-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1059 more potentially affected by CVE-2025-57752 via next (>=15.0.0, <=15.4.1)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-57752 Source advisory:...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1087 more potentially affected by CVE-2025-57752 via next (>=15.0.0, <=15.4.4)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-57752 Source advisory:...

@adenta/cms (>=0.0.6, <=1.1.1-0), @edrlab/thorium-web (>=1.0.0-beta.3, <=1.0.0-beta.8) +18 more potentially affected by CVE-2025-57752 via next (>=15.4.3, <=15.4.4)

next NPM version =15.4.3, =0.0.6, =1.0.0-beta.3, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =2.1.5, =2.1.21 and more Source cves: CVE-2025-57752 Source advisory: SNYK:JS-NEXT-12301496...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1059 more potentially affected by CVE-2025-55173 via next (>=15.0.0, <=15.4.1)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-55173 Source advisory:...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1087 more potentially affected by CVE-2025-55173 via next (>=15.0.0, <=15.4.4)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-55173 Source advisory:...

@adenta/cms (>=0.0.6, <=1.1.1-0), @edrlab/thorium-web (>=1.0.0-beta.3, <=1.0.0-beta.8) +18 more potentially affected by CVE-2025-55173 via next (>=15.4.3, <=15.4.4)

next NPM version =15.4.3, =0.0.6, =1.0.0-beta.3, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =2.1.5, =2.1.21 and more Source cves: CVE-2025-55173 Source advisory: SNYK:JS-NEXT-12265451...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1059 more potentially affected by CVE-2025-57822 via next (>=15.0.0, <=15.4.1)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-57822 Source advisory:...

@adenta/cms (>=0.0.6, <=1.1.1-0), @cognizant-ai-lab/ui-common (>=1.2.4-main.7f918ee.29, <=1.3.3) +82 more potentially affected by CVE-2025-57822 via next (>=15.4.3, <=15.4.6)

next NPM version =15.4.3, =0.0.6, =1.2.4-main.7f918ee.29, =1.0.0-beta.3, =1.0.2, =0.0.1, =0.0.1, =1.1.0, =1.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.1 - @madraka/nextjs-videoplayer 1.0.4 - @misikirayu/nextjs-blog-cms 1.0.0 and more Source cves: CVE-2025-57822 Source advisory: SNYK:JS-NEXT-12299318...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1145 more potentially affected by CVE-2025-57822 via next (>=15.0.0, <=15.4.6)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-57822 Source advisory:...

a3s-lane (>=0.1.0, <=0.4.0), abci-rs (>=0.7.0, <=0.11.3) +4221 more potentially affected by CVE-2025-58160 via tracing-subscriber (>=0.1.6, <=0.3.19)

tracing-subscriber CARGO version =0.1.6, =0.1.0, =0.7.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0, =0.1.5, =0.0.1-dev.10, =1.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.1, =0.5.0, =0.7.0-rc.2 and more Source cves: CVE-2025-58160 Source advisory: OSV:GHSA-XWFJ-JGWM-7WP5...

amaryllis (0.1.0), archivist (0.0.1) +26 more potentially affected by unknown CVE via webp (>=0.1.3, <=0.2.6)

webp CARGO version =0.1.3, =0.1.0, =0.0.4-alpha, =0.24.6, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.21.0, =0.21.0, =0.21.0, =0.21.0, =0.22.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q78-27F3-2JMH...

org.webjars.npm:ckeditor5 (>=44.1.0, <=44.3.0), org.webjars.npm:ckeditor__ckeditor5-adapter-ckfinder (>=44.1.0, <=44.3.0) +59 more potentially affected by CVE-2025-9670 via org.webjars.npm:turndown (7.2.0)

org.webjars.npm:turndown MAVEN version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:turndown and may be impacted: - org.webjars.npm:ckeditor5 =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0,...

0xkobold (>=0.5.0, <=0.8.0), 1dr-cli (>=0.2.10, <=0.5.14) +5304 more potentially affected by CVE-2025-9670 via turndown (>=4.0.1, <=7.2.4)

turndown NPM version =4.0.1, =0.5.0, =0.2.10, =0.1.0, =0.2.0, =0.0.1, =1.0.0, =1.0.0, =0.2.1, =0.1.0, =0.1.0, =0.1.1, =0.2.9, =0.5.0, =0.7.0 and more Source cves: CVE-2025-9670 Source advisory: SNYK:JS-TURNDOWN-12304081...

@contentql/core (>=0.1.2, <=0.3.5), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +12 more potentially affected by CVE-2025-4644 via @payloadcms/graphql (>=3.0.0, <=3.43.0-internal.693bd81)

@payloadcms/graphql NPM version =3.0.0, =0.1.2, =0.1.0, =3.0.0-alpha.0, =3.2.0, =0.2.0, =3.0.0-beta.10, =1.0.1, =0.1.0, =0.1.4, =1.0.0, =0.0.9-alpha.5, =3.0.0-beta.3, =0.0.3, =0.2.0, =0.2.42 Source cves: CVE-2025-4644 Source advisory: OSV:GHSA-26RV-H2HF-3FW4...

@contentql/core (>=0.1.2, <=0.3.5), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +12 more potentially affected by CVE-2025-4643 via @payloadcms/graphql (>=3.0.0, <=3.43.0-internal.693bd81)

@payloadcms/graphql NPM version =3.0.0, =0.1.2, =0.1.0, =3.0.0-alpha.0, =3.2.0, =0.2.0, =3.0.0-beta.10, =1.0.1, =0.1.0, =0.1.4, =1.0.0, =0.0.9-alpha.5, =3.0.0-beta.3, =0.0.3, =0.2.0, =0.2.42 Source cves: CVE-2025-4643 Source advisory: OSV:GHSA-5V66-M237-HWF7...

@contentql/core (>=0.1.2, <=0.3.5), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +9 more potentially affected by CVE-2025-4644 via @payloadcms/next (>=3.0.0-beta.48, <=3.43.0-internal.693bd81)

@payloadcms/next NPM version =3.0.0-beta.48, =0.1.2, =0.1.0, =3.2.0, =0.2.0, =0.1.0, =0.1.4, =1.0.0, =0.0.9-alpha.5, =3.0.0-beta.3, =0.0.3, =0.2.0, =0.2.42 Source cves: CVE-2025-4644 Source advisory: OSV:GHSA-26RV-H2HF-3FW4...

@contentql/core (>=0.1.2, <=0.3.5), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +9 more potentially affected by CVE-2025-4643 via @payloadcms/next (>=3.0.0-beta.48, <=3.43.0-internal.693bd81)

@payloadcms/next NPM version =3.0.0-beta.48, =0.1.2, =0.1.0, =3.2.0, =0.2.0, =0.1.0, =0.1.4, =1.0.0, =0.0.9-alpha.5, =3.0.0-beta.3, =0.0.3, =0.2.0, =0.2.42 Source cves: CVE-2025-4643 Source advisory: OSV:GHSA-5V66-M237-HWF7...

@ainsleydev/payload-helper (>=0.0.3, <=0.0.32), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +15 more potentially affected by CVE-2025-4644 via payload (>=3.0.0-alpha.49, <=3.35.1)

payload NPM version =3.0.0-alpha.49, =0.0.3, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =0.2.0, =3.1.1, =0.1.4, =1.0.0, =0.0.9-alpha.5, =1.0.0, =0.3.0-v3, =0.0.1, =1.0.0 and more Source cves: CVE-2025-4644 Source advisory: OSV:GHSA-26RV-H2HF-3FW4...

@ainsleydev/payload-helper (>=0.0.3, <=0.0.32), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +15 more potentially affected by CVE-2025-4643 via payload (>=3.0.0-alpha.49, <=3.35.1)

payload NPM version =3.0.0-alpha.49, =0.0.3, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =0.2.0, =3.1.1, =0.1.4, =1.0.0, =0.0.9-alpha.5, =1.0.0, =0.3.0-v3, =0.0.1, =1.0.0 and more Source cves: CVE-2025-4643 Source advisory: OSV:GHSA-5V66-M237-HWF7...

a3s-lane (>=0.1.0, <=0.4.0), abci-rs (>=0.7.0, <=0.11.3) +4221 more potentially affected by CVE-2025-58160 via tracing-subscriber (>=0.1.6, <=0.3.19)

tracing-subscriber CARGO version =0.1.6, =0.1.0, =0.7.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0, =0.1.5, =0.0.1-dev.10, =1.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.1, =0.5.0, =0.7.0-rc.2 and more Source cves: CVE-2025-58160 Source advisory: OSV:RUSTSEC-2025-0055...

@ainsleydev/payload-helper (>=0.0.3, <=0.0.32), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +15 more potentially affected by CVE-2025-4643 via payload (>=3.0.0-alpha.49, <=3.35.1)

payload NPM version =3.0.0-alpha.49, =0.0.3, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =0.2.0, =3.1.1, =0.1.4, =1.0.0, =0.0.9-alpha.5, =1.0.0, =0.3.0-v3, =0.0.1, =1.0.0 and more Source cves: CVE-2025-4643 Source advisory: SNYK:JS-PAYLOAD-12239898...

@ainsleydev/payload-helper (>=0.0.3, <=0.0.32), @launchthat.apps/payload-shadcn (>=0.1.0, <=0.1.8) +15 more potentially affected by CVE-2025-4643 +1 more via payload (>=3.0.0-alpha.49, <=3.35.1)

payload NPM version =3.0.0-alpha.49, =0.0.3, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =0.2.0, =3.1.1, =0.1.4, =1.0.0, =0.0.9-alpha.5, =1.0.0, =0.3.0-v3, =0.0.1, =1.0.0 and more Source cves: CVE-2025-4643, CVE-2025-4644 Source advisory: SNYK:JS-PAYLOAD-12239899...

mysticcelestial (1.0.1) potentially affected by CVE-2025-58047 via @plone/volto (18.10.1)

@plone/volto NPM version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @plone/volto and may be impacted: - mysticcelestial 1.0.1 Source cves: CVE-2025-58047 Source advisory: OSV:GHSA-XJHF-7833-3PM5...

mysticcelestial (1.0.1) potentially affected by CVE-2025-58047 via @plone/volto (18.10.1)

@plone/volto NPM version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @plone/volto and may be impacted: - mysticcelestial 1.0.1 Source cves: CVE-2025-58047 Source advisory: SNYK:JS-PLONEVOLTO-12239874...

2dev (0.1.3), @actualwave/traceability-matrices (1.0.7) +51 more potentially affected by CVE-2026-9495 via @koa/router (14.0.0)

@koa/router NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @koa/router and may be impacted: - 2dev 0.1.3 - @actualwave/traceability-matrices 1.0.7 - @bbc/sofie-server-core-integration...

@jill64/svelte-dark-theme (>=2.3.65, <=5.1.7), @jill64/svelte-i18n (>=1.1.27, <=2.2.1) +9 more potentially affected by CVE-2025-57820 via devalue (>=5.0.0, <=5.1.1)

devalue NPM version =5.0.0, =2.3.65, =1.1.27, =1.1.21, =1.2.263, =2.2.3, =0.0.2-dev.84, =1.0.23, =1.0.22, =1.0.0, =1.0.6, =2.1.10, =2.1.15 Source cves: CVE-2025-57820 Source advisory: OSV:GHSA-VJ54-72F3-P5JV...

@jill64/svelte-dark-theme (>=2.3.65, <=5.1.7), @jill64/svelte-i18n (>=1.1.27, <=2.2.1) +9 more potentially affected by CVE-2025-57820 via devalue (>=5.0.0, <=5.1.1)

devalue NPM version =5.0.0, =2.3.65, =1.1.27, =1.1.21, =1.2.263, =2.2.3, =0.0.2-dev.84, =1.0.23, =1.0.22, =1.0.0, =1.0.6, =2.1.10, =2.1.15 Source cves: CVE-2025-57820 Source advisory: SNYK:JS-DEVALUE-12205530...

@cedarjs/api-server (>=0.0.4, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=5.0.7-next.219, <=6.0.0-rc.221) +51 more potentially affected by unknown CVE via @escape.tech/graphql-armor-max-depth (>=2.0.0, <=2.4.1)

@escape.tech/graphql-armor-max-depth NPM version =2.0.0, =0.0.4, =5.0.7-next.219, =0.0.4, =5.0.4-next.167, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =0.0.4, =0.0.4, =0.0.2, =2.0.0, =3.1.6 and more Source cves: unknown CVE Source advisory:...

@cedarjs/api-server (>=0.0.4, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=5.0.7-next.219, <=6.0.0-rc.221) +51 more potentially affected by unknown CVE via @escape.tech/graphql-armor-max-depth (>=2.0.0, <=2.4.1)

@escape.tech/graphql-armor-max-depth NPM version =2.0.0, =0.0.4, =5.0.7-next.219, =0.0.4, =5.0.4-next.167, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =0.0.4, =0.0.4, =0.0.2, =2.0.0, =3.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-224P-V68G-5G8F...

@cedarjs/api-server (>=0.0.4, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=5.0.7-next.219, <=6.0.0-rc.221) +51 more potentially affected by unknown CVE via @escape.tech/graphql-armor-max-depth (>=2.0.0, <=2.4.1)

@escape.tech/graphql-armor-max-depth NPM version =2.0.0, =0.0.4, =5.0.7-next.219, =0.0.4, =5.0.4-next.167, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =0.0.4, =0.0.4, =0.0.2, =2.0.0, =3.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HMFR-RX46-4JX2...

@cedarjs/api-server (>=0.0.4, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=5.0.7-next.219, <=6.0.0-rc.221) +51 more potentially affected by unknown CVE via @escape.tech/graphql-armor-max-depth (>=2.0.0, <=2.4.1)

@escape.tech/graphql-armor-max-depth NPM version =2.0.0, =0.0.4, =5.0.7-next.219, =0.0.4, =5.0.4-next.167, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =0.0.4, =0.0.4, =0.0.2, =2.0.0, =3.1.6 and more Source cves: unknown CVE Source advisory:...

@copart/ops-tool-kit (>=1.10.20-alpha.15, <=1.13.0-beta.35), @firedesktop/react-portal-base (>=0.1.46, <=0.1.52) +13 more potentially affected by CVE-2025-57810 via jspdf (>=3.0.0, <=3.0.1)

jspdf NPM version =3.0.0, =1.10.20-alpha.15, =0.1.46, =0.54.4-nightly, =0.47.5-MYUN-38209, =1.1.63, =7.3.5, =1.0.1, =1.0.1, =1.0.301, =1.0.2, =1.1.0, =1.1.7 - winning-develop 0.1.0 - winning-schedule 0.1.0 Source cves: CVE-2025-57810 Source advisory: OSV:GHSA-8MVJ-3J78-4QMW...

@copart/ops-tool-kit (>=1.10.20-alpha.15, <=1.13.0-beta.35), @firedesktop/react-portal-base (>=0.1.46, <=0.1.52) +13 more potentially affected by CVE-2025-57810 via jspdf (>=3.0.0, <=3.0.1)

jspdf NPM version =3.0.0, =1.10.20-alpha.15, =0.1.46, =0.54.4-nightly, =0.47.5-MYUN-38209, =1.1.63, =7.3.5, =1.0.1, =1.0.1, =1.0.301, =1.0.2, =1.1.0, =1.1.7 - winning-develop 0.1.0 - winning-schedule 0.1.0 Source cves: CVE-2025-57810 Source advisory: SNYK:JS-JSPDF-12205531...

org.webjars.bowergithub.hhurz:tableexport.jquery.plugin (1.26.0) potentially affected by CVE-2025-57810 via org.webjars.bowergithub.parallax:jspdf (2.4.0)

org.webjars.bowergithub.parallax:jspdf MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.parallax:jspdf and may be impacted: - org.webjars.bowergithub.hhurz:tableexport.jquery.plugin 1.26.0 Source cves:...

org.webjars.bower:jspdf-autotable (>=2.0.2, <=2.1.0) potentially affected by CVE-2025-57810 via org.webjars.bower:jspdf (>=1.0.272, <=1.4.1)

org.webjars.bower:jspdf MAVEN version =1.0.272, =2.0.2, =2.1.0 Source cves: CVE-2025-57810 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-12205534...

org.webjars.bowergithub.simonbengtsson:jspdf-autotable (2.3.2) potentially affected by CVE-2025-57810 via org.webjars.bowergithub.mrrio:jspdf (1.4.1)

org.webjars.bowergithub.mrrio:jspdf MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.mrrio:jspdf and may be impacted: - org.webjars.bowergithub.simonbengtsson:jspdf-autotable 2.3.2 Source cves: CVE-2025-57810...

a2 (>=0.5.0-alpha.1, <=0.5.0), a_chat (0.1.0) +2615 more potentially affected by unknown CVE via async-std (>=0.99.4, <=1.13.2)

async-std CARGO version =0.99.4, =0.5.0-alpha.1, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...

@liferay/dxp-7.4 (>=71.0.0, <=71.0.2), @liferay/portal-7.4 (69.0.0) potentially affected by CVE-2025-43761 via liferay-ckeditor (4.18.0-liferay.4)

liferay-ckeditor NPM version 4.18.0-liferay.4 is affected by a known vulnerability. The following packages have a transitive dependency on liferay-ckeditor and may be impacted: - @liferay/dxp-7.4 =71.0.0, =71.0.2 - @liferay/portal-7.4 69.0.0 Source cves: CVE-2025-43761 Source advisory:...

remenu (>=0.0.3, <=0.0.5) potentially affected by unknown CVE via xcb (1.2.2)

xcb CARGO version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on xcb and may be impacted: - remenu =0.0.3, =0.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-655H-HG88-5QMF...

02.koa-demo (1.0.0), 0510test (1.0.0) +13444 more potentially affected by unknown CVE via koa (>=0.0.1, <=3.2.1)

koa NPM version =0.0.1, =1.3.7, =1.0.0, =0.0.1, =1.0.0, =1.0.1 - 2-26 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-KOA-12143256...

06demo-1 (1.0.0), 1337cli (>=0.0.1, <=0.0.2) +4566 more potentially affected by CVE-2025-9308 via yarn (>=0.15.1, <=2.4.3)

yarn NPM version =0.15.1, =0.0.1, =1.0.9, =0.0.2, =1.17.6-next.0, =1.0.0, =1.0.0, =0.0.3, =1.1.2, =1.1.5 and more Source cves: CVE-2025-9308 Source advisory: SNYK:JS-YARN-12143051...

@cloudbase/cli (>=2.8.19, <=2.11.7) potentially affected by CVE-2025-57755 via @musistudio/claude-code-router (1.0.36)

@musistudio/claude-code-router NPM version 1.0.36 is affected by a known vulnerability. The following packages have a transitive dependency on @musistudio/claude-code-router and may be impacted: - @cloudbase/cli =2.8.19, =2.11.7 Source cves: CVE-2025-57755 Source advisory:...

@hpcc-js/esbuild-plugins (>=1.4.2, <=1.4.9), @yangzw/bruce-app (>=1.3.7, <=1.3.8) +1 more potentially affected by CVE-2025-57753 via vite-plugin-static-copy (>=3.0.0, <=3.1.1)

vite-plugin-static-copy NPM version =3.0.0, =1.4.2, =1.3.7, =1.3.8 - auto-reveal 0.7.0 Source cves: CVE-2025-57753 Source advisory: SNYK:JS-VITEPLUGINSTATICCOPY-12179280...

@hpcc-js/esbuild-plugins (>=1.4.2, <=1.4.9), @yangzw/bruce-app (>=1.3.7, <=1.3.8) +1 more potentially affected by CVE-2025-57753 via vite-plugin-static-copy (>=3.0.0, <=3.1.1)

vite-plugin-static-copy NPM version =3.0.0, =1.4.2, =1.3.7, =1.3.8 - auto-reveal 0.7.0 Source cves: CVE-2025-57753 Source advisory: OSV:GHSA-PP7P-Q8FX-2968...

@alexaegis/setup-editorconfig (>=0.0.1, <=0.0.5), @alexaegis/setup-workspace (>=0.0.1, <=0.0.5) +156 more potentially affected by CVE-2025-57753 via vite-plugin-static-copy (>=0.6.1, <=2.3.1)

vite-plugin-static-copy NPM version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =16.5.0, =1.0.0-beta-v2.0.0, =0.4.3, =0.0.16, =1.0.4, =1.1.0, =0.0.1-rc-051923-9-a, =0.0.1-rc-050123-5, =0.0.1-rc-051823-5-c - @cqsjjb/scripts 3.0.0-vite.1 and more Source cves: CVE-2025-57753 Source advisory:...

@alexaegis/setup-editorconfig (>=0.0.1, <=0.0.5), @alexaegis/setup-workspace (>=0.0.1, <=0.0.5) +156 more potentially affected by CVE-2025-57753 via vite-plugin-static-copy (>=0.6.1, <=2.3.1)

vite-plugin-static-copy NPM version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =16.5.0, =1.0.0-beta-v2.0.0, =0.4.3, =0.0.16, =1.0.4, =1.1.0, =0.0.1-rc-051923-9-a, =0.0.1-rc-050123-5, =0.0.1-rc-051823-5-c - @cqsjjb/scripts 3.0.0-vite.1 and more Source cves: CVE-2025-57753 Source advisory:...

2d-json-schema-editor-visual (>=1.0.2, <=1.0.7), 37sy-build (>=1.0.0, <=1.3.3) +4368 more potentially affected by CVE-2025-9288 via sha.js (>=2.1.1, <=2.4.11)

sha.js NPM version =2.1.1, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =0.1.6, =1.0.0, =0.0.4, =0.1.0, =7.13.4, =18.0.0, =18.1.2 - @ajhyndman/relay 1.6.0-1 - @aldendaniels/react-scripts 0.8.3 and more Source cves: CVE-2025-9288 Source advisory: OSV:GHSA-95M3-7Q98-8XR5...

@5ht/express (>=1.0.6, <=2.2.0), @audius/sdk (>=0.0.3-beta.1, <=7.1.1) +7 more potentially affected by CVE-2025-9287 via cipher-base (1.0.4)

cipher-base NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cipher-base and may be impacted: - @5ht/express =1.0.6, =0.0.3-beta.1, =6.0.4, =1.0.1, =1.5.2-beta.1, =1.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.11 Source cves: CVE-2025-9287...

card-ocr-fastmcp (1.0.0) potentially affected by CVE-2025-9262 via @wong2/mcp-cli (1.13.0)

@wong2/mcp-cli NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @wong2/mcp-cli and may be impacted: - card-ocr-fastmcp 1.0.0 Source cves: CVE-2025-9262 Source advisory: SNYK:JS-WONG2MCPCLI-12205740...

2d-json-schema-editor-visual (>=1.0.2, <=1.0.7), 37sy-build (>=1.0.0, <=1.3.3) +4368 more potentially affected by CVE-2025-9288 via sha.js (>=2.1.1, <=2.4.11)

sha.js NPM version =2.1.1, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =0.1.6, =1.0.0, =0.0.4, =0.1.0, =7.13.4, =18.0.0, =18.1.2 - @ajhyndman/relay 1.6.0-1 - @aldendaniels/react-scripts 0.8.3 and more Source cves: CVE-2025-9288 Source advisory: SNYK:JS-SHAJS-12089400...