proto-types (>=0.1.0, <=0.1.11), protocheck-core (>=0.1.0, <=0.1.11) potentially affected by CVE-2025-62162 via cel (0.11.0)

cel CARGO version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on cel and may be impacted: - proto-types =0.1.0, =0.1.0, =0.1.11 Source cves: CVE-2025-62162 Source advisory: OSV:GHSA-WXWX-9FH7-5MRW...

choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2025-61925 via @astrojs/node (>=9.2.2, <=9.3.0)

@astrojs/node NPM version =9.2.2, =0.3.1, =0.4.0 Source cves: CVE-2025-61925 Source advisory: SNYK:JS-ASTROJSNODE-13535086...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +28 more potentially affected by CVE-2025-61925 via astro (>=5.0.0-beta.5, <=5.14.1)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.0-dev-20250414184926, =1.13.2, =0.0.1, =0.0.1, =1.0.21, =1.0.22 and more Source cves: CVE-2025-61925 Source advisory: SNYK:JS-ASTRO-13535085...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +28 more potentially affected by CVE-2025-61925 via astro (>=5.0.0-beta.5, <=5.14.1)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.0-dev-20250414184926, =1.13.2, =0.0.1, =0.0.1, =1.0.21, =1.0.22 and more Source cves: CVE-2025-61925 Source advisory: OSV:GHSA-5FF5-9FCW-VG88...

ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.2.0), ca.bc.gov.tno:elastic (>=0.0.1-alpha, <=0.0.5-alpha) +629 more potentially affected by CVE-2025-37727 via org.elasticsearch.plugin:reindex-client (>=5.0.0, <=7.17.29)

org.elasticsearch.plugin:reindex-client MAVEN version =5.0.0, =j8.2.2.0, =0.0.1-alpha, =0.1.0, =2.1.0.m8, =2.1.0.m8, =1.4.1, =1.4.0-alpha, =1.4.1, =1.4.0-alpha, =1.2.0.release, =1.1.1.release, =1.4.2.release - cn.patterncat:spring-boot-starter-elasticsearch 0.0.1 -...

@better-auth/cli (>=1.0.0-canary.2, <=1.3.25), @bgord/bun (>=0.18.0, <=0.29.10) +27 more potentially affected by CVE-2025-61928 via better-auth (>=1.0.0, <=1.3.25)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.18.0, =0.5.2, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =0.1.8, =0.1.0, =0.10.0, =0.11.1-canary.15, =1.0.0, =1.1.8 and more Source cves: CVE-2025-61928 Source advisory: OSV:GHSA-99H5-PJCV-GR6V...

@better-auth/cli (>=1.2.0-beta.1, <=1.3.25), @bgord/bun (>=0.18.0, <=0.29.10) +25 more potentially affected by CVE-2025-61928 via better-auth (>=1.2.0, <=1.3.25)

better-auth NPM version =1.2.0, =1.2.0-beta.1, =0.18.0, =0.5.2, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =0.1.8, =0.1.0, =0.10.0, =0.11.1-canary.15, =1.0.0, =1.1.8 and more Source cves: CVE-2025-61928 Source advisory: SNYK:JS-BETTERAUTH-13537497...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +25 more potentially affected by unknown CVE via n8n (>=0.81.0, <=2.33.7)

n8n NPM version =0.81.0, =0.1.13, =2.35.2, =0.216.1, =2.34.0, =23.1.4, =0.0.1, =0.1.0, =0.1.0, =0.18.0, =0.25.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8N-13524400...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +36 more potentially affected by unknown CVE via n8n-nodes-base (>=0.1.0, <=2.34.2)

n8n-nodes-base NPM version =0.1.0, =0.1.13, =0.1.0, =2.35.2, =2.32.0, =0.216.1, =2.34.0, =0.1.4, =23.1.4, =0.1.0, =0.0.1, =0.0.10 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-13524401...

@iflow-mcp/theycallmeholla-schema-org-mcp (0.1.0), @wonderwhy-er/desktop-commander (>=0.2.29-alpha.3, <=0.2.29-alpha.4) +2 more potentially affected by CVE-2025-11491 via @wonderwhy-er/desktop-commander (>=0.1.39, <=0.2.47)

@wonderwhy-er/desktop-commander NPM version =0.1.39, =0.2.29-alpha.3, =1.0.0, =1.0.1 - familiar-mcp 0.1.0 Source cves: CVE-2025-11491 Source advisory: SNYK:JS-WONDERWHYERDESKTOPCOMMANDER-13535096...

@iflow-mcp/theycallmeholla-schema-org-mcp (0.1.0), @wonderwhy-er/desktop-commander (>=0.2.29-alpha.3, <=0.2.29-alpha.4) +2 more potentially affected by CVE-2025-11490 via @wonderwhy-er/desktop-commander (>=0.1.39, <=0.2.47)

@wonderwhy-er/desktop-commander NPM version =0.1.39, =0.2.29-alpha.3, =1.0.0, =1.0.1 - familiar-mcp 0.1.0 Source cves: CVE-2025-11490 Source advisory: SNYK:JS-WONDERWHYERDESKTOPCOMMANDER-13535095...

@iflow-mcp/theycallmeholla-schema-org-mcp (0.1.0), @wonderwhy-er/desktop-commander (>=0.2.29-alpha.3, <=0.2.29-alpha.4) +2 more potentially affected by CVE-2025-11489 via @wonderwhy-er/desktop-commander (>=0.1.39, <=0.2.47)

@wonderwhy-er/desktop-commander NPM version =0.1.39, =0.2.29-alpha.3, =1.0.0, =1.0.1 - familiar-mcp 0.1.0 Source cves: CVE-2025-11489 Source advisory: SNYK:JS-WONDERWHYERDESKTOPCOMMANDER-13535094...

forc (>=0.1.3, <=0.33.0), forc-client (>=0.20.1, <=0.33.0) +29 more potentially affected by unknown CVE via fuel-vm (>=0.1.1, <=0.22.7)

fuel-vm CARGO version =0.1.1, =0.1.3, =0.20.1, =0.10.0, =0.10.0, =0.1.8, =0.10.0, =0.6.1, =0.30.1, =0.6.1, =0.9.1, =0.9.1, =0.9.1, =0.11.2, =0.1.2, =0.9.1, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2PGJ-5CV2-6XXW...

@activepieces/piece-imap (>=0.2.17, <=0.3.2), @akiflow/mailauth (>=0.0.1, <=0.0.2) +71 more potentially affected by CVE-2025-13033 via nodemailer (>=7.0.2, <=7.0.6)

nodemailer NPM version =7.0.2, =0.2.17, =0.0.1, =1.0.0, =3.3.1, =0.0.1, =0.6.0, =5.1.663-alpha, =1.2.4, =29.1.0, =1.0.1, =2.12.3-snapshot-1749038455154, =4.0.0, =1.0.25, =8.0.1, =7.0.7, =8.1.17 and more Source cves: CVE-2025-13033 Source advisory: OSV:GHSA-MM7P-FCC7-PG87...

@activepieces/piece-imap (>=0.2.17, <=0.3.2), @akiflow/mailauth (>=0.0.1, <=0.0.2) +71 more potentially affected by unknown CVE via nodemailer (>=7.0.2, <=7.0.6)

nodemailer NPM version =7.0.2, =0.2.17, =0.0.1, =1.0.0, =3.3.1, =0.0.1, =0.6.0, =5.1.663-alpha, =1.2.4, =29.1.0, =1.0.1, =2.12.3-snapshot-1749038455154, =4.0.0, =1.0.25, =8.0.1, =7.0.7, =8.1.17 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-13378253...

wrflib_widget (>=0.0.2, <=0.0.3) potentially affected by unknown CVE via wrflib (>=0.0.2, <=0.0.3)

wrflib CARGO version =0.0.2, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-466C-PFVV-V83G...

@circleci/agents (>=2.13.0-canary.3413b9c, <=2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59829 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.119)

@anthropic-ai/claude-code NPM version =1.0.8, =2.13.0-canary.3413b9c, =0.21.0, =0.1.7, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59829 Source advisory: OSV:GHSA-66M2-GX93-V996...

@circleci/agents (>=2.13.0-canary.3413b9c, <=2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59829 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.119)

@anthropic-ai/claude-code NPM version =1.0.8, =2.13.0-canary.3413b9c, =0.21.0, =0.1.7, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59829 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13299550...

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59536 Source advisory: OSV:GHSA-4FGQ-FPQ9-MR3G...

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59536 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-13299835...

wrflib_widget (>=0.0.2, <=0.0.3) potentially affected by unknown CVE via wrflib (>=0.0.2, <=0.0.3)

wrflib CARGO version =0.0.2, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0072...

mysticcelestial (1.0.1) potentially affected by CVE-2025-61668 via @plone/volto (18.10.1)

@plone/volto NPM version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @plone/volto and may be impacted: - mysticcelestial 1.0.1 Source cves: CVE-2025-61668 Source advisory: OSV:GHSA-M8RJ-PPPH-MJ33...

mysticcelestial (1.0.1) potentially affected by CVE-2025-61668 via @plone/volto (18.10.1)

@plone/volto NPM version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @plone/volto and may be impacted: - mysticcelestial 1.0.1 Source cves: CVE-2025-61668 Source advisory: SNYK:JS-PLONEVOLTO-13173379...

7ghost (>=4.11.0, <=4.11.46), @100k/type-graphql-filter-mikroorm (>=0.0.1, <=0.3.5) +1593 more potentially affected by CVE-2025-56200 via validator (>=13.0.0, <=13.15.15)

validator NPM version =13.0.0, =4.11.0, =0.0.1, =1.0.0, =0.0.0-dev-20240828032938, =0.1.1, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938,...

@criticide/maxfest (>=1.0.19, <=1.2.3), @criticide/maxfestvest (0.1.0) +19 more potentially affected by CVE-2025-56571 +1 more via financejs (>=4.0.0, <=4.1.0)

financejs NPM version =4.0.0, =1.0.19, =1.0.2, =0.0.6, =0.0.1, =1.0.0, =0.0.1, =1.0.1, =1.0.47, =1.0.23, =1.0.32, =0.1.0, =0.9.0 - estiband 0.1.0 - gulp-hotcopy 0.5.6 and more Source cves: CVE-2025-56571, CVE-2025-56572 Source advisory: SNYK:JS-FINANCEJS-13169952...

amortization (>=0.0.1, <=1.1.1) potentially affected by CVE-2025-56571 via financejs (4.0.0)

financejs NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on financejs and may be impacted: - amortization =0.0.1, =1.1.1 Source cves: CVE-2025-56571 Source advisory: OSV:GHSA-F8R4-MF27-RF7M...

amortization (>=0.0.1, <=1.1.1) potentially affected by CVE-2025-56572 via financejs (4.0.0)

financejs NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on financejs and may be impacted: - amortization =0.0.1, =1.1.1 Source cves: CVE-2025-56572 Source advisory: OSV:GHSA-5Q7Q-P8PC-782H...

@criticide/maxfest (>=1.0.19, <=1.2.3), @criticide/maxfestvest (0.1.0) +19 more potentially affected by CVE-2025-56571 +1 more via financejs (>=4.0.0, <=4.1.0)

financejs NPM version =4.0.0, =1.0.19, =1.0.2, =0.0.6, =0.0.1, =1.0.0, =0.0.1, =1.0.1, =1.0.47, =1.0.23, =1.0.32, =0.1.0, =0.9.0 - estiband 0.1.0 - gulp-hotcopy 0.5.6 and more Source cves: CVE-2025-56571, CVE-2025-56572 Source advisory: SNYK:JS-FINANCEJS-13169918...

@arcblock/gatsby-theme-docs (>=5.7.0, <=7.34.5), @changeinc/components (>=1.0.4, <=1.0.20) +87 more potentially affected by CVE-2025-3193 via algoliasearch-helper (>=2.1.2, <=2.28.1)

algoliasearch-helper NPM version =2.1.2, =5.7.0, =1.0.4, =1.0.4, =1.0.0, =2.2.1-custom, =0.0.7, =0.1.2, =0.1.4, =0.2.3, =0.2.1, =0.0.1, =2.0.0, =0.0.0, =1.9.0, =1.0.0, =1.4.2 and more Source cves: CVE-2025-3193 Source advisory: OSV:GHSA-529Q-4J3P-7C5R...

p2panda-rs (>=0.3.0, <=0.9.0) potentially affected by unknown CVE via openmls (0.4.1)

openmls CARGO version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on openmls and may be impacted: - p2panda-rs =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-QR9H-X63W-VQFM...

@revisium/admin (>=1.4.0, <=2.0.0) potentially affected by CVE-2025-59845 via @apollo/sandbox (2.7.1)

@apollo/sandbox NPM version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/sandbox and may be impacted: - @revisium/admin =1.4.0, =2.0.0 Source cves: CVE-2025-59845 Source advisory: SNYK:JS-APOLLOSANDBOX-13110033...

@revisium/admin (>=1.4.0, <=2.0.0) potentially affected by CVE-2025-59845 via @apollo/sandbox (2.7.1)

@apollo/sandbox NPM version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on @apollo/sandbox and may be impacted: - @revisium/admin =1.4.0, =2.0.0 Source cves: CVE-2025-59845 Source advisory: OSV:GHSA-W87V-7W53-WWXV...

gobby (>=0.2.5, <=0.2.13), memu-py (>=1.3.0, <=1.5.1) potentially affected by CVE-2025-10965 via lazyllm (1.2.2)

lazyllm PYPI version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on lazyllm and may be impacted: - gobby =0.2.5, =1.3.0, =1.5.1 Source cves: CVE-2025-10965 Source advisory: SNYK:PYTHON-LAZYLLM-13110091...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10952 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10952 Source advisory: SNYK:PYTHON-MLLOGGER-13110030...

125softnlp (0.0.1), a2 (>=0.10.11, <=0.10.13) +4949 more potentially affected by CVE-2025-55559 via tensorflow (>=1.0.1, <=2.21.0)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.5.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2025-55559 Source advisory: SNYK:PYTHON-TENSORFLOW-13052810...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +27529 more potentially affected by CVE-2025-55554 via torch (>=1.0.0, <=2.13.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.10.5, =0.10.13 and more Source cves: CVE-2025-55554 Source advisory: SNYK:PYTHON-TORCH-13052969...

@extplug/cors-proxy (>=1.0.0, <=1.0.1), @ir-engine/server-core (1.6.0) +34 more potentially affected by CVE-2020-36851 via cors-anywhere (>=0.2.5, <=0.4.4)

cors-anywhere NPM version =0.2.5, =1.0.0, =0.0.7, =0.1.0, =0.13.0, =0.0.19, =0.5.0, =0.5.0, =1.0.0, =1.2.0, =1.1.0, =4.0.0-beta.4, =5.0.0 and more Source cves: CVE-2020-36851 Source advisory: SNYK:JS-CORSANYWHERE-13109647...

@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +162 more potentially affected by CVE-2025-57317 via apidoc-core (>=0.2.2, <=0.15.0)

apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.4.3, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =1.0.10 - @comodinx/api-doc 1.0.0 and more Source cves: CVE-2025-57317 Source advisory: SNYK:JS-APIDOCCORE-13110017...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10950 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10950 Source advisory: SNYK:PYTHON-MLLOGGER-13110026...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10951 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10951 Source advisory: SNYK:PYTHON-MLLOGGER-13110027...

@abcpros/minimal-slp-wallet (>=3.0.1, <=3.0.4), @abcpros/minimal-xpi-slp-wallet (>=3.0.4, <=3.0.10) +151 more potentially affected by CVE-2025-57317 via apidoc-core (>=0.2.2, <=0.12.0)

apidoc-core NPM version =0.2.2, =3.0.1, =3.0.4, =0.2.2, =1.0.2, =3.0.10, =1.1.7, =1.0.1, =1.0.5, =0.6.9, =1.0.4, =0.0.3, =0.0.12 and more Source cves: CVE-2025-57317 Source advisory: OSV:GHSA-5Q53-78F2-6GF8...

@extplug/cors-proxy (>=1.0.0, <=1.0.1), @ir-engine/server-core (1.6.0) +34 more potentially affected by CVE-2020-36851 via cors-anywhere (>=0.2.5, <=0.4.4)

cors-anywhere NPM version =0.2.5, =1.0.0, =0.0.7, =0.1.0, =0.13.0, =0.0.19, =0.5.0, =0.5.0, =1.0.0, =1.2.0, =1.1.0, =4.0.0-beta.4, =5.0.0 and more Source cves: CVE-2020-36851 Source advisory: OSV:GHSA-R3JV-XFGX-GJ24...

@diningcity/capacitor-qr-scanner (>=0.0.7, <=0.0.8), @mojitonft/hooks (1.0.1-alpha.4) +93 more potentially affected by CVE-2025-26278 via dref (0.0.6)

dref NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on dref and may be impacted: - @diningcity/capacitor-qr-scanner =0.0.7, =1.7.0, =0.0.1, =11.1.1, =3.3.3, =0.0.0-beta, =0.0.2, =1.0.2, =0.0.40, =0.0.2, =0.0.1, =0.0.1, =0.1.0, =0.1.19 a...

@diningcity/capacitor-qr-scanner (>=0.0.7, <=0.0.8), @mojitonft/hooks (1.0.1-alpha.4) +93 more potentially affected by CVE-2025-26278 via dref (0.0.6)

dref NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on dref and may be impacted: - @diningcity/capacitor-qr-scanner =0.0.7, =1.7.0, =0.0.1, =11.1.1, =3.3.3, =0.0.0-beta, =0.0.2, =1.0.2, =0.0.40, =0.0.2, =0.0.1, =0.0.1, =0.1.0, =0.1.19 a...

locize-cli (>=3.6.0, <=3.14.0) potentially affected by CVE-2025-57318 via csvjson (5.0.0)

csvjson NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on csvjson and may be impacted: - locize-cli =3.6.0, =3.14.0 Source cves: CVE-2025-57318 Source advisory: OSV:GHSA-XQ4F-3JXP-QV6M...

@advclb/sassdoc-loader (0.1.0), @alifd/sassdoc-parser (>=0.1.0, <=2.0.1) +148 more potentially affected by CVE-2025-57326 via sassdoc-extras (>=1.0.3, <=3.0.0)

sassdoc-extras NPM version =1.0.3, =0.1.0, =0.0.3, =0.0.3, =0.0.8, =3.0.0, =3.2.0, =2.3.0-rc.0, =0.0.1, =0.1.2, =10.1.0, =10.18.0-rc.0, =0.1.18, =99.0.372 and more Source cves: CVE-2025-57326 Source advisory: SNYK:JS-SASSDOCEXTRAS-13110008...

0x-hunter-core (>=1.0.0-13, <=1.0.1-5), 0x-relayer-cat (>=0.0.3, <=0.0.10) +2133 more potentially affected by CVE-2025-57329 via web3-core-method (>=1.0.0-beta.52, <=1.10.3)

web3-core-method NPM version =1.0.0-beta.52, =1.0.0-13, =0.0.3, =0.0.31, =0.1.0, =0.115.0, =0.115.0, =0.115.0, =0.46.0, =0.46.0, =0.115.0, =0.115.0, =0.50.0, =0.115.0, =0.123.2 and more Source cves: CVE-2025-57329 Source advisory: OSV:GHSA-2J4C-9QQQ-896R...

algeb (>=1.0.0, <=5.4.0), anys (>=0.0.1, <=9.0.0) +37 more potentially affected by CVE-2025-57351 via ts-fns (>=0.0.11, <=13.1.3)

ts-fns NPM version =0.0.11, =1.0.0, =0.0.1, =0.0.1, =1.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.2, =9.0.0 and more Source cves: CVE-2025-57351 Source advisory: SNYK:JS-TSFNS-13109930...

graphos-cli (>=1.0.0, <=1.0.1), panshi-client (>=0.0.7, <=0.0.8) potentially affected by CVE-2025-57320 via json-schema-editor-visual (>=1.1.1, <=2.0.0)

json-schema-editor-visual NPM version =1.1.1, =1.0.0, =0.0.7, =0.0.8 Source cves: CVE-2025-57320 Source advisory: SNYK:JS-JSONSCHEMAEDITORVISUAL-13110010...

@afif_hh/composable (1.0.2), @afif_hh/ui_components (>=1.0.5, <=1.0.30) +67 more potentially affected by CVE-2025-57325 via rollbar (>=2.1.0, <=2.26.4)

rollbar NPM version =2.1.0, =1.0.5, =1.0.0, =0.0.2, =0.0.5, =0.0.2-beta.1, =1.0.0-alpha.1, =1.0.5, =1.1.12, =1.3.10, =1.1.11, =1.0.3, =2.1.0-alpha.3, =2.1.0-alpha.3, =2.1.3 and more Source cves: CVE-2025-57325 Source advisory: SNYK:JS-ROLLBAR-13110036...