@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +87 more potentially affected by CVE-2025-6624 via snyk (>=1.1.1, <=1.1297.1)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =1.6.0, =1.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2025-6624 Source advisory: OSV:GHSA-6HWC-9H8R-3VMF...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +87 more potentially affected by CVE-2025-6624 via snyk (>=1.1.1, <=1.1297.1)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =1.6.0, =1.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2025-6624 Source advisory: SNYK:JS-SNYK-10497607...

@0cfg/utils-node (>=0.1.2, <=0.1.8), @b0ase/path402-api (4.0.0-alpha.1) +262 more potentially affected by CVE-2025-6547 via pbkdf2 (>=3.0.4, <=3.1.2)

pbkdf2 NPM version =3.0.4, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.38.0, =1.45.0, =1.1.14, =1.20.2, =1.3.13, =3.8.1, =4.26.0 and more Source cves: CVE-2025-6547 Source advisory: OSV:GHSA-V62P-RQ8G-8H59...

org.webjars.npm:ethereum-cryptography (0.1.3), org.webjars.npm:parse-asn1 (>=5.0.0, <=5.1.6) potentially affected by CVE-2025-6547 via org.webjars.npm:pbkdf2 (3.1.2)

org.webjars.npm:pbkdf2 MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:pbkdf2 and may be impacted: - org.webjars.npm:ethereum-cryptography 0.1.3 - org.webjars.npm:parse-asn1 =5.0.0, =5.1.6 Source cves: CVE-2025-6547...

org.webjars.npm:ethereum-cryptography (0.1.3), org.webjars.npm:parse-asn1 (>=5.0.0, <=5.1.6) potentially affected by CVE-2025-6545 via org.webjars.npm:pbkdf2 (3.1.2)

org.webjars.npm:pbkdf2 MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:pbkdf2 and may be impacted: - org.webjars.npm:ethereum-cryptography 0.1.3 - org.webjars.npm:parse-asn1 =5.0.0, =5.1.6 Source cves: CVE-2025-6545...

@0cfg/utils-node (>=0.1.2, <=0.1.8), @b0ase/path402-api (4.0.0-alpha.1) +228 more potentially affected by CVE-2025-6545 via pbkdf2 (>=3.0.12, <=3.1.2)

pbkdf2 NPM version =3.0.12, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.38.0, =1.45.0, =1.1.14, =1.20.2, =1.3.13, =3.8.1, =1.4.1, =1.34.4 and more Source cves: CVE-2025-6545 Source advisory: OSV:GHSA-H7CP-R72F-JXH6...

@4via6/relay (>=1.0.0, <=1.1.3), @axonpush/wizard (>=0.0.1, <=0.0.4) +9 more potentially affected by CVE-2025-52882 via @anthropic-ai/claude-code (>=0.2.126, <=1.0.8)

@anthropic-ai/claude-code NPM version =0.2.126, =1.0.0, =0.0.1, =0.0.55, =1.0.0, =0.0.1, =0.0.1, =0.0.1-beta.2, =0.0.1, =0.0.5 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-52882 Source advisory: OSV:GHSA-9F65-56V6-GXW7...

de.chandre.admin-tools:admin-tools-dbbrowser (>=1.1.1, <=1.1.7.3), de.chandre.admin-tools:admin-tools-filebrowser (>=1.1.1, <=1.1.7.3) +3 more potentially affected by CVE-2025-6493 via org.webjars.bower:codemirror (>=3.23.0, <=5.58.2)

org.webjars.bower:codemirror MAVEN version =3.23.0, =1.1.1, =1.1.1, =3.4.3, =3.4.4 - org.webjars.bower:mergely 3.3.6 Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-10494097...

org.webjars.bowergithub.advanced-rest-client:code-mirror (2.0.1), org.webjars.bowergithub.angular-ui:ui-codemirror (>=0.1.6, <=0.3.0) potentially affected by CVE-2025-6493 via org.webjars.bowergithub.components:codemirror (>=4.13.0, <=5.65.12)

org.webjars.bowergithub.components:codemirror MAVEN version =4.13.0, =0.1.6, =0.3.0 Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARSBOWERGITHUBCOMPONENTS-10494093...

com.gitblit.fathom:fathom-integration-test (>=0.5.0, <=1.0.1), com.github.dreampie:jfinal-dreampie (1.0) +30 more potentially affected by CVE-2025-6493 via org.webjars:codemirror (>=3.15, <=5.62.2)

org.webjars:codemirror MAVEN version =3.15, =0.5.0, =1.0.0, =1.0.1, =2.3.0.cr1, =2.1.8.0, =2.1.8.0, =2.1.8.0, =2.1.8.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =1.7.0, =1.7.5 and more Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARS-10494095...

org.apache.marmotta:marmotta-ldpath (3.1.0-incubating), org.apache.marmotta:marmotta-sparql (3.1.0-incubating) potentially affected by CVE-2025-6493 via org.apache.marmotta.webjars:codemirror (3.1.0-incubating)

org.apache.marmotta.webjars:codemirror MAVEN version 3.1.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.marmotta.webjars:codemirror and may be impacted: - org.apache.marmotta:marmotta-ldpath 3.1.0-incubating -...

pingora (>=0.1.0, <=0.4.0), pingora-cache (>=0.1.0, <=0.4.0) +3 more potentially affected by CVE-2025-4366 via pingora-core (>=0.1.1, <=0.4.0)

pingora-core CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0 - static-files-module 0.1.0 Source cves: CVE-2025-4366 Source advisory: OSV:GHSA-93C7-7XQW-W357...

7ghost (>=4.11.0, <=4.11.46), @accordproject/concerto-ui-react (>=0.6.0-alpha.1, <=0.83.1-20200224151908) +272 more potentially affected by CVE-2026-1615 via jsonpath (>=1.0.0, <=1.2.1)

jsonpath NPM version =1.0.0, =4.11.0, =0.6.0-alpha.1, =0.82.10-20200221024018, =1.0.0, =1.1.0-dev.2, =3.0.6371, =4.0.2, =2.0.4, =0.2.0-dev.1, =4.0.149, =3.0.129, =4.0.174, =0.11.8, =1.2.5, =1.4.0 and more Source cves: CVE-2026-1615 Source advisory: SNYK:JS-JSONPATH-13645034...

@accounter/server (>=0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @dossierhq/test-data (1.0.1) +4 more potentially affected by CVE-2025-12613 via cloudinary (>=2.0.3, <=2.6.1)

cloudinary NPM version =2.0.3, =0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, =7.1.0, =1.0.0-alpha.88, =1.0.0-alpha.88, =0.0.1, =0.0.6 Source cves: CVE-2025-12613 Source advisory: SNYK:JS-CLOUDINARY-10495740...

better-auth-cloudflare (0.1.0) potentially affected by CVE-2025-6087 +1 more via @opennextjs/cloudflare (1.0.1)

@opennextjs/cloudflare NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @opennextjs/cloudflare and may be impacted: - better-auth-cloudflare 0.1.0 Source cves: CVE-2025-6087, CVE-2026-3125 Source advisory: OSV:GHSA-RVPW-P7VW-WJ3M...

allyaudio (>=0.1.0, <=0.4.0), ambisonic (>=0.4.0, <=0.4.1) +136 more potentially affected by unknown CVE via slice-ring-buffer (0.3.4)

slice-ring-buffer CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio 0.4.0 and mo...

letta-nory (0.1.0) potentially affected by CVE-2025-6101 via letta (0.16.8)

letta PYPI version 0.16.8 is affected by a known vulnerability. The following packages have a transitive dependency on letta and may be impacted: - letta-nory 0.1.0 Source cves: CVE-2025-6101 Source advisory: SNYK:PYTHON-LETTA-10494065...

@cyanheads/git-mcp-server (>=2.0.10, <=2.1.0), @dsazz/mcp-confluence (0.2.0) +34 more potentially affected by CVE-2025-49596 via @modelcontextprotocol/inspector (>=0.2.7, <=0.13.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =2.0.10, =1.0.1, =0.0.0-alpha.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-49596 Source advisory: OSV:GHSA-7F8R-222P-6F5G...

@emuanalytics/flow-pipelines (>=0.0.1, <=1.3.9), @evdhiggins/airtable-sync (0.2.6) +10 more potentially affected by CVE-2025-29744 via pg-promise (>=11.0.0, <=11.5.4)

pg-promise NPM version =11.0.0, =0.0.1, =1.0.1, =1.2.1, =6.1.0-alpha.7, =2.4.46, =1.0.1, =0.29.0, =6.1.0-alpha.3, =2.0.0, =2.0.1 Source cves: CVE-2025-29744 Source advisory: OSV:GHSA-FF9H-848C-4XFJ...

@dm3-org/dm3-cli (1.3.0) potentially affected by unknown CVE via ccip-resolver (0.2.10)

ccip-resolver NPM version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on ccip-resolver and may be impacted: - @dm3-org/dm3-cli 1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-5026...

@dm3-org/delivery-service (>=1.4.0, <=1.7.1), @dm3-org/dm3-backend (>=1.0.1, <=1.7.1) +18 more potentially affected by unknown CVE via @dm3-org/dm3-lib-crypto (1.7.2)

@dm3-org/dm3-lib-crypto NPM version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @dm3-org/dm3-lib-crypto and may be impacted: - @dm3-org/delivery-service =1.4.0, =1.0.1, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =0.0.1-alpha1, =1.0.5, =1.4.0,...

goodpkgmamamamamamam (1.0.0) potentially affected by unknown CVE via mtrtestinglalalal (0.0.1-security)

mtrtestinglalalal NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mtrtestinglalalal and may be impacted: - goodpkgmamamamamamam 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-5040...

@nx/powerpack-azure-cache (>=1.3.0-beta.1, <=21.0.0-beta.0) potentially affected by CVE-2025-36852 via @nx/azure-cache (>=1.3.0, <=21.0.0-beta.0)

@nx/azure-cache NPM version =1.3.0, =1.3.0-beta.1, =21.0.0-beta.0 Source cves: CVE-2025-36852 Source advisory: SNYK:JS-NXAZURECACHE-13559382...

@tarojs/rn-runner (>=4.0.0-alpha.0, <=4.1.1), @tarojs/rn-style-transformer (>=4.0.0-alpha.0, <=4.1.1) +2 more potentially affected by CVE-2025-5896 via taro-css-to-react-native (>=4.0.0, <=4.1.1-alpha.2)

taro-css-to-react-native NPM version =4.0.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.1.1 Source cves: CVE-2025-5896 Source advisory: OSV:GHSA-F5XG-CFPJ-2MW6...

@nodefony/monitoring-bundle (>=7.0.0-beta.3, <=7.0.0-beta.8), nodefony (>=7.0.0-beta.3, <=7.0.0-beta.8) potentially affected by CVE-2025-5897 via @vue/cli-plugin-pwa (5.0.8)

@vue/cli-plugin-pwa NPM version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on @vue/cli-plugin-pwa and may be impacted: - @nodefony/monitoring-bundle =7.0.0-beta.3, =7.0.0-beta.3, =7.0.0-beta.8 Source cves: CVE-2025-5897 Source advisory:...

jo-cli (1.0.2) potentially affected by CVE-2025-5889 via brace-expansion (3.0.0)

brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2025-5889 Source advisory: OSV:GHSA-V6H2-P8H4-QCJW...

@alfresco/adf-testing (6.0.0-A.2-8258), @genexus/ngx-aws-deploy (5.2.1) +5 more potentially affected by CVE-2025-5889 via brace-expansion (>=2.0.0, <=2.0.1)

brace-expansion NPM version =2.0.0, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver 1.1.2 - nx-cargo 1.0.0-alpha.2 Source cves: CVE-2025-5889 Source advisory: OSV:GHSA-V6H2-P8H4-QCJW...

kydra (>=1.0.10, <=1.0.11) potentially affected by CVE-2025-5889 via brace-expansion (4.0.0)

brace-expansion NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - kydra =1.0.10, =1.0.11 Source cves: CVE-2025-5889 Source advisory: OSV:GHSA-V6H2-P8H4-QCJW...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +27 more potentially affected by CVE-2025-5889 via brace-expansion (>=1.1.0, <=1.1.11)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =0.0.3, =0.0.1, =0.1.0 and more Source cves: CVE-2025-5889 Source advisory: OSV:GHSA-V6H2-P8H4-QCJW...

@actions-for-rust/core (>=0.1.6, <=0.1.8), @actions-rs-plus/core (>=0.0.0, <=0.10.0) +129 more potentially affected by CVE-2025-5890 via @actions/glob (>=0.1.2, <=0.7.0)

@actions/glob NPM version =0.1.2, =0.1.6, =0.0.0, =0.1.0, =1.0.1-2a6268e89ea5fbc66dadd1d897cac75b3f0a63e4.0, =0.1.0, =1.0.0, =4.0.0, =3.2.5, =1.1.0-rc.0, =3.2.2, =3.2.6 - @cirunlabs/cache 4.0.3 and more Source cves: CVE-2025-5890 Source advisory: SNYK:JS-ACTIONSGLOB-11484208...

acct (>=0.2.0, <=0.5.0), acme-redirect (0.4.0) +115 more potentially affected by CVE-2025-5791 via users (>=0.8.1, <=0.10.0)

users CARGO version =0.8.1, =0.2.0, =4.1.0, =1.0.0, =0.1.0, =0.9.0, =0.9.0, =0.1.0, =0.4.2, =0.4.0, =0.7.4, =0.0.1, =0.1.4, =0.4.0, =0.10.3 and more Source cves: CVE-2025-5791 Source advisory: OSV:GHSA-M65Q-V92H-CM7Q...

02url-querystring-http (>=1.0.1, <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6) +10144 more potentially affected by CVE-2025-48997 via multer (>=1.4.4, <=2.0.0-alpha.6)

multer NPM version =1.4.4, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - 6e-alpha-backend-admin 1.0.0 - 7-segunda-preentrega 1.0.0 and more Source cves: CVE-2025-48997 Source advisory: OSV:GHSA-G5HG-P3PH-G8QG...

@haxtheweb/create (>=10.0.0, <=11.0.2), @haxtheweb/open-apis (11.0.2) potentially affected by CVE-2025-48996 via @haxtheweb/open-apis (10.0.1)

@haxtheweb/open-apis NPM version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @haxtheweb/open-apis and may be impacted: - @haxtheweb/create =10.0.0, =11.0.2 - @haxtheweb/open-apis 11.0.2 Source cves: CVE-2025-48996 Source advisory:...

basejmp (0.1.0), clarinet (>=0.2.0, <=0.10.0) +9 more potentially affected by CVE-2025-48934 via deno_runtime (>=0.3.0, <=0.105.0)

denoruntime CARGO version =0.3.0, =0.2.0, =1.6.1, =1.12.2, =0.2.0-rc1, =0.4.1, =0.4.1, =0.4.1, =0.4.1, =0.4.2 - zinniaruntime 0.0.3 Source cves: CVE-2025-48934 Source advisory: OSV:GHSA-7W8P-CHXQ-2789...

@all-star/base (>=0.17.0, <=0.18.2), @all-star/react (>=0.17.0, <=0.18.2) +163 more potentially affected by CVE-2025-30360 via webpack-dev-server (>=5.0.0, <=5.2.0)

webpack-dev-server NPM version =5.0.0, =0.17.0, =0.17.0, =0.17.0, =18.0.0-next.0, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2-develop-1171, =0.4.0, =0.1.15, =0.0.2, =0.0.2, =0.1.3 and more Source cves: CVE-2025-30360 Source advisory: OSV:GHSA-9JGG-88MC-972H...

@all-star/base (>=0.17.0, <=0.18.2), @all-star/react (>=0.17.0, <=0.18.2) +163 more potentially affected by CVE-2025-30359 via webpack-dev-server (>=5.0.0, <=5.2.0)

webpack-dev-server NPM version =5.0.0, =0.17.0, =0.17.0, =0.17.0, =18.0.0-next.0, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2-develop-1171, =0.4.0, =0.1.15, =0.0.2, =0.0.2, =0.1.3 and more Source cves: CVE-2025-30359 Source advisory: OSV:GHSA-4V9V-HFQ4-RM2V...

net.aequologica.neo:geppaequo-tags (>=0.5.3, <=0.6.0), net.aequologica.neo:geppaequo-web (>=0.5.3, <=0.6.0) +4 more potentially affected by CVE-2025-2336 via org.webjars.npm:angular-sanitize (>=1.5.0-beta.0, <=1.8.3)

org.webjars.npm:angular-sanitize MAVEN version =1.5.0-beta.0, =0.5.3, =0.5.3, =0.6.0 - org.webjars.npm:angular-auto-complete 1.7.4 - org.webjars.npm:angular-material-calendar 0.2.14 - org.webjars.npm:angular-schema-form 0.8.13 - org.webjars.npm:github-com-showdownjs-ng-showdown 1.1.0 Source cves:...

40au-isteven-angular-multiselect (4.0.0), @0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5) +499 more potentially affected by CVE-2025-2336 via angular-sanitize (>=1.3.11, <=1.8.3)

angular-sanitize NPM version =1.3.11, =4.13.7-rc4, =0.0.1, =0.0.1, =0.1.0, =2.0.0, =0.3.2, =0.2.7, =1.0.0, =1.0.0, =0.2.1, =0.0.1, =1.0.0, =3.0.2, =4.16.5 and more Source cves: CVE-2025-2336 Source advisory: OSV:GHSA-4P4W-6HG8-63WX...

com.github.grantlittle:bdd-reporting-server (>=0.1.5, <=0.1.7), com.github.grantlittle:bdd-reporting-service (0.1.9) +59 more potentially affected by CVE-2025-2336 via org.webjars.bower:angular-sanitize (>=1.2.29, <=1.8.2)

org.webjars.bower:angular-sanitize MAVEN version =1.2.29, =0.1.5, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1 and more Source cves: CVE-2025-2336 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-10337226...

org.webjars:angular-markdown-directive (0.3.0) potentially affected by CVE-2025-2336 via org.webjars:angular-sanitize (1.2.16)

org.webjars:angular-sanitize MAVEN version 1.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:angular-sanitize and may be impacted: - org.webjars:angular-markdown-directive 0.3.0 Source cves: CVE-2025-2336 Source advisory:...

@mwater/visualization (>=5.4.0, <=5.7.0), azharimm-ui (>=1.0.0, <=1.0.2) +2 more potentially affected by CVE-2025-49223 via billboard.js (>=3.1.5, <=3.14.0)

billboard.js NPM version =3.1.5, =5.4.0, =1.0.0, =2.0.180, =2.4.42 - vuero 2.2.0 Source cves: CVE-2025-49223 Source advisory: OSV:GHSA-65P9-J6PG-72HJ...

org.webjars.npm:nestjs__platform-express (>=8.4.7, <=9.0.0-next.2) potentially affected by CVE-2025-48997 via org.webjars.npm:multer (1.4.4-lts.1)

org.webjars.npm:multer MAVEN version 1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2025-48997 Source advisory:...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +160 more potentially affected by CVE-2025-48387 via tar-fs (>=1.0.0, <=1.16.3)

tar-fs NPM version =1.0.0, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.4 - @elm-node/npm-scripts 1.0.0 - @hlsrules-test/fc-libreoffice 1.0.0 and more Source cves: CVE-2025-48387 Source advisory: OSV:GHSA-8CJ5-5RVV-WF4V...

007putra-my-bot (1.1.1), 10bis-shufersal-automation (1.0.0) +4594 more potentially affected by CVE-2025-48387 via tar-fs (>=2.0.0, <=2.1.2)

tar-fs NPM version =2.0.0, =0.2.0, =1.0.0, =1.0.0, =0.107.10, =1.19.19, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2025-48387 Source advisory: OSV:GHSA-8CJ5-5RVV-WF4V...

0wcc9yywcywy (1.0.0), 0wu8yw8by8cw (1.0.0) +2415 more potentially affected by CVE-2025-48387 via tar-fs (>=3.0.2, <=3.0.8)

tar-fs NPM version =3.0.2, =0.0.1, =2.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-48387 Source advisory: OSV:GHSA-8CJ5-5RVV-WF4V...

org.webjars.npm:better-sqlite3 (12.11.1), org.webjars.npm:image-thumbnail (1.0.15) +4 more potentially affected by CVE-2025-48387 via org.webjars.npm:tar-fs (2.1.5)

org.webjars.npm:tar-fs MAVEN version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:tar-fs and may be impacted: - org.webjars.npm:better-sqlite3 12.11.1 - org.webjars.npm:image-thumbnail 1.0.15 - org.webjars.npm:pkg-fetch 3.4.2 -...

anndata (0.2.0), anndata-hdf5 (>=0.1.0, <=0.1.1) +102 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.17.4)

arrow2 CARGO version =0.5.3, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.2.1, =0.2.2, =0.4.0, =0.1.0, =0.15.0, =0.16.0 - geoarrow-wasm 0.1.0 - geoarrow2 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WV8J-M3HX-924J...

org.onosproject:onos-drivers-arista (>=1.7.0, <=1.8.9), org.onosproject:onos-drivers-ciena (>=1.7.0, <=1.8.9) +13 more potentially affected by CVE-2023-41591 via org.onosproject:onos-core-net (>=1.7.0, <=2.5.7-rc2)

org.onosproject:onos-core-net MAVEN version =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.8.0, =1.7.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =3.0.0, =3.0.0, =3.0.0, =4.0.0 Source cves: CVE-2023-41591 Source advisory: SNYK:JAVA-ORGONOSPROJECT-10658543...

ado-sfttrainer (>=1.0.1, <=1.8.6), aim-mlflow (>=0.1.0, <=0.2.1) +27 more potentially affected by CVE-2025-5321 via aim (>=3.17.4, <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2025-5321 Source advisory: SNYK:PYTHON-AIM-10288918...

3d-rcnet (>=0.2.2, <=0.2.3), aa-prepflow (>=0.1.0, <=0.1.1) +1191 more potentially affected by CVE-2025-5320 via gradio (>=1.7.7, <=6.24.0)

gradio PYPI version =1.7.7, =0.2.2, =0.1.0, =0.3.0, =0.0.3, =0.2.0, =0.1.5, =0.8.2.4, =0.2.1, =1.2.0, =0.1.0, =0.1.0, =1.2.9.1, =0.1.0, =0.2.4 and more Source cves: CVE-2025-5320 Source advisory: SNYK:PYTHON-GRADIO-10265013...