armory_cli (>=0.3.3, <=0.3.28), armory_lib (>=0.1.0, <=0.3.28) +157 more potentially affected by unknown CVE via crypto-hash (0.3.4)

crypto-hash CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on crypto-hash and may be impacted: - armorycli =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.0, =0.23.0, =0.1.0, =0.5.0, =0.3.10, =0.1.0, =0.5.2 and more Source cves...

aa2nucaln (0.1.1), agent-stream-kit (>=0.9.0, <=0.14.0) +438 more potentially affected by unknown CVE via custom_derive (0.1.7)

customderive CARGO version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on customderive and may be impacted: - aa2nucaln 0.1.1 - agent-stream-kit =0.9.0, =0.4.0, =0.1.1, =0.2.0, =0.4.3, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =3.1.3, =0.3.7, =0.8...

a2d (>=0.1.0, <=0.1.11), aa2nucaln (0.1.1) +3972 more potentially affected by unknown CVE via fxhash (>=0.1.2, <=0.2.1)

fxhash CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1-dev.10, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0057...

@finsemble/finsemble-core (>=8.15.0-beta.1, <=9.8.1-test.1), @finsemble/finsemble-electron-adapter (>=8.15.0-beta.1, <=9.8.1-test.1) +4 more potentially affected by CVE-2025-55305 via electron (>=35.0.0, <=35.5.1)

electron NPM version =35.0.0, =8.15.0-beta.1, =8.15.0-beta.1, =1.1.0, =0.16.0, =1.0.10, =1.0.16 Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1083 more potentially affected by CVE-2025-57752 via next (>=15.0.0, <=15.4.4)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-57752 Source advisory:...

@adenta/cms (>=0.0.6, <=1.1.1-0), @edrlab/thorium-web (>=1.0.0-beta.3, <=1.0.0-beta.8) +18 more potentially affected by CVE-2025-55173 via next (>=15.4.3, <=15.4.4)

next NPM version =15.4.3, =0.0.6, =1.0.0-beta.3, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =2.1.5, =2.1.21 and more Source cves: CVE-2025-55173 Source advisory: SNYK:JS-NEXT-12265451...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1140 more potentially affected by CVE-2025-57822 via next (>=15.0.0, <=15.4.6)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-57822 Source advisory:...

@contentql/core (>=0.1.2, <=0.3.5), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +9 more potentially affected by CVE-2025-4643 via @payloadcms/next (>=3.0.0-beta.48, <=3.43.0-internal.693bd81)

@payloadcms/next NPM version =3.0.0-beta.48, =0.1.2, =0.1.0, =3.2.0, =0.2.0, =0.1.0, =0.1.4, =1.0.0, =0.0.9-alpha.5, =3.0.0-beta.3, =0.0.3, =0.2.0, =0.2.42 Source cves: CVE-2025-4643 Source advisory: OSV:GHSA-5V66-M237-HWF7...

a3s-lane (>=0.1.0, <=0.4.0), abci-rs (>=0.7.0, <=0.11.3) +4329 more potentially affected by CVE-2025-58160 via tracing-subscriber (>=0.1.6, <=0.3.19)

tracing-subscriber CARGO version =0.1.6, =0.1.0, =0.7.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0, =0.1.5, =0.0.1-dev.10, =1.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.1, =0.5.0, =0.7.0-rc.2 and more Source cves: CVE-2025-58160 Source advisory: OSV:RUSTSEC-2025-0055...

02.koa-demo (1.0.0), 0510test (1.0.0) +13574 more potentially affected by unknown CVE via koa (>=0.0.1, <=3.2.1)

koa NPM version =0.0.1, =1.3.7, =1.0.0, =0.0.1, =1.0.0, =1.0.1 - 2-26 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-KOA-12143256...

@hpcc-js/esbuild-plugins (>=1.4.2, <=1.4.9), @yangzw/bruce-app (>=1.3.7, <=1.3.8) +1 more potentially affected by CVE-2025-57753 via vite-plugin-static-copy (>=3.0.0, <=3.1.1)

vite-plugin-static-copy NPM version =3.0.0, =1.4.2, =1.3.7, =1.3.8 - auto-reveal 0.7.0 Source cves: CVE-2025-57753 Source advisory: OSV:GHSA-PP7P-Q8FX-2968...

@5ht/express (>=1.0.6, <=2.2.0), @audius/sdk (>=0.0.3-beta.1, <=7.1.1) +7 more potentially affected by CVE-2025-9287 via cipher-base (1.0.4)

cipher-base NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cipher-base and may be impacted: - @5ht/express =1.0.6, =0.0.3-beta.1, =6.0.4, =1.0.1, =1.5.2-beta.1, =1.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.11 Source cves: CVE-2025-9287...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @deconz-community/directus-extension-ddf-store (0.1.0) +5 more potentially affected by CVE-2025-55746 via @directus/api (>=14.1.0, <=28.0.1)

@directus/api NPM version =14.1.0, =1.6.3, =1.2.2, =10.8.0, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-55746 Source advisory: OSV:GHSA-MV33-9F6J-PFMC...

declarative-js (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via andthen (0.0.2)

andthen NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on andthen and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14514...

20210816-test (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via lodah (0.0.1-security)

lodah NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodah and may be impacted: - 20210816-test =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25501...

08cms (1.0.0), 1.1.0 (1.0.0) +8977 more potentially affected by unknown CVE via orchestrator (>=0.0.5, <=0.3.8)

orchestrator NPM version =0.0.5, =1.0.0, =1.0.0, =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-28475...

dep_grap_gen (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via shalk (0.0.1-security)

shalk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on shalk and may be impacted: - depgrapgen =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33056...

bakpiabathok-3 (1.1.6), bonteng-1 (1.1.6) +1 more potentially affected by unknown CVE via bonteng (0.0.1-security)

bonteng NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bonteng and may be impacted: - bakpiabathok-3 1.1.6 - bonteng-1 1.1.6 - kolekcau-2 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15953...

duba (>=0.0.0, <=0.0.2), userbook (>=0.1.0, <=0.2.6) potentially affected by unknown CVE via checkfor (>=0.0.3, <=0.0.4)

checkfor NPM version =0.0.3, =0.0.0, =0.1.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16880...

com.prototyper.openai-editor-tool (0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (0.0.1-security)

com.unity.nuget.newtonsoft-json NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool 0.1.3 Source cves: unknown CVE Source advisory:...

eksi-server (>=0.0.7, <=0.0.8) potentially affected by unknown CVE via json-resources (0.0.1)

json-resources NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on json-resources and may be impacted: - eksi-server =0.0.7, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23956...

after-time (>=0.0.0, <=0.0.1), every-time (0.0.0) +17 more potentially affected by unknown CVE via english-time (>=0.0.1, <=2.0.0)

english-time NPM version =0.0.1, =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1, =0.0.2, =0.0.0, =0.0.6, =0.0.0, =0.0.5 - taky-cache-loop 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-19656...

1yoouoo (>=0.0.5, <=0.1.2), bluebottle-magento-marketplace (>=1.1.2, <=1.2.5) +6 more potentially affected by unknown CVE via module-name (0.0.1-security)

module-name NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on module-name and may be impacted: - 1yoouoo =0.0.5, =1.1.2, =0.0.2, =1.0.1, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26605...

@luxiaodan/el-selection-tree-table (1.0.3) potentially affected by unknown CVE via lodsah (0.0.1-security)

lodsah NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodsah and may be impacted: - @luxiaodan/el-selection-tree-table 1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25516...

bud-live-server (>=0.0.0, <=0.0.5), just-a-browserify-server (>=0.0.0, <=1.0.0) potentially affected by unknown CVE via just-a-server (>=0.0.0, <=0.0.1)

just-a-server NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24109...

react-calendar1 (>=0.1.0, <=1.1.4) potentially affected by unknown CVE via react-google-calendar-events (0.0.1-security)

react-google-calendar-events NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-google-calendar-events and may be impacted: - react-calendar1 =0.1.0, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31791...

kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)

cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) potentially affected by unknown CVE via mime-of (0.1.0)

mime-of NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mime-of and may be impacted: - brick 0.0.0 - brick-node =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26376...

sutter-rdd-authentication (>=0.1.0, <=0.2.1) potentially affected by unknown CVE via sutter-rdd-services (0.0.1-security)

sutter-rdd-services NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on sutter-rdd-services and may be impacted: - sutter-rdd-authentication =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34247...

go-api-starter (>=0.0.0, <=1.3.0), redux-starter (>=0.0.0, <=1.1.0) potentially affected by unknown CVE via kik-starter (>=0.0.1, <=2.2.1)

kik-starter NPM version =0.0.1, =0.0.0, =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24454...

@artemislunapatron/common (>=1.0.4, <=1.0.14), pwp-core (>=1.0.0, <=1.2.4) +1 more potentially affected by unknown CVE via exprss (0.0.1-security)

exprss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exprss and may be impacted: - @artemislunapatron/common =1.0.4, =1.0.0, =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20100...

@alu0101350158/constant-folding (>=1.0.0, <=1.3.9), @mp-next/build (>=0.0.1-alpha.27, <=0.0.1-alpha.34) +10 more potentially affected by unknown CVE via commmander (0.0.1-security)

commmander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commmander and may be impacted: - @alu0101350158/constant-folding =1.0.0, =0.0.1-alpha.27, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - velzy 0.0.1 - zhoukang-cli...

assume (>=0.0.10, <=1.4.0), atomify (>=7.1.0, <=7.3.1) +32 more potentially affected by unknown CVE via style-format (>=0.0.0, <=2.0.0)

style-format NPM version =0.0.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.0, =0.0.2 - fd-select 1.0.0 - frp-tick 1.0.0 - generator-freekerneljs 0.6.0 - hearing-aid 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-34115...

domquery (>=1.0.0, <=1.0.1), hide (0.0.0) +3 more potentially affected by unknown CVE via style-dom (>=0.0.0, <=2.0.0)

style-dom NPM version =0.0.0, =1.0.0, =0.0.0, =0.0.2, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34114...

@c0b41/prettify-error (1.0.0), assume (>=0.0.10, <=1.4.0) +22 more potentially affected by unknown CVE via failing-code (>=0.0.2, <=0.1.0)

failing-code NPM version =0.0.2, =0.0.10, =7.1.0, =1.0.0, =0.1.1, =1.0.0, =0.0.1, =0.0.4 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-20162...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via read-cli-input (1.0.1)

read-cli-input NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on read-cli-input and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31878...

snsadmin (1.0.0) potentially affected by unknown CVE via soket.io (0.0.1-security)

soket.io NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33611...

airbasix (>=0.2.0, <=0.3.0) potentially affected by unknown CVE via wix-data (0.0.1-security)

wix-data NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wix-data and may be impacted: - airbasix =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39367...

fox (>=1.1.0, <=1.6.2), prova (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via simple.io (2.0.0)

simple.io NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on simple.io and may be impacted: - fox =1.1.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33280...

sr-npm (1.7.308) potentially affected by unknown CVE via wix-secrets-backend (0.0.1-security)

wix-secrets-backend NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wix-secrets-backend and may be impacted: - sr-npm 1.7.308 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39369...

@itutoring/itutoring_application_js_api (>=1.3.3, <=1.20.7), html-to-unicode (>=1.0.0, <=1.0.2) +2 more potentially affected by unknown CVE via reacct (0.0.1-security)

reacct NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reacct and may be impacted: - @itutoring/itutoringapplicationjsapi =1.3.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31760...

brick-node (>=0.0.0, <=0.0.17), tinkr-cli (>=0.0.1, <=0.0.9) potentially affected by unknown CVE via ignore-doc (>=0.0.0, <=0.0.1)

ignore-doc NPM version =0.0.0, =0.0.0, =0.0.1, =0.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23012...

rhys19-verbatim (2.0.2) potentially affected by unknown CVE via elctron (0.0.1-security)

elctron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on elctron and may be impacted: - rhys19-verbatim 2.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19315...

cassandra-query (>=1.0.1, <=1.0.3), toobatel-bot-lib-js (1.0.0) potentially affected by unknown CVE via blubird (0.0.1-security)

blubird NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on blubird and may be impacted: - cassandra-query =1.0.1, =1.0.3 - toobatel-bot-lib-js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15874...

kik (>=0.2.0, <=1.3.0) potentially affected by unknown CVE via to-class-name (0.0.0)

to-class-name NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-class-name and may be impacted: - kik =0.2.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37001...

@0xbigboss/vite-plugin-web-extension (>=5.2.0, <=5.4.0), @58860ed6ffd9e897/gold-finger-extension (1.0.2) +55 more potentially affected by CVE-2025-55164 via content-security-policy-parser (>=0.1.1, <=0.4.1)

content-security-policy-parser NPM version =0.1.1, =5.2.0, =2.13.1-next.0, =2.12.1-canary.3354, =2.12.1-canary.3354, =2.12.5-beta.0, =0.84.3, =0.0.0-experimental-15dcc54, =0.0.0-experimental-4515339, =0.0.0-experimental-2cd2b9e, =0.0.0-experimental-15dcc54, =0.0.0-experimental-15dcc54,...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30581 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2025-8885 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11777856...

app.cash.backfila:client-misk (>=0.1.0, <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1473 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-ext-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.47, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...

@fedify/botkit (>=0.3.0-dev.125, <=0.3.0-dev.131) potentially affected by CVE-2025-54888 via @fedify/fedify (1.8.1-dev.1262)

@fedify/fedify NPM version 1.8.1-dev.1262 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.3.0-dev.125, =0.3.0-dev.131 Source cves: CVE-2025-54888 Source advisory: SNYK:JS-FEDIFYFEDIFY-11735306...

bolic-network (0.0.1), futures-quic (>=0.2.4, <=0.2.8) +7 more potentially affected by CVE-2025-7054 via quiche (>=0.16.0, <=0.22.0)

quiche CARGO version =0.16.0, =0.2.4, =0.0.1, =0.1.0, =0.1.1 Source cves: CVE-2025-7054 Source advisory: OSV:GHSA-M3HH-F9GH-74C2...