custom_ww (1.0.0) potentially affected by unknown CVE via lodasn (0.0.1-security)

lodasn NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodasn and may be impacted: - customww 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25510...

brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +9 more potentially affected by unknown CVE via flat-glob (0.0.1)

flat-glob NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flat-glob and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20688...

04-as-contact-numbers-menu-cli (1.0.0), 10xanswers (>=1.0.11, <=1.0.36) +426 more potentially affected by unknown CVE via save-dev (0.0.1-security)

save-dev NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on save-dev and may be impacted: - 04-as-contact-numbers-menu-cli 1.0.0 - 10xanswers =1.0.11, =3.0.2, =1.6.5, =1.9.1, =1.2.0, =1.1.6, =0.2.1, =1.0.0 - @andes/plex 8.0.14 -...

brick (0.0.0), bud (>=0.0.0, <=0.1.2) +16 more potentially affected by unknown CVE via first-val (0.0.0)

first-val NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick 0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves:...

@pagopa/io-react-native-wallet (>=1.2.2, <=1.5.0), @repay/eslint-config (0.1.1) +9 more potentially affected by unknown CVE via yarn.lock (0.0.1-security)

yarn.lock NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on yarn.lock and may be impacted: - @pagopa/io-react-native-wallet =1.2.2, =1.0.0, =2.14.0-beta.33f459cf.046a621, =4.2.0, =2.7.0, =2.0.29, =1.0.5, =0.1.0, =1.2.0, =1.2.5...

kik (>=0.0.0, <=1.3.0), kik-starter (2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0, <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter 2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23249...

ourtunes (>=0.0.0, <=1.1.0), play-url (>=0.0.2, <=0.0.5) potentially affected by unknown CVE via rdio-js-api (0.0.6)

rdio-js-api NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on rdio-js-api and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31754...

04-rsib_contact-numbers-menue_cli (>=1.0.0, <=1.0.1), advanture-game-by-sam (>=1.0.0, <=1.0.1) +2 more potentially affected by unknown CVE via chak (0.0.1-security)

chak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 1.0.0 Source cves: unknown CVE Source advisory:...

@uni-cli/cli (>=1.0.6, <=1.0.12), @uni-cli/init (1.0.12) +1 more potentially affected by unknown CVE via fs-extar (0.0.1-security)

fs-extar NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fs-extar and may be impacted: - @uni-cli/cli =1.0.6, =1.0.12 - @uni-cli/init 1.0.12 - hwsz-tools 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-21006...

000tea (1.4.5), 00tea (1.4.4) +838 more potentially affected by unknown CVE via name (0.0.2)

name NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on name and may be impacted: - 000tea 1.4.5 - 00tea 1.4.4 - 01q 1.5.1 - 032we 1.5.7 - 0tea 1.4.3 - 123qaz 1.1.1 - 12we 1.6.9 - 12wea 1.5.5 - 1qwe 1.4.6 - 1qwer 1.4.7 - 1qwert 1.4.8 -...

formii (1.0.0), html-patcher-stream (>=1.0.0, <=1.1.0) +1 more potentially affected by unknown CVE via html-patcher (>=0.0.3, <=0.1.0)

html-patcher NPM version =0.0.3, =1.0.0, =0.1.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22751...

ftms (1.0.0), package-ftms (1.0.0) potentially affected by unknown CVE via requset (0.0.1-security)

requset NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requset and may be impacted: - ftms 1.0.0 - package-ftms 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32120...

luis-reddit-cli (1.0.0), md-links-larissadepaula (>=0.2.0, <=0.2.1) +1 more potentially affected by unknown CVE via node-fecth (0.0.1-security)

node-fecth NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-fecth and may be impacted: - luis-reddit-cli 1.0.0 - md-links-larissadepaula =0.2.0, =0.0.37, =0.0.40 Source cves: unknown CVE Source advisory: OSV:MAL-2025-2761...

@alancastro06/coolsolelog (22.14.0), albot (>=0.1.0, <=0.14.1) +43 more potentially affected by unknown CVE via ansi-codes (>=0.0.0, <=2.0.0)

ansi-codes NPM version =0.0.0, =0.1.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.1, =0.0.0, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-14554...

@rustybrooks/eslint-config-prettier (>=1.0.0, <=1.0.18) potentially affected by unknown CVE via eslint-plugin-airbnb-base (0.0.1-security)

eslint-plugin-airbnb-base NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eslint-plugin-airbnb-base and may be impacted: - @rustybrooks/eslint-config-prettier =1.0.0, =1.0.18 Source cves: unknown CVE Source advisory:...

my-first-vue-project (0.1.0), react-responsive-data-table (>=1.0.0, <=1.0.5) potentially affected by unknown CVE via bootstrap4 (0.0.1-security)

bootstrap4 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap4 and may be impacted: - my-first-vue-project 0.1.0 - react-responsive-data-table =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15992...

brick (0.0.0), brick-browser (>=0.0.0, <=0.0.14) +11 more potentially affected by unknown CVE via methodify (>=0.0.2, <=0.0.3)

methodify NPM version =0.0.2, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26261...

bud-indexhtml (>=0.0.0, <=0.0.3), indexhtml-cli (0.0.0) +1 more potentially affected by unknown CVE via indexhtml (>=0.0.0, <=0.0.3)

indexhtml NPM version =0.0.0, =0.0.0, =0.0.2, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23115...

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...

adaptive-fs (>=1.1.0, <=1.3.2), ajato (0.0.1-wip) +1 more potentially affected by unknown CVE via mogoose (0.0.1-security)

mogoose NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mogoose and may be impacted: - adaptive-fs =1.1.0, =1.0.48, =1.1.26 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26613...

jones-mysql (1.0.0), jones-ndb (1.0.0) potentially affected by unknown CVE via database-jones (1.2.8)

database-jones NPM version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on database-jones and may be impacted: - jones-mysql 1.0.0 - jones-ndb 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17995...

1-exceptions-handler (1.0.13), 10-20-day-exam (1.0.0) +2610 more potentially affected by unknown CVE via http (>=0.0.0, <=0.0.1-security)

http NPM version =0.0.0, =1.0.1, =2.0.0, =0.0.1, =0.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-22760...

@capillarytech/creatives-library (7.12.19), @htmlgoddess/cli (>=0.3.5, <=0.4.4) +25 more potentially affected by unknown CVE via babel-node (0.0.1-security)

babel-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-node and may be impacted: - @capillarytech/creatives-library 7.12.19 - @htmlgoddess/cli =0.3.5, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.2.0, =0.0.1, =0.0.7, =0.1.9 -...

03_node_1 (1.0.0), 111nodejs03 (1.0.0) +98 more potentially affected by unknown CVE via math (>=0.0.3, <=1.0.0-canary-37519dcd-20260903)

math NPM version =0.0.3, =0.0.1-rc.21, =0.0.1-rc.41-v2, =1.0.1, =1.0.0, =2.0.11, =0.8.0, =0.2.1, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.1.0 - aloysqrtminmax 1.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-26006...

alert (>=0.0.0, <=0.0.1), background-image (0.0.0) +40 more potentially affected by unknown CVE via new-format (>=0.0.1, <=2.0.0)

new-format NPM version =0.0.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.3.0, =0.0.0, =0.0.10, =0.0.0, =0.0.0, =0.0.0, =0.0.13 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27361...

@akitha/new-plugin (0.0.1), @akitha/plugin-chart-hello (>=0.0.1, <=0.0.3) +245 more potentially affected by CVE-2025-55672 via @superset-ui/core (>=0.3.0, <=1.5.0)

@superset-ui/core NPM version =0.3.0, =0.0.1, =0.17.61, =0.0.0, =0.15.2, =0.0.1, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =1.0.5 and more Source cves: CVE-2025-55672 Source advisory: SNYK:JS-SUPERSETUICORE-11953561...

@proompter/demo-next (>=0.0.16, <=0.0.19), @proompter/flowise (>=1.4.13, <=1.4.14) +2 more potentially affected by CVE-2025-8943 via flowise-components (>=1.3.4, <=3.1.4)

flowise-components NPM version =1.3.4, =0.0.16, =1.4.13, =0.0.1, =1.0.0, =3.1.4 Source cves: CVE-2025-8943 Source advisory: SNYK:JS-FLOWISECOMPONENTS-11953677...

adjutantvoice (>=0.2.0, <=0.2.1), aeiou (>=0.0.12, <=0.0.21) +206 more potentially affected by CVE-2025-23294 via webdataset (>=0.1.40, <=1.0.2)

webdataset PYPI version =0.1.40, =0.2.0, =0.0.12, =1.4.23, =1.0.0, =0.0.1, =1.0.2.1, =1.0.0, =0.1.1a1, =0.1.0, =0.0.13, =1.0.3, =1.0.4 - audio-transc 0.1.0 - audio-xai 0.0.2.post3 - audio2dataset 1.0.1 and more Source cves: CVE-2025-23294 Source advisory: SNYK:PYTHON-WEBDATASET-12089391...

app.cash.backfila:client-misk (>=0.1.0, <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1473 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.47, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...

com.walterjwhite.java.examples:ssh (0.0.17), com.walterjwhite.java.modules.linux-builder.modules.cli.providers:cdi (0.0.17) +24 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk14 (>=1.45, <=1.72)

org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.45, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789696...

com.github.lansheng228:aws-crypto (1.0.3), com.github.yadickson:autocert (>=2.0.0, <=2.0.2) +53 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk15to18 (>=1.64, <=1.78.1)

org.bouncycastle:bcprov-ext-jdk15to18 MAVEN version =1.64, =2.0.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.1, =12.31.0, =v9.6.9-m1, =v9.6.6, =v9.6.6, =v9.6.6, =v9.6.6, =9.6.10 - net.risesoft:risenet-y9boot-api-feignclient-storage 9.6.10 and more Source cves: CVE-2025-8916 Source advisory:...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789704...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.h2o:h2o-app (>=0.1.22, <=0.1.25) +1041 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-jdk15 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk15 MAVEN version =1.38, =1.3, =0.1.22, =0.1.22, =1.0.0, =2.1.0, =1.0.1, =4.2.0, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.0.3, =1.3.3 and more Source cves: CVE-2025-8916 Source advisory:...

cn.jarkata:jarkata-encrypt (1.0.0), cn.ponfee:commons-core (>=1.1, <=1.4) +492 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk18on (>=1.71, <=1.78.1)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.71, =1.1, =2.4.1, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50,...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30581 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789705...

br.com.swconsultoria:java-cte (>=3.00.4, <=3.00.8), br.com.swconsultoria:java-mdfe (>=3.00.3, <=3.00.4) +1215 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-jdk16 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk16 MAVEN version =1.38, =3.00.4, =3.00.3, =4.00.10, =1.0, =2.0, =1.2.4, =2.0.0, =2.1-alpha1, =2.1-alpha1, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789707...

@0xbigboss/vite-plugin-web-extension (>=5.2.0, <=5.4.0), @58860ed6ffd9e897/gold-finger-extension (1.0.2) +55 more potentially affected by CVE-2025-55164 via content-security-policy-parser (>=0.1.1, <=0.4.1)

content-security-policy-parser NPM version =0.1.1, =5.2.0, =2.13.1-next.0, =2.12.1-canary.3354, =2.12.1-canary.3354, =2.12.5-beta.0, =0.84.3, =0.0.0-experimental-15dcc54, =0.0.0-experimental-4515339, =0.0.0-experimental-2cd2b9e, =0.0.0-experimental-15dcc54, =0.0.0-experimental-15dcc54,...

@0xbigboss/vite-plugin-web-extension (>=5.2.0, <=5.4.0), @58860ed6ffd9e897/gold-finger-extension (1.0.2) +55 more potentially affected by CVE-2025-55164 via content-security-policy-parser (>=0.1.1, <=0.5.0)

content-security-policy-parser NPM version =0.1.1, =5.2.0, =2.13.1-next.0, =2.12.1-canary.3354, =2.12.1-canary.3354, =2.12.5-beta.0, =0.84.3, =0.0.0-experimental-15dcc54, =0.0.0-experimental-4515339, =0.0.0-experimental-2cd2b9e, =0.0.0-experimental-15dcc54, =0.0.0-experimental-15dcc54,...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2025-8885 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11777855...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30581 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2025-8885 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11777856...

app.cash.backfila:client-misk (>=0.1.0, <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1473 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-ext-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.47, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...

@fedify/botkit (>=0.3.0-dev.125, <=0.3.0-dev.131) potentially affected by CVE-2025-54888 via @fedify/fedify (1.8.1-dev.1262)

@fedify/fedify NPM version 1.8.1-dev.1262 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.3.0-dev.125, =0.3.0-dev.131 Source cves: CVE-2025-54888 Source advisory: SNYK:JS-FEDIFYFEDIFY-11735306...

@fedify/amqp (0.2.0-dev.12), @fedify/postgres (>=0.3.0-dev.20, <=0.3.0) +1 more potentially affected by CVE-2025-54888 via @fedify/fedify (1.5.0-dev.750)

@fedify/fedify NPM version 1.5.0-dev.750 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/amqp 0.2.0-dev.12 - @fedify/postgres =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2025-54888 Source advisory...

windmill-cli (>=0.0.1, <=0.0.13) potentially affected by CVE-2025-55152 via @oakserver/oak (>=12.6.2, <=14.1.0)

@oakserver/oak NPM version =12.6.2, =0.0.1, =0.0.13 Source cves: CVE-2025-55152 Source advisory: SNYK:JS-OAKSERVEROAK-11735294...

@fedify/amqp (0.2.0-dev.12), @fedify/postgres (>=0.3.0-dev.20, <=0.3.0) +1 more potentially affected by CVE-2025-54888 via @fedify/fedify (1.5.0-dev.750)

@fedify/fedify NPM version 1.5.0-dev.750 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/amqp 0.2.0-dev.12 - @fedify/postgres =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2025-54888 Source advisory...

@fedify/botkit (>=0.3.0-dev.125, <=0.3.0-dev.131) potentially affected by CVE-2025-54888 via @fedify/fedify (1.8.1-dev.1262)

@fedify/fedify NPM version 1.8.1-dev.1262 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.3.0-dev.125, =0.3.0-dev.131 Source cves: CVE-2025-54888 Source advisory: OSV:GHSA-6JCC-XGCR-Q3H4...

bolic-network (0.0.1), futures-quic (>=0.2.4, <=0.2.8) +7 more potentially affected by CVE-2025-7054 via quiche (>=0.16.0, <=0.22.0)

quiche CARGO version =0.16.0, =0.2.4, =0.0.1, =0.1.0, =0.1.1 Source cves: CVE-2025-7054 Source advisory: OSV:GHSA-M3HH-F9GH-74C2...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +54 more potentially affected by CVE-2025-54793 via @astrojs/internal-helpers (>=0.6.1, <=0.7.0)

@astrojs/internal-helpers NPM version =0.6.1, =0.0.1, =1.0.0, =12.2.4, =0.12.11, =6.2.1, =4.1.1, =6.2.3, =9.1.3, =8.1.2, =0.1.0, =0.1.0, =1.0.5, =1.25.426-4, =0.0.9, =1.3.0, =1.3.4 and more Source cves: CVE-2025-54793 Source advisory: SNYK:JS-ASTROJSINTERNALHELPERS-11508621...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +19 more potentially affected by CVE-2025-54793 via astro (>=5.2.1, <=5.12.6)

astro NPM version =5.2.1, =0.0.1, =1.0.0, =1.0.0, =1.25.426-4, =0.6.2, =0.0.0-dev-20250414184926, =0.0.1, =0.0.1, =2.1.22, =1.0.3, =0.1.0, =0.3.19, =0.3.20 - astro-theme-stalux 1.0.0 and more Source cves: CVE-2025-54793 Source advisory: OSV:GHSA-CQ8C-XV66-36GW...

org.webjars.npm:bazel__karma (1.7.0), org.webjars.npm:broccoli-merge-trees (2.0.0) +15 more potentially affected by CVE-2025-54798 via org.webjars.npm:tmp (>=0.0.24, <=0.2.3)

org.webjars.npm:tmp MAVEN version =0.0.24, =2.1.0, =0.19.11, =0.2.11, =3.2.3, =6.5.0, =2.52.0, =4.10.0 - org.webjars.npm:snyk-go-plugin 1.5.2 - org.webjars.npm:snyk-python-plugin 1.8.1 and more Source cves: CVE-2025-54798 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-11501555...