10827 matches found
@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +9 more potentially affected by CVE-2025-69264 via pnpm (>=10.0.0, <=10.18.3)
pnpm NPM version =10.0.0, =0.1.0, =3.7.16, =0.1.8, =0.1.0, =2.7.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2025-69264 Source advisory: OSV:GHSA-379Q-355J-W6RJ...
@ejazullah/playwright-mcp-server (>=1.0.0, <=1.88.0), @grebyn/toolentry-mcp-server (>=1.0.0, <=1.7.1) +22 more potentially affected by CVE-2025-9611 via @playwright/mcp (>=0.0.5, <=0.0.39)
@playwright/mcp NPM version =0.0.5, =1.0.0, =1.0.0, =1.0.8, =1.0.0, =1.0.1, =1.0.1, =1.0.0, =0.6.0, =1.0.0, =1.1.0 and more Source cves: CVE-2025-9611 Source advisory: OSV:GHSA-6FG3-HVW7-2FWQ...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @a11ywatch/pagemind (>=0.9.31, <=0.9.34) +531 more potentially affected by CVE-2025-9611 via playwright (>=1.0.2, <=1.55.1-beta-1758616458000)
playwright NPM version =1.0.2, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.0.10-a, =0.0.1, =1.11.0, =0.1.466, =0.32.2, =0.36.3-test.5 and more Source cves: CVE-2025-9611 Source advisory: SNYK:JS-PLAYWRIGHT-14888269...
directus (>=11.13.0, <=11.13.3) potentially affected by CVE-2026-22032 via @directus/api (>=32.0.0, <=32.1.0)
@directus/api NPM version =32.0.0, =11.13.0, =11.13.3 Source cves: CVE-2026-22032 Source advisory: OSV:GHSA-3573-4C68-G8CC...
@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1) +77 more potentially affected by CVE-2026-21877 via n8n-workflow (>=1.0.0, <=1.118.1)
n8n-workflow NPM version =1.0.0, =0.2.0, =0.1.5, =0.0.17, =1.0.2, =1.0.1, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =1.57.1 and more Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NWORKFLOW-14894273...
@n8n/task-runner (1.58.0), n8n-node-dev (1.120.0) potentially affected by CVE-2026-21877 via n8n-core (1.121.0)
n8n-core NPM version 1.121.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/task-runner 1.58.0 - n8n-node-dev 1.120.0 Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NCORE-14894271...
@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +8 more potentially affected by CVE-2026-21877 via n8n (>=0.138.0, <=0.219.1)
n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.1.7 Source cves: CVE-2026-21877 Source advisory: OSV:GHSA-V364-RW7M-3263...
@imagina/n8n-nodes-iwhatsapp (>=0.1.0, <=0.2.7), @regis-samurai/n8n (>=0.216.1, <=0.219.1) +15 more potentially affected by CVE-2026-21877 via n8n-nodes-base (>=0.123.1, <=0.225.0)
n8n-nodes-base NPM version =0.123.1, =0.1.0, =0.216.1, =0.126.0, =0.1.0, =0.18.0, =0.1.0, =1.0.0, =0.1.0, =0.2.14, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NNODESBASE-14894272...
@0xgg/echomd (>=1.0.0, <=1.0.4), @adobe/react-spectrum-charts (>=1.16.0-alpha.3, <=1.28.0) +298 more potentially affected by CVE-2025-66648 via vega-functions (>=5.8.0, <=6.0.0)
vega-functions NPM version =5.8.0, =1.0.0, =1.16.0-alpha.3, =0.2.0, =1.1.5, =0.4.3, =0.1.0, =0.0.1, =0.4.1-canary.195, =0.0.0, =0.2.0-beta.0, =0.1.0, =2.0.0-next.2 - @datatitian/vega 5.17.0 and more Source cves: CVE-2025-66648 Source advisory: SNYK:JS-VEGAFUNCTIONS-14872001...
12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2002 more potentially affected by CVE-2026-0621 via @modelcontextprotocol/sdk (>=1.3.0, <=1.25.1)
@modelcontextprotocol/sdk NPM version =1.3.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.0.19 and more Source cves: CVE-2026-0621 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSDK-14871802...
grocery_app (1.0.0) potentially affected by CVE-2025-67419 via @evershop/evershop (2.1.2)
@evershop/evershop NPM version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @evershop/evershop and may be impacted: - groceryapp 1.0.0 Source cves: CVE-2025-67419 Source advisory: SNYK:JS-EVERSHOPEVERSHOP-14872349...
grocery_app (1.0.0) potentially affected by CVE-2025-67427 via @evershop/evershop (2.1.2)
@evershop/evershop NPM version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @evershop/evershop and may be impacted: - groceryapp 1.0.0 Source cves: CVE-2025-67427 Source advisory: SNYK:JS-EVERSHOPEVERSHOP-14872600...
12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2002 more potentially affected by CVE-2026-0621 via @modelcontextprotocol/sdk (>=1.3.0, <=1.25.1)
@modelcontextprotocol/sdk NPM version =1.3.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.0.19 and more Source cves: CVE-2026-0621 Source advisory: OSV:GHSA-8R9Q-7V3J-JR4G...
@zentity/fhevm-contracts (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-73645 via @openzeppelin/confidential-contracts (0.3.0)
@openzeppelin/confidential-contracts NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/confidential-contracts and may be impacted: - @zentity/fhevm-contracts =0.1.0, =0.2.0 Source cves: CVE-2026-73645 Source advisory:...
a1 (>=1.0.1, <=1.0.2), apfsds-protocol (>=0.1.0, <=0.4.0) +113 more potentially affected by unknown CVE via rkyv (0.8.2)
rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.9.0, =0.1.0, =0.2.1, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =2.0.0-alpha.1, =0.1.2, =0.2.24, =0.2.27 and more Source cves: unkno...
acme-compilers (>=0.2.2, <=0.2.4), acvm (>=0.23.0, <=0.26.1) +294 more potentially affected by unknown CVE via rkyv (>=0.1.1, <=0.7.45)
rkyv CARGO version =0.1.1, =0.2.2, =0.23.0, =0.23.0, =0.0.1, =0.2.0, =0.39.0, =0.23.0, =0.26.1 - cairn-import-geonames 0.0.2-alpha - cairn-import-oa 0.0.2-alpha - cairn-import-osm 0.0.2-alpha - cairn-import-wof 0.0.2-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0001...
@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)
trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-G9JG-W8VM-G96V...
@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)
trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-TRIX-14825036...
@vietmoney/react-native-smart-gallery (1.2.2) potentially affected by unknown CVE via @vietmoney/react-native-smart-page (1.1.2)
@vietmoney/react-native-smart-page NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-native-smart-page and may be impacted: - @vietmoney/react-native-smart-gallery 1.2.2 Source cves: unknown CVE Source advisory:...
muaddib-scanner (>=1.1.0, <=1.1.1) potentially affected by unknown CVE via @vietmoney/react-big-calendar (0.0.1-security)
@vietmoney/react-big-calendar NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-big-calendar and may be impacted: - muaddib-scanner =1.1.0, =1.1.1 Source cves: unknown CVE Source advisory:...
@adamstankiewicz/openedx-frontend-platform (>=8.2.0, <=8.3.6), @altipla/directus-sdk-utils (0.7.2) +39 more potentially affected by CVE-2025-69202 via axios-cache-interceptor (>=1.0.0, <=1.8.3)
axios-cache-interceptor NPM version =1.0.0, =8.2.0, =1.6.3, =1.1.0, =15.0.0, =11.0.4, =1.0.2-test-cache.1, =8.1.2-alpha.1, =8.1.0, =8.5.2 and more Source cves: CVE-2025-69202 Source advisory: OSV:GHSA-X4M5-4CW8-VC44...
@adamstankiewicz/openedx-frontend-platform (>=8.2.0, <=8.3.6), @altipla/directus-sdk-utils (0.7.2) +39 more potentially affected by CVE-2025-69202 via axios-cache-interceptor (>=1.0.0, <=1.8.3)
axios-cache-interceptor NPM version =1.0.0, =8.2.0, =1.6.3, =1.1.0, =15.0.0, =11.0.4, =1.0.2-test-cache.1, =8.1.2-alpha.1, =8.1.0, =8.5.2 and more Source cves: CVE-2025-69202 Source advisory: SNYK:JS-AXIOSCACHEINTERCEPTOR-14724265...
blyss-rs (0.2.0), lunarbase-pmm-math (>=0.1.0, <=0.2.6) +8 more potentially affected by unknown CVE via ruint (>=1.8.0, <=1.16.0)
ruint CARGO version =1.8.0, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-9FJQ-45QV-PCM7...
@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +162 more potentially affected by CVE-2025-13158 via apidoc-core (>=0.2.2, <=0.15.0)
apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.4.3, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =1.0.10 - @comodinx/api-doc 1.0.0 and more Source cves: CVE-2025-13158 Source advisory: SNYK:JS-APIDOCCORE-14723211...
@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +151 more potentially affected by CVE-2025-13158 via apidoc-core (>=0.2.2, <=0.12.0)
apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =0.0.3, =0.0.12 and more Source cves: CVE-2025-13158 Source advisory: OSV:GHSA-6VJ3-P34W-XXJP...
3scale (>=0.3.2, <=0.6.2), 3scale-cm (0.5.1) +193 more potentially affected by CVE-2025-25341 via libxmljs (>=1.0.9, <=1.0.11)
libxmljs NPM version =1.0.9, =0.3.2, =0.3.2, =1.10.4, =1.8.1, =1.8.8, =1.0.0, =1.1.0, =0.1.0, =250.1010.0, =250.1018.0, =252.1021.0 and more Source cves: CVE-2025-25341 Source advisory: OSV:GHSA-JV72-59WQ-8RXM...
3loc (>=0.1.0, <=0.4.0), 3scale (>=0.2.0, <=0.6.2) +656 more potentially affected by CVE-2025-25341 via libxmljs (>=0.4.1, <=1.0.11)
libxmljs NPM version =0.4.1, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =1.0.1, =1.0.0, =4.5.1 and more Source cves: CVE-2025-25341 Source advisory: SNYK:JS-LIBXMLJS-14723210...
aquatic (0.2.0), aquatic_http (0.2.0) +96 more potentially affected by unknown CVE via bitmaps (3.2.1)
bitmaps CARGO version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on bitmaps and may be impacted: - aquatic 0.2.0 - aquatichttp 0.2.0 - aquatichttploadtest 0.2.0 - aquaticws 0.2.0 - aquaticwsloadtest 0.2.0 - armvcpu =0.5.1, =0.4.3, =0.6.0, =0.3....
aperture-shared (0.1.0), assemblylift-awslambda-host (>=0.2.0, <=0.3.0) +114 more potentially affected by unknown CVE via capnp (>=0.0.1, <=0.23.2)
capnp CARGO version =0.0.1, =0.2.0, =0.3.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.23.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0143...
@atom8n/ai-workflow-builder (>=1.2.1, <=1.5.8), @atom8n/backend-test-utils (>=1.2.2, <=1.5.8) +39 more potentially affected by CVE-2025-68665 via @langchain/core (>=1.0.1, <=1.1.7)
@langchain/core NPM version =1.0.1, =1.2.1, =1.2.2, =1.2.2, =2.2.2, =2.2.2, =2.2.2, =2.1.9, =2.1.0, =2.1.0, =1.0.11, =2.1.0, =1.0.1, =2.1.0, =1.0.1, =2.1.0, =2.1.36 and more Source cves: CVE-2025-68665 Source advisory: SNYK:JS-LANGCHAINCORE-14563113...
aana (>=0.2.1, <=0.2.2), abgrouponline (>=1.0.0, <=1.0.2) +559 more potentially affected by CVE-2025-14922 via diffusers (>=0.2.4, <=0.39.0)
diffusers PYPI version =0.2.4, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.13 and more Source cves: CVE-2025-14922 Source advisory: SNYK:PYTHON-DIFFUSERS-14567485...
3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14928 via transformers (>=0.1.0, <=5.14.1)
transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14928 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564364...
3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14921 via transformers (>=0.1.0, <=5.14.1)
transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14921 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564365...
3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14924 via transformers (>=0.1.0, <=5.14.1)
transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14924 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564363...
3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14929 via transformers (>=0.1.0, <=5.14.1)
transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14929 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564275...
3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14926 via transformers (>=0.1.0, <=5.14.1)
transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14926 Source advisory: SNYK:PYTHON-TRANSFORMERS-14560695...
3-04-2025-ttm (0.1.0), a2 (>=0.10.5, <=0.10.13) +3314 more potentially affected by CVE-2025-14925 via accelerate (>=0.5.1, <=1.14.0)
accelerate PYPI version =0.5.1, =0.10.5, =5.0.0, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 - aait-store-cut-part-003 0.0.1 - aait-store-cut-part-004 0.0.1 - aait-store-cut-part-005 0.0.1 - aait-store-cut-part-006 0.0.1 - aait-store-cut-part-007 0.0.1 -...
@acabai/android (>=1.0.0, <=2.0.6), @acabai/core (>=1.0.0, <=1.0.6) +942 more potentially affected by CVE-2025-68665 via @langchain/core (>=0.0.0, <=0.3.79)
@langchain/core NPM version =0.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6, =1.0.5, =0.1.2, =0.0.1, =1.2.27, =0.1.7, =3.0.0-beta.65.0, =8.0.0, =10.0.0, =11.0.0 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...
@atom8n/ai-workflow-builder (>=1.2.1, <=1.5.8), @atom8n/backend-test-utils (>=1.2.2, <=1.5.8) +39 more potentially affected by CVE-2025-68665 via @langchain/core (>=1.0.1, <=1.1.7)
@langchain/core NPM version =1.0.1, =1.2.1, =1.2.2, =1.2.2, =2.2.2, =2.2.2, =2.2.2, =2.1.9, =2.1.0, =2.1.0, =1.0.11, =2.1.0, =1.0.1, =2.1.0, =1.0.1, =2.1.0, =2.1.36 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...
blyss-rs (0.2.0), lunarbase-pmm-math (>=0.1.0, <=0.2.6) +8 more potentially affected by unknown CVE via ruint (>=1.8.0, <=1.16.0)
ruint CARGO version =1.8.0, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0137...
@asherng/storybook (>=1.0.6, <=1.0.15), @asng/storybook (>=0.0.0-AddSnapshotPipeline-20240326102812, <=0.0.10) +31 more potentially affected by CVE-2025-68429 via storybook (>=8.0.2, <=8.6.14)
storybook NPM version =8.0.2, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =1.5.1-canary.0, =0.4.2, =0.1.3, =1.0.0-canary.12734, =0.11.1-aa792aa-20250325153437, =0.12.1-aa792aa-20250325153437, =0.0.1-10adad4-20260325085110, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =7.33.6-qa-airteam-7.35.1.0,...
@storybook/cli (>=10.0.0-beta.0, <=10.1.9), @storybook/codemod (>=10.0.0-beta.0, <=10.1.9) +5 more potentially affected by CVE-2025-68429 via storybook (>=10.0.0, <=10.1.9)
storybook NPM version =10.0.0, =10.0.0-beta.0, =10.0.0-beta.0, =12.0.7, =12.0.5, =10.0.0-beta.0, =10.0.0-beta.0, =10.1.9 Source cves: CVE-2025-68429 Source advisory: OSV:GHSA-8452-54WP-RMV6...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @cedarjs/cli-storybook-vite (>=1.0.0-canary.12742, <=1.0.0-canary.12784) +14 more potentially affected by CVE-2025-68429 via storybook (>=9.0.0, <=9.1.16)
storybook NPM version =9.0.0, =0.0.1, =1.0.0-canary.12742, =0.0.2-alpha.0, =1.0.0, =1.1.0, =0.1.80, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.2, =9.0.0-alpha.0, =1.2.1, =0.0.75-beta.11, =0.2.7, =0.2.8 and more Source cves: CVE-2025-68429 Source advisory: OSV:GHSA-8452-54WP-RMV6...
@tinacms/app (>=0.0.0-0b7103c-20251216023146, <=2.3.15), @tinacms/cli (>=0.0.0-0b7103c-20251216023146, <=2.0.3) +4 more potentially affected by CVE-2025-68278 via @tinacms/graphql (>=2.0.0, <=2.0.2)
@tinacms/graphql NPM version =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =3.1.0 Source cves: CVE-2025-68278 Source advisory: SNYK:JS-TINACMSGRAPHQL-14535448...
@tinacms/app (>=2.3.12, <=2.3.15), @tinacms/cli (>=2.0.0, <=2.0.3) +1 more potentially affected by CVE-2025-68278 via tinacms (>=3.0.0, <=3.1.0)
tinacms NPM version =3.0.0, =2.3.12, =2.0.0, =0.1.12, =0.1.15 Source cves: CVE-2025-68278 Source advisory: OSV:GHSA-529F-9QWM-9628...
@tinacms/app (>=0.0.0-0b7103c-20251216023146, <=2.3.15), @tinacms/cli (>=0.0.0-0b7103c-20251216023146, <=2.0.3) +4 more potentially affected by CVE-2025-68278 via @tinacms/graphql (>=2.0.0, <=2.0.2)
@tinacms/graphql NPM version =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =3.1.0 Source cves: CVE-2025-68278 Source advisory: OSV:GHSA-529F-9QWM-9628...
31g-form-parser (>=1.0.1, <=1.0.126), @1024pix/storybook-ember (7.1.1) +205 more potentially affected by CVE-2025-68429 via @storybook/core-common (>=7.0.0, <=7.6.20)
@storybook/core-common NPM version =7.0.0, =1.0.1, =3.0.0, =0.1.0, =0.0.18, =2.0.5, =1.1.1, =0.0.1, =0.0.4, =0.38.0-rc.0, =0.38.0-rc.4 - @clds/menu-next 0.38.0 and more Source cves: CVE-2025-68429 Source advisory: SNYK:JS-STORYBOOKCORECOMMON-14470053...
@asherng/storybook (>=0.0.18, <=0.1.14), @bluefin-exchange/starship-v2 (>=1.1.1, <=1.1.16) +32 more potentially affected by CVE-2025-68429 via storybook (>=7.0.6, <=7.6.20)
storybook NPM version =7.0.6, =0.0.18, =1.1.1, =0.0.1, =0.0.4, =1.2.108, =3.50.0-next.2, =9.0.0-next.4, =1.0.967, =0.0.1, =1.0.0-beta.1, =1.2.2, =0.0.1, =0.0.1, =7.6.4-next.32, =6.0.0-canary.234, =6.0.0-canary.318 and more Source cves: CVE-2025-68429 Source advisory: SNYK:JS-STORYBOOK-14534871...
@storybook/angular (>=9.0.0-alpha.0, <=9.1.16), @storybook/ember (>=9.0.0-alpha.0, <=9.1.16) +49 more potentially affected by CVE-2025-68429 via @storybook/builder-webpack5 (>=9.0.0, <=9.1.16)
@storybook/builder-webpack5 NPM version =9.0.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =1.7.54, =1.7.48, =1.7.56, =1.11.1, =1.8.58, =1.14.15 and more Source cves: CVE-2025-6842...
@storybook/cli (>=10.0.0-beta.0, <=10.1.9), @storybook/codemod (>=10.0.0-beta.0, <=10.1.9) +5 more potentially affected by CVE-2025-68429 via storybook (>=10.0.0, <=10.1.9)
storybook NPM version =10.0.0, =10.0.0-beta.0, =10.0.0-beta.0, =12.0.7, =12.0.5, =10.0.0-beta.0, =10.0.0-beta.0, =10.1.9 Source cves: CVE-2025-68429 Source advisory: SNYK:JS-STORYBOOK-14534871...