 Source advisory: SNYK:JS-STRAPICORE-13601313...

br.com.m4rc310:br-com-m4rc310-gql (=1.0.58), br.com.m4rc310:br-com-m4rc310-gtim (=1.0.58) +277 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (>=6.0.0 <=6.0.21)

org.springframework:spring-websocket MAVEN version =6.0.0, =3.1.1.0, =3.1.1.0, =2.0.35, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.8.5 and more Source cves: CVE-2025-41254 Source advisory: OSV:GHSA-7FCH-4F2F-JCGM...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0 <=4.6.0.0), at.researchstudio.sat:won-owner (=0.3) +2228 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (>=4.0.0.RELEASE <=5.3.39)

org.springframework:spring-websocket MAVEN version =4.0.0.RELEASE, =4.4.0.0, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.6.0, =1.4, =5.3.0, =6.2.5 and more Source cves: CVE-2025-41254 Source advisory: OSV:GHSA-7FCH-4F2F-JCGM...

ch.nexsol-tech.gateway:sample-gateway (>=1.2.0 <=1.3.1), ch.nexsol-tech.gateway:spring-cloud-gateway-database (>=1.2.0 <=1.3.1) +37 more potentially affected by CVE-2025-41253 via org.springframework.cloud:spring-cloud-gateway-server (>=4.3.0 <=4.3.1)

org.springframework.cloud:spring-cloud-gateway-server MAVEN version =4.3.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =3.0.0, =1.8.9, =0.12.1, =0.12.1, =0.12.10, =3.10.0, =3.11.0 and more Source cves: CVE-2025-41253 Source advisory: OSV:GHSA-FWXX-WV44-7QFG...

org.opensearch.dataprepper.plugins:otel-trace-group-processor (>=2.12.0 <=2.12.1) potentially affected by CVE-2025-62371 via org.opensearch.dataprepper.plugins:opensearch (>=2.12.0 <=2.12.1)

org.opensearch.dataprepper.plugins:opensearch MAVEN version =2.12.0, =2.12.0, =2.12.1 Source cves: CVE-2025-62371 Source advisory: OSV:GHSA-43FF-RR26-8HX4...

tom-microservice (=3.2.28) potentially affected by CVE-2025-62380 via mailgen (=2.0.20)

mailgen NPM version =2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on mailgen and may be impacted: - tom-microservice =3.2.28 Source cves: CVE-2025-62380 Source advisory: SNYK:JS-MAILGEN-13559301...

abi-ds-utils (>=0.1.2 <=1.2.3), abi-pyspark-utils (>=0.1.1 <=0.1.4) +231 more potentially affected by CVE-2025-55039 via pyspark (>=2.1.2 <=3.4.2)

pyspark PYPI version =2.1.2, =0.1.2, =0.1.1, =0.1.5, =0.0.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =0.2.0, =0.0.2, =1.0.0, =0.9.1, =1.0.2 and more Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

beam-pyspark-runner (>=0.0.1 <=0.0.3), brel-xbrl (=0.8.2a1) +53 more potentially affected by CVE-2025-55039 via pyspark (>=3.5.0 <=3.5.1)

pyspark PYPI version =3.5.0, =0.0.1, =1.3.2, =0.13.0, =0.0.1, =1.2.17, =0.0.0, =5.0.0, =0.0.3, =1.1.0 - hari-data =0.1.5 - hermione-databricks =1.0.1 and more Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6 <=1.2.10), ai.catboost:catboost-spark_3.3_2.13 (>=1.1.1 <=1.2.10) +317 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.13 (>=3.2.0 <=3.4.3)

org.apache.spark:spark-network-common2.13 MAVEN version =3.2.0, =1.0.6, =1.1.1, =1.2, =0.0.25, =0.0.25, =0.0.25, =0.0.86, =0.0.14, =0.20, =1.1.3, =1.4.0, =1.5.0, =1.5.0, =1.8.0 and more Source cves: CVE-2025-55039 Source advisory: SNYK:JAVA-ORGAPACHESPARK-13553869...

ch.nexsol-tech.gateway:sample-gateway (>=1.2.0 <=1.3.1), ch.nexsol-tech.gateway:spring-cloud-gateway-database (>=1.2.0 <=1.3.1) +37 more potentially affected by CVE-2025-41253 via org.springframework.cloud:spring-cloud-gateway-server (>=4.3.0 <=4.3.1)

org.springframework.cloud:spring-cloud-gateway-server MAVEN version =4.3.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =3.0.0, =1.8.9, =0.12.1, =0.12.1, =0.12.10, =3.10.0, =3.11.0 and more Source cves: CVE-2025-41253 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-13561992...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0 <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (=0.1.0) +111 more potentially affected by CVE-2025-41253 via org.springframework.cloud:spring-cloud-gateway-server (>=4.0.0 <=4.2.5)

org.springframework.cloud:spring-cloud-gateway-server MAVEN version =4.0.0, =0.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =2023.4.1.0, =1.0.5, =1.0.4, =3.0.0.1, =jdk17-0.0.1 - cn.warpin.maven-central:common-gateway-security =0.0.15 and more Source cves: CVE-2025-41253 Source...

@1771technologies/oneplay (>=0.0.1 <=0.0.6), @a11ywatch/pagemind (>=0.9.31 <=0.9.34) +512 more potentially affected by CVE-2025-59288 via playwright (>=0.10.0 <=1.55.1-beta-1758616458000)

playwright NPM version =0.10.0, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.0.10, =0.0.1, =0.1.466, =0.32.2, =2.15.0, =0.3.0, =0.7.3 and more Source cves: CVE-2025-59288 Source advisory: OSV:GHSA-7MVR-C777-76HP...

@1771technologies/oneplay (>=0.0.1 <=0.0.6), @a11ywatch/pagemind (>=0.9.31 <=0.9.34) +598 more potentially affected by CVE-2025-59288 via playwright-core (>=1.0.0 <=1.55.1-beta-1758616458000)

playwright-core NPM version =1.0.0, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.0.10, =0.0.1, =0.1.466, =0.2.0, =0.0.1-beta, =0.1.4 and more Source cves: CVE-2025-59288 Source advisory: SNYK:JS-PLAYWRIGHTCORE-13553173...

@ampt/astro (=0.0.1-beta.1), @antonyfaris/prefix-node-builtins (>=1.0.0 <=1.0.1) +376 more potentially affected by CVE-2025-61925 via astro (>=0.20.12 <=5.14.1)

astro NPM version =0.20.12, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.0.1, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.1, =0.0.1, =0.0.7 and more Source cves: CVE-2025-61925 Source advisory: OSV:GHSA-5FF5-9FCW-VG88...

@antonyfaris/prefix-node-builtins (>=1.0.0 <=1.0.1), @awesome-myst/myst-awesome (>=0.0.1 <=0.0.7) +10 more potentially affected by CVE-2025-61925 via astro (>=5.0.0-beta.5 <=5.14.1)

astro NPM version =5.0.0-beta.5, =1.0.0, =0.0.1, =0.0.1, =2.18.7, =0.1.2-alpha.1, =1.13.2, =0.1.8, =1.0.21, =0.0.1, =0.0.1, =1.249.8, =1.271.1 Source cves: CVE-2025-61925 Source advisory: SNYK:JS-ASTRO-13535085...

org.elasticsearch.test:framework (>=8.19.0 <=8.19.16), org.elasticsearch.test:yaml-rest-runner (>=8.19.0 <=8.19.16) +1 more potentially affected by CVE-2025-37727 via org.elasticsearch:elasticsearch (>=8.19.0 <=8.19.4)

org.elasticsearch:elasticsearch MAVEN version =8.19.0, =8.19.0, =8.19.0, =8.19.2, =8.19.4 Source cves: CVE-2025-37727 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-13517507...