@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1) +77 more potentially affected by CVE-2026-21877 via n8n-workflow (>=1.0.0, <=1.118.1)

n8n-workflow NPM version =1.0.0, =0.2.0, =0.1.5, =0.0.17, =1.0.2, =1.0.1, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =1.57.1 and more Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NWORKFLOW-14894273...

@n8n/task-runner (1.58.0), n8n-node-dev (1.120.0) potentially affected by CVE-2026-21877 via n8n-core (1.121.0)

n8n-core NPM version 1.121.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-core and may be impacted: - @n8n/task-runner 1.58.0 - n8n-node-dev 1.120.0 Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NCORE-14894271...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +36 more potentially affected by CVE-2026-21877 via n8n-core (>=1.0.0, <=1.120.1)

n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =0.1.1, =0.4.1, =1.1.1 and more Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NCORE-14894271...

@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +8 more potentially affected by CVE-2026-21877 via n8n (>=0.138.0, <=0.219.1)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.1.7 Source cves: CVE-2026-21877 Source advisory: OSV:GHSA-V364-RW7M-3263...

@imagina/n8n-nodes-iwhatsapp (>=0.1.0, <=0.2.7), @regis-samurai/n8n (>=0.216.1, <=0.219.1) +15 more potentially affected by CVE-2026-21877 via n8n-nodes-base (>=0.123.1, <=0.225.0)

n8n-nodes-base NPM version =0.123.1, =0.1.0, =0.216.1, =0.126.0, =0.1.0, =0.18.0, =0.1.0, =1.0.0, =0.1.0, =0.2.14, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NNODESBASE-14894272...

arakawa (0.1.0-alpha.1), vega (>=6.0.0, <=6.1.2) +1 more potentially affected by CVE-2025-66648 via vega-functions (6.0.0)

vega-functions NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vega-functions and may be impacted: - arakawa 0.1.0-alpha.1 - vega =6.0.0, =6.0.0, =6.1.2 Source cves: CVE-2025-66648 Source advisory: OSV:GHSA-M9RG-MR6G-75GM...

@0xgg/echomd (>=1.0.0, <=1.0.4), @adobe/react-spectrum-charts (>=1.16.0-alpha.3, <=1.28.0) +298 more potentially affected by CVE-2025-66648 via vega-functions (>=5.8.0, <=6.0.0)

vega-functions NPM version =5.8.0, =1.0.0, =1.16.0-alpha.3, =0.2.0, =1.1.5, =0.4.3, =0.1.0, =0.0.1, =0.4.1-canary.195, =0.0.0, =0.2.0-beta.0, =0.1.0, =2.0.0-next.2 - @datatitian/vega 5.17.0 and more Source cves: CVE-2025-66648 Source advisory: SNYK:JS-VEGAFUNCTIONS-14872001...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2002 more potentially affected by CVE-2026-0621 via @modelcontextprotocol/sdk (>=1.3.0, <=1.25.1)

@modelcontextprotocol/sdk NPM version =1.3.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.0.19 and more Source cves: CVE-2026-0621 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSDK-14871802...

grocery_app (1.0.0) potentially affected by CVE-2025-67419 via @evershop/evershop (2.1.2)

@evershop/evershop NPM version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @evershop/evershop and may be impacted: - groceryapp 1.0.0 Source cves: CVE-2025-67419 Source advisory: SNYK:JS-EVERSHOPEVERSHOP-14872349...

grocery_app (1.0.0) potentially affected by CVE-2025-67427 via @evershop/evershop (2.1.2)

@evershop/evershop NPM version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @evershop/evershop and may be impacted: - groceryapp 1.0.0 Source cves: CVE-2025-67427 Source advisory: SNYK:JS-EVERSHOPEVERSHOP-14872600...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2002 more potentially affected by CVE-2026-0621 via @modelcontextprotocol/sdk (>=1.3.0, <=1.25.1)

@modelcontextprotocol/sdk NPM version =1.3.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.0.19 and more Source cves: CVE-2026-0621 Source advisory: OSV:GHSA-8R9Q-7V3J-JR4G...

@zentity/fhevm-contracts (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-73645 via @openzeppelin/confidential-contracts (0.3.0)

@openzeppelin/confidential-contracts NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/confidential-contracts and may be impacted: - @zentity/fhevm-contracts =0.1.0, =0.2.0 Source cves: CVE-2026-73645 Source advisory:...

@zentity/fhevm-contracts (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via @openzeppelin/confidential-contracts (0.3.0)

@openzeppelin/confidential-contracts NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/confidential-contracts and may be impacted: - @zentity/fhevm-contracts =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory:...

a1 (>=1.0.1, <=1.0.2), apfsds-protocol (>=0.1.0, <=0.4.0) +113 more potentially affected by unknown CVE via rkyv (0.8.2)

rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.9.0, =0.1.0, =0.2.1, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =2.0.0-alpha.1, =0.1.2, =0.2.24, =0.2.27 and more Source cves: unkno...

acme-compilers (>=0.2.2, <=0.2.4), acvm (>=0.23.0, <=0.26.1) +294 more potentially affected by unknown CVE via rkyv (>=0.1.1, <=0.7.45)

rkyv CARGO version =0.1.1, =0.2.2, =0.23.0, =0.23.0, =0.0.1, =0.2.0, =0.39.0, =0.23.0, =0.26.1 - cairn-import-geonames 0.0.2-alpha - cairn-import-oa 0.0.2-alpha - cairn-import-osm 0.0.2-alpha - cairn-import-wof 0.0.2-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0001...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-G9JG-W8VM-G96V...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.7), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.7) +4 more potentially affected by unknown CVE via trix (>=2.0.8, <=2.1.15)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-TRIX-14825036...

@vietmoney/react-native-smart-gallery (1.2.2) potentially affected by unknown CVE via @vietmoney/react-native-smart-page (1.1.2)

@vietmoney/react-native-smart-page NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-native-smart-page and may be impacted: - @vietmoney/react-native-smart-gallery 1.2.2 Source cves: unknown CVE Source advisory:...

muaddib-scanner (>=1.1.0, <=1.1.1) potentially affected by unknown CVE via @vietmoney/react-big-calendar (0.0.1-security)

@vietmoney/react-big-calendar NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-big-calendar and may be impacted: - muaddib-scanner =1.1.0, =1.1.1 Source cves: unknown CVE Source advisory:...

@vietmoney/react-native-smart-gallery (1.2.2) potentially affected by unknown CVE via @vietmoney/react-native-smart-page (1.1.2)

@vietmoney/react-native-smart-page NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @vietmoney/react-native-smart-page and may be impacted: - @vietmoney/react-native-smart-gallery 1.2.2 Source cves: unknown CVE Source advisory:...

@adamstankiewicz/openedx-frontend-platform (>=8.2.0, <=8.3.6), @altipla/directus-sdk-utils (0.7.2) +39 more potentially affected by CVE-2025-69202 via axios-cache-interceptor (>=1.0.0, <=1.8.3)

axios-cache-interceptor NPM version =1.0.0, =8.2.0, =1.6.3, =1.1.0, =15.0.0, =11.0.4, =1.0.2-test-cache.1, =8.1.2-alpha.1, =8.1.0, =8.5.2 and more Source cves: CVE-2025-69202 Source advisory: OSV:GHSA-X4M5-4CW8-VC44...

@bechara/crux (>=6.0.0-alpha.1, <=6.6.2), @dismissible/nestjs-api (1.0.3-alpha.cdc64a4.0) +6 more potentially affected by CVE-2025-69211 via @nestjs/platform-fastify (>=11.0.1, <=11.1.10)

@nestjs/platform-fastify NPM version =11.0.1, =6.0.0-alpha.1, =1.0.11, =0.1.51, =1.0.36, =1.3.0, =5.0.0-beta.36, =0.6.1-dev, =1.1.48 Source cves: CVE-2025-69211 Source advisory: OSV:GHSA-8WPR-639P-CCRJ...

@adamstankiewicz/openedx-frontend-platform (>=8.2.0, <=8.3.6), @altipla/directus-sdk-utils (0.7.2) +39 more potentially affected by CVE-2025-69202 via axios-cache-interceptor (>=1.0.0, <=1.8.3)

axios-cache-interceptor NPM version =1.0.0, =8.2.0, =1.6.3, =1.1.0, =15.0.0, =11.0.4, =1.0.2-test-cache.1, =8.1.2-alpha.1, =8.1.0, =8.5.2 and more Source cves: CVE-2025-69202 Source advisory: SNYK:JS-AXIOSCACHEINTERCEPTOR-14724265...

@bechara/crux (>=6.0.0-alpha.1, <=6.6.2), @dismissible/nestjs-api (1.0.3-alpha.cdc64a4.0) +6 more potentially affected by CVE-2025-69211 via @nestjs/platform-fastify (>=11.0.1, <=11.1.10)

@nestjs/platform-fastify NPM version =11.0.1, =6.0.0-alpha.1, =1.0.11, =0.1.51, =1.0.36, =1.3.0, =5.0.0-beta.36, =0.6.1-dev, =1.1.48 Source cves: CVE-2025-69211 Source advisory: SNYK:JS-NESTJSPLATFORMFASTIFY-14724255...

blyss-rs (0.2.0), lunarbase-pmm-math (>=0.1.0, <=0.2.6) +8 more potentially affected by unknown CVE via ruint (>=1.8.0, <=1.16.0)

ruint CARGO version =1.8.0, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-9FJQ-45QV-PCM7...

@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +162 more potentially affected by CVE-2025-13158 via apidoc-core (>=0.2.2, <=0.15.0)

apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.4.3, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =1.0.10 - @comodinx/api-doc 1.0.0 and more Source cves: CVE-2025-13158 Source advisory: SNYK:JS-APIDOCCORE-14723211...

@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +151 more potentially affected by CVE-2025-13158 via apidoc-core (>=0.2.2, <=0.12.0)

apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =0.0.3, =0.0.12 and more Source cves: CVE-2025-13158 Source advisory: OSV:GHSA-6VJ3-P34W-XXJP...

3scale (>=0.3.2, <=0.6.2), 3scale-cm (0.5.1) +193 more potentially affected by CVE-2025-25341 via libxmljs (>=1.0.9, <=1.0.11)

libxmljs NPM version =1.0.9, =0.3.2, =0.3.2, =1.10.4, =1.8.1, =1.8.8, =1.0.0, =1.1.0, =0.1.0, =250.1010.0, =250.1018.0, =252.1021.0 and more Source cves: CVE-2025-25341 Source advisory: OSV:GHSA-JV72-59WQ-8RXM...

3loc (>=0.1.0, <=0.4.0), 3scale (>=0.2.0, <=0.6.2) +656 more potentially affected by CVE-2025-25341 via libxmljs (>=0.4.1, <=1.0.11)

libxmljs NPM version =0.4.1, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =1.0.1, =1.0.0, =4.5.1 and more Source cves: CVE-2025-25341 Source advisory: SNYK:JS-LIBXMLJS-14723210...

careful (>=0.1.0, <=0.2.0), dxh-test-package (1.1.2) +7 more potentially affected by CVE-2025-15095 via httpbin (0.10.4)

httpbin PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on httpbin and may be impacted: - careful =0.1.0, =0.1.4, =0.1.6, =0.3.2, =0.0.1, =0.7.1, =2.2.1, =2.7.5 Source cves: CVE-2025-15095 Source advisory: SNYK:PYTHON-HTTPBIN-14723357...

aquatic (0.2.0), aquatic_http (0.2.0) +96 more potentially affected by unknown CVE via bitmaps (3.2.1)

bitmaps CARGO version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on bitmaps and may be impacted: - aquatic 0.2.0 - aquatichttp 0.2.0 - aquatichttploadtest 0.2.0 - aquaticws 0.2.0 - aquaticwsloadtest 0.2.0 - armvcpu =0.5.1, =0.4.3, =0.6.0, =0.3....

aperture-shared (0.1.0), assemblylift-awslambda-host (>=0.2.0, <=0.3.0) +114 more potentially affected by unknown CVE via capnp (>=0.0.1, <=0.23.2)

capnp CARGO version =0.0.1, =0.2.0, =0.3.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.23.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0143...

@acabai/android (>=1.0.0, <=2.0.6), @acabai/core (>=1.0.0, <=1.0.6) +942 more potentially affected by CVE-2025-68665 via @langchain/core (>=0.0.0, <=0.3.79)

@langchain/core NPM version =0.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6, =1.0.5, =0.1.2, =0.0.1, =1.2.27, =0.1.7, =3.0.0-beta.65.0, =8.0.0, =10.0.0, =11.0.0 and more Source cves: CVE-2025-68665 Source advisory: SNYK:JS-LANGCHAINCORE-14563113...

@atom8n/ai-workflow-builder (>=1.2.1, <=1.5.8), @atom8n/backend-test-utils (>=1.2.2, <=1.5.8) +39 more potentially affected by CVE-2025-68665 via @langchain/core (>=1.0.1, <=1.1.7)

@langchain/core NPM version =1.0.1, =1.2.1, =1.2.2, =1.2.2, =2.2.2, =2.2.2, =2.2.2, =2.1.9, =2.1.0, =2.1.0, =1.0.11, =2.1.0, =1.0.1, =2.1.0, =1.0.1, =2.1.0, =2.1.36 and more Source cves: CVE-2025-68665 Source advisory: SNYK:JS-LANGCHAINCORE-14563113...

3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14927 via transformers (>=0.1.0, <=5.14.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14927 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564366...

aana (>=0.2.1, <=0.2.2), abgrouponline (>=1.0.0, <=1.0.2) +559 more potentially affected by CVE-2025-14922 via diffusers (>=0.2.4, <=0.39.0)

diffusers PYPI version =0.2.4, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.13 and more Source cves: CVE-2025-14922 Source advisory: SNYK:PYTHON-DIFFUSERS-14567485...

3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14928 via transformers (>=0.1.0, <=5.14.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14928 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564364...

a2a-smol-adapter (0.1.0), agent-lifecycle-toolkit (>=0.2.1, <=0.10.1) +113 more potentially affected by CVE-2025-14931 via smolagents (>=0.1.3, <=1.26.0)

smolagents PYPI version =0.1.3, =0.2.1, =0.1.0, =0.1.5, =0.1.6, =0.0.1, =0.3.4, =1.0.0, =1.0.1 and more Source cves: CVE-2025-14931 Source advisory: SNYK:PYTHON-SMOLAGENTS-14567305...

3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14921 via transformers (>=0.1.0, <=5.14.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14921 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564365...

3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14924 via transformers (>=0.1.0, <=5.14.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14924 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564363...

3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14929 via transformers (>=0.1.0, <=5.14.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14929 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564275...

3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14930 via transformers (>=0.1.0, <=5.14.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14930 Source advisory: SNYK:PYTHON-TRANSFORMERS-14563374...

3-04-2025-ttm (0.1.0), 3m (>=0.1.0, <=0.1.3) +12179 more potentially affected by CVE-2025-14926 via transformers (>=0.1.0, <=5.14.1)

transformers PYPI version =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 and more Source cves: CVE-2025-14926 Source advisory: SNYK:PYTHON-TRANSFORMERS-14560695...

3-04-2025-ttm (0.1.0), a2 (>=0.10.5, <=0.10.13) +3314 more potentially affected by CVE-2025-14925 via accelerate (>=0.5.1, <=1.14.0)

accelerate PYPI version =0.5.1, =0.10.5, =5.0.0, =5.0.4 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 - aait-store-cut-part-003 0.0.1 - aait-store-cut-part-004 0.0.1 - aait-store-cut-part-005 0.0.1 - aait-store-cut-part-006 0.0.1 - aait-store-cut-part-007 0.0.1 -...

10minions-engine (>=0.0.1, <=0.0.4), @0xd541ecb3/byte-babe (>=1.0.0, <=1.2.1) +1008 more potentially affected by CVE-2025-68665 via langchain (>=0.0.11, <=0.3.35)

langchain NPM version =0.0.11, =0.0.1, =1.0.0, =0.0.1, =0.0.6, =0.1.4, =3.0.0-beta.65.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.5-alpha.2, =0.1.5-alpha.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2025-68665 Source advisory:...

@acabai/android (>=1.0.0, <=2.0.6), @acabai/core (>=1.0.0, <=1.0.6) +942 more potentially affected by CVE-2025-68665 via @langchain/core (>=0.0.0, <=0.3.79)

@langchain/core NPM version =0.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6, =1.0.5, =0.1.2, =0.0.1, =1.2.27, =0.1.7, =3.0.0-beta.65.0, =8.0.0, =10.0.0, =11.0.0 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...

@atom8n/ai-workflow-builder (>=1.2.1, <=1.5.8), @atom8n/backend-test-utils (>=1.2.2, <=1.5.8) +39 more potentially affected by CVE-2025-68665 via @langchain/core (>=1.0.1, <=1.1.7)

@langchain/core NPM version =1.0.1, =1.2.1, =1.2.2, =1.2.2, =2.2.2, =2.2.2, =2.2.2, =2.1.9, =2.1.0, =2.1.0, =1.0.11, =2.1.0, =1.0.1, =2.1.0, =1.0.1, =2.1.0, =2.1.36 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...

@axiom-lattice/agent-eval (>=2.1.9, <=2.1.100), @axiom-lattice/core (>=2.1.0, <=3.0.6) +15 more potentially affected by CVE-2025-68665 via langchain (>=1.0.2, <=1.2.0)

langchain NPM version =1.0.2, =2.1.9, =2.1.0, =1.0.11, =2.1.0, =0.1.1, =1.0.1, =1.0.1, =1.0.0, =0.1.3, =3.66.0, =3.66.0, =5.7.2, =0.0.1, =0.3.0, =0.3.1 - hedera-agent-kit 3.5.2 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...

@fedify/amqp (0.2.0-dev.12), @fedify/postgres (>=0.3.0-dev.20, <=0.3.0) +1 more potentially affected by CVE-2025-68475 via @fedify/fedify (1.5.0-dev.750)

@fedify/fedify NPM version 1.5.0-dev.750 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/amqp 0.2.0-dev.12 - @fedify/postgres =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2025-68475 Source advisory...

@fedify/botkit (>=0.4.0-dev.167, <=0.4.0-dev.173), @fedify/botkit-sqlite (>=0.4.0-dev.167, <=0.4.0-dev.173) potentially affected by CVE-2025-68475 via @fedify/fedify (1.9.0-dev.1516)

@fedify/fedify NPM version 1.9.0-dev.1516 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.4.0-dev.167, =0.4.0-dev.167, =0.4.0-dev.173 Source cves: CVE-2025-68475 Source advisory:...