@alstar/studio (0.0.0-beta.20), @better-auth/cli (>=1.0.0-canary.2, <=1.4.2) +65 more potentially affected by unknown CVE via better-auth (>=1.0.0, <=1.4.2-beta.5)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.26, =1.3.27, =0.18.0, =0.5.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTH-14157194...

@alstar/studio (0.0.0-beta.20), @better-auth/cli (>=1.0.0-canary.2, <=1.4.1) +62 more potentially affected by CVE-2025-71401 via better-auth (>=1.0.0, <=1.4.1-beta.1)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.27, =1.3.26, =1.3.27, =0.18.0, =0.5.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3 and more Source cves: CVE-2025-71401 Source advisory: OSV:GHSA-569Q-MPPH-WGWW...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +9491 more potentially affected by CVE-2025-14874 via nodemailer (>=3.0.2, <=7.0.10)

nodemailer NPM version =3.0.2, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 123ac 1.0.8 - 123acyashu 1.0.8 and more Source cves: CVE-2025-14874 Source advisory: OSV:GHSA-RCMH-QJQH-P98V...

@activepieces/piece-gmail (>=0.9.6, <=0.12.0), @activepieces/piece-imap (>=0.2.17, <=0.4.5) +114 more potentially affected by CVE-2025-14874 via nodemailer (>=7.0.2, <=7.0.10)

nodemailer NPM version =7.0.2, =0.9.6, =0.2.17, =0.0.11, =0.0.1, =1.0.0, =3.3.1, =0.0.1, =0.6.0, =5.1.121, =3.20.14, =1.2.4, =29.1.0, =1.0.1, =2.12.3-snapshot-1749038455154, =2.18.0 and more Source cves: CVE-2025-14874 Source advisory: SNYK:JS-NODEMAILER-14157156...

ae.teletronics.nlp:categorisation (>=1.3, <=1.6), ae.teletronics.nlp:entityextraction (>=1.3, <=1.4) +4961 more potentially affected by CVE-2025-12183 via net.jpountz.lz4:lz4 (>=1.1.0, <=1.3.0)

net.jpountz.lz4:lz4 MAVEN version =1.1.0, =1.3, =1.3, =0.42.1, =1.3.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (>=1.0.0, <=1.0.1), com.alibaba.fastjson2:fastjson2-extension (>=2.0.27, <=2.0.64) +46 more potentially affected by CVE-2025-12183 via org.lz4:lz4-pure-java (1.8.0)

org.lz4:lz4-pure-java MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.lz4:lz4-pure-java and may be impacted: - cc.ddrpa.dorian.polystash:polystash-spring-boot-starter =1.0.0, =2.0.27, =0.3.1, =0.40.8-public, =0.40.8-public,...

actix-web-location (>=0.1.0, <=0.7.0), bext-waf (0.2.0) +19 more potentially affected by unknown CVE via maxminddb (>=0.12.0, <=0.26.0)

maxminddb CARGO version =0.12.0, =0.1.0, =0.1.3, =1.5.1, =0.1.0, =0.7.0, =0.4.0, =0.0.1, =0.1.8, =0.3.0, =0.5.0, =0.1.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0132...

a2 (>=0.7.0, <=0.8.1), aap (>=0.4.0, <=0.4.1) +3871 more potentially affected by unknown CVE via rustls-pemfile (>=0.2.1, <=2.2.0)

rustls-pemfile CARGO version =0.2.1, =0.7.0, =0.4.0, =0.21.0-alpha.1, =0.1.11, =0.11.0, =0.2.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0134...

org.apache.skywalking:apache-skywalking-apm (>=6.1.0, <=10.1.0), org.apache.skywalking:apache-skywalking-apm-es7 (>=6.6.0, <=8.7.0) +1 more potentially affected by CVE-2025-54057 via org.apache.skywalking:apm-webapp (>=6.0.0-ga, <=10.1.0)

org.apache.skywalking:apm-webapp MAVEN version =6.0.0-ga, =6.1.0, =6.6.0, =6.0.0-alpha, =6.0.0-ga Source cves: CVE-2025-54057 Source advisory: SNYK:JAVA-ORGAPACHESKYWALKING-14220413...

7ghost (>=4.11.0, <=4.11.46), @100k/type-graphql-filter-mikroorm (>=0.0.1, <=0.3.5) +1604 more potentially affected by CVE-2025-12758 via validator (>=13.0.0, <=13.15.20)

validator NPM version =13.0.0, =4.11.0, =0.0.1, =1.0.0, =0.0.0-dev-20240828032938, =0.1.1, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938,...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.0.147-alpha) +23 more potentially affected by CVE-2025-66035 via @angular/common (>=20.0.0, <=20.3.12)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.10.1, =0.8.0, =0.63.3, =0.107.0 and more Source cves: CVE-2025-66035 Source advisory: OSV:GHSA-58C5-G7WP-6W37...

@eui/deps-base (>=21.0.0-alpha.10, <=21.0.0-next.28), @eui/deps-base-light (>=21.0.0-alpha.10, <=21.0.0-next.28) potentially affected by CVE-2025-66035 via @angular/common (21.0.0-rc.2)

@angular/common NPM version 21.0.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - @eui/deps-base =21.0.0-alpha.10, =21.0.0-alpha.10, =21.0.0-next.28 Source cves: CVE-2025-66035 Source advisory:...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +38 more potentially affected by CVE-2025-66035 via @angular/common (>=19.0.0, <=19.2.15)

@angular/common NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.346.0, =0.0.1-canary.0.0, =1.0.0-canary.1 - @ismailadekambi/shared 1.0.0 and more Source cves: CVE-2025-66035 Source advisory:...

@eui/deps-base (>=21.0.0-alpha.10, <=21.0.0-next.28), @eui/deps-base-light (>=21.0.0-alpha.10, <=21.0.0-next.28) potentially affected by CVE-2025-66035 via @angular/common (21.0.0-rc.2)

@angular/common NPM version 21.0.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - @eui/deps-base =21.0.0-alpha.10, =21.0.0-alpha.10, =21.0.0-next.28 Source cves: CVE-2025-66035 Source advisory:...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.0.147-alpha) +23 more potentially affected by CVE-2025-66035 via @angular/common (>=20.0.0, <=20.3.12)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.10.1, =0.8.0, =0.63.3, =0.107.0 and more Source cves: CVE-2025-66035 Source advisory: SNYK:JS-ANGULARCOMMON-14135651...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +38 more potentially affected by CVE-2025-66035 via @angular/common (>=19.0.0, <=19.2.15)

@angular/common NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.346.0, =0.0.1-canary.0.0, =1.0.0-canary.1 - @ismailadekambi/shared 1.0.0 and more Source cves: CVE-2025-66035 Source advisory:...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1104 more potentially affected by CVE-2025-66031 via node-forge (>=1.0.0, <=1.3.1)

node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66031 Source advisory: SNYK:JS-NODEFORGE-14125745...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1104 more potentially affected by CVE-2025-66030 via node-forge (>=1.0.0, <=1.3.1)

node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66030 Source advisory: SNYK:JS-NODEFORGE-14125097...

@alstar/studio (0.0.0-beta.20), @better-auth/cli (1.3.34) +7 more potentially affected by unknown CVE via better-auth (1.3.34)

better-auth NPM version 1.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on better-auth and may be impacted: - @alstar/studio 0.0.0-beta.20 - @better-auth/cli 1.3.34 - @bgord/bun =1.0.8, =7.0.9-canary.2, =7.0.9-canary.2, =0.0.22, =0.8.2,...

@alstar/studio (0.0.0-beta.20), @better-auth/cli (1.3.34) +7 more potentially affected by CVE-2025-71402 via better-auth (1.3.34)

better-auth NPM version 1.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on better-auth and may be impacted: - @alstar/studio 0.0.0-beta.20 - @better-auth/cli 1.3.34 - @bgord/bun =1.0.8, =7.0.9-canary.2, =7.0.9-canary.2, =0.0.22, =0.8.2,...

grunt-willitmerge (>=0.2.0, <=1.0.0) potentially affected by CVE-2025-66219 via willitmerge (0.1.2)

willitmerge NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on willitmerge and may be impacted: - grunt-willitmerge =0.2.0, =1.0.0 Source cves: CVE-2025-66219 Source advisory: SNYK:JS-WILLITMERGE-14135971...

grunt-willitmerge (>=0.2.0, <=1.0.0) potentially affected by CVE-2025-66219 via willitmerge (0.1.2)

willitmerge NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on willitmerge and may be impacted: - grunt-willitmerge =0.2.0, =1.0.0 Source cves: CVE-2025-66219 Source advisory: OSV:GHSA-J9WJ-M24M-7JJ6...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1104 more potentially affected by CVE-2025-66031 via node-forge (>=1.0.0, <=1.3.1)

node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66031 Source advisory: OSV:GHSA-554W-WPV2-VW27...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1104 more potentially affected by CVE-2025-66030 via node-forge (>=1.0.0, <=1.3.1)

node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66030 Source advisory: OSV:GHSA-65CH-62R8-G69G...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1104 more potentially affected by CVE-2025-12816 via node-forge (>=1.0.0, <=1.3.1)

node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-12816 Source advisory: OSV:GHSA-5GFM-WPXJ-WJGQ...

tutor-android (>=17.0.0, <=22.0.0), tutor-cairn (>=17.0.0, <=22.0.0) +52 more potentially affected by CVE-2025-65681 via tutor (>=12.2.0, <=22.0.1)

tutor PYPI version =12.2.0, =17.0.0, =17.0.0, =0.1.1, =0.2.0, =14.0.0, =18.3.0, =18.0.0, =14.0.0rc3, =1.0.0, =18.2.8, =14.0.0, =19.0.0, =21.1.1 and more Source cves: CVE-2025-65681 Source advisory: SNYK:PYTHON-TUTOR-14135978...

@0xfutbol/id (>=2.0.0, <=2.0.200), @0xkamal7/sui-agent (>=1.1.2, <=1.1.5) +1794 more potentially affected by CVE-2025-66020 via valibot (>=0.31.0, <=1.1.0)

valibot NPM version =0.31.0, =2.0.0, =1.1.2, =1.2.0-pre.92, =1.2.0-pre.24, =1.2.0-pre.24, =0.0.1, =0.0.1, =0.0.1, =1.2.0-pre.64, =0.0.1, =0.0.1, =0.5.9, =0.5.18, =0.0.2-beta.0, =0.2.0 - @0xsquid/mpp 0.2.0 and more Source cves: CVE-2025-66020 Source advisory: OSV:GHSA-VQPR-J7V3-HQW9...

@0xfutbol/id (>=2.0.0, <=2.0.200), @0xkamal7/sui-agent (>=1.1.2, <=1.1.5) +1794 more potentially affected by CVE-2025-66020 via valibot (>=0.31.0, <=1.1.0)

valibot NPM version =0.31.0, =2.0.0, =1.1.2, =1.2.0-pre.92, =1.2.0-pre.24, =1.2.0-pre.24, =0.0.1, =0.0.1, =0.0.1, =1.2.0-pre.64, =0.0.1, =0.0.1, =0.5.9, =0.5.18, =0.0.2-beta.0, =0.2.0 - @0xsquid/mpp 0.2.0 and more Source cves: CVE-2025-66020 Source advisory: SNYK:JS-VALIBOT-14122017...

rust-network-mgr (>=0.1.0, <=0.1.4) potentially affected by unknown CVE via nftnl (0.7.0)

nftnl CARGO version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nftnl and may be impacted: - rust-network-mgr =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-2FJW-WHXM-9V4Q...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1104 more potentially affected by CVE-2025-12816 via node-forge (>=1.0.0, <=1.3.1)

node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-12816 Source advisory: SNYK:JS-NODEFORGE-14114940...

@appium/base-driver (>=10.0.0-rc.2, <=10.1.1), @breautek/storm (>=9.0.0, <=9.2.4) +78 more potentially affected by CVE-2025-13466 via body-parser (2.2.0)

body-parser NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on body-parser and may be impacted: - @appium/base-driver =10.0.0-rc.2, =9.0.0, =3.8.8, =1.114.0, =11.8.0, =3.4.0, =11.0.19, =0.1.0, =8.13.0-nightly.20250611115025, =4.0.1,...

nitroping-react-native (>=0.2.2, <=0.2.14) potentially affected by unknown CVE via nitroping (0.2.14)

nitroping NPM version 0.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on nitroping and may be impacted: - nitroping-react-native =0.2.2, =0.2.14 Source cves: unknown CVE Source advisory: OSV:MAL-2025-191134...

@neptune.digital/sentry-netlify-v2 (1.2.1) potentially affected by CVE-2025-65944 via @sentry/aws-serverless (10.19.0)

@sentry/aws-serverless NPM version 10.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sentry/aws-serverless and may be impacted: - @neptune.digital/sentry-netlify-v2 1.2.1 Source cves: CVE-2025-65944 Source advisory: OSV:GHSA-6465-JGVQ-JHGP...

@doist/ui-extensions-server (3.5.7), @fdm-monster/server (1.9.1) +29 more potentially affected by CVE-2025-65944 via @sentry/node-core (>=10.11.0, <=10.26.0)

@sentry/node-core NPM version =10.11.0, =0.0.22, =0.1.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.0.19, =10.11.0, =10.11.0, =10.11.0, =10.26.0 and more Source cves: CVE-2025-65944 Source advisory: OSV:GHSA-6465-JGVQ-JHGP...

@doist/ui-extensions-server (3.5.7), @fdm-monster/server (1.9.1) +29 more potentially affected by CVE-2025-65944 via @sentry/node-core (>=10.11.0, <=10.26.0)

@sentry/node-core NPM version =10.11.0, =0.0.22, =0.1.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.0.19, =10.11.0, =10.11.0, =10.11.0, =10.26.0 and more Source cves: CVE-2025-65944 Source advisory: SNYK:JS-SENTRYNODECORE-14105055...

@laboratory-one/api-components (>=0.0.22, <=26.63.0) potentially affected by CVE-2025-65944 via @sentry/nestjs (10.12.0)

@sentry/nestjs NPM version 10.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sentry/nestjs and may be impacted: - @laboratory-one/api-components =0.0.22, =26.63.0 Source cves: CVE-2025-65944 Source advisory: OSV:GHSA-6465-JGVQ-JHGP...

@doist/ui-extensions-server (3.5.7), @fdm-monster/server (1.9.1) +53 more potentially affected by CVE-2025-65944 via @sentry/core (>=10.11.0, <=10.26.0)

@sentry/core NPM version =10.11.0, =0.0.22, =0.1.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =12.1.0, =0.0.19, =10.11.0, =10.26.0 and more Source cves: CVE-2025-65944 Source advisory: SNYK:JS-SENTRYCORE-14105053...

@sentry/nuxt (>=10.11.0, <=10.26.0), @sentry/sveltekit (>=10.11.0, <=10.26.0) potentially affected by CVE-2025-65944 via @sentry/cloudflare (>=10.11.0, <=10.26.0)

@sentry/cloudflare NPM version =10.11.0, =10.11.0, =10.11.0, =10.26.0 Source cves: CVE-2025-65944 Source advisory: SNYK:JS-SENTRYCLOUDFLARE-14105052...

@doist/ui-extensions-server (3.5.7), @fdm-monster/server (1.9.1) +28 more potentially affected by CVE-2025-65944 via @sentry/node (>=10.11.0, <=10.26.0)

@sentry/node NPM version =10.11.0, =0.0.22, =0.1.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.34.0, =0.0.19, =10.11.0, =10.11.0, =10.11.0, =10.26.0 and more Source cves: CVE-2025-65944 Source advisory: OSV:GHSA-6465-JGVQ-JHGP...

@appium/base-driver (>=10.0.0-rc.2, <=10.1.1), @breautek/storm (>=9.0.0, <=9.2.4) +78 more potentially affected by CVE-2025-13466 via body-parser (2.2.0)

body-parser NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on body-parser and may be impacted: - @appium/base-driver =10.0.0-rc.2, =9.0.0, =3.8.8, =1.114.0, =11.8.0, =3.4.0, =11.0.19, =0.1.0, =8.13.0-nightly.20250611115025, =4.0.1,...

org.webjars.npm:express (>=4.16.4, <=4.18.1), org.webjars.npm:nestjs__platform-express (>=8.4.7, <=9.0.0-next.2) potentially affected by CVE-2025-13466 via org.webjars.npm:body-parser (>=1.18.3, <=1.20.0)

org.webjars.npm:body-parser MAVEN version =1.18.3, =4.16.4, =8.4.7, =9.0.0-next.2 Source cves: CVE-2025-13466 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14105060...

@asyncapi/cli (>=1.4.0, <=2.16.7) potentially affected by unknown CVE via @asyncapi/studio (0.20.2)

@asyncapi/studio NPM version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/studio and may be impacted: - @asyncapi/cli =1.4.0, =2.16.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190863...

@billyjacoby/clerk-react-native (>=1.0.0, <=1.0.4), @breakthroughsales/chrome-extension-remote-code-load-fix (>=1.0.16, <=1.0.22) +9 more potentially affected by CVE-2025-63700 via @clerk/clerk-js (>=5.0.0, <=5.85.0)

@clerk/clerk-js NPM version =5.0.0, =1.0.0, =1.0.16, =0.0.1-canary.v7ae5681, =1.0.0-alpha-v5.0, =1.0.0-alpha-v5.0, =0.1.0, =0.4.2, =0.0.0-snapshot-20240531221728, =1.0.17, =0.8.0, =0.0.0-1765923, =0.23.2 Source cves: CVE-2025-63700 Source advisory: OSV:GHSA-3MM3-WFPV-Q85G...

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.49.5-alpha) +10 more potentially affected by CVE-2025-64755 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.27)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.31.0-alpha, =0.5.2, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =0.10.2, =0.11.2, =0.13.22 Source cves: CVE-2025-64755 Source advisory: OSV:GHSA-7MV8-J34Q-VP7Q...

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.49.5-alpha) +10 more potentially affected by CVE-2025-64755 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.27)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.31.0-alpha, =0.5.2, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =0.10.2, =0.11.2, =0.13.22 Source cves: CVE-2025-64755 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-14089789...

@arianrhodsandlot/release-kit (>=0.1.0, <=0.1.6), @blueprintui/cli (>=0.7.2, <=0.11.3) +50 more potentially affected by CVE-2025-13437 via zx (>=8.0.0, <=8.8.4-lite)

zx NPM version =8.0.0, =0.1.0, =0.7.2, =0.9.0, =0.0.22, =1.2.3, =2.0.0-alpha.45, =0.1.0, =2.0.2-96651090, =1.1.0-beta-0acd9fac-20250513, =0.1.0, =0.3.1, =0.0.2, =0.0.1, =0.0.2, =0.0.6 and more Source cves: CVE-2025-13437 Source advisory: OSV:GHSA-W87R-VG9Q-CRQM...

@bpa-solutions/assistant (>=13.5.0-dev, <=13.5.0), @mazaal-dev/piece-markdown-to-pdf (0.0.2) +2 more potentially affected by CVE-2025-65108 via md-to-pdf (>=5.0.1, <=5.2.4)

md-to-pdf NPM version =5.0.1, =13.5.0-dev, =0.11.1, =0.5.52, =0.5.65 Source cves: CVE-2025-65108 Source advisory: SNYK:JS-MDTOPDF-14089788...

@bpa-solutions/assistant (>=13.5.0-dev, <=13.5.0), @mazaal-dev/piece-markdown-to-pdf (0.0.2) +2 more potentially affected by CVE-2025-65108 via md-to-pdf (>=5.0.1, <=5.2.4)

md-to-pdf NPM version =5.0.1, =13.5.0-dev, =0.11.1, =0.5.52, =0.5.65 Source cves: CVE-2025-65108 Source advisory: OSV:GHSA-547R-QMJM-8HVW...

@avalabs/avalanche-module (>=0.0.0-CP-8940-20240801175729, <=4.0.3), @avalabs/bitcoin-module (>=0.0.0-CP-8940-20240801175729, <=4.0.3) +20 more potentially affected by CVE-2025-64767 via @hpke/core (>=1.2.5, <=1.7.4)

@hpke/core NPM version =1.2.5, =0.0.0-CP-8940-20240801175729, =0.0.0-CP-8940-20240801175729, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-canary.a436aaa.0,...

@avalabs/avalanche-module (>=0.0.0-CP-8940-20240801175729, <=4.0.3), @avalabs/bitcoin-module (>=0.0.0-CP-8940-20240801175729, <=4.0.3) +20 more potentially affected by CVE-2025-64767 via @hpke/core (>=1.2.5, <=1.7.4)

@hpke/core NPM version =1.2.5, =0.0.0-CP-8940-20240801175729, =0.0.0-CP-8940-20240801175729, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-canary.a436aaa.0, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-alpha.197, =2.8.0-canary.a436aaa.0,...