@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-62522 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-62522 Source advisory: SNYK:JS-VITE-13644406...

org.webjars.npm:vitepress (1.0.0-draft.8) potentially affected by CVE-2025-62522 via org.webjars.npm:vite (3.0.0-beta.9)

org.webjars.npm:vite MAVEN version 3.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vite and may be impacted: - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2025-62522 Source advisory:...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +463 more potentially affected by CVE-2025-62522 via vite (>=5.0.0, <=5.4.20)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-62522 Source advisory: SNYK:JS-VITE-13644406...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +203 more potentially affected by CVE-2025-62522 via vite (>=6.0.0, <=6.4.0)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +322 more potentially affected by unknown CVE via unic-common (>=0.7.0, <=0.9.0)

unic-common CARGO version =0.7.0, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0080...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +29 more potentially affected by unknown CVE via unic-ucd-hangul (>=0.8.0, <=0.9.0)

unic-ucd-hangul CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.2.4-beta, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0079...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +20 more potentially affected by unknown CVE via unic-ucd-case (>=0.6.0, <=0.9.0)

unic-ucd-case CARGO version =0.6.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.1.0, =0.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0092...

rustpython-vm (>=0.1.0, <=0.1.1), unic (>=0.8.0, <=0.9.0) +3 more potentially affected by unknown CVE via unic-char-basics (>=0.8.0, <=0.9.0)

unic-char-basics CARGO version =0.8.0, =0.1.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0093...

nuxt-spec (>=0.1.10, <=0.1.11) potentially affected by CVE-2025-62410 via happy-dom (20.0.0)

happy-dom NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on happy-dom and may be impacted: - nuxt-spec =0.1.10, =0.1.11 Source cves: CVE-2025-62410 Source advisory: SNYK:JS-HAPPYDOM-13559227...

@nasa-jpl/stellar-svelte (>=2.1.9, <=2.1.10), @scouterdev/ui (0.0.1) +2 more potentially affected by CVE-2025-62381 via sveltekit-superforms (>=2.16.1, <=2.27.1)

sveltekit-superforms NPM version =2.16.1, =2.1.9, =1.3.0, =0.0.2-dev.80, =1.0.9 Source cves: CVE-2025-62381 Source advisory: SNYK:JS-SVELTEKITSUPERFORMS-13559331...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @a11ywatch/pagemind (>=0.9.31, <=0.9.34) +519 more potentially affected by CVE-2025-59288 via playwright (>=1.0.2, <=1.55.0-beta-1758616447000)

playwright NPM version =1.0.2, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.0.10-a, =0.0.1, =0.1.466, =0.32.2, =2.15.0, =0.3.0, =0.7.3 and more Source cves: CVE-2025-59288 Source advisory: OSV:GHSA-7MVR-C777-76HP...

atomr-persistence-mongodb (>=0.1.0, <=0.10.1), authifier (>=1.0.10, <=1.0.16) +33 more potentially affected by CVE-2025-11695 via mongodb (3.1.1)

mongodb CARGO version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongodb and may be impacted: - atomr-persistence-mongodb =0.1.0, =1.0.10, =0.2.0, =0.1.0, =1.0.0, =0.1.9, =0.1.10 - mrcon 0.1.0 and more Source cves: CVE-2025-11695 Source...

proto-types (>=0.1.0, <=0.1.11), protocheck-core (>=0.1.0, <=0.1.11) potentially affected by CVE-2025-62162 via cel (0.11.0)

cel CARGO version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on cel and may be impacted: - proto-types =0.1.0, =0.1.0, =0.1.11 Source cves: CVE-2025-62162 Source advisory: OSV:GHSA-WXWX-9FH7-5MRW...

ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.2.0), ca.bc.gov.tno:elastic (>=0.0.1-alpha, <=0.0.5-alpha) +629 more potentially affected by CVE-2025-37727 via org.elasticsearch.plugin:reindex-client (>=5.0.0, <=7.17.29)

org.elasticsearch.plugin:reindex-client MAVEN version =5.0.0, =j8.2.2.0, =0.0.1-alpha, =0.1.0, =2.1.0.m8, =2.1.0.m8, =1.4.1, =1.4.0-alpha, =1.4.1, =1.4.0-alpha, =1.2.0.release, =1.1.1.release, =1.4.2.release - cn.patterncat:spring-boot-starter-elasticsearch 0.0.1 -...

forc (>=0.1.3, <=0.33.0), forc-client (>=0.20.1, <=0.33.0) +29 more potentially affected by unknown CVE via fuel-vm (>=0.1.1, <=0.22.7)

fuel-vm CARGO version =0.1.1, =0.1.3, =0.20.1, =0.10.0, =0.10.0, =0.1.8, =0.10.0, =0.6.1, =0.30.1, =0.6.1, =0.9.1, =0.9.1, =0.9.1, =0.11.2, =0.1.2, =0.9.1, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2PGJ-5CV2-6XXW...

@circleci/agents (>=2.13.0-canary.3413b9c, <=2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59829 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.119)

@anthropic-ai/claude-code NPM version =1.0.8, =2.13.0-canary.3413b9c, =0.21.0, =0.1.7, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59829 Source advisory: OSV:GHSA-66M2-GX93-V996...

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59536 Source advisory: OSV:GHSA-4FGQ-FPQ9-MR3G...

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59536 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13299835...

amortization (>=0.0.1, <=1.1.1) potentially affected by CVE-2025-56572 via financejs (4.0.0)

financejs NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on financejs and may be impacted: - amortization =0.0.1, =1.1.1 Source cves: CVE-2025-56572 Source advisory: OSV:GHSA-5Q7Q-P8PC-782H...

amortization (>=0.0.1, <=1.1.1) potentially affected by CVE-2025-56571 via financejs (4.0.0)

financejs NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on financejs and may be impacted: - amortization =0.0.1, =1.1.1 Source cves: CVE-2025-56571 Source advisory: OSV:GHSA-F8R4-MF27-RF7M...

@criticide/maxfest (>=1.0.19, <=1.2.3), @criticide/maxfestvest (0.1.0) +19 more potentially affected by CVE-2025-56571 +1 more via financejs (>=4.0.0, <=4.1.0)

financejs NPM version =4.0.0, =1.0.19, =1.0.2, =0.0.6, =0.0.1, =1.0.0, =0.0.1, =1.0.1, =1.0.47, =1.0.23, =1.0.32, =0.1.0, =0.9.0 - estiband 0.1.0 - gulp-hotcopy 0.5.6 and more Source cves: CVE-2025-56571, CVE-2025-56572 Source advisory: SNYK:JS-FINANCEJS-13169918...

@arcblock/gatsby-theme-docs (>=5.7.0, <=7.34.5), @changeinc/components (>=1.0.4, <=1.0.20) +87 more potentially affected by CVE-2025-3193 via algoliasearch-helper (>=2.1.2, <=2.28.1)

algoliasearch-helper NPM version =2.1.2, =5.7.0, =1.0.4, =1.0.4, =1.0.0, =2.2.1-custom, =0.0.7, =0.1.2, =0.1.4, =0.2.3, =0.2.1, =0.0.1, =2.0.0, =0.0.0, =1.9.0, =1.0.0, =1.4.2 and more Source cves: CVE-2025-3193 Source advisory: OSV:GHSA-529Q-4J3P-7C5R...

@extplug/cors-proxy (>=1.0.0, <=1.0.1), @ir-engine/server-core (1.6.0) +34 more potentially affected by CVE-2020-36851 via cors-anywhere (>=0.2.5, <=0.4.4)

cors-anywhere NPM version =0.2.5, =1.0.0, =0.0.7, =0.1.0, =0.13.0, =0.0.19, =0.5.0, =0.5.0, =1.0.0, =1.2.0, =1.1.0, =4.0.0-beta.4, =5.0.0 and more Source cves: CVE-2020-36851 Source advisory: SNYK:JS-CORSANYWHERE-13109647...

@extplug/cors-proxy (>=1.0.0, <=1.0.1), @ir-engine/server-core (1.6.0) +34 more potentially affected by CVE-2020-36851 via cors-anywhere (>=0.2.5, <=0.4.4)

cors-anywhere NPM version =0.2.5, =1.0.0, =0.0.7, =0.1.0, =0.13.0, =0.0.19, =0.5.0, =0.5.0, =1.0.0, =1.2.0, =1.1.0, =4.0.0-beta.4, =5.0.0 and more Source cves: CVE-2020-36851 Source advisory: OSV:GHSA-R3JV-XFGX-GJ24...

@afif_hh/composable (1.0.2), @afif_hh/ui_components (>=1.0.5, <=1.0.30) +67 more potentially affected by CVE-2025-57325 via rollbar (>=2.1.0, <=2.26.4)

rollbar NPM version =2.1.0, =1.0.5, =1.0.0, =0.0.2, =0.0.5, =0.0.2-beta.1, =1.0.0-alpha.1, =1.0.5, =1.1.12, =1.3.10, =1.1.11, =1.0.3, =2.1.0-alpha.3, =2.1.0-alpha.3, =2.1.3 and more Source cves: CVE-2025-57325 Source advisory: SNYK:JS-ROLLBAR-13110036...

locize-cli (>=3.6.0, <=3.14.0) potentially affected by CVE-2025-57318 via csvjson (5.0.0)

csvjson NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on csvjson and may be impacted: - locize-cli =3.6.0, =3.14.0 Source cves: CVE-2025-57318 Source advisory: OSV:GHSA-XQ4F-3JXP-QV6M...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +6198 more potentially affected by CVE-2025-57329 via web3-core-method (>=1.0.0-beta.52, <=3.0.0-rc.5)

web3-core-method NPM version =1.0.0-beta.52, =1.0.0-3, =0.0.3, =0.0.3, =0.0.31, =1.1.0, =0.9.9, =0.1.0, =0.1.1 - 55tools-block 1.0.0 - 55tools-block-ext 1.0.0 - 84447xe5t8 1.0.0 and more Source cves: CVE-2025-57329 Source advisory: SNYK:JS-WEB3COREMETHOD-13110028...

0wcc9yywcywy (1.0.0), 0wu8yw8by8cw (1.0.0) +2437 more potentially affected by CVE-2025-59343 via tar-fs (>=3.0.2, <=3.1.0)

tar-fs NPM version =3.0.2, =0.0.1, =2.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-59343 Source advisory: OSV:GHSA-VJ76-C3G6-QR5V...

007putra-my-bot (1.1.1), 10bis-shufersal-automation (1.0.0) +4597 more potentially affected by CVE-2025-59343 via tar-fs (>=2.0.0, <=2.1.3)

tar-fs NPM version =2.0.0, =0.2.0, =1.0.0, =1.0.0, =0.107.10, =1.19.19, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2025-59343 Source advisory: SNYK:JS-TARFS-13045213...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +160 more potentially affected by CVE-2025-59343 via tar-fs (>=1.0.0, <=1.16.3)

tar-fs NPM version =1.0.0, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.4 - @elm-node/npm-scripts 1.0.0 - @hlsrules-test/fc-libreoffice 1.0.0 and more Source cves: CVE-2025-59343 Source advisory: SNYK:JS-TARFS-13045213...

007putra-my-bot (1.1.1), 10bis-shufersal-automation (1.0.0) +4597 more potentially affected by CVE-2025-59343 via tar-fs (>=2.0.0, <=2.1.3)

tar-fs NPM version =2.0.0, =0.2.0, =1.0.0, =1.0.0, =0.107.10, =1.19.19, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2025-59343 Source advisory: OSV:GHSA-VJ76-C3G6-QR5V...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +160 more potentially affected by CVE-2025-59343 via tar-fs (>=1.0.0, <=1.16.3)

tar-fs NPM version =1.0.0, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.4 - @elm-node/npm-scripts 1.0.0 - @hlsrules-test/fc-libreoffice 1.0.0 and more Source cves: CVE-2025-59343 Source advisory: OSV:GHSA-VJ76-C3G6-QR5V...

@remirror/core (>=0.2.0, <=0.11.0), @remirror/core-extensions (>=0.2.0, <=0.13.1) +42 more potentially affected by CVE-2025-57352 via min-document (>=2.17.0, <=2.19.0)

min-document NPM version =2.17.0, =0.2.0, =0.2.0, =0.4.2-ci.1569229282.9, =0.4.2-canary.2, =0.4.2-ci.1569229282.9, =0.4.2-ci.1569229282.9, =0.2.0, =0.2.0, =0.2.0, =0.4.0, =0.4.2-ci.1569229282.9, =0.2.0, =0.2.0, =0.2.0, =0.4.2-ci.1569229282.9, =0.13.1 and more Source cves: CVE-2025-57352 Source...

0xtrails (>=0.1.9, <=0.2.2), @aarc-dev/deposit-widget (>=0.4.2, <=0.4.47) +4 more potentially affected by CVE-2025-59430 via @meshconnect/web-link-sdk (>=3.0.2, <=3.2.14)

@meshconnect/web-link-sdk NPM version =3.0.2, =0.1.9, =0.4.2, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.3 Source cves: CVE-2025-59430 Source advisory: SNYK:JS-MESHCONNECTWEBLINKSDK-13004671...

@akbarsafari00/admin (5.52.1-fa.1), @akbarsafari00/bonyan (>=5.52.1-fa.2, <=5.52.1-fa.6) +159 more potentially affected by CVE-2025-9960 via is-localhost-ip (>=1.4.0, <=3.0.1)

is-localhost-ip NPM version =1.4.0, =5.52.1-fa.2, =5.52.1-fa.2, =5.52.1-fa.5, =5.52.1-fa.2, =4.25.19-patch.1, =2.3.7, =1.0.0, =1.2.11, =0.5.1, =1.0.6, =1.0.0, =1.38.7 and more Source cves: CVE-2025-9960 Source advisory: SNYK:JS-ISLOCALHOSTIP-13004668...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 007-nodejs (>=2.5.0, <=2.5.3) +46519 more potentially affected by CVE-2024-29415 +1 more via ip (>=0.0.1, <=2.0.1)

ip NPM version =0.0.1, =1.0.1, =2.5.0, =2.5.3 - 0726react 0.1.1 - 0me.sh 0.1.15 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0....

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 007-nodejs (>=2.5.0, <=2.5.3) +46519 more potentially affected by CVE-2024-29415 +1 more via ip (>=0.0.1, <=2.0.1)

ip NPM version =0.0.1, =1.0.1, =2.5.0, =2.5.3 - 0726react 0.1.1 - 0me.sh 0.1.15 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0....

acid-store (>=0.12.0, <=0.14.2), aliyundrive-fuse (>=0.1.0, <=0.1.14) +41 more potentially affected by unknown CVE via fuser (>=0.4.1, <=0.15.1)

fuser CARGO version =0.4.1, =0.12.0, =0.1.0, =0.2.4, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.2, =0.6.0, =1.5.5, =0.2.5, =0.2.82 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CVMJ-47V9-35M9...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +185 more potentially affected by CVE-2025-59139 via hono (>=4.0.0, <=4.9.6)

hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.0.1, =0.0.1, =0.0.1-experimental.1, =0.0.3, =1.3.2, =0.1.0, =0.75.0, =0.2.305, =1.2.193, =1.3.2, =0.21.2-4.1, =0.21.23 and more Source cves: CVE-2025-59139 Source advisory: OSV:GHSA-92VJ-G62V-JQHH...

com.liferay:com.liferay.my.account.web (>=1.0.0, <=1.0.12), com.liferay:com.liferay.portal.settings.web (>=1.0.0, <=1.2.4) potentially affected by CVE-2025-43787 via com.liferay:com.liferay.users.admin.web (>=1.0.0, <=2.3.0)

com.liferay:com.liferay.users.admin.web MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.2.4 Source cves: CVE-2025-43787 Source advisory: SNYK:JAVA-COMLIFERAY-12704859...

@nestjs/ng-universal (>=7.1.0, <=7.1.1), @nguniversal/builders (>=16.0.0-next.0, <=16.1.3) +1 more potentially affected by CVE-2025-59052 via @nguniversal/common (>=16.0.0, <=16.1.3)

@nguniversal/common NPM version =16.0.0, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =16.1.3 Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...

@angularexpert/my-workspace (0.0.0), @cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4) +38 more potentially affected by CVE-2025-59052 via @angular/ssr (>=17.0.5, <=18.2.13)

@angular/ssr NPM version =17.0.5, =1.0.0, =0.0.1, =0.0.1, =8.0.0, =0.0.0, =0.0.2, =0.0.0, =0.0.1 and more Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...

@builder.io/angular (>=1.0.1, <=3.0.2), @gleb216/fn.nestjs.core.modules (>=0.0.127, <=0.0.158) +8 more potentially affected by CVE-2025-59052 via @nguniversal/common (>=16.0.0, <=16.2.0-rc.0)

@nguniversal/common NPM version =16.0.0, =1.0.1, =0.0.127, =7.0.2, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =0.3.2, =1.2.0 Source cves: CVE-2025-59052 Source advisory: SNYK:JS-NGUNIVERSALCOMMON-12613577...

@tessl/cli (>=0.21.0, <=0.21.2), @zed-industries/claude-code-acp (0.1.7) +8 more potentially affected by CVE-2025-59041 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.98)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59041 Source advisory: OSV:GHSA-J4H9-WV2M-WRF7...

trivet (>=2.1.0, <=2.1.1) potentially affected by CVE-2025-57520 via decap-cms (3.0.12)

decap-cms NPM version 3.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on decap-cms and may be impacted: - trivet =2.1.0, =2.1.1 Source cves: CVE-2025-57520 Source advisory: OSV:GHSA-XP8G-32QH-MV28...

-fides-amor-et-lux (1.0.0), 0xppl-solana-portfolio (1.0.0) +12137 more potentially affected by CVE-2025-58754 via axios (>=1.0.0, <=1.11.0)

axios NPM version =1.0.0, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =2.0.0, =1.1.40, =0.0.2-beta.0, =2.1.0, =9.0.0-beta-bump-wagmi-viem.2 and more Source cves: CVE-2025-58754 Source advisory: SNYK:JS-AXIOS-12613773...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +192 more potentially affected by CVE-2025-58751 via vite (>=6.0.0, <=6.3.5)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

@142vip/vitepress (>=0.0.1-alpha.14, <=0.0.1-alpha.24), @56jun/fe-chat (>=1.0.0-beta.1, <=1.0.0-beta.26) +599 more potentially affected by CVE-2025-57665 via element-plus (>=2.0.0, <=2.10.7)

element-plus NPM version =2.0.0, =0.0.1-alpha.14, =1.0.0-beta.1, =0.6.1-annotator.1, =1.1.2, =2.4.2-beta.1, =1.1.2, =0.7.0-annotator.0, =1.0.3, =1.4.2, =1.0.1, =3.72.0, =2.0.6, =0.0.0, =0.0.11 and more Source cves: CVE-2025-57665 Source advisory: OSV:GHSA-5M5X-9J46-H678...

keeshond_editor (>=0.1.0, <=0.13.0), keeshond_migrator (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4, <=0.3.0)

toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: OSV:GHSA-PFP7-VXGR-83PW...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-58752 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-58752 Source advisory: SNYK:JS-VITE-12558116...