11219 matches found
@58860ed6ffd9e897/gold-finger-extension (1.0.2), @ableaura/ableui (0.1.0) +1057 more potentially affected by CVE-2025-56648 via @parcel/reporter-dev-server (>=2.0.0-beta.1, <=2.16.3)
@parcel/reporter-dev-server NPM version =2.0.0-beta.1, =7.0.0, =7.0.0, =1.0.0-beta.2, =5.0.0, =0.0.1, =5.1.0, =2.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2025-56648 Source advisory: OSV:GHSA-QM9P-F9J5-W83W...
pingora (>=0.1.0, <=0.5.0), pingora-cache (>=0.1.0, <=0.5.0) +4 more potentially affected by unknown CVE via pingora-core (>=0.1.1, <=0.5.0)
pingora-core CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - revoke-gateway 0.3.0 - static-files-module 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-393W-9X6H-8GC7...
@sit-onyx/demo-app (>=0.0.0, <=0.1.0-dev-20250919122003), @zach-mac/zachscommoncomponents (1.0.4) potentially affected by CVE-2025-59414 via nuxt (>=4.0.0-rc.0, <=4.0.3)
nuxt NPM version =4.0.0-rc.0, =0.0.0, =0.1.0-dev-20250919122003 - @zach-mac/zachscommoncomponents 1.0.4 Source cves: CVE-2025-59414 Source advisory: OSV:GHSA-P6JQ-8VC4-79F6...
@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +46 more potentially affected by CVE-2025-59414 via nuxt (>=3.6.2, <=3.18.1)
nuxt NPM version =3.6.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =4.0.3, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2025-59414 Source advisory: OSV:GHSA-P6JQ-8VC4-79F6...
@58860ed6ffd9e897/gold-finger-extension (1.0.2), @ableaura/ableui (0.1.0) +1508 more potentially affected by CVE-2025-56648 via @parcel/reporter-dev-server (>=2.0.0-beta.1, <=2.16.4)
@parcel/reporter-dev-server NPM version =2.0.0-beta.1, =5.1.9, =7.0.0, =8.3.0-pre.2022-06-22.sha-42703caf, =7.0.0, =0.1.0, =1.0.0-beta.2, =5.0.0, =0.0.9, =0.0.1, =5.1.0, =5.2.5 and more Source cves: CVE-2025-56648 Source advisory: SNYK:JS-PARCELREPORTERDEVSERVER-12878606...
@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +46 more potentially affected by CVE-2025-59414 via nuxt (>=3.6.2, <=3.18.1)
nuxt NPM version =3.6.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =4.0.3, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.0.1-alpha.0, =1.0.1-alpha.33 and more Source cves: CVE-2025-59414 Source advisory: SNYK:JS-NUXT-12878602...
@sit-onyx/demo-app (>=0.0.0, <=0.1.0-dev-20250919122003), @zach-mac/zachscommoncomponents (1.0.4) potentially affected by CVE-2025-59414 via nuxt (>=4.0.0-rc.0, <=4.0.3)
nuxt NPM version =4.0.0-rc.0, =0.0.0, =0.1.0-dev-20250919122003 - @zach-mac/zachscommoncomponents 1.0.4 Source cves: CVE-2025-59414 Source advisory: SNYK:JS-NUXT-12878602...
pingora (>=0.1.0, <=0.5.0), pingora-cache (>=0.1.0, <=0.5.0) +4 more potentially affected by CVE-2025-8671 via pingora-core (>=0.1.1, <=0.5.0)
pingora-core CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - revoke-gateway 0.3.0 - static-files-module 0.1.0 Source cves: CVE-2025-8671 Source advisory: OSV:RUSTSEC-2025-0070...
@shadypixel/mssql-mcp (1.0.0) potentially affected by CVE-2025-59333 via @executeautomation/database-server (1.1.0)
@executeautomation/database-server NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @executeautomation/database-server and may be impacted: - @shadypixel/mssql-mcp 1.0.0 Source cves: CVE-2025-59333 Source advisory:...
@teselagen/bio-parsers (0.4.29-beta.1), @teselagen/ove (>=0.7.30-beta.1, <=0.7.30-beta.2) +1 more potentially affected by unknown CVE via @teselagen/range-utils (>=0.3.14-beta.1, <=0.3.14-beta.3)
@teselagen/range-utils NPM version =0.3.14-beta.1, =0.7.30-beta.1, =0.3.32-beta.2, =0.3.38-beta.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-47276...
org.webjars.npm:bonjour (3.5.0), org.webjars.npm:dns-packet (>=1.3.1, <=4.2.0) +10 more potentially affected by CVE-2024-29415 +1 more via org.webjars.npm:ip (>=1.1.5, <=2.0.0)
org.webjars.npm:ip MAVEN version =1.1.5, =1.3.1, =1.0.1, =6.2.3, =4.2.0, =1.1.10, =3.0.1, =4.0.2 - org.webjars.npm:splitsoftwaresplitio 10.8.4 Source cves: CVE-2024-29415, CVE-2025-59436 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14101892...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 007-nodejs (>=2.5.0, <=2.5.3) +46507 more potentially affected by CVE-2024-29415 +1 more via ip (>=0.0.1, <=2.0.1)
ip NPM version =0.0.1, =1.0.1, =2.5.0, =2.5.3 - 0726react 0.1.1 - 0me.sh 0.1.15 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0....
org.webjars.npm:bonjour (3.5.0), org.webjars.npm:dns-packet (>=1.3.1, <=4.2.0) +10 more potentially affected by CVE-2024-29415 +1 more via org.webjars.npm:ip (>=1.1.5, <=2.0.0)
org.webjars.npm:ip MAVEN version =1.1.5, =1.3.1, =1.0.1, =6.2.3, =4.2.0, =1.1.10, =3.0.1, =4.0.2 - org.webjars.npm:splitsoftwaresplitio 10.8.4 Source cves: CVE-2024-29415, CVE-2025-59437 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14101895...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 007-nodejs (>=2.5.0, <=2.5.3) +46507 more potentially affected by CVE-2024-29415 +1 more via ip (>=0.0.1, <=2.0.1)
ip NPM version =0.0.1, =1.0.1, =2.5.0, =2.5.3 - 0726react 0.1.1 - 0me.sh 0.1.15 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0....
flowise (>=2.0.0, <=2.2.8) potentially affected by unknown CVE via flowise-components (2.2.8)
flowise-components NPM version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on flowise-components and may be impacted: - flowise =2.0.0, =2.2.8 Source cves: unknown CVE Source advisory: SNYK:JS-FLOWISECOMPONENTS-12878598...
flowise (>=2.0.0, <=2.2.8) potentially affected by CVE-2025-59528 via flowise-components (2.2.8)
flowise-components NPM version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on flowise-components and may be impacted: - flowise =2.0.0, =2.2.8 Source cves: CVE-2025-59528 Source advisory: SNYK:JS-FLOWISECOMPONENTS-12818376...
flowise (>=1.6.1, <=2.2.8) potentially affected by CVE-2025-59527 via flowise-components (>=1.8.6, <=2.2.8)
flowise-components NPM version =1.8.6, =1.6.1, =2.2.8 Source cves: CVE-2025-59527 Source advisory: SNYK:JS-FLOWISECOMPONENTS-12840076...
flowise (>=1.6.1, <=2.2.8) potentially affected by unknown CVE via flowise-components (>=1.8.6, <=2.2.8)
flowise-components NPM version =1.8.6, =1.6.1, =2.2.8 Source cves: unknown CVE Source advisory: SNYK:JS-FLOWISECOMPONENTS-12818395...
@antonytm/n8n-nodes-test (>=0.1.5, <=0.2.1), @izzai/n8n-nodes-izzone (>=0.0.17, <=0.2.2) +38 more potentially affected by CVE-2025-58177 via n8n-workflow (>=1.24.0, <=1.103.3)
n8n-workflow NPM version =1.24.0, =0.1.5, =0.0.17, =0.2.0, =0.19.0, =0.4.0, =0.11.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1, =0.1.0, =0.21.34, =1.51.0, =1.4.1, =1.52.0 - ape-test-7-editor-ui 1.48.0 and more Source cves: CVE-2025-58177 Source advisory: SNYK:JS-N8NWORKFLOW-12840403...
acid-store (>=0.12.0, <=0.14.2), aliyundrive-fuse (>=0.1.0, <=0.1.14) +41 more potentially affected by unknown CVE via fuser (>=0.4.1, <=0.15.1)
fuser CARGO version =0.4.1, =0.12.0, =0.1.0, =0.2.4, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.2, =0.6.0, =1.5.5, =0.2.5, =0.2.82 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CVMJ-47V9-35M9...
better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +103 more potentially affected by unknown CVE via serde_yml (>=0.0.7, <=0.0.12)
serdeyml CARGO version =0.0.7, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HHW4-XG65-FP2X...
better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +98 more potentially affected by unknown CVE via libyml (>=0.0.4, <=0.0.5)
libyml CARGO version =0.0.4, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.2, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GFXP-F68G-8X78...
@aarc-dev/auth-widget (>=0.0.1, <=0.0.20), @aarc-dev/wallet-auth (>=0.0.11, <=0.0.20) +9 more potentially affected by unknown CVE via @metamask/sdk-react (>=0.16.0, <=0.30.2)
@metamask/sdk-react NPM version =0.16.0, =0.0.1, =0.0.11, =0.0.12, =0.16.0, =0.3.0, =0.5.6, =0.9.0, =0.0.7, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-QJ3P-XC97-XW74...
@0xshogun/sdk-react (1.1.40), @0xsquid/deposit-widget (>=0.0.2-beta.0, <=0.2.0) +242 more potentially affected by unknown CVE via @metamask/sdk (>=0.16.0, <=0.33.0)
@metamask/sdk NPM version =0.16.0, =0.0.2-beta.0, =2.1.11-beta.0, =3.0.0-beta.16, =0.0.1, =0.0.11, =0.2.1, =4.0.0-alpha.0, =3.16.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QJ3P-XC97-XW74...
@0xshogun/sdk-react (1.1.40), @0xsquid/deposit-widget (>=0.0.2-beta.0, <=0.2.0) +243 more potentially affected by unknown CVE via @metamask/sdk-communication-layer (>=0.16.0, <=0.33.0)
@metamask/sdk-communication-layer NPM version =0.16.0, =0.0.2-beta.0, =2.1.11-beta.0, =3.0.0-beta.16, =0.0.1, =0.0.11, =0.2.1, =4.0.0-alpha.0, =3.16.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QJ3P-XC97-XW74...
@aadharsh/orion-alpine-x934x (>=1.0.0, <=1.0.6), @idvidrine/create-express-app (>=1.0.0, <=1.1.5) +6 more potentially affected by CVE-2025-59364 via express-xss-sanitizer (>=1.2.1, <=2.0.2)
express-xss-sanitizer NPM version =1.2.1, =1.0.0, =1.0.0, =2.0.0, =1.0.0, =0.1.0, =1.2.0, =1.0.0, =1.14.31, =1.15.2 Source cves: CVE-2025-59364 Source advisory: SNYK:JS-EXPRESSXSSSANITIZER-12670886...
archivefs (>=1.0.0, <=1.0.1), arcon_compiler (>=0.1.0, <=0.1.1) +83 more potentially affected by unknown CVE via daemonize (>=0.2.3, <=0.5.0)
daemonize CARGO version =0.2.3, =1.0.0, =0.1.0, =0.3.1, =0.2.0, =0.5.0, =3.0.0, =0.1.0, =0.1.3, =0.0.1, =0.4.0, =0.1.0, =0.1.2, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0069...
@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +184 more potentially affected by CVE-2025-59139 via hono (>=4.0.0, <=4.9.6)
hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.0.1, =0.0.1, =0.0.1-experimental.1, =0.0.3, =1.3.2, =0.1.0, =0.75.0, =0.2.305, =1.2.193, =1.3.2, =0.21.2-4.1, =0.21.23 and more Source cves: CVE-2025-59139 Source advisory: OSV:GHSA-92VJ-G62V-JQHH...
com.liferay:com.liferay.my.account.web (>=1.0.0, <=1.0.12), com.liferay:com.liferay.portal.settings.web (>=1.0.0, <=1.2.4) potentially affected by CVE-2025-43787 via com.liferay:com.liferay.users.admin.web (>=1.0.0, <=2.3.0)
com.liferay:com.liferay.users.admin.web MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.2.4 Source cves: CVE-2025-43787 Source advisory: SNYK:JAVA-COMLIFERAY-12704859...
@a0dotrun/expose (>=0.0.2, <=0.0.4), @agentforce/adk (>=0.9.0, <=0.12.1) +184 more potentially affected by CVE-2025-59139 via hono (>=4.0.0, <=4.9.6)
hono NPM version =4.0.0, =0.0.2, =0.9.0, =0.1.9, =0.0.1, =0.0.1, =0.0.1-experimental.1, =0.0.3, =1.3.2, =0.1.0, =0.75.0, =0.2.305, =1.2.193, =1.3.2, =0.21.2-4.1, =0.21.23 and more Source cves: CVE-2025-59139 Source advisory: SNYK:JS-HONO-12668833...
alerter (>=0.3.0, <=0.3.2), crate_glitch (0.2.0) +14 more potentially affected by CVE-2025-59047 via matrix-sdk-base (>=0.1.0, <=0.5.1)
matrix-sdk-base CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 and more Source cves: CVE-2025-59047 Source advisory: OSV:GHSA-QHJ8-Q5R6-8Q6J...
@0xjwlabs/discord-rpc (0.1.0), @0xsquid/react-hooks (>=1.0.0, <=2.0.0) +697 more potentially affected by CVE-2025-58754 via axios (>=0.28.0, <=0.30.1)
axios NPM version =0.28.0, =1.0.0, =3.0.0-beta.0, =2.10.1, =1.0.0, =0.1.0, =13.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =16.5.4 and more Source cves: CVE-2025-58754 Source advisory: OSV:GHSA-4HJH-WCWX-XVWJ...
-fides-amor-et-lux (1.0.0), 0xppl-solana-portfolio (1.0.0) +12145 more potentially affected by CVE-2025-58754 via axios (>=1.0.0, <=1.11.0)
axios NPM version =1.0.0, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =2.0.0, =1.1.40, =0.0.2-beta.0, =2.1.0, =9.0.0-beta-bump-wagmi-viem.2 and more Source cves: CVE-2025-58754 Source advisory: OSV:GHSA-4HJH-WCWX-XVWJ...
alerter (>=0.3.0, <=0.3.2), crate_glitch (0.2.0) +14 more potentially affected by CVE-2025-59047 via matrix-sdk-base (>=0.1.0, <=0.5.1)
matrix-sdk-base CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 and more Source cves: CVE-2025-59047 Source advisory: OSV:RUSTSEC-2025-0065...
better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +104 more potentially affected by unknown CVE via libyml (>=0.0.1, <=0.0.5)
libyml CARGO version =0.0.1, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0067...
alerter (>=0.3.0, <=0.3.2), crate_glitch (0.2.0) +14 more potentially affected by CVE-2025-59047 via matrix-sdk-base (>=0.1.0, <=0.5.1)
matrix-sdk-base CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 and more Source cves: CVE-2025-59047 Source advisory: OSV:RUSTSEC-2025-0000...
better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +103 more potentially affected by unknown CVE via serde_yml (>=0.0.7, <=0.0.13)
serdeyml CARGO version =0.0.7, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0068...
0xble (>=14.0.0, <=21.9.1), 100xchat (>=1.1.5, <=1.3.5) +4469 more potentially affected by CVE-2025-9910 via jsondiffpatch (>=0.0.11, <=0.6.2)
jsondiffpatch NPM version =0.0.11, =14.0.0, =1.1.5, =1.0.0, =1.0.0, =1.0.4, =0.10.6, =0.1.6, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.1, =0.1.0-alpha.1, =0.1.0, =0.3.1, =0.5.10, =1.2.4 and more Source cves: CVE-2025-9910 Source advisory: OSV:GHSA-33VC-WFWW-VJFV...
@angularexpert/my-workspace (0.0.0), @cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4) +47 more potentially affected by CVE-2025-59052 via @angular/platform-server (>=16.2.12, <=18.2.13)
@angular/platform-server NPM version =16.2.12, =1.0.0, =0.0.1, =1.4.1, =1.1.1, =0.1.0, =13.1.0, =0.0.0, =2.1.0, =0.0.2, =0.0.11 and more Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...
@nestjs/ng-universal (>=7.1.0, <=7.1.1), @nguniversal/builders (>=16.0.0-next.0, <=16.1.3) +1 more potentially affected by CVE-2025-59052 via @nguniversal/common (>=16.0.0, <=16.1.3)
@nguniversal/common NPM version =16.0.0, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =16.1.3 Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...
@manniwatch/client-desktop (>=0.30.0, <=0.30.1), @manniwatch/client-ng (>=0.30.0, <=0.30.1) +2 more potentially affected by CVE-2025-59052 via @angular/ssr (>=19.0.5, <=19.2.1)
@angular/ssr NPM version =19.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...
@angularexpert/my-workspace (0.0.0), @cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4) +38 more potentially affected by CVE-2025-59052 via @angular/ssr (>=17.0.5, <=18.2.13)
@angular/ssr NPM version =17.0.5, =1.0.0, =0.0.1, =0.0.1, =8.0.0, =0.0.0, =0.0.2, =0.0.0, =0.0.1 and more Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...
super-jss (>=0.0.1-beta.25, <=0.0.1-beta.30) potentially affected by CVE-2025-59052 via @angular/platform-server (20.0.0)
@angular/platform-server NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - super-jss =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...
@angularexpert/my-workspace (0.0.0), @cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4) +47 more potentially affected by CVE-2025-59052 via @angular/platform-server (>=16.2.12, <=18.2.13)
@angular/platform-server NPM version =16.2.12, =1.0.0, =0.0.1, =1.4.1, =1.1.1, =0.1.0, =13.1.0, =0.0.0, =2.1.0, =0.0.2, =0.0.11 and more Source cves: CVE-2025-59052 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-12613569...
@manniwatch/client-desktop (>=0.30.0, <=0.30.1), @manniwatch/client-ng (>=0.30.0, <=0.30.1) +2 more potentially affected by CVE-2025-59052 via @angular/ssr (>=19.0.5, <=19.2.1)
@angular/ssr NPM version =19.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2025-59052 Source advisory: SNYK:JS-ANGULARSSR-12613576...
super-jss (>=0.0.1-beta.25, <=0.0.1-beta.30) potentially affected by CVE-2025-59052 via @angular/platform-server (20.0.0)
@angular/platform-server NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - super-jss =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2025-59052 Source advisory:...
@cosla/sensemaking-web-ui (>=1.0.0, <=1.0.4) potentially affected by CVE-2025-59052 via @angular/ssr (18.2.13)
@angular/ssr NPM version 18.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/ssr and may be impacted: - @cosla/sensemaking-web-ui =1.0.0, =1.0.4 Source cves: CVE-2025-59052 Source advisory: SNYK:JS-ANGULARSSR-12613576...
@builder.io/angular (>=1.0.1, <=3.0.2), @gleb216/fn.nestjs.core.modules (>=0.0.127, <=0.0.158) +8 more potentially affected by CVE-2025-59052 via @nguniversal/common (>=16.0.0, <=16.2.0-rc.0)
@nguniversal/common NPM version =16.0.0, =1.0.1, =0.0.127, =7.0.2, =7.1.0, =16.0.0-next.0, =16.0.0-next.0, =0.3.2, =1.2.0 Source cves: CVE-2025-59052 Source advisory: SNYK:JS-NGUNIVERSALCOMMON-12613577...
@tessl/cli (>=0.21.0, <=0.21.2), @zed-industries/claude-code-acp (0.1.7) +8 more potentially affected by CVE-2025-59041 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.98)
@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59041 Source advisory: OSV:GHSA-J4H9-WV2M-WRF7...
trivet (>=2.1.0, <=2.1.1) potentially affected by CVE-2025-57520 via decap-cms (3.0.12)
decap-cms NPM version 3.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on decap-cms and may be impacted: - trivet =2.1.0, =2.1.1 Source cves: CVE-2025-57520 Source advisory: OSV:GHSA-XP8G-32QH-MV28...