@apollo/gateway (>=2.11.0-preview.0, <=2.11.4), @dfanchon/gateway (2.11.0) +1 more potentially affected by CVE-2025-64530 via @apollo/composition (>=2.11.0, <=2.11.4)

@apollo/composition NPM version =2.11.0, =2.11.0-preview.0, =11.1.14, =11.2.0 Source cves: CVE-2025-64530 Source advisory: SNYK:JS-APOLLOCOMPOSITION-13961119...

@apollo/gateway (>=2.10.0-alpha.0, <=2.10.3), @lenne.tech/nest-server (>=10.8.3, <=11.1.13) +2 more potentially affected by CVE-2025-64530 via @apollo/composition (>=2.10.0, <=2.10.3)

@apollo/composition NPM version =2.10.0, =2.10.0-alpha.0, =10.8.3, =11.1.13 - @pothos-examples/federation 3.1.13 - @pothos-examples/prisma-federation 3.1.24 Source cves: CVE-2025-64530 Source advisory: SNYK:JS-APOLLOCOMPOSITION-13961119...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +266 more potentially affected by CVE-2025-64525 via astro (>=3.0.12, <=5.15.1)

astro NPM version =3.0.12, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.1, =0.0.1, =0.1.3, =0.1.0, =0.1.1 and more Source cves: CVE-2025-64525 Source advisory: OSV:GHSA-HR2Q-HP5Q-X767...

02.aula (1.0.0), 0xrtest (1.0.0) +8090 more potentially affected by CVE-2025-64718 via js-yaml (>=4.0.0, <=4.1.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 - @10abdullahbutt/nestjs-boilerplate 0.0.1 and more Source cves: CVE-2025-64718 Source advisory: SNYK:JS-JSYAML-13961110...

com.salesforce.perfeng.uiperf:imageoptimization (2.0.1), org.webjars:imagemin (>=0.4.6-1, <=3.1.0) +2 more potentially affected by CVE-2025-64718 via org.webjars:js-yaml (3.0.2)

org.webjars:js-yaml MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:js-yaml and may be impacted: - com.salesforce.perfeng.uiperf:imageoptimization 2.0.1 - org.webjars:imagemin =0.4.6-1, =0.1.0-1, =4.0.0 - org.webjars:svg...

@akunsansan0/cewe (1.0.0), @akunsansan0/teaguntur99 (>=1.1.4, <=1.1.5) +10 more potentially affected by unknown CVE via teaguntur99 (1.1.4)

teaguntur99 NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teaguntur99 and may be impacted: - @akunsansan0/cewe 1.0.0 - @akunsansan0/teaguntur99 =1.1.4, =1.1.5 - @satria9897/air 1.0.0 - air1 1.1.0 - air10 1.1.0 - air2 1.1.0 - air3...

1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +20270 more potentially affected by unknown CVE via acertea (1.1.6)

acertea NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on acertea and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/aisax 1.0.0 - @mipta1/aisx 1.0.0 - @mipta1/aizsax 1.0.0 - @mipta1/aizzsax 1.0.0 -...

@miftaikyy/tehkontol (1.1.4), abubni-nikamia-luahuubi (1.1.3) +3302 more potentially affected by unknown CVE via tehkontol (1.1.5)

tehkontol NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on tehkontol and may be impacted: - @miftaikyy/tehkontol 1.1.4 - abubni-nikamia-luahuubi 1.1.3 - abulbani-nikamia-luahuubi 1.1.3 - abuni-niaia-luhubi 1.1.3 - abuni-niaia-luhuubi...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaof-gafi (1.0.0)

nudela-aaof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163715...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-5 (1.0.0)

manda-5 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-5 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159648...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-31 (1.0.0)

muklis-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160816...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaa (1.0.0)

nudela-aahaf0gf-gaa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163707...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-darae-naha (1.0.0)

nuilava-darae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-darae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163876...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala69 (1.0.0)

nokire-nakala69 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala69 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163024...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-30 (1.0.0)

aji-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152070...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-23 (1.0.0)

muklis-23 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-23 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160807...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-ggff-gafi (1.0.0)

nudela-ggff-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-ggff-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163788...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala27 (1.0.0)

nokire-nakala27 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala27 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162979...

1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +20694 more potentially affected by unknown CVE via teanager (>=1.1.10, <=1.3.3)

teanager NPM version =1.1.10, =1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on teanager and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @miftaikyy/nitrogud 1.0.0 - @miftaikyy/roya 1.0.0 - @miftaikyy/rsoya 1.0.0 -...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2025-33202 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.7.0 Source cves: CVE-2025-33202 Source advisory:...

absolute_woodpecker_dumbs (1.2.1), academic_eel_dumbs (3.3.1) +2428 more potentially affected by unknown CVE via arts-dao (1.1.5)

arts-dao NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on arts-dao and may be impacted: - absolutewoodpeckerdumbs 1.2.1 - academiceeldumbs 3.3.1 - academicmolluskdumbs 1.4.1 - acceptablefishdumbs 2.4.4 - acceptablemoledumbs 1.3.3 -...

able_catfish_z3n (3.2.4), absolute_eagle_z3n (3.4.1) +391 more potentially affected by unknown CVE via rudiscammer (>=0.1.0, <=4.2.5)

rudiscammer NPM version =0.1.0, =4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on rudiscammer and may be impacted: - ablecatfishz3n 3.2.4 - absoluteeaglez3n 3.4.1 - abundantparrotz3n 4.2.3 - academiclimpetz3n 3.2.4 - acceptableemuz3n 3.1.4 -...

tandem_garble_interop (>=0.1.0, <=0.3.0) potentially affected by unknown CVE via tandem (>=0.1.0, <=0.3.0)

tandem CARGO version =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0117...

@dargmuesli/nuxt-vio (>=16.0.5, <=18.3.14) potentially affected by CVE-2025-52662 via @nuxt/devtools (>=2.0.0, <=2.6.3)

@nuxt/devtools NPM version =2.0.0, =16.0.5, =18.3.14 Source cves: CVE-2025-52662 Source advisory: SNYK:JS-NUXTDEVTOOLS-13849298...

@react-native-community/cli (18.0.0) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (18.0.0)

@react-native-community/cli-server-api NPM version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @react-native-community/cli-server-api and may be impacted: - @react-native-community/cli 18.0.0 Source cves: CVE-2025-11953 Source advisory:...

@react-native-community/cli (>=19.0.0-alpha.0, <=19.1.1) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (>=19.0.0, <=19.1.1)

@react-native-community/cli-server-api NPM version =19.0.0, =19.0.0-alpha.0, =19.1.1 Source cves: CVE-2025-11953 Source advisory: SNYK:JS-REACTNATIVECOMMUNITYCLISERVERAPI-13836141...

@fluentui-react-native/tester (>=0.170.52, <=0.170.56), @fluentui-react-native/tester-win32-81 (>=0.38.69, <=0.38.70) +3 more potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (17.0.0)

@react-native-community/cli-server-api NPM version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @react-native-community/cli-server-api and may be impacted: - @fluentui-react-native/tester =0.170.52, =0.38.69, =0.81.4, =0.81.5, =0.81.35 Source...

org.jenkins-ci.plugins:maven-artifact-choicelistprovider (>=1.0.3, <=398.v2733b_b_16677c) potentially affected by CVE-2025-64133 via jp.ikedam.jenkins.plugins:extensible-choice-parameter (>=1.3.3, <=255.vfa_41f46828ef)

jp.ikedam.jenkins.plugins:extensible-choice-parameter MAVEN version =1.3.3, =1.0.3, =398.v2733bb16677c Source cves: CVE-2025-64133 Source advisory: SNYK:JAVA-JPIKEDAMJENKINSPLUGINS-13775577...

mirror_sparse_matrix (>=0.1.1, <=0.1.17) potentially affected by unknown CVE via binary_vec_io (0.1.12)

binaryvecio CARGO version 0.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on binaryvecio and may be impacted: - mirrorsparsematrix =0.1.1, =0.1.17 Source cves: unknown CVE Source advisory: OSV:GHSA-WWXP-HXH6-8GF8...

@akash-aw/aw-wizard-forms (4.14.0), @alfresco/aca-generators (>=1.0.0, <=1.0.1) +80 more potentially affected by CVE-2025-62595 via koa (3.0.1)

koa NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @akash-aw/aw-wizard-forms 4.14.0 - @alfresco/aca-generators =1.0.0, =1.0.0, =0.44.0, =2.23.0, =3.10.0-beta.6, =0.4.0, =0.30.0, =0.3.0-alpha.1, =0.4.3,...

unic (>=0.5.0, <=0.6.0), unic-bidi (0.6.0) +12 more potentially affected by unknown CVE via unic-utils (>=0.5.0, <=0.6.0)

unic-utils CARGO version =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0091...

aocleaderboard (>=0.1.0, <=0.6.1), archetect (>=0.5.0, <=0.7.3) +94 more potentially affected by unknown CVE via unic-segment (>=0.7.0, <=0.9.0)

unic-segment CARGO version =0.7.0, =0.1.0, =0.5.0, =0.5.0, =1.0.0, =0.1.0, =0.0.4, =0.1.0, =0.2.6, =0.0.15, =0.1.0, =0.1.3, =0.2.1, =0.1.2-beta, =0.1.8 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0074...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +22 more potentially affected by unknown CVE via unic-ucd-age (>=0.5.0, <=0.9.0)

unic-ucd-age CARGO version =0.5.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.0.0, =0.3.0, =0.3.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0102...

add_space (>=0.1.2, <=0.1.8), ale_python_parser (>=0.1.0, <=0.1.2) +72 more potentially affected by unknown CVE via unic-emoji-char (>=0.7.0, <=0.9.0)

unic-emoji-char CARGO version =0.7.0, =0.1.2, =0.1.0, =4.0.0-rc.1, =4.4.7, =0.1.0, =0.0.1-pre.3, =0.1.0, =0.1.0, =0.0.1, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0090...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +18 more potentially affected by unknown CVE via unic-ucd (>=0.5.0, <=0.9.0)

unic-ucd CARGO version =0.5.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.0.0, =0.1.0, =1.1.1, =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0077...

@better-auth/cli (>=1.0.0-canary.2, <=1.3.25), @bgord/bun (>=0.18.0, <=0.29.10) +26 more potentially affected by CVE-2025-61928 via better-auth (>=1.0.0, <=1.3.25)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.18.0, =0.5.2, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =0.1.8, =0.1.0, =0.10.0, =1.0.0, =0.0.5, =0.0.12 and more Source cves: CVE-2025-61928 Source advisory: OSV:GHSA-99H5-PJCV-GR6V...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +38 more potentially affected by unknown CVE via n8n-nodes-base (>=0.1.0, <=2.38.1)

n8n-nodes-base NPM version =0.1.0, =0.1.13, =0.1.0, =2.35.2, =2.32.7, =2.32.0, =0.216.1, =2.34.0, =0.1.4, =23.1.4, =31.4.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-13524401...

@diningcity/capacitor-qr-scanner (>=0.0.7, <=0.0.8), @mojitonft/hooks (1.0.1-alpha.4) +93 more potentially affected by CVE-2025-26278 via dref (0.0.6)

dref NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on dref and may be impacted: - @diningcity/capacitor-qr-scanner =0.0.7, =1.7.0, =0.0.1, =11.1.1, =3.3.3, =0.0.0-beta, =0.0.2, =1.0.2, =0.0.40, =0.0.2, =0.0.1, =0.0.1, =0.1.0, =0.1.19 a...

@afif_hh/composable (1.0.2), @afif_hh/ui_components (>=1.0.5, <=1.0.30) +67 more potentially affected by CVE-2025-57325 via rollbar (>=2.1.0, <=2.26.4)

rollbar NPM version =2.1.0, =1.0.5, =1.0.0, =0.0.2, =0.0.5, =0.0.2-beta.1, =1.0.0-alpha.1, =1.0.5, =1.1.12, =1.3.10, =1.1.11, =1.0.3, =2.1.0-alpha.3, =2.1.0-alpha.3, =2.1.3 and more Source cves: CVE-2025-57325 Source advisory: SNYK:JS-ROLLBAR-13110036...

org.webjars.npm:better-sqlite3 (12.11.1), org.webjars.npm:image-thumbnail (1.0.15) +4 more potentially affected by CVE-2025-59343 via org.webjars.npm:tar-fs (2.1.5)

org.webjars.npm:tar-fs MAVEN version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:tar-fs and may be impacted: - org.webjars.npm:better-sqlite3 12.11.1 - org.webjars.npm:image-thumbnail 1.0.15 - org.webjars.npm:pkg-fetch 3.4.2 -...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +160 more potentially affected by CVE-2025-59343 via tar-fs (>=1.0.0, <=1.16.3)

tar-fs NPM version =1.0.0, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.4 - @elm-node/npm-scripts 1.0.0 - @hlsrules-test/fc-libreoffice 1.0.0 and more Source cves: CVE-2025-59343 Source advisory: SNYK:JS-TARFS-13045213...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +160 more potentially affected by CVE-2025-59343 via tar-fs (>=1.0.0, <=1.16.3)

tar-fs NPM version =1.0.0, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.4 - @elm-node/npm-scripts 1.0.0 - @hlsrules-test/fc-libreoffice 1.0.0 and more Source cves: CVE-2025-59343 Source advisory: OSV:GHSA-VJ76-C3G6-QR5V...

0wcc9yywcywy (1.0.0), 0wu8yw8by8cw (1.0.0) +2434 more potentially affected by CVE-2025-59343 via tar-fs (>=3.0.2, <=3.1.0)

tar-fs NPM version =3.0.2, =0.0.1, =2.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-59343 Source advisory: SNYK:JS-TARFS-13045213...

@akbarsafari00/admin (5.52.1-fa.1), @akbarsafari00/bonyan (>=5.52.1-fa.2, <=5.52.1-fa.6) +160 more potentially affected by CVE-2025-9960 via is-localhost-ip (>=1.4.0, <=3.0.1)

is-localhost-ip NPM version =1.4.0, =5.52.1-fa.2, =5.52.1-fa.2, =5.52.1-fa.5, =5.52.1-fa.2, =4.25.19-patch.1, =2.3.7, =1.0.0, =1.2.11, =0.5.1, =1.0.6, =3.1.5 and more Source cves: CVE-2025-9960 Source advisory: SNYK:JS-ISLOCALHOSTIP-13004668...

tom-microservice (3.2.28) potentially affected by CVE-2025-59526 via mailgen (2.0.20)

mailgen NPM version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on mailgen and may be impacted: - tom-microservice 3.2.28 Source cves: CVE-2025-59526 Source advisory: OSV:GHSA-J2XJ-H7W5-R7VP...

@shadypixel/mssql-mcp (1.0.0) potentially affected by CVE-2025-59333 via @executeautomation/database-server (1.1.0)

@executeautomation/database-server NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @executeautomation/database-server and may be impacted: - @shadypixel/mssql-mcp 1.0.0 Source cves: CVE-2025-59333 Source advisory:...

@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +184 more potentially affected by CVE-2025-59139 via hono (>=4.0.0, <=4.9.6)

hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.0.1, =0.0.1, =0.0.1-experimental.1, =0.0.3, =1.3.2, =0.1.0, =0.75.0, =0.2.305, =1.2.193, =1.3.2, =0.21.2-4.1, =0.21.23 and more Source cves: CVE-2025-59139 Source advisory: OSV:GHSA-92VJ-G62V-JQHH...

@nestjs/ng-universal (>=7.1.0, <=7.1.1), @nguniversal/builders (>=16.0.0-next.0, <=16.1.3) +1 more potentially affected by CVE-2025-59052 via @nguniversal/common (>=16.0.0, <=16.1.3)

@nguniversal/common NPM version =16.0.0, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =16.1.3 Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...

super-jss (>=0.0.1-beta.25, <=0.0.1-beta.30) potentially affected by CVE-2025-59052 via @angular/platform-server (20.0.0)

@angular/platform-server NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - super-jss =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...

@builder.io/angular (>=1.0.1, <=3.0.2), @gleb216/fn.nestjs.core.modules (>=0.0.127, <=0.0.158) +8 more potentially affected by CVE-2025-59052 via @nguniversal/common (>=16.0.0, <=16.2.0-rc.0)

@nguniversal/common NPM version =16.0.0, =1.0.1, =0.0.127, =7.0.2, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =0.3.2, =1.2.0 Source cves: CVE-2025-59052 Source advisory: SNYK:JS-NGUNIVERSALCOMMON-12613577...