@toolsdk.ai/registry (1.0.83) potentially affected by CVE-2025-53355 +1 more via mcp-server-kubernetes (2.4.3)

mcp-server-kubernetes NPM version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-server-kubernetes and may be impacted: - @toolsdk.ai/registry 1.0.83 Source cves: CVE-2025-53355, CVE-2025-54073 Source advisory: OSV:GHSA-GJV4-GHM7-Q58Q...

@tarojs/rn-runner (>=4.0.0-alpha.0, <=4.1.1), @tarojs/rn-style-transformer (>=4.0.0-alpha.0, <=4.1.1) +2 more potentially affected by CVE-2025-5896 via taro-css-to-react-native (>=4.0.0, <=4.1.1-alpha.2)

taro-css-to-react-native NPM version =4.0.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.1.1 Source cves: CVE-2025-5896 Source advisory: OSV:GHSA-F5XG-CFPJ-2MW6...

keeshond_editor (>=0.1.0, <=0.13.0), keeshond_migrator (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4, <=0.3.0)

toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0062...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +508 more potentially affected by CVE-2025-46565 via vite (>=4.0.0, <=4.5.11)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2025-46565 Source advisory: OSV:GHSA-859W-5945-R5V3...

@aicblock/cli (>=1.0.0, <=1.0.1), @aklesky/vite-config (1.0.1) +47 more potentially affected by CVE-2025-46565 via vite (>=6.2.0, <=6.2.6)

vite NPM version =6.2.0, =1.0.0, =19.2.1, =19.2.1, =0.55.0, =0.21.2-4.1, =1.0.0, =1.0.410, =3.8.0, =1.47.0, =5.0.0-alpha.40, =5.0.0-alpha.45 - @darkyzhou-powered/waku 0.21.24 and more Source cves: CVE-2025-46565 Source advisory: OSV:GHSA-859W-5945-R5V3...

@acala-network/api (>=0.2.0-beta.1, <=0.2.0-beta.8), @acala-network/types (>=0.2.0-beta.1, <=0.2.0-beta.8) +404 more potentially affected by CVE-2025-27611 via base-x (>=3.0.0, <=3.0.10)

base-x NPM version =3.0.0, =0.2.0-beta.1, =0.2.0-beta.1, =0.0.3, =0.1.2, =0.3.7, =0.1.7, =1.0.0, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2025-27611 Source advisory: OSV:GHSA-XQ7P-G2VC-G82P...

a3mo_lib (>=0.1.0, <=0.1.1), abra (0.0.1) +4425 more potentially affected by unknown CVE via rustc-serialize (>=0.1.5, <=0.3.25)

rustc-serialize CARGO version =0.1.5, =0.1.0, =0.1.7, =0.2.0-beta.4, =0.0.6, =0.1.0, =0.2.1, =0.1.4, =0.1.1, =0.1.0, =0.9.0, =0.1.0, =0.3.3, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0025...

mcai_worker_sdk (>=0.11.0-alpha, <=2.2.1), srt_media (>=0.0.1, <=0.1.0) potentially affected by unknown CVE via stainless_ffmpeg (>=0.2.4, <=0.3.10)

stainlessffmpeg CARGO version =0.2.4, =0.11.0-alpha, =0.0.1, =0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0169...

@amazeelabs/publisher (>=2.4.28, <=3.2.6), @angular-devkit/build-angular (>=18.0.0-next.3, <=20.0.0-next.5) +87 more potentially affected by CVE-2025-32997 via http-proxy-middleware (>=3.0.0, <=3.0.3)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =18.0.0-next.3, =1.0.0, =18.0.0-next.39, =18.0.0-next.39, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =8.10.0-nightly.20240906232837, =9.0.0, =9.0.0, =9.0.0, =3.11.0-beta.6, =3.26.12 and more Source cves:...

0xrtest (1.0.0), 7qb-cli (0.0.16) +2806 more potentially affected by CVE-2025-32997 via http-proxy-middleware (>=1.3.0, <=2.0.8)

http-proxy-middleware NPM version =1.3.0, =0.0.11, =0.0.6, =1.1.40, =0.1.10, =0.2.14, =1.6.0, =1.7.0, =0.0.39, =7.0.0, =8.3.0 and more Source cves: CVE-2025-32997 Source advisory: OSV:GHSA-9GQV-WP59-FQ42...

@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +41 more potentially affected by CVE-2025-32395 via vite (>=6.1.0, <=6.1.4)

vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...

a2 (>=0.5.0-alpha.1, <=0.5.3), aahc (0.1.0) +4947 more potentially affected by unknown CVE via tokio (>=0.2.5, <=1.38.1)

tokio CARGO version =0.2.5, =0.5.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0023...

gix-fs (>=0.1.0, <=0.9.1), gix-lock (>=5.0.0, <=12.0.1) +1 more potentially affected by CVE-2025-31130 via gix-features (>=0.29.0, <=0.37.2)

gix-features CARGO version =0.29.0, =0.1.0, =5.0.0, =5.0.3, =12.0.1 Source cves: CVE-2025-31130 Source advisory: OSV:GHSA-2FRX-2596-X5R6...

@aicblock/cli (>=1.0.0, <=1.0.1), @angular-devkit/build-angular (>=19.2.1, <=20.0.0-next.4) +44 more potentially affected by CVE-2025-31486 via vite (>=6.2.0, <=6.2.4)

vite NPM version =6.2.0, =1.0.0, =19.2.1, =19.2.1, =0.55.0, =0.21.2-4.1, =1.0.0, =1.0.410, =3.8.0, =1.47.0, =5.0.0-alpha.40, =1.0.0-next.1, =2.0.0-next.3 and more Source cves: CVE-2025-31486 Source advisory: OSV:GHSA-XCJ6-PQ6G-QJ4X...

gix-fs (>=0.1.0, <=0.9.1), gix-lock (>=5.0.0, <=12.0.1) +1 more potentially affected by CVE-2025-31130 via gix-features (>=0.29.0, <=0.37.2)

gix-features CARGO version =0.29.0, =0.1.0, =5.0.0, =5.0.3, =12.0.1 Source cves: CVE-2025-31130 Source advisory: OSV:RUSTSEC-2025-0021...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28224 more potentially affected by CVE-2025-3121 via torch (>=1.0.0, <=2.14.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-3121 Source advisory: SNYK:PYTHON-TORCH-10337834...

@ninetailed/experience.js-next-esr (>=7.18.8, <=7.18.12-alpha.3) potentially affected by CVE-2025-30218 via next (13.5.9)

next NPM version 13.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @ninetailed/experience.js-next-esr =7.18.8, =7.18.12-alpha.3 Source cves: CVE-2025-30218 Source advisory: OSV:GHSA-223J-4RM8-MRMF...

com.vip.saturn:saturn-console (>=3.0.0-m1, <=3.5.1), com.vip.saturn:saturn-it (>=3.0.0-m5, <=3.5.1) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console-api (>=3.0.0-m1, <=3.5.1)

com.vip.saturn:saturn-console-api MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m5, =3.5.1 Source cves: CVE-2025-29085 Source advisory: SNYK:JAVA-COMVIPSATURN-9749461...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +57 more potentially affected by CVE-2025-31125 via vite (>=6.0.0, <=6.0.11)

vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =5.0.0-alpha.38 and more Sour...

fprime-ci (0.0.1a1), fprime-fpy (>=0.0.1a1, <=0.3.2) +1 more potentially affected by CVE-2024-55029 via fprime-gds (4.3.0)

fprime-gds PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on fprime-gds and may be impacted: - fprime-ci 0.0.1a1 - fprime-fpy =0.0.1a1, =0.1.0, =0.1.5 Source cves: CVE-2024-55029 Source advisory: SNYK:PYTHON-FPRIMEGDS-9749311...

@aws-cdk/integ-runner (>=2.172.0-alpha.0, <=2.178.1-alpha.0), @bifravst/http-api-mock (>=2.1.97, <=2.1.144) +4 more potentially affected by CVE-2025-2598 via aws-cdk (>=2.172.0, <=2.178.1)

aws-cdk NPM version =2.172.0, =2.172.0-alpha.0, =2.1.97, =4.3.190, =3.2.25, =2.172.0, =2.178.1 Source cves: CVE-2025-2598 Source advisory: OSV:GHSA-V63M-X9R9-8GQP...

agentic-fleet (0.1.6), composio (0.1.1) +41 more potentially affected by CVE-2024-8952 via composio-core (>=0.3.13, <=0.7.21)

composio-core PYPI version =0.3.13, =0.7.1, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.7.1, =0.5.26, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.7.15, =0.3.13, =0.7.20 and more Source cves: CVE-2024-8952 Source advisory: SNYK:PYTHON-COMPOSIOCORE-9637813...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8487 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8487 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511372...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-8062 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-8062 Source advisory: SNYK:JAVA-AIH2O-9486738...

dbgpt-app (0.8.0rc1), dbgpt-client (>=0.7.0rc0, <=0.8.2) +2 more potentially affected by CVE-2024-10831 via dbgpt (0.8.2)

dbgpt PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbgpt and may be impacted: - dbgpt-app 0.8.0rc1 - dbgpt-client =0.7.0rc0, =0.7.0rc0, =0.8.0rc1, =0.8.2 Source cves: CVE-2024-10831 Source advisory: SNYK:PYTHON-DBGPT-9598860...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8489 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8489 Source advisory: SNYK:PYTHON-AGENTSCOPE-9599695...

llama-index-llms-openllm (>=0.0.1, <=0.4.0) potentially affected by CVE-2024-8982 via openllm (>=0.4.44, <=0.6.30)

openllm PYPI version =0.4.44, =0.0.1, =0.4.0 Source cves: CVE-2024-8982 Source advisory: SNYK:PYTHON-OPENLLM-9599694...

basecamper (>=0.1.1.dev1, <=0.10.9), fedsim (>=0.2.0, <=0.9.0) +5 more potentially affected by CVE-2024-9363 via polyaxon (>=1.1.7.post4, <=2.16.4)

polyaxon PYPI version =1.1.7.post4, =0.1.1.dev1, =0.2.0, =0.0.1, =0.0.0, =0.2.1, =0.1.0b5, =0.1.2 Source cves: CVE-2024-9363 Source advisory: SNYK:PYTHON-POLYAXON-9598251...

basecamper (>=0.1.1.dev1, <=0.10.9), fedsim (>=0.2.0, <=0.9.0) +5 more potentially affected by CVE-2024-9362 via polyaxon (>=1.1.7.post4, <=2.16.4)

polyaxon PYPI version =1.1.7.post4, =0.1.1.dev1, =0.2.0, =0.0.1, =0.0.0, =0.2.1, =0.1.0b5, =0.1.2 Source cves: CVE-2024-9362 Source advisory: SNYK:PYTHON-POLYAXON-9585349...

basecamper (>=0.1.1.dev1, <=0.10.9), fedsim (>=0.2.0, <=0.9.0) +5 more potentially affected by CVE-2024-9365 via polyaxon (>=1.1.7.post4, <=2.16.4)

polyaxon PYPI version =1.1.7.post4, =0.1.1.dev1, =0.2.0, =0.0.1, =0.0.0, =0.2.1, =0.1.0b5, =0.1.2 Source cves: CVE-2024-9365 Source advisory: SNYK:PYTHON-POLYAXON-9584622...

org.webjars.bowergithub.hhurz:tableexport.jquery.plugin (1.26.0) potentially affected by CVE-2025-29907 via org.webjars.bowergithub.parallax:jspdf (2.4.0)

org.webjars.bowergithub.parallax:jspdf MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.parallax:jspdf and may be impacted: - org.webjars.bowergithub.hhurz:tableexport.jquery.plugin 1.26.0 Source cves:...

@alexssmusica/emissao-nota-fiscal (>=1.0.0, <=1.0.5), @borodutch-labs/in-app-purchase (1.13.2) +12 more potentially affected by CVE-2025-29774 via xml-crypto (>=2.0.0, <=2.1.5)

xml-crypto NPM version =2.0.0, =1.0.0, =0.1.0-beta.57, =0.2.1-beta.36, =1.14.0, =1.12.1, =0.7.1, =0.0.1, =0.0.9 Source cves: CVE-2025-29774 Source advisory: OSV:GHSA-9P8X-F768-WP2G...

a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5509 more potentially affected by CVE-2025-4432 via ring (>=0.13.5, <=0.17.9)

ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.1 and more Source cves: CVE-2025-4432 Source advisory: OSV:RUSTSEC-2025-0009...

@assistant-ui/react-ai-sdk (>=0.5.2, <=0.5.4), @avmkit/pipeline (1.0.3) +95 more potentially affected by CVE-2024-53384 via tsup (>=8.0.0, <=8.3.0)

tsup NPM version =8.0.0, =0.5.2, =1.0.1, =1.0.0, =3.0.0-canary.0.0c9beb2ae, =4.0.0-canary.0.0c9beb2ae, =0.1.0-canary.0.0c9beb2ae, =0.0.2, =0.1.5, =0.1.0-canary.0.0c9beb2ae, =1.0.0, =0.0.15, =0.0.1-canary.0.0c9beb2ae, =0.0.1 and more Source cves: CVE-2024-53384 Source advisory:...

@agent-embed/js (>=0.0.1, <=0.0.45), @altbot/js (>=1.0.0, <=1.0.1) +261 more potentially affected by CVE-2025-27109 via solid-js (>=1.0.0, <=1.9.3)

solid-js NPM version =1.0.0, =0.0.1, =1.0.0, =1.1.7, =0.0.1, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =0.1.26, =0.0.1, =0.0.1-3.1-dev, =0.0.17 - @codyg/datatables 0.0.1 - @converseform.com/js 0.2.31 and more Source cves: CVE-2025-27109 Source advisory: OSV:GHSA-3QXH-P7JC-5XH6...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.20), @silgi/better-auth (>=0.0.5, <=0.0.12) +1 more potentially affected by CVE-2025-71403 via better-auth (>=1.0.0, <=1.1.20-beta.5)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.5, =1.1.368, =1.1.416 Source cves: CVE-2025-71403 Source advisory: OSV:GHSA-VP58-J275-797X...

@authorium/ckeditor5-build-multi-root (>=41.3.1, <=41.4.2), @eagerworks/ckeditor5-build-multi-root (>=41.4.2-auth.1, <=41.4.2) +8 more potentially affected by CVE-2025-25299 via @ckeditor/ckeditor5-real-time-collaboration (>=41.3.0-alpha.2, <=44.2.0-alpha.16)

@ckeditor/ckeditor5-real-time-collaboration NPM version =41.3.0-alpha.2, =41.3.1, =41.4.2-auth.1, =1.0.1, =4.0.45, =18.0.20, =0.0.8, =41.3.0-alpha.2, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...

@3t-transform/threeteeui (>=1.5.1, <=1.11.0), @8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4) +625 more potentially affected by CVE-2025-26791 via dompurify (>=3.0.0, <=3.2.3)

dompurify NPM version =3.0.0, =1.5.1, =0.18.0-beta.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =6.4.10, =5.1.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =0.1.1, =0.1.4-alpha.3 and more Source cves: CVE-2025-26791 Source advisory: OSV:GHSA-VHXF-7VQR-MRJG...

@funboxteam/blueprinter (>=5.3.2, <=6.1.0), @henrycatalinismith/11tysnap (0.0.15) +1 more potentially affected by CVE-2024-57075 via eazy-logger (>=4.0.0, <=4.0.1)

eazy-logger NPM version =4.0.0, =5.3.2, =2.28.0, =2.28.2 Source cves: CVE-2024-57075 Source advisory: OSV:GHSA-R7JX-5M6M-CPG9...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MX2J-7CMV-353C...

@directus/api (>=20.0.0-rc.0, <=23.2.2) potentially affected by CVE-2024-6533 via directus (>=11.0.0, <=11.3.2)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.2.2 Source cves: CVE-2024-6533 Source advisory: OSV:GHSA-9QRM-48QF-R2RW...

@directus/api (>=20.0.0-rc.0, <=23.1.0), directus (>=11.0.0-rc.1, <=11.1.2) potentially affected by CVE-2025-24353 via @directus/app (>=13.0.0, <=13.3.0)

@directus/app NPM version =13.0.0, =20.0.0-rc.0, =11.0.0-rc.1, =11.1.2 Source cves: CVE-2025-24353 Source advisory: OSV:GHSA-PMF4-V838-29HG...

@aulazero/task (>=0.0.1, <=0.7.2), @aulazero/task-2 (>=2.0.1, <=2.0.5) +81 more potentially affected by CVE-2025-29049 via mathlive (>=0.25.0, <=0.103.0)

mathlive NPM version =0.25.0, =0.0.1, =2.0.1, =1.17.3, =0.2.6, =0.0.1, =0.1.0, =0.1.0, =1.20.0, =11.25.1, =1.0.0, =0.1.0, =0.1.0, =5.12.1, =8.1.0 and more Source cves: CVE-2025-29049 Source advisory: OSV:GHSA-QWJ6-Q94F-8425...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +49 more potentially affected by CVE-2025-24010 +1 more via vite (>=6.0.0, <=6.0.8)

vite NPM version =6.0.0, =0.2.0, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =2.9.2, =2.9.2, =2.10.3 and more Source cves:...

@0xgg/echomd (>=1.0.0, <=1.0.4), @21st-night/analytics-web (>=0.65.0, <=0.73.8) +1179 more potentially affected by CVE-2025-23207 via katex (>=0.12.0, <=0.16.19)

katex NPM version =0.12.0, =1.0.0, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.53.0, =0.48.0, =0.53.0, =0.16.0, =0.49.0, =0.76.0, =1.0.7, =0.3.0, =0.6.2 and more Source cves: CVE-2025-23207 Source advisory: OSV:GHSA-CG87-WMX4-V546...

4casterschemas (>=1.0.0, <=1.0.1), @3kles/3kles-coremongodb (>=2.1.5, <=2.1.6) +113 more potentially affected by CVE-2025-23061 via mongoose (>=8.0.0, <=8.9.4)

mongoose NPM version =8.0.0, =1.0.0, =2.1.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =3.13.0, =1.1.9, =2.0.0, =2.0.7 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

@abuaiman/abujunainah (1.1.4), @abuaiman/spy (1.1.4) +298 more potentially affected by CVE-2024-56332 via next (>=15.0.0, <=15.1.1)

next NPM version =15.0.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =1.0.19, =0.1.0, =0.0.4, =0.1.0, =0.1.11, =1.0.0, =0.0.1-alpha, =0.0.4-alpha - @benimaru/ahgas 1.1.4 - @benimaru/asduq 1.1.4 - @benimaru/balon 1.1.4 and more Source cves: CVE-2024-56332 Source advisory...

@directus/api (>=20.0.0-rc.0, <=23.1.3) potentially affected by CVE-2024-54151 via directus (>=11.0.0, <=11.2.2)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.1.3 Source cves: CVE-2024-54151 Source advisory: OSV:GHSA-849R-QRWJ-8RV4...

lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2024-53847 via trix (>=2.0.8, <=2.0.10)

trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2024-53847 Source advisory: OSV:GHSA-6VX4-V2JW-QWQH...

dbs-arch (>=0.2.2, <=0.2.3), dbs-boot (>=0.3.0, <=0.4.0) +8 more potentially affected by unknown CVE via kvm-ioctls (>=0.6.1, <=0.18.0)

kvm-ioctls CARGO version =0.6.1, =0.2.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.29, =0.1.0, =2.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0428...