Vulnersosv - Page 139 of Vulnersosv Vulnerabilities List

VulnersosvRecent

11219 matches found

vulnersOsv•added 2025/07/04 9:56 p.m.•5 views

io.zipkin:benchmarks (2.22.1) potentially affected by CVE-2025-53602 via io.zipkin:zipkin-server (2.22.1)

io.zipkin:zipkin-server MAVEN version 2.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.zipkin:zipkin-server and may be impacted: - io.zipkin:benchmarks 2.22.1 Source cves: CVE-2025-53602 Source advisory: SNYK:JAVA-IOZIPKIN-10639631...

5.3CVSS5.4AI score0.00295EPSS

SaveExploits0

vulnersOsv•added 2025/07/04 12:00 p.m.•3 views

aoer-plotty-rs (>=0.3.0, <=0.4.1), d3_delaunay_rs (>=0.10.0, <=0.11.2) +46 more potentially affected by unknown CVE via i_tree (>=0.2.0, <=0.9.0)

itree CARGO version =0.2.0, =0.3.0, =0.10.0, =0.10.5, =0.1.0, =0.29.0, =0.0.2, =0.2.0, =0.7.0, =0.1.0, =0.1.1 - geodatafusion 0.1.0-dev - geograph 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0165...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/07/03 9:14 p.m.•5 views

3llm (0.0.1), @3bitmt/3bit-sidebar-dashboard (1.1.4) +330 more potentially affected by CVE-2025-49826 via next (>=15.0.4, <=15.1.7)

next NPM version =15.0.4, =0.0.3-alpha-20241208090947-7fef7769a72aeb2895978b4e7647afdba519b103, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.1, =0.1.1, =0.1.0, =0.1.22 and more Source cves: CVE-2025-49826 Source advisory: OSV:GHSA-67RR-84XM-4C7R...

7.5CVSS8.1AI score0.01095EPSS

SaveExploits0

vulnersOsv•added 2025/07/03 8:30 p.m.•6 views

0xmugitea (0.1.0), 300tea300 (0.1.2) +171 more potentially affected by CVE-2025-49005 via next (>=15.3.0, <=15.3.2)

next NPM version =15.3.0, =0.1.0, =0.0.5-alpha-20250409222818-a35bb677fde1e4e9cf3db443e9ae36abf4f8e21b, =0.0.20, =0.9.14, =0.0.73, =0.0.73, =0.0.73, =0.0.151, =0.1.0, =0.0.14, =0.0.22 and more Source cves: CVE-2025-49005 Source advisory: OSV:GHSA-R2FC-CCR8-96C4...

3.7CVSS5AI score0.00423EPSS

SaveExploits1

vulnersOsv•added 2025/07/02 7:41 p.m.•4 views

org.lucee:aws-sm (>=1.0.0.5-rc, <=1.1.0.4-rc), org.lucee:chart (>=3.0.0.0-beta, <=3.0.0.1-beta) +13 more potentially affected by CVE-2025-34074 via org.lucee:lucee (>=6.1.1.118, <=7.1.0.2-alpha)

org.lucee:lucee MAVEN version =6.1.1.118, =1.0.0.5-rc, =3.0.0.0-beta, =1.0.0.0-alpha, =1.0.0.0-alpha, =3.0.0.0-alpha, =1.0.0.17-beta, =3.0.0.0-beta, =2.1.0.0-beta, =1.0.0.2-rc, =1.0.0.3-rc Source cves: CVE-2025-34074 Source advisory: SNYK:JAVA-ORGLUCEE-10587798...

9.4CVSS8.4AI score0.01928EPSS

SaveExploits1

vulnersOsv•added 2025/07/02 3:12 p.m.•11 views

eth-utils (>=0.1.1, <=0.2.0), evm (>=0.17.3, <=0.36.0) +25 more potentially affected by CVE-2025-53359 via ethereum (>=0.4.2, <=0.12.0)

ethereum CARGO version =0.4.2, =0.1.1, =0.17.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - ovr-evm-precompile-ed25519 2.0.0 - ovr-evm-precompile-modexp 2.0.0 - ovr-evm-precompile-sha3fips 2.0.0 - ovr-evm-test-vector-support 1.0.0 and more Source cves: CVE-2025-53359 Source advisory: OSV:GHSA-3W94-VQ2X-V5WR...

6.9CVSS5.3AI score0.00364EPSS

SaveExploits0

vulnersOsv•added 2025/07/02 2:41 p.m.•5 views

@flinkhouse/servers (0.6.2), @iflow-mcp/leadfarmer-ai-mcp-server-example (>=1.0.0, <=1.0.2) +9 more potentially affected by CVE-2025-34072 via @modelcontextprotocol/server-slack (2025.4.25)

@modelcontextprotocol/server-slack NPM version 2025.4.25 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-slack and may be impacted: - @flinkhouse/servers 0.6.2 - @iflow-mcp/leadfarmer-ai-mcp-server-example =1.0.0, =1.0.0,...

9.3CVSS8AI score0.00371EPSS

SaveExploits0

vulnersOsv•added 2025/07/01 8:40 p.m.•4 views

edu.berkeley.cs:rocket-dsptools_2.12 (>=1.2.0-rc1, <=1.2.6) potentially affected by CVE-2025-45006 via edu.berkeley.cs:rocketchip_2.12 (>=1.2.0, <=1.2.6)

edu.berkeley.cs:rocketchip2.12 MAVEN version =1.2.0, =1.2.0-rc1, =1.2.6 Source cves: CVE-2025-45006 Source advisory: SNYK:JAVA-EDUBERKELEYCS-11188144...

9.1CVSS5.3AI score0.00406EPSS

SaveExploits0

vulnersOsv•added 2025/07/01 8:14 p.m.•6 views

@kakashi-ventures-accelerator/catalyst-cli (0.1.0), @mew-protocol/mew (>=0.5.0, <=0.11.0) +1 more potentially affected by CVE-2025-53110 via @modelcontextprotocol/server-filesystem (0.6.2)

@modelcontextprotocol/server-filesystem NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @kakashi-ventures-accelerator/catalyst-cli 0.1.0 - @mew-protocol/mew =0.5.0, =0.11....

7.3CVSS6.7AI score0.00526EPSS

SaveExploits0

vulnersOsv•added 2025/07/01 8:14 p.m.•4 views

@iflow-mcp/alibabacloud-dataworks-mcp-server (1.0.43), @mseep/alibabacloud-dataworks-mcp-server (1.0.36) +1 more potentially affected by CVE-2025-53110 via @modelcontextprotocol/server-filesystem (2025.3.28)

@modelcontextprotocol/server-filesystem NPM version 2025.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @iflow-mcp/alibabacloud-dataworks-mcp-server 1.0.43 -...

7.3CVSS6.7AI score0.00526EPSS

SaveExploits0

vulnersOsv•added 2025/07/01 8:13 p.m.•5 views

@kakashi-ventures-accelerator/catalyst-cli (0.1.0), @mew-protocol/mew (>=0.5.0, <=0.11.0) +1 more potentially affected by CVE-2025-53109 via @modelcontextprotocol/server-filesystem (0.6.2)

7.3CVSS7.8AI score0.00729EPSS

SaveExploits0

vulnersOsv•added 2025/07/01 8:13 p.m.•4 views

@iflow-mcp/alibabacloud-dataworks-mcp-server (1.0.43), @mseep/alibabacloud-dataworks-mcp-server (1.0.36) +1 more potentially affected by CVE-2025-53109 via @modelcontextprotocol/server-filesystem (2025.3.28)

7.3CVSS7.8AI score0.00729EPSS

SaveExploits0

vulnersOsv•added 2025/07/01 3:43 p.m.•3 views

cbs-sentry-dingding (1.0.24), cbs-sentry-qyweixin (1.0.1) +47 more potentially affected by CVE-2025-53099 via sentry (20.8.0)

sentry PYPI version 20.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry and may be impacted: - cbs-sentry-dingding 1.0.24 - cbs-sentry-qyweixin 1.0.1 - csnp =0.0.5, =1.0.0, =0.2.4, =1.0.0, =0.1.0, =0.4.0, =0.1.0, =0.2.0 and more Source cves:...

7.5CVSS7.4AI score0.00688EPSS

SaveExploits0

vulnersOsv•added 2025/06/30 6:41 p.m.•6 views

@finsemble/finsemble-core (>=8.11.0-beta.1, <=10.0.0-iocd-6), @finsemble/finsemble-electron-adapter (>=8.11.0-beta.1, <=10.0.0-iocd-6) +7 more potentially affected by CVE-2024-46993 via electron (>=29.0.1, <=29.3.1)

electron NPM version =29.0.1, =8.11.0-beta.1, =8.11.0-beta.1, =0.0.168-dev, =0.0.40, =2.0.125, =2024.4.146, =6.10.4, =10.0.53 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...

7.3CVSS7.1AI score0.0013EPSS

SaveExploits0

vulnersOsv•added 2025/06/30 6:41 p.m.•4 views

@kumologica/kumologica-contrib-amazonbedrock (0.0.1-beta), @kumologica/sdk (>=3.6.0-alpha10, <=4.0.1) +2 more potentially affected by CVE-2024-46993 via electron (>=30.0.0, <=30.0.2)

electron NPM version =30.0.0, =3.6.0-alpha10, =2.0.131, =0.1.1, =0.1.3 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...

7.3CVSS7.1AI score0.0013EPSS

SaveExploits0

vulnersOsv•added 2025/06/30 6:41 p.m.•5 views

@codeceptjs/ui (0.7.7), @epicdm/flowstate-shell (>=1.0.1, <=1.0.8) +7 more potentially affected by CVE-2024-46993 via electron (>=28.0.0, <=28.2.3)

electron NPM version =28.0.0, =1.0.1, =9.2.0, =2.0.119, =0.62.0, =0.79.19 - yt-play-cli 0.14.0 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...

7.3CVSS7.1AI score0.0013EPSS

SaveExploits0

vulnersOsv•added 2025/06/30 6:31 p.m.•6 views

@devsoutinho/alfred-currency-converter (>=2.0.0, <=2.1.1), @felixcatto/ui (>=0.0.14, <=0.0.32) +13 more potentially affected by CVE-2025-45143 via string-math (1.2.2)

string-math NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on string-math and may be impacted: - @devsoutinho/alfred-currency-converter =2.0.0, =0.0.14, =0.4.0-beta.2, =1.5.12, =0.1.47, =0.0.32, =2.0.0, =4.0.0, =1.0.0, =1.2.0, =1.0.8,...

7CVSS5.3AI score0.00376EPSS

SaveExploits1

vulnersOsv•added 2025/06/30 5:54 p.m.•7 views

@ascua/electron (>=0.4.2, <=0.4.6), @kumologica/kumologica-contrib-amazonbedrock (0.0.1-beta) +3 more potentially affected by CVE-2024-46992 via electron (>=30.0.0, <=30.0.3)

electron NPM version =30.0.0, =0.4.2, =3.6.0-alpha10, =2.0.131, =0.1.1, =0.1.3 Source cves: CVE-2024-46992 Source advisory: OSV:GHSA-XW5Q-G62X-2QJC...

7.8CVSS7.4AI score0.00107EPSS

SaveExploits0

vulnersOsv•added 2025/06/30 5:44 p.m.•4 views

@akhmetovdev/ledger-connector (>=1.1.0, <=1.3.4), @ardenthq/sdk-btc (>=1.0.0, <=1.3.1) +184 more potentially affected by CVE-2024-49365 via tiny-secp256k1 (>=1.0.0, <=1.1.6)

tiny-secp256k1 NPM version =1.0.0, =1.1.0, =1.0.0, =0.0.0-CP-8940-20240801175729, =0.20.0-alpha.10, =0.0.0-CP-8940-20240801175729, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =2.8.0-canary.a436aaa.0, =0.0.0-CP-8940-20240801175729, =0.0.0-CP-9420-20250129154656, =0.0.0-CP-9420-20250129154656...

9.1CVSS5.4AI score0.00217EPSS

SaveExploits0

vulnersOsv•added 2025/06/30 5:43 p.m.•3 views

@akhmetovdev/ledger-connector (>=1.1.0, <=1.3.4), @ardenthq/sdk-btc (>=1.0.0, <=1.3.1) +184 more potentially affected by CVE-2024-49364 via tiny-secp256k1 (>=1.0.0, <=1.1.6)

9.1CVSS5.4AI score0.0032EPSS

SaveExploits0

vulnersOsv•added 2025/06/29 12:30 a.m.•6 views

com.phasmidsoftware:majabigwaduce_3 (>=1.0.6, <=2.0.1) potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_3 (2.8.8)

com.typesafe.akka:akka-cluster-metrics3 MAVEN version 2.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-cluster-metrics3 and may be impacted: - com.phasmidsoftware:majabigwaduce3 =1.0.6, =2.0.1 Source cves: CVE-2025-53393...

6CVSS6AI score0.00191EPSS

SaveExploits0

vulnersOsv•added 2025/06/29 12:30 a.m.•8 views

com.ing.baker:bakery-interaction-k8s-interaction-manager_2.13 (>=3.6.2, <=5.0.0), com.ing.baker:bakery-state-k8s_2.13 (3.5.0) +8 more potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_2.13 (>=2.6.11, <=2.9.0-m2)

com.typesafe.akka:akka-cluster-metrics2.13 MAVEN version =2.6.11, =3.6.2, =3.5.0, =22.10.0-m1, =0.1.6, =0.1.0-alpha1, =2.9.1, =3.30.0, =3.31.0 Source cves: CVE-2025-53393 Source advisory: SNYK:JAVA-COMTYPESAFEAKKA-10567746...

6CVSS6AI score0.00191EPSS

SaveExploits0

vulnersOsv•added 2025/06/29 12:30 a.m.•5 views

cc.akkaha:asura-cluster_2.12 (>=0.2.0, <=0.6.0), com.adobe.api.platform.runtime:mesos-actor (>=0.0.8_2.12, <=0.0.33) +42 more potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_2.12 (>=2.4.16, <=2.7.0)

com.typesafe.akka:akka-cluster-metrics2.12 MAVEN version =2.4.16, =0.2.0, =0.0.82.12, =3.6.0, =3.3.0, =0.1.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =3.2.0-35 and more Source cves: CVE-2025-53393 Source advisory: SNYK:JAVA-COMTYPESAFEAKKA-10567747...

6CVSS6AI score0.00191EPSS

SaveExploits0

vulnersOsv•added 2025/06/29 12:08 a.m.•2 views

angr (>=8.18.10.5, <=9.3.4), angr-management (>=9.0.4378, <=9.3.4) +33 more potentially affected by unknown CVE via pyvex (>=8.18.10.5, <=9.3.4)

pyvex PYPI version =8.18.10.5, =8.18.10.5, =9.0.4378, =1.0.0rc2, =1.0.7, =1.0.4, =9.0.4378, =9.0.5610, =1.0.0, =0.2.0, =0.0.1, =9.0.4378, =1.0.3, =0.0.1, =0.1.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:OSV-2025-500...

5.7AI score

SaveExploits0

vulnersOsv•added 2025/06/27 6:46 p.m.•3 views

dbgpt-app (0.8.0rc1), dbgpt-client (>=0.7.0rc0, <=0.8.2) +2 more potentially affected by CVE-2025-6772 via dbgpt (0.8.2)

dbgpt PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbgpt and may be impacted: - dbgpt-app 0.8.0rc1 - dbgpt-client =0.7.0rc0, =0.7.0rc0, =0.8.0rc1, =0.8.2 Source cves: CVE-2025-6772 Source advisory: SNYK:PYTHON-DBGPT-10562212...

7.5CVSS0.00563EPSS

SaveExploits1

vulnersOsv•added 2025/06/26 6:31 a.m.•6 views

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +87 more potentially affected by CVE-2025-6624 via snyk (>=1.1.1, <=1.1297.1)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =1.6.0, =1.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2025-6624 Source advisory: OSV:GHSA-6HWC-9H8R-3VMF...

7.2CVSS5.5AI score0.00167EPSS

SaveExploits0

vulnersOsv•added 2025/06/25 4:01 p.m.•5 views

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +87 more potentially affected by CVE-2025-6624 via snyk (>=1.1.1, <=1.1297.1)

7.2CVSS5.5AI score0.00167EPSS

SaveExploits0

vulnersOsv•added 2025/06/23 10:42 p.m.•4 views

@0cfg/utils-node (>=0.1.2, <=0.1.8), @b0ase/path402-api (4.0.0-alpha.1) +262 more potentially affected by CVE-2025-6547 via pbkdf2 (>=3.0.4, <=3.1.2)

pbkdf2 NPM version =3.0.4, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.38.0, =1.45.0, =1.1.14, =1.20.2, =1.3.13, =3.8.1, =4.26.0 and more Source cves: CVE-2025-6547 Source advisory: OSV:GHSA-V62P-RQ8G-8H59...

9.1CVSS5.3AI score0.00431EPSS

SaveExploits0

vulnersOsv•added 2025/06/23 10:42 p.m.•6 views

org.webjars.npm:ethereum-cryptography (0.1.3), org.webjars.npm:parse-asn1 (>=5.0.0, <=5.1.6) potentially affected by CVE-2025-6547 via org.webjars.npm:pbkdf2 (3.1.2)

org.webjars.npm:pbkdf2 MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:pbkdf2 and may be impacted: - org.webjars.npm:ethereum-cryptography 0.1.3 - org.webjars.npm:parse-asn1 =5.0.0, =5.1.6 Source cves: CVE-2025-6547...

9.1CVSS5.3AI score0.00431EPSS

SaveExploits0

vulnersOsv•added 2025/06/23 10:41 p.m.•3 views

@0cfg/utils-node (>=0.1.2, <=0.1.8), @b0ase/path402-api (4.0.0-alpha.1) +228 more potentially affected by CVE-2025-6545 via pbkdf2 (>=3.0.12, <=3.1.2)

pbkdf2 NPM version =3.0.12, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.38.0, =1.45.0, =1.1.14, =1.20.2, =1.3.13, =3.8.1, =1.4.1, =1.34.4 and more Source cves: CVE-2025-6545 Source advisory: OSV:GHSA-H7CP-R72F-JXH6...

9.1CVSS5.3AI score0.00416EPSS

SaveExploits0

vulnersOsv•added 2025/06/23 10:41 p.m.•7 views

org.webjars.npm:ethereum-cryptography (0.1.3), org.webjars.npm:parse-asn1 (>=5.0.0, <=5.1.6) potentially affected by CVE-2025-6545 via org.webjars.npm:pbkdf2 (3.1.2)

9.1CVSS5.3AI score0.00416EPSS

SaveExploits0

vulnersOsv•added 2025/06/23 9:22 p.m.•6 views

@4via6/relay (>=1.0.0, <=1.1.3), @axonpush/wizard (>=0.0.1, <=0.0.4) +9 more potentially affected by CVE-2025-52882 via @anthropic-ai/claude-code (>=0.2.126, <=1.0.8)

@anthropic-ai/claude-code NPM version =0.2.126, =1.0.0, =0.0.1, =0.0.55, =1.0.0, =0.0.1, =0.0.1, =0.0.1-beta.2, =0.0.1, =0.0.5 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-52882 Source advisory: OSV:GHSA-9F65-56V6-GXW7...

8.8CVSS9AI score0.00337EPSS

SaveExploits0

vulnersOsv•added 2025/06/22 10:40 p.m.•9 views

org.webjars.bowergithub.advanced-rest-client:code-mirror (2.0.1), org.webjars.bowergithub.angular-ui:ui-codemirror (>=0.1.6, <=0.3.0) potentially affected by CVE-2025-6493 via org.webjars.bowergithub.components:codemirror (>=4.13.0, <=5.65.12)

org.webjars.bowergithub.components:codemirror MAVEN version =4.13.0, =0.1.6, =0.3.0 Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARSBOWERGITHUBCOMPONENTS-10494093...

6.9CVSS5.5AI score0.00498EPSS

SaveExploits0

vulnersOsv•added 2025/06/22 10:40 p.m.•6 views

de.chandre.admin-tools:admin-tools-dbbrowser (>=1.1.1, <=1.1.7.3), de.chandre.admin-tools:admin-tools-filebrowser (>=1.1.1, <=1.1.7.3) +3 more potentially affected by CVE-2025-6493 via org.webjars.bower:codemirror (>=3.23.0, <=5.58.2)

org.webjars.bower:codemirror MAVEN version =3.23.0, =1.1.1, =1.1.1, =3.4.3, =3.4.4 - org.webjars.bower:mergely 3.3.6 Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-10494097...

6.9CVSS5.5AI score0.00498EPSS

SaveExploits0

vulnersOsv•added 2025/06/22 10:40 p.m.•8 views

com.gitblit.fathom:fathom-integration-test (>=0.5.0, <=1.0.1), com.github.dreampie:jfinal-dreampie (1.0) +30 more potentially affected by CVE-2025-6493 via org.webjars:codemirror (>=3.15, <=5.62.2)

org.webjars:codemirror MAVEN version =3.15, =0.5.0, =1.0.0, =1.0.1, =2.3.0.cr1, =2.1.8.0, =2.1.8.0, =2.1.8.0, =2.1.8.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =1.7.0, =1.7.5 and more Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARS-10494095...

6.9CVSS5.5AI score0.00498EPSS

SaveExploits0

vulnersOsv•added 2025/06/22 10:40 p.m.•3 views

org.apache.marmotta:marmotta-ldpath (3.1.0-incubating), org.apache.marmotta:marmotta-sparql (3.1.0-incubating) potentially affected by CVE-2025-6493 via org.apache.marmotta.webjars:codemirror (3.1.0-incubating)

org.apache.marmotta.webjars:codemirror MAVEN version 3.1.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.marmotta.webjars:codemirror and may be impacted: - org.apache.marmotta:marmotta-ldpath 3.1.0-incubating -...

6.9CVSS5.5AI score0.00498EPSS

SaveExploits0

vulnersOsv•added 2025/06/20 6:07 p.m.•7 views

pingora (>=0.1.0, <=0.4.0), pingora-cache (>=0.1.0, <=0.4.0) +3 more potentially affected by CVE-2025-4366 via pingora-core (>=0.1.1, <=0.4.0)

pingora-core CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0 - static-files-module 0.1.0 Source cves: CVE-2025-4366 Source advisory: OSV:GHSA-93C7-7XQW-W357...

7.4CVSS8AI score0.00499EPSS

SaveExploits0

vulnersOsv•added 2025/06/20 1:03 a.m.•7 views

7ghost (>=4.11.0, <=4.11.46), @accordproject/concerto-ui-react (>=0.6.0-alpha.1, <=0.83.1-20200224151908) +272 more potentially affected by CVE-2026-1615 via jsonpath (>=1.0.0, <=1.2.1)

jsonpath NPM version =1.0.0, =4.11.0, =0.6.0-alpha.1, =0.82.10-20200221024018, =1.0.0, =1.1.0-dev.2, =3.0.6371, =4.0.2, =2.0.4, =0.2.0-dev.1, =4.0.149, =3.0.129, =4.0.174, =0.11.8, =1.2.5, =1.4.0 and more Source cves: CVE-2026-1615 Source advisory: SNYK:JS-JSONPATH-13645034...

9.8CVSS5.3AI score0.01067EPSS

SaveExploits0

vulnersOsv•added 2025/06/18 2:42 p.m.•5 views

@accounter/server (>=0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @dossierhq/test-data (1.0.1) +4 more potentially affected by CVE-2025-12613 via cloudinary (>=2.0.3, <=2.6.1)

cloudinary NPM version =2.0.3, =0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, =7.1.0, =1.0.0-alpha.88, =1.0.0-alpha.88, =0.0.1, =0.0.6 Source cves: CVE-2025-12613 Source advisory: SNYK:JS-CLOUDINARY-10495740...

8.8CVSS5.3AI score0.00364EPSS

SaveExploits0

vulnersOsv•added 2025/06/16 7:37 p.m.•8 views

better-auth-cloudflare (0.1.0) potentially affected by CVE-2025-6087 +1 more via @opennextjs/cloudflare (1.0.1)

@opennextjs/cloudflare NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @opennextjs/cloudflare and may be impacted: - better-auth-cloudflare 0.1.0 Source cves: CVE-2025-6087, CVE-2026-3125 Source advisory: OSV:GHSA-RVPW-P7VW-WJ3M...

9.1CVSS8.4AI score0.00931EPSS

SaveExploits0

vulnersOsv•added 2025/06/16 12:00 p.m.•12 views

allyaudio (>=0.1.0, <=0.4.0), ambisonic (>=0.4.0, <=0.4.1) +136 more potentially affected by unknown CVE via slice-ring-buffer (0.3.4)

slice-ring-buffer CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio 0.4.0 and mo...

5.5AI score

SaveExploits0

vulnersOsv•added 2025/06/16 2:40 a.m.•4 views

letta-nory (0.1.0) potentially affected by CVE-2025-6101 via letta (0.16.8)

letta PYPI version 0.16.8 is affected by a known vulnerability. The following packages have a transitive dependency on letta and may be impacted: - letta-nory 0.1.0 Source cves: CVE-2025-6101 Source advisory: SNYK:PYTHON-LETTA-10494065...

5.5CVSS6AI score0.00314EPSS

SaveExploits0

vulnersOsv•added 2025/06/13 10:15 p.m.•5 views

@cyanheads/git-mcp-server (>=2.0.10, <=2.1.0), @dsazz/mcp-confluence (0.2.0) +34 more potentially affected by CVE-2025-49596 via @modelcontextprotocol/inspector (>=0.2.7, <=0.13.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =2.0.10, =1.0.1, =0.0.0-alpha.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-49596 Source advisory: OSV:GHSA-7F8R-222P-6F5G...

9.4CVSS9AI score0.44453EPSS

SaveExploits0

vulnersOsv•added 2025/06/12 6:31 p.m.•2 views

@emuanalytics/flow-pipelines (>=0.0.1, <=1.4.0), @evdhiggins/airtable-sync (0.2.6) +10 more potentially affected by CVE-2025-29744 via pg-promise (>=11.0.0, <=11.5.4)

pg-promise NPM version =11.0.0, =0.0.1, =1.0.1, =1.2.1, =6.1.0-alpha.7, =2.4.46, =1.0.1, =0.29.0, =6.1.0-alpha.3, =2.0.0, =2.0.1 Source cves: CVE-2025-29744 Source advisory: OSV:GHSA-FF9H-848C-4XFJ...

5.4CVSS5.4AI score0.00221EPSS

SaveExploits1

vulnersOsv•added 2025/06/12 2:14 a.m.•6 views

@dm3-org/dm3-cli (1.3.0) potentially affected by unknown CVE via ccip-resolver (0.2.10)

ccip-resolver NPM version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on ccip-resolver and may be impacted: - @dm3-org/dm3-cli 1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-5026...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/06/12 2:09 a.m.•23 views

@dm3-org/delivery-service (>=1.4.0, <=1.7.1), @dm3-org/dm3-backend (>=1.0.1, <=1.7.1) +18 more potentially affected by unknown CVE via @dm3-org/dm3-lib-crypto (1.7.2)

@dm3-org/dm3-lib-crypto NPM version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @dm3-org/dm3-lib-crypto and may be impacted: - @dm3-org/delivery-service =1.4.0, =1.0.1, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =0.0.1-alpha1, =1.0.5, =1.4.0,...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/06/11 10:11 p.m.•6 views

goodpkgmamamamamamam (1.0.0) potentially affected by unknown CVE via mtrtestinglalalal (0.0.1-security)

mtrtestinglalalal NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mtrtestinglalalal and may be impacted: - goodpkgmamamamamamam 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-5040...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/06/10 9:31 p.m.•4 views

@nx/powerpack-azure-cache (>=1.3.0-beta.1, <=21.0.0-beta.0) potentially affected by CVE-2025-36852 via @nx/azure-cache (>=1.3.0, <=21.0.0-beta.0)

@nx/azure-cache NPM version =1.3.0, =1.3.0-beta.1, =21.0.0-beta.0 Source cves: CVE-2025-36852 Source advisory: SNYK:JS-NXAZURECACHE-13559382...

9.4CVSS5.3AI score0.00241EPSS

SaveExploits0

vulnersOsv•added 2025/06/09 9:30 p.m.•2 views

@nodefony/monitoring-bundle (>=7.0.0-beta.3, <=7.0.0-beta.8), nodefony (>=7.0.0-beta.3, <=7.0.0-beta.8) potentially affected by CVE-2025-5897 via @vue/cli-plugin-pwa (5.0.8)

@vue/cli-plugin-pwa NPM version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on @vue/cli-plugin-pwa and may be impacted: - @nodefony/monitoring-bundle =7.0.0-beta.3, =7.0.0-beta.3, =7.0.0-beta.8 Source cves: CVE-2025-5897 Source advisory:...

7.5CVSS5.4AI score0.00603EPSS

SaveExploits1

vulnersOsv•added 2025/06/09 9:30 p.m.•6 views

@tarojs/rn-runner (>=4.0.0-alpha.0, <=4.1.1), @tarojs/rn-style-transformer (>=4.0.0-alpha.0, <=4.1.1) +2 more potentially affected by CVE-2025-5896 via taro-css-to-react-native (>=4.0.0, <=4.1.1-alpha.2)

taro-css-to-react-native NPM version =4.0.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.1.1 Source cves: CVE-2025-5896 Source advisory: OSV:GHSA-F5XG-CFPJ-2MW6...

7.5CVSS4.9AI score0.00607EPSS

SaveExploits1

Total number of security vulnerabilities11219