@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.2), @angular/build (>=20.2.0-next.3, <=21.0.0-next.2) +30 more potentially affected by CVE-2025-58751 via vite (>=7.1.0, <=7.1.4)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =2.14.0, =30.0.0, =16.0.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =2.19.8, =2.19.8, =14.314.0, =14.314.0, =9.6.3, =0.0.0-snapshot-0360a7c2f707db55df213993503b56c6a1d96d0e, =0.4.0-dev.8 and more Source cves: CVE-2025-58751 Sourc...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +191 more potentially affected by CVE-2025-58751 via vite (>=6.0.0, <=6.3.5)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +463 more potentially affected by CVE-2025-58751 via vite (>=5.0.0, <=5.4.19)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-58751 Source advisory: OSV:GHSA-G4JQ-H2W9-997C...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-58751 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-58751 Source advisory: OSV:GHSA-G4JQ-H2W9-997C...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +191 more potentially affected by CVE-2025-58752 via vite (>=6.0.0, <=6.3.5)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +463 more potentially affected by CVE-2025-58752 via vite (>=5.0.0, <=5.4.19)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-58752 Source advisory: OSV:GHSA-JQFW-VQ24-V9C3...

@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.2), @angular/build (>=20.2.0-next.3, <=21.0.0-next.2) +30 more potentially affected by CVE-2025-58752 via vite (>=7.1.0, <=7.1.4)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =2.14.0, =30.0.0, =16.0.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =2.19.8, =2.19.8, =14.314.0, =14.314.0, =9.6.3, =0.0.0-snapshot-0360a7c2f707db55df213993503b56c6a1d96d0e, =0.4.0-dev.8 and more Source cves: CVE-2025-58752 Sourc...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-58752 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-58752 Source advisory: OSV:GHSA-JQFW-VQ24-V9C3...

@cllu/awp-sw (0.4.4) potentially affected by CVE-2025-58765 via @webrecorder/wabac (2.17.3)

@webrecorder/wabac NPM version 2.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on @webrecorder/wabac and may be impacted: - @cllu/awp-sw 0.4.4 Source cves: CVE-2025-58765 Source advisory: SNYK:JS-WEBRECORDERWABAC-12670884...

1997ckf-ui-comp (>=0.0.9, <=0.0.17), 1data-business (>=0.0.1, <=0.0.3) +6156 more potentially affected by CVE-2025-57665 via element-plus (>=1.0.1-beta.0, <=2.14.4)

element-plus NPM version =1.0.1-beta.0, =0.0.9, =0.0.1, =1.0.0, =0.1.11, =0.1.0, =1.0.0, =0.3.1, =1.0.0-beta.0, =1.0.0, =0.0.1-alpha.10, =0.1.6-alpha.17, =0.1.6-alpha.18 - @17mkh/ui 0.0.2 - @1api/serve 0.1.0 and more Source cves: CVE-2025-57665 Source advisory: SNYK:JS-ELEMENTPLUS-12670415...

@12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.7), @142vip/vitepress (>=0.0.1-alpha.14, <=0.0.1-alpha.24) +583 more potentially affected by CVE-2025-57665 via element-plus (>=2.0.0, <=2.10.7)

element-plus NPM version =2.0.0, =1.0.0-beta.0, =0.0.1-alpha.14, =1.0.0-beta.1, =0.6.1-annotator.1, =1.1.2, =2.0.0, =0.0.0-beta.7, =0.7.0-annotator.0, =1.0.3, =1.0.0, =1.0.0, =0.1.0-beta.0, =3.72.0, =3.361.1 - @acegroup/cli-templates-vue3-element-admin 1.0.0 - @advanced-elements/form 1.0.0 and mo...

keeshond_editor (>=0.1.0, <=0.13.0), keeshond_migrator (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4, <=0.3.0)

toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: OSV:GHSA-PFP7-VXGR-83PW...

drivesync (0.1.0), geckopanda (>=0.1.0, <=0.2.0) +601 more potentially affected by unknown CVE via google-apis-common (>=4.0.1, <=6.0.4)

google-apis-common CARGO version =4.0.1, =0.1.0, =5.0.2-beta-1+20230114, =5.0.2-beta-1+20230123, =5.0.2-beta-1+20230120, =5.0.2-beta-1+20200708, =5.0.2-beta-1+20230123, =5.0.2-beta-1+20230123, =5.0.2-beta-1+20210330, =5.0.4+20210330 and more Source cves: unknown CVE Source advisory:...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +191 more potentially affected by CVE-2025-58752 via vite (>=6.0.0, <=6.3.5)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +463 more potentially affected by CVE-2025-58752 via vite (>=5.0.0, <=5.4.19)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-58752 Source advisory: SNYK:JS-VITE-12558116...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-58752 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-58752 Source advisory: SNYK:JS-VITE-12558116...

org.webjars.npm:vitepress (1.0.0-draft.8) potentially affected by CVE-2025-58752 via org.webjars.npm:vite (3.0.0-beta.9)

org.webjars.npm:vite MAVEN version 3.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vite and may be impacted: - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2025-58752 Source advisory:...

@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.2), @angular/build (>=20.2.0-next.3, <=21.0.0-next.2) +30 more potentially affected by CVE-2025-58752 via vite (>=7.1.0, <=7.1.4)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =2.14.0, =30.0.0, =16.0.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =2.19.8, =2.19.8, =14.314.0, =14.314.0, =9.6.3, =0.0.0-snapshot-0360a7c2f707db55df213993503b56c6a1d96d0e, =0.4.0-dev.8 and more Source cves: CVE-2025-58752 Sourc...

@clidey/dory (0.35.0), @noooooooode/merv (0.1.0) +7 more potentially affected by CVE-2025-58751 via sirv (>=3.0.0, <=3.0.1)

sirv NPM version =3.0.0, =0.0.1, =9.0.0-next.7, =0.1.0, =0.12.3, =1.6.0, =1.7.0 Source cves: CVE-2025-58751 Source advisory: SNYK:JS-SIRV-12558119...

@arturl/pulumi-mcp-server (0.1.9), @collegue/mcp (>=1.0.1, <=1.0.2) +76 more potentially affected by CVE-2025-58444 via @modelcontextprotocol/inspector-client (>=0.1.0, <=0.15.0)

@modelcontextprotocol/inspector-client NPM version =0.1.0, =1.0.1, =2.0.10, =0.0.0-semantically-released, =1.0.1, =0.0.0-alpha.0, =0.1.0, =0.1.0, =2.1.0, =2.1.1 - @iflow-mcp/cliffhall-gooseteam 0.3.0 - @iflow-mcp/dify-mcp-server-ts 1.0.0 - @iflow-mcp/dify-workflow-mcp 1.0.0 and more Source cves:...

@arturl/pulumi-mcp-server (0.1.9), @collegue/mcp (>=1.0.1, <=1.0.2) +71 more potentially affected by CVE-2025-58444 via @modelcontextprotocol/inspector (>=0.2.7, <=0.15.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =1.0.1, =2.0.10, =0.0.0-semantically-released, =1.0.1, =0.0.0-alpha.0, =0.1.0, =0.1.0, =2.1.0, =2.1.1 - @iflow-mcp/cliffhall-gooseteam 0.3.0 - @iflow-mcp/dify-mcp-server-ts 1.0.0 - @iflow-mcp/dify-workflow-mcp 1.0.0 and more Source cves:...

@antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1), @izzai/n8n-nodes-izzone (>=0.0.17, <=0.2.2) +38 more potentially affected by CVE-2025-56265 via n8n-workflow (>=1.24.0, <=1.103.3)

n8n-workflow NPM version =1.24.0, =0.1.5, =0.0.17, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =0.1.0, =0.21.34, =1.51.0, =1.4.1, =1.52.0 - ape-test-7-editor-ui 1.48.0 and more Source cves: CVE-2025-56265 Source advisory: SNYK:JS-N8NWORKFLOW-12997432...

@open-xchange/appsuite-codeceptjs (>=0.2.0, <=0.6.2), create-fintech-automation-test (>=1.0.4, <=1.0.5) +1 more potentially affected by CVE-2025-57285 via codeceptjs (>=3.6.2, <=3.6.10)

codeceptjs NPM version =3.6.2, =0.2.0, =1.0.4, =1.0.0, =1.0.4 Source cves: CVE-2025-57285 Source advisory: OSV:GHSA-34W8-MCWR-VG29...

@open-xchange/appsuite-codeceptjs (>=0.2.0, <=0.6.2), c-configure (>=1.0.1, <=2.1.5) +3 more potentially affected by CVE-2025-57285 via codeceptjs (>=3.0.7, <=3.6.10)

codeceptjs NPM version =3.0.7, =0.2.0, =1.0.1, =7.0.23, =1.0.4, =1.0.0, =1.0.4 Source cves: CVE-2025-57285 Source advisory: SNYK:JS-CODECEPTJS-12670804...

keeshond_editor (>=0.1.0, <=0.13.0), keeshond_migrator (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4, <=0.3.0)

toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: SNYK:RUST-TOODEE-12670801...

alexa (>=0.1.0, <=0.1.2), alipay-rs (>=0.2.0, <=0.4.6) +225 more potentially affected by unknown CVE via iron (>=0.1.21, <=0.6.1)

iron CARGO version =0.1.21, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =0.8.0, =0.14.0, =0.5.0, =0.7.0, =0.0.6, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0061...

accesskit_windows (>=0.5.0, <=0.10.4), accesskit_winit (>=0.2.0, <=0.7.2) +425 more potentially affected by unknown CVE via servo-fontconfig (>=0.4.0, <=0.5.1)

servo-fontconfig CARGO version =0.4.0, =0.5.0, =0.2.0, =0.5.0, =0.11.0, =0.2.0, =0.1.0, =0.8.0, =0.6.0, =0.4.0, =0.8.0, =0.2.0, =0.6.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0059...

armory_cli (>=0.3.3, <=0.3.28), armory_lib (>=0.1.0, <=0.3.28) +157 more potentially affected by unknown CVE via crypto-hash (0.3.4)

crypto-hash CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on crypto-hash and may be impacted: - armorycli =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.0, =0.23.0, =0.1.0, =0.5.0, =0.3.10, =0.1.0, =0.5.2 and more Source cves...

aa2nucaln (0.1.1), agent-stream-kit (>=0.9.0, <=0.14.0) +432 more potentially affected by unknown CVE via custom_derive (0.1.7)

customderive CARGO version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on customderive and may be impacted: - aa2nucaln 0.1.1 - agent-stream-kit =0.9.0, =0.4.0, =0.1.1, =0.2.0, =0.4.3, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =3.1.3, =0.3.7, =0.8...

com.47deg:freestyle-http-http4s_2.11 (0.1.0), com.azavea.geotrellis:geotrellis-server-core_2.11 (>=4.0.1, <=4.2.0) +197 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.11 (>=0.9.1, <=2.1.0)

co.fs2:fs2-io2.11 MAVEN version =0.9.1, =4.0.1, =4.0.1, =4.0.1, =0.4.0, =0.4.0, =5.0.0-m1, =1.3.0, =0.1.0, =0.0.2, =0.12.7, =0.12.7, =0.12.7, =0.14.1, =0.16.1 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-13180115...

a2d (>=0.1.0, <=0.1.11), abscissa (>=0.6.0-beta.1, <=0.6.0-rc.0) +1446 more potentially affected by unknown CVE via adler (>=0.2.3, <=1.0.2)

adler CARGO version =0.2.3, =0.1.0, =0.6.0-beta.1, =0.6.0-beta.1, =0.6.0-beta.1, =0.1.5, =0.21.0-alpha.1, =0.0.1-dev.10, =0.4.0, =4.0.1-alpha.1, =0.2.0, =0.1.0, =0.0.2, =0.5.4-rc.1, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0056...

a2d (>=0.1.0, <=0.1.11), aa2nucaln (0.1.1) +3929 more potentially affected by unknown CVE via fxhash (>=0.1.2, <=0.2.1)

fxhash CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1-dev.10, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0057...

@vdart-code/web (1.19.0), @wix/cloud-provider-fetch-adapter (>=1.0.1, <=1.0.5) +11 more potentially affected by CVE-2025-58179 via @astrojs/cloudflare (>=11.2.0, <=12.6.3)

@astrojs/cloudflare NPM version =11.2.0, =1.0.1, =0.37.0, =0.37.0, =0.32.7, =0.32.7, =0.32.7, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.0.11, =1.0.37, =1.1.3 Source cves: CVE-2025-58179 Source advisory: SNYK:JS-ASTROJSCLOUDFLARE-12496482...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2024-10492 +1 more via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2024-10492, CVE-2025-10043 Source advisory:...

@vdart-code/web (1.19.0), @wix/cloud-provider-fetch-adapter (>=1.0.1, <=1.0.5) +11 more potentially affected by CVE-2025-58179 via @astrojs/cloudflare (>=11.2.0, <=12.6.3)

@astrojs/cloudflare NPM version =11.2.0, =1.0.1, =0.37.0, =0.37.0, =0.32.7, =0.32.7, =0.32.7, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.0.11, =1.0.37, =1.1.3 Source cves: CVE-2025-58179 Source advisory: OSV:GHSA-QPR4-C339-7VQ8...

@ckeditor/ckeditor5-adapter-ckfinder (>=46.0.0-alpha.0, <=46.0.2), @ckeditor/ckeditor5-ai (>=46.0.0-alpha.0, <=46.0.2) +89 more potentially affected by CVE-2025-58064 via @ckeditor/ckeditor5-clipboard (>=46.0.0, <=46.0.2-alpha.1)

@ckeditor/ckeditor5-clipboard NPM version =46.0.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0,...

@_sh/strapi-plugin-ckeditor (>=5.0.0, <=6.0.1), @abcxyz123321555/ckeditor5-build-test-version (>=0.7.0, <=0.10.2) +132 more potentially affected by CVE-2025-58064 via @ckeditor/ckeditor5-clipboard (>=44.2.0, <=45.2.1-alpha.10)

@ckeditor/ckeditor5-clipboard NPM version =44.2.0, =5.0.0, =0.7.0, =0.0.2, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.3.0 and more Source cves:...

@agentforce/adk (>=0.9.0, <=0.12.1), @bgord/bun (>=0.11.2, <=0.25.4) +30 more potentially affected by CVE-2025-58362 via hono (>=4.8.0, <=4.9.5)

hono NPM version =4.8.0, =0.9.0, =0.11.2, =1.3.0-next.4, =1.3.2, =4.0.0-alpha.5, =1.3.3, =0.67.0, =0.14.2, =0.4.0, =0.21.0, =0.21.0, =0.19.0, =0.16.0, =0.0.1, =0.0.6, =0.6.3 and more Source cves: CVE-2025-58362 Source advisory: SNYK:JS-HONO-12485162...

@agentforce/adk (>=0.9.0, <=0.12.1), @bgord/bun (>=0.11.2, <=0.25.4) +30 more potentially affected by CVE-2025-58362 via hono (>=4.8.0, <=4.9.5)

hono NPM version =4.8.0, =0.9.0, =0.11.2, =1.3.0-next.4, =1.3.2, =4.0.0-alpha.5, =1.3.3, =0.67.0, =0.14.2, =0.4.0, =0.21.0, =0.21.0, =0.19.0, =0.16.0, =0.0.1, =0.0.6, =0.6.3 and more Source cves: CVE-2025-58362 Source advisory: OSV:GHSA-9HP6-4448-45G2...

@finsemble/finsemble-core (>=8.15.0-beta.1, <=9.8.1-test.1), @finsemble/finsemble-electron-adapter (>=8.15.0-beta.1, <=9.8.1-test.1) +4 more potentially affected by CVE-2025-55305 via electron (>=35.0.0, <=35.5.1)

electron NPM version =35.0.0, =8.15.0-beta.1, =8.15.0-beta.1, =1.1.0, =0.16.0, =1.0.10, =1.0.16 Source cves: CVE-2025-55305 Source advisory: OSV:GHSA-VMQV-HX8Q-J7MG...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.9.4-iocd.1), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.9.4-iocd.1) +17 more potentially affected by CVE-2025-55305 via electron (>=37.0.0, <=37.2.6)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.0, =0.0.29, =0.0.38 and more Source cves: CVE-2025-55305 Source advisory: OSV:GHSA-VMQV-HX8Q-J7MG...

@ascua/electron (>=0.5.0, <=0.6.0), @electron-plugins/fastify-protocol (>=0.0.0, <=0.0.1) +6 more potentially affected by CVE-2025-55305 via electron (>=36.0.0, <=36.5.0)

electron NPM version =36.0.0, =0.5.0, =0.0.0, =2.0.0, =0.9.0, =0.81.0-nightly-20250531-cddfe4a03, =0.18.0, =0.19.0 - yt-play-cli 0.16.0 Source cves: CVE-2025-55305 Source advisory: OSV:GHSA-VMQV-HX8Q-J7MG...

@ascua/electron (>=0.5.0, <=0.6.0), @electron-plugins/fastify-protocol (>=0.0.0, <=0.0.1) +6 more potentially affected by CVE-2025-55305 via electron (>=36.0.0, <=36.5.0)

electron NPM version =36.0.0, =0.5.0, =0.0.0, =2.0.0, =0.9.0, =0.81.0-nightly-20250531-cddfe4a03, =0.18.0, =0.19.0 - yt-play-cli 0.16.0 Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

@finsemble/finsemble-core (>=8.15.0-beta.1, <=9.8.1-test.1), @finsemble/finsemble-electron-adapter (>=8.15.0-beta.1, <=9.8.1-test.1) +4 more potentially affected by CVE-2025-55305 via electron (>=35.0.0, <=35.5.1)

electron NPM version =35.0.0, =8.15.0-beta.1, =8.15.0-beta.1, =1.1.0, =0.16.0, =1.0.10, =1.0.16 Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.9.4-iocd.1), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.9.4-iocd.1) +17 more potentially affected by CVE-2025-55305 via electron (>=37.0.0, <=37.2.6)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.0, =0.0.29, =0.0.38 and more Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

ai-sdk-provider-claude-code (>=0.2.0, <=1.1.1), claude-code-webui (>=0.1.34, <=0.1.48) +5 more potentially affected by unknown CVE via @anthropic-ai/claude-code (>=1.0.8, <=1.0.83)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =0.1.34, =1.8.0, =1.9.0 - cyrus-ai 0.1.44 - cyrus-claude-runner 0.0.22 - cyrus-edge-worker 0.0.27 - locadex 0.0.2-alpha.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PH6W-F82W-28W6...

@_sh/strapi-plugin-ckeditor (>=5.0.0, <=6.0.1), @abcxyz123321555/ckeditor5-build-test-version (>=0.7.0, <=0.10.2) +132 more potentially affected by CVE-2025-58064 via ckeditor5 (>=44.2.0, <=45.2.1-alpha.10)

ckeditor5 NPM version =44.2.0, =5.0.0, =0.7.0, =0.0.2, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.3.0 and more Source cves: CVE-2025-58064 Source...

@ckeditor/ckeditor5-adapter-ckfinder (>=46.0.0-alpha.0, <=46.0.2), @ckeditor/ckeditor5-ai (>=46.0.0-alpha.0, <=46.0.2) +89 more potentially affected by CVE-2025-58064 via ckeditor5 (>=46.0.0, <=46.0.2-alpha.1)

ckeditor5 NPM version =46.0.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.2 and...

@ckeditor/ckeditor5-adapter-ckfinder (>=46.0.0-alpha.0, <=46.0.2), @ckeditor/ckeditor5-ai (>=46.0.0-alpha.0, <=46.0.2) +89 more potentially affected by CVE-2025-58064 via @ckeditor/ckeditor5-clipboard (>=46.0.0, <=46.0.2-alpha.1)

@ckeditor/ckeditor5-clipboard NPM version =46.0.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0, =46.0.0-alpha.0,...

@_sh/strapi-plugin-ckeditor (>=5.0.0, <=6.0.1), @abcxyz123321555/ckeditor5-build-test-version (>=0.7.0, <=0.10.2) +132 more potentially affected by CVE-2025-58064 via @ckeditor/ckeditor5-clipboard (>=44.2.0, <=45.2.1-alpha.10)

@ckeditor/ckeditor5-clipboard NPM version =44.2.0, =5.0.0, =0.7.0, =0.0.2, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.3.0 and more Source cves:...