claude-agents-md (>=1.8.0, <=1.8.5), claude-yolo (>=1.4.0, <=1.7.0) potentially affected by CVE-2025-54794 via @anthropic-ai/claude-code (>=0.2.14, <=0.2.35)

@anthropic-ai/claude-code NPM version =0.2.14, =1.8.0, =1.4.0, =1.7.0 Source cves: CVE-2025-54794 Source advisory: OSV:GHSA-PMW4-PWVC-3HX2...

@cssninja/nuxt-media-viewer (>=0.0.1, <=0.0.15), @enab/uipkg (>=0.0.2-beta.0, <=0.0.2-beta.23) +4 more potentially affected by CVE-2025-54387 via ipx (>=1.0.0, <=1.1.0)

ipx NPM version =1.0.0, =0.0.1, =0.0.2-beta.0, =0.1.0, =1.0.0-27821548.ab054e4, =0.0.3-beta, =0.0.4 Source cves: CVE-2025-54387 Source advisory: OSV:GHSA-MM3P-J368-7JCR...

netlify (22.3.0), netlify-cli (>=22.2.2-pre.dd189fc, <=22.3.0) potentially affected by CVE-2025-54387 via ipx (3.0.3)

ipx NPM version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ipx and may be impacted: - netlify 22.3.0 - netlify-cli =22.2.2-pre.dd189fc, =22.3.0 Source cves: CVE-2025-54387 Source advisory: OSV:GHSA-MM3P-J368-7JCR...

@mastra/deployer-netlify (>=0.0.0-a2a-20250421213654, <=0.10.5), @rr0/cms (>=0.3.23, <=0.3.29) +14 more potentially affected by CVE-2025-54387 via ipx (>=2.0.1, <=2.1.0)

ipx NPM version =2.0.1, =0.0.0-a2a-20250421213654, =0.3.23, =1.1.6, =4.0.0, =2.0.3, =0.0.23, =1.0.0, =1.0.2, =21.5.0, =17.4.0, =0.0.7, =0.0.13 - tmp-package-registry 1.0.0 and more Source cves: CVE-2025-54387 Source advisory: OSV:GHSA-MM3P-J368-7JCR...

@ballerine/workflows-service (>=0.4.6, <=0.5.49), @digitaltg/vc-signer (1.0.0) +9 more potentially affected by CVE-2025-54782 via @nestjs/devtools-integration (0.1.6)

@nestjs/devtools-integration NPM version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on @nestjs/devtools-integration and may be impacted: - @ballerine/workflows-service =0.4.6, =0.0.37, =0.0.4, =0.0.1, =0.0.6, =0.0.82, =0.0.32, =1.0.0, =1.0.9 -...

@ballerine/workflows-service (>=0.4.6, <=0.5.49), @digitaltg/vc-signer (1.0.0) +9 more potentially affected by CVE-2025-54782 via @nestjs/devtools-integration (0.1.6)

@nestjs/devtools-integration NPM version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on @nestjs/devtools-integration and may be impacted: - @ballerine/workflows-service =0.4.6, =0.0.37, =0.0.4, =0.0.1, =0.0.6, =0.0.82, =0.0.32, =1.0.0, =1.0.9 -...

@mieweb/wikigdrive (>=2.15.0, <=2.17.1), @nyariv/scopejs (>=0.2.0, <=0.2.2) potentially affected by CVE-2025-34146 via @nyariv/sandboxjs (>=0.5.3, <=0.8.23)

@nyariv/sandboxjs NPM version =0.5.3, =2.15.0, =0.2.0, =0.2.2 Source cves: CVE-2025-34146 Source advisory: OSV:GHSA-9QM3-6QRR-C76M...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8292 via electron (>=37.0.0, <=37.2.5)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8292 Source advisory: SNYK:JS-ELECTRON-11502178...

br.net.woodstock.rockframework:rockframework-struts (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=3.0.1) +25 more potentially affected by CVE-2025-54656 via org.apache.struts:struts-extras (>=1.3.8, <=1.3.10)

org.apache.struts:struts-extras MAVEN version =1.3.8, =2.0.0, =1.2.1, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =2.1.1-rc1, =3.0-beta-1, =3.0.0 and more Source cves: CVE-2025-54656 Source advisory: SNYK:JAVA-ORGAPACHESTRUTS-11502096...

@freon4dsl/server (>=2.0.0-beta.1, <=2.0.0-beta.5), @tachybase/engine (>=1.0.21, <=1.1.2) +3 more potentially affected by CVE-2025-8129 via koa (3.0.0)

koa NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @freon4dsl/server =2.0.0-beta.1, =1.0.21, =1.3.7, =1.4.0, =15.4.0, =15.4.2 Source cves: CVE-2025-8129 Source advisory: OSV:GHSA-JGMV-J7WW-JX2X...

@0xyy/elpis (>=1.0.0, <=1.0.2), @10xsai/cloudflare-router-nx-plugin (1.0.0) +1466 more potentially affected by CVE-2025-8129 via koa (>=2.0.0, <=2.16.1)

koa NPM version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.1.3 - @ahua0920/elpis 1.0.0 and more Source cves: CVE-2025-8129 Source advisory: OSV:GHSA-JGMV-J7WW-JX2X...

dji-log-parser (>=0.5.0, <=0.5.7) potentially affected by unknown CVE via tsify-next (0.5.6)

tsify-next CARGO version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on tsify-next and may be impacted: - dji-log-parser =0.5.0, =0.5.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0048...

@digabi/passport-utils (>=0.0.1, <=0.0.2), cloudcms-server (>=3.2.324, <=4.0.0-beta.22) potentially affected by CVE-2025-54419 via @node-saml/passport-saml (>=5.0.0, <=5.0.1)

@node-saml/passport-saml NPM version =5.0.0, =0.0.1, =3.2.324, =4.0.0-beta.22 Source cves: CVE-2025-54419 Source advisory: OSV:GHSA-4MXG-3P6V-XGQ3...

@andreacioni/saml2-nest-lib (>=0.0.2, <=0.0.7), @backstage/plugin-auth-backend (>=0.0.0-nightly-2021101022158, <=0.12.3) +51 more potentially affected by CVE-2025-54419 via passport-saml (>=3.2.0, <=3.2.4)

passport-saml NPM version =3.2.0, =0.0.2, =0.0.0-nightly-2021101022158, =0.0.0-nightly-202201422556, =0.1.0, =0.1.0, =0.4.0, =0.2.1, =0.35.0, =1.0.0, =1.0.0, =0.0.2, =0.0.3 and more Source cves: CVE-2025-54419 Source advisory: OSV:GHSA-4MXG-3P6V-XGQ3...

@multiversx/sdk-dapp (>=5.0.0-alpha.8, <=5.1.4), @terradharitri/sdk-dapp (>=0.0.13, <=0.0.14) +1 more potentially affected by CVE-2025-8101 via linkifyjs (4.3.1)

linkifyjs NPM version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on linkifyjs and may be impacted: - @multiversx/sdk-dapp =5.0.0-alpha.8, =0.0.13, =0.0.14 - @xapp/question-answering-handler 2.5.21 Source cves: CVE-2025-8101 Source advisory:...

@a.agiir/cinny (>=0.0.1, <=0.0.2), @a1tan/plugin-azure-openai (0.4.0) +786 more potentially affected by CVE-2025-8101 via linkify-react (>=4.0.0-beta.4, <=4.3.1)

linkify-react NPM version =4.0.0-beta.4, =0.0.1, =0.1.0, =0.1.0, =1.0.0, =0.1.8, =0.1.10 - @alithya-oss/backstage-plugin-rag-ai 1.2.7 - @alithya-oss/backstage-plugin-time-saver 1.4.5 and more Source cves: CVE-2025-8101 Source advisory: SNYK:JS-LINKIFYREACT-11502190...

@a.agiir/cinny (>=0.0.1, <=0.0.2), @a1tan/plugin-azure-openai (0.4.0) +799 more potentially affected by CVE-2025-8101 via linkifyjs (>=4.0.0-beta.4, <=4.3.1)

linkifyjs NPM version =4.0.0-beta.4, =0.0.1, =0.1.0, =0.1.0, =1.0.0, =0.1.8, =0.1.10 - @alithya-oss/backstage-plugin-rag-ai 1.2.7 - @alithya-oss/backstage-plugin-time-saver 1.4.5 and more Source cves: CVE-2025-8101 Source advisory: SNYK:JS-LINKIFYJS-11502189...

@skuhnow/directus (>=9.8.0, <=9.14.4) potentially affected by CVE-2025-54369 via node-saml (4.0.0-beta.2)

node-saml NPM version 4.0.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-saml and may be impacted: - @skuhnow/directus =9.8.0, =9.14.4 Source cves: CVE-2025-54369 Source advisory: SNYK:JS-NODESAML-10946571...

@iurra/chickpea-stew (>=0.3.0, <=0.3.7), @joaopaulomfe/generator-jhipster-agile-kip (>=0.1.0, <=0.1.1) +175 more potentially affected by CVE-2025-43712 via generator-jhipster (>=2.25.0, <=9.2.0)

generator-jhipster NPM version =2.25.0, =0.3.0, =0.1.0, =0.0.3, =0.0.11, =2.0.13, =0.0.0, =1.0.0, =0.1.0, =0.0.1, =0.0.2 - generator-jhipster-angulardemo 0.0.0 and more Source cves: CVE-2025-43712 Source advisory: SNYK:JS-GENERATORJHIPSTER-11023283...

@4via6/relay (>=1.0.0, <=1.1.3), @circleci/agents (>=1.0.6, <=2.3.1) +4 more potentially affected by CVE-2025-54558 via @openai/codex (>=0.1.2504211509, <=0.8.0)

@openai/codex NPM version =0.1.2504211509, =1.0.0, =1.0.6, =0.23.0, =1.0.0, =0.0.1, =1.0.0, =1.0.2 Source cves: CVE-2025-54558 Source advisory: SNYK:JS-OPENAICODEX-10945018...

@ccci/micro-server (>=1.0.57, <=1.0.132), @kevinkidd/aicommit (1.0.3) +10 more potentially affected by CVE-2025-8022 via bun (>=1.0.2, <=1.1.38)

bun NPM version =1.0.2, =1.0.57, =1.0.0, =0.0.0, =1.2.27, =1.2.21, =0.0.2, =0.0.33, =0.0.19-beta.11, =0.0.3, =0.0.4, =0.0.7 Source cves: CVE-2025-8022 Source advisory: OSV:GHSA-4J66-8F4R-3PJX...

@0xvaibhav/divergent-node (>=0.0.1, <=0.0.3), @0xvaibhav/ipfs-messenger (>=1.0.3, <=1.0.9) +402 more potentially affected by CVE-2025-8020 via private-ip (3.0.2)

private-ip NPM version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on private-ip and may be impacted: - @0xvaibhav/divergent-node =0.0.1, =1.0.3, =0.0.1, =0.0.2, =9.3.0, =1.0.0, =1.3.2, =1.0.1, =1.0.1, =1.1.0, =1.0.2, =1.0.3 -...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8011 via electron (>=37.0.0, <=37.2.4)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8011 Source advisory: SNYK:JS-ELECTRON-11023267...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8010 via electron (>=37.0.0, <=37.2.4)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8010 Source advisory: SNYK:JS-ELECTRON-11023263...

ado-sfttrainer (>=1.0.1, <=1.8.6), aim-mlflow (>=0.1.0, <=0.2.1) +27 more potentially affected by CVE-2025-51464 via aim (>=3.17.4, <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2025-51464 Source advisory: SNYK:PYTHON-AIM-10878170...

a2 (>=0.10.7, <=0.10.13), aad2onnx (0.1.4) +1494 more potentially affected by CVE-2025-51480 via onnx (>=0.2.0, <=1.22.0)

onnx PYPI version =0.2.0, =0.10.7, =0.1.0.dev2, =6.6.0, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.3.0, =0.4.4, =0.1.0, =0.4.0 - agentic-file-organizer 0.1.0 and more Source cves: CVE-2025-51480 Source advisory: SNYK:PYTHON-ONNX-10877916...

ado-sfttrainer (>=1.0.1, <=1.8.6), aim-mlflow (>=0.1.0, <=0.2.1) +27 more potentially affected by CVE-2025-51463 via aim (>=3.17.4, <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2025-51463 Source advisory: SNYK:PYTHON-AIM-10875510...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @5ht/express (>=1.0.6, <=2.2.0) +625 more potentially affected by CVE-2025-7783 via form-data (>=3.0.0, <=3.0.3)

form-data NPM version =3.0.0, =1.17.6-next.0, =1.0.6, =1.0.0, =0.12.4, =1.1.3, =1.9.19, =1.1.0, =1.18.0, =2.13.1, =1.1.0, =10.1.0, =1.0.0, =1.9.2, =2.1.4 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +4255 more potentially affected by CVE-2025-7783 via form-data (>=4.0.0, <=4.0.3)

form-data NPM version =4.0.0, =1.0.0, =1.2.0, =1.0.0, =0.1.0, =0.0.1, =5.0.0, =0.0.1, =1.0.1, =1.0.32, =1.0.32, =1.1.11 and more Source cves: CVE-2025-7783 Source advisory: OSV:GHSA-FJXV-7RQG-78G4...

@4verburga/alpine-spanishplus (>=1.6.6, <=3.0.2), @4xeverburga/alpine-spanishplus (>=3.0.1, <=3.2.0) +143 more potentially affected by CVE-2025-54075 via @nuxtjs/mdc (>=0.1.6, <=0.17.0)

@nuxtjs/mdc NPM version =0.1.6, =1.6.6, =3.0.1, =0.0.1, =0.0.1, =0.1.1, =0.0.2, =1.0.7, =1.0.7, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.0.3, =0.10.6 - @copity/copity 0.0.3 and more Source cves: CVE-2025-54075 Source advisory: OSV:GHSA-CJ6R-RRR9-FG82...

@-xun/symbiote (>=3.7.0, <=4.11.4), @0x57/pierre (>=0.0.3, <=0.0.16) +896 more potentially affected by unknown CVE via @eslint/plugin-kit (>=0.1.0, <=0.2.8)

@eslint/plugin-kit NPM version =0.1.0, =3.7.0, =0.0.3, =1.1.44, =1.1.14, =0.0.1-alpha.3, =0.0.1, =10.0.0, =10.0.0, =8.3.0, =13.0.0, =2.6.0, =2.2.9, =0.0.2, =35.0.1, =38.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XFFM-G5W8-QVG7...

candid-extractor (>=0.1.0, <=0.1.2), deterministic-wasi-ctx (0.1.14) +22 more potentially affected by CVE-2025-53901 via wasmtime (>=10.0.2, <=12.0.2)

wasmtime CARGO version =10.0.2, =0.1.0, =0.5.0, =0.5.0, =0.18.0, =0.7.5, =0.1.0, =0.1.0, =10.0.0, =10.0.0, =10.0.0, =0.1.0, =0.1.2, =0.1.3 and more Source cves: CVE-2025-53901 Source advisory: OSV:GHSA-FM79-3F68-H2FC...

candid-extractor (>=0.1.0, <=0.1.2), deterministic-wasi-ctx (0.1.14) +22 more potentially affected by CVE-2025-53901 via wasmtime (>=10.0.2, <=12.0.2)

wasmtime CARGO version =10.0.2, =0.1.0, =0.5.0, =0.5.0, =0.18.0, =0.7.5, =0.1.0, =0.1.0, =10.0.0, =10.0.0, =10.0.0, =0.1.0, =0.1.2, =0.1.3 and more Source cves: CVE-2025-53901 Source advisory: OSV:RUSTSEC-2025-0046...

@oasisprotocol/sapphire-contracts (0.2.17), @originalworks/protocol-core-contracts (>=0.0.4, <=0.0.8) +14 more potentially affected by CVE-2025-54070 via @openzeppelin/contracts-upgradeable (>=5.2.0, <=5.3.0)

@openzeppelin/contracts-upgradeable NPM version =5.2.0, =0.0.4, =1.0.0, =0.1.0, =0.4.27, =0.3.0, =0.5.3, =7.9.0-maine3c28f1, =3.0.0-rc.0, =1.0.0-alpha.1, =0.3.0, =0.3.0, =0.3.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2025-54070 Source advisory: OSV:GHSA-9RCW-C2F9-2J55...

@1inch/delegating (2.0.0), @1inch/farming (4.0.0) +32 more potentially affected by CVE-2025-54070 via @openzeppelin/contracts (>=5.2.0, <=5.3.0)

@openzeppelin/contracts NPM version =5.2.0, =1.0.0-alpha.9, =0.0.4, =1.0.0, =0.1.0, =0.4.27, =0.3.0, =0.5.3, =7.9.0-main3c5a2f8, =7.9.0-maine3c28f1, =7.9.0-main01f77d70, =7.9.0-mainc91b9b3, =7.9.0-main163e291, =8.0.9 and more Source cves: CVE-2025-54070 Source advisory: OSV:GHSA-9RCW-C2F9-2J55...

10by10-react-app (1.2.1), 192.168.0.172 (4.6.1) +13883 more potentially affected by CVE-2025-7339 via on-headers (>=1.0.0, <=1.0.2)

on-headers NPM version =1.0.0, =1.0.2, =1.0.0, =0.30.0, =0.2.0, =0.0.28, =4.11.0, =4.11.46 and more Source cves: CVE-2025-7339 Source advisory: OSV:GHSA-76C9-3JPH-RJ3Q...

02url-querystring-http (>=1.0.1, <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6) +10149 more potentially affected by CVE-2025-7338 via multer (>=1.4.4, <=2.0.1)

multer NPM version =1.4.4, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - 6e-alpha-backend-admin 1.0.0 - 7-segunda-preentrega 1.0.0 and more Source cves: CVE-2025-7338 Source advisory: OSV:GHSA-FJGF-RC76-4X9P...

org.webjars.npm:nestjs__platform-express (>=8.4.7, <=9.0.0-next.2) potentially affected by CVE-2025-7338 via org.webjars.npm:multer (1.4.4-lts.1)

org.webjars.npm:multer MAVEN version 1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2025-7338 Source advisory:...

84447xe5t8 (1.0.0), @0xnukeee/test-sdk (>=1.0.10, <=4.1.2) +252 more potentially affected by CVE-2025-53638 via solady (>=0.0.129, <=0.1.7)

solady NPM version =0.0.129, =1.0.10, =4.3.0, =0.0.8, =0.10.1002, =1.2.6, =3.0.0-alpha0, =1.2.0, =1.0.0, =1.8.5, =2.0.0-beta.0, =1.2.0, =1.3.2 and more Source cves: CVE-2025-53638 Source advisory: SNYK:JS-SOLADY-11342790...

org.webjars.npm:compression (>=1.5.2, <=1.7.4), org.webjars.npm:express-session (>=1.15.6, <=1.17.1) +1 more potentially affected by CVE-2025-7339 via org.webjars.npm:on-headers (1.0.2)

org.webjars.npm:on-headers MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:on-headers and may be impacted: - org.webjars.npm:compression =1.5.2, =1.15.6, =1.9.0, =1.9.1 Source cves: CVE-2025-7339 Source advisory:...

@acronis-platform/ui-component-library (1.33.0), @aesoper/i18n (>=1.0.56, <=1.0.57) +31 more potentially affected by CVE-2025-53892 via vue-i18n (>=10.0.0, <=10.0.7)

vue-i18n NPM version =10.0.0, =1.0.56, =1.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.13.0 and more Source cves: CVE-2025-53892 Source advisory: OSV:GHSA-X8QP-WQQM-57PH...

@acegroup/cli-templates-vue3-element-admin (1.0.0), @actindo/core-ui (>=0.0.12, <=0.0.75) +416 more potentially affected by CVE-2025-53892 via vue-i18n (>=9.0.0, <=9.14.4)

vue-i18n NPM version =9.0.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =0.1.87, =3.0.3, =4.0.3, =4.0.25 and more Source cves: CVE-2025-5389...

@actindo/core-ui (>=1.0.1, <=1.0.20), @dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8) +52 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=11.0.0, <=11.1.9)

@intlify/core-base NPM version =11.0.0, =1.0.1, =1.0.7, =1.1.2-app-13.7.1, =1.0.95, =0.0.1, =0.0.1, =0.0.1, =3.1.55, =11.0.0-beta.0, =11.0.0-beta.0, =11.0.0-beta.0, =11.1.9 - @mohaq/directus-extension-tiptap 1.0.3 and more Source cves: CVE-2025-53892 Source advisory: OSV:GHSA-X8QP-WQQM-57PH...

@_lan/uni-libs (0.0.3), @acegroup/cli-templates-vue3-element-admin (1.0.0) +694 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=9.0.0, <=9.14.4)

@intlify/core-base NPM version =9.0.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =1.0.0, =0.1.87, =0.3.2 and more Source cves: CVE-2025-538...

@actindo/core-ui (>=1.0.1, <=1.0.20), @dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8) +47 more potentially affected by CVE-2025-53892 via vue-i18n (>=11.0.0, <=11.1.7)

vue-i18n NPM version =11.0.0, =1.0.1, =1.0.7, =1.1.2-app-13.7.1, =1.0.95, =0.0.1, =0.0.1, =0.0.1, =3.1.55, =0.0.15, =0.2.550, =0.2.0, =0.2.2 and more Source cves: CVE-2025-53892 Source advisory: OSV:GHSA-X8QP-WQQM-57PH...

petite-vue-i18n (9.2.0-alpha.7), vue-i18n (9.2.0-alpha.7) potentially affected by CVE-2025-53892 via @intlify/vue-i18n-core (9.2.0-alpha.7)

@intlify/vue-i18n-core NPM version 9.2.0-alpha.7 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/vue-i18n-core and may be impacted: - petite-vue-i18n 9.2.0-alpha.7 - vue-i18n 9.2.0-alpha.7 Source cves: CVE-2025-53892 Source advisory:...

@intlify/cli (>=0.9.0, <=0.11.3), @sfxcode/formkit-primevue (>=2.5.4, <=2.7.0) +7 more potentially affected by CVE-2025-53892 via @intlify/core (>=9.0.0-beta.11, <=9.14.1)

@intlify/core NPM version =9.0.0-beta.11, =0.9.0, =2.5.4, =2.14.1, =9.0.0-beta.11, =1.9.0, =2.0.0-beta, =2.0.0-beta.1 - we-i18n 0.1.1 Source cves: CVE-2025-53892 Source advisory: OSV:GHSA-X8QP-WQQM-57PH...

@acronis-platform/ui-component-library (1.33.0), @aesoper/i18n (>=1.0.56, <=1.0.57) +38 more potentially affected by CVE-2025-53892 via @intlify/core-base (>=10.0.0, <=10.0.7)

@intlify/core-base NPM version =10.0.0, =1.0.56, =1.0.0, =10.0.0-alpha.1, =10.0.0-alpha.3, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.13.0 and more Source cves: CVE-2025-53892 Source advisory: OSV:GHSA-X8QP-WQQM-57PH...

allyaudio (>=0.1.0, <=0.4.0), ambisonic (>=0.4.0, <=0.4.1) +136 more potentially affected by unknown CVE via slice-ring-buffer (0.3.4)

slice-ring-buffer CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio 0.4.0 and mo...

aurelius (>=0.7.0, <=0.7.5), basiliq (>=0.1.0, <=0.1.2) +23 more potentially affected by unknown CVE via slice-deque (>=0.1.16, <=0.2.4)

slice-deque CARGO version =0.1.16, =0.7.0, =0.1.0, =0.7.0, =0.1.0, =0.13.1, =0.1.2, =0.9.0, =0.1.0, =0.2.0, =0.1.1, =0.1.0, =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7MCQ-F592-PF7V...