10xanswers (>=1.0.0, <=1.1.16), 24social-ui (>=1.0.0, <=1.0.1) +8709 more potentially affected by CVE-2024-53382 via prismjs (>=1.2.0, <=1.29.0)

prismjs NPM version =1.2.0, =1.0.0, =1.0.0, =0.1.13, =0.3.0, =0.3.0, =0.5.0, =1.0.0, =0.1.0, =0.1.2, =1.0.0, =1.0.23, =1.0.1, =1.0.0, =1.0.3, =1.0.0, =2.0.0-beta.0 and more Source cves: CVE-2024-53382 Source advisory: OSV:GHSA-X7HR-W5R2-H6WG...

bigstarter (>=0.1.0, <=0.1.1), grasp-mcp-server (>=3.11.0, <=3.21.0) +2 more potentially affected by unknown CVE via kuzu (>=0.5.0, <=0.7.1)

kuzu NPM version =0.5.0, =0.1.0, =3.11.0, =0.0.4, =1.0.3, =1.1.4 Source cves: unknown CVE Source advisory: SNYK:JS-KUZU-12179283...

bigstarter (>=0.1.0, <=0.1.1), grasp-mcp-server (>=3.11.0, <=3.21.0) +2 more potentially affected by unknown CVE via kuzu (>=0.5.0, <=0.7.1)

kuzu NPM version =0.5.0, =0.1.0, =3.11.0, =0.0.4, =1.0.3, =1.1.4 Source cves: unknown CVE Source advisory: SNYK:JS-KUZU-11502184...

@lume/element (>=0.1.2, <=0.5.6), @lume/variable (>=0.1.1, <=0.6.1) +9 more potentially affected by CVE-2025-27108 via dom-expressions (>=0.6.0, <=0.36.18)

dom-expressions NPM version =0.6.0, =0.1.2, =0.1.1, =0.20.0, =0.4.2, =0.2.2, =0.2.0, =0.2.1, =0.3.0, =0.4.5, =0.5.1 - webfps 1.4.0 Source cves: CVE-2025-27108 Source advisory: OSV:GHSA-HW62-58PR-7WC5...

@agent-embed/js (>=0.0.1, <=0.0.45), @altbot/js (>=1.0.0, <=1.0.1) +262 more potentially affected by CVE-2025-27109 via solid-js (>=1.0.0, <=1.9.3)

solid-js NPM version =1.0.0, =0.0.1, =1.0.0, =1.1.7, =0.0.1, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =0.1.26, =0.0.1, =0.0.1-3.1-dev, =0.0.17 - @codyg/datatables 0.0.1 - @converseform.com/js 0.2.31 and more Source cves: CVE-2025-27109 Source advisory: OSV:GHSA-3QXH-P7JC-5XH6...

ai.djl.timeseries:timeseries (>=0.19.0, <=0.36.0), cc.akkaha:pea-dubbo_2.12 (>=0.1.5, <=0.7.0) +629 more potentially affected by CVE-2025-1686 via io.pebbletemplates:pebble (>=2.5.0, <=4.1.2)

io.pebbletemplates:pebble MAVEN version =2.5.0, =0.19.0, =0.1.5, =0.3.0, =0.1.0, =2.5.0, =2.5.0, =4.1.0, =16.5.0, =16.6.0 and more Source cves: CVE-2025-1686 Source advisory: SNYK:JAVA-IOPEBBLETEMPLATES-8745594...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.20), @silgi/better-auth (>=0.0.5, <=0.0.12) +1 more potentially affected by CVE-2025-71403 via better-auth (>=1.0.0, <=1.1.20-beta.5)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.5, =1.1.368, =1.1.416 Source cves: CVE-2025-71403 Source advisory: OSV:GHSA-VP58-J275-797X...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.19), @silgi/better-auth (>=0.0.5, <=0.0.12) +1 more potentially affected by CVE-2025-27143 via better-auth (>=1.0.0, <=1.1.19-beta.3)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.5, =1.1.368, =1.1.416 Source cves: CVE-2025-27143 Source advisory: OSV:GHSA-HJPM-7MRM-26W8...

blit-server (>=0.20.0, <=0.28.3), dahua-camera-rtsp (>=0.3.0, <=0.3.1) +8 more potentially affected by CVE-2025-27091 via openh264-sys2 (>=0.1.17, <=0.7.1)

openh264-sys2 CARGO version =0.1.17, =0.20.0, =0.3.0, =0.1.0, =0.1.9, =0.1.33, =0.2.0, =0.1.0, =0.4.0, =0.5.5 Source cves: CVE-2025-27091 Source advisory: OSV:GHSA-5PMW-9J92-3C4C...

blit-server (>=0.20.0, <=0.28.3), dahua-camera-rtsp (>=0.3.0, <=0.3.1) +8 more potentially affected by CVE-2025-27091 via openh264-sys2 (>=0.1.17, <=0.7.1)

openh264-sys2 CARGO version =0.1.17, =0.20.0, =0.3.0, =0.1.0, =0.1.9, =0.1.33, =0.2.0, =0.1.0, =0.4.0, =0.5.5 Source cves: CVE-2025-27091 Source advisory: OSV:RUSTSEC-2025-0008...

cymrust (>=0.3.0, <=0.3.4), honeypot_blacklist (0.1.0) +4 more potentially affected by unknown CVE via resolve (>=0.1.2, <=0.2.0)

resolve CARGO version =0.1.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0013...

@authorium/ckeditor5-build-multi-root (>=41.3.1, <=41.4.2), @eagerworks/ckeditor5-build-multi-root (>=41.4.2-auth.1, <=41.4.2) +8 more potentially affected by CVE-2025-25299 via @ckeditor/ckeditor5-real-time-collaboration (>=41.3.0-alpha.2, <=44.2.0-alpha.16)

@ckeditor/ckeditor5-real-time-collaboration NPM version =41.3.0-alpha.2, =41.3.1, =41.4.2-auth.1, =1.0.1, =4.0.45, =18.0.20, =0.0.8, =41.3.0-alpha.2, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...

@mythpe/js-helpers (>=4.0.45, <=4.0.99), @ng-zi/extensions (>=18.0.20, <=18.0.24) +4 more potentially affected by CVE-2025-25299 via ckeditor5-premium-features (>=42.0.2, <=43.3.1)

ckeditor5-premium-features NPM version =42.0.2, =4.0.45, =18.0.20, =0.0.8, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...

@directus/api (>=20.0.0-rc.0, <=23.0.0) potentially affected by CVE-2025-27089 via directus (>=11.0.0, <=11.1.1)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.0.0 Source cves: CVE-2025-27089 Source advisory: OSV:GHSA-99VM-5V2H-H6R6...

directus (>=11.0.0, <=11.1.1) potentially affected by CVE-2025-27089 via @directus/api (>=22.0.0, <=23.0.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.1.1 Source cves: CVE-2025-27089 Source advisory: OSV:GHSA-99VM-5V2H-H6R6...

xorc-notifications (0.1.0) potentially affected by CVE-2025-53604 via web-push (0.4.2)

web-push CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on web-push and may be impacted: - xorc-notifications 0.1.0 Source cves: CVE-2025-53604 Source advisory: OSV:RUSTSEC-2025-0015...

@alell/azure-pipelines-task-jsonpath-plus (1.1.3), @appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11) +261 more potentially affected by CVE-2025-1302 via jsonpath-plus (>=10.0.0, <=10.2.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.4 and more Source cves: CVE-2025-1302 Source advisory: OSV:GHSA-HW8R-X6GR-5GJP...

com.databricks:automatedml_2.11 (0.7.2), com.github.aishfenton:vegas-flink_2.11 (0.3.4) +11 more potentially affected by CVE-2025-25304 via org.webjars.bower:vega (>=1.5.4, <=3.0.0-rc4)

org.webjars.bower:vega MAVEN version =1.5.4, =0.3.6, =0.3.6, =0.3.6, =1.1.0, =2.1.0, =1.0.10, =2.0.1 Source cves: CVE-2025-25304 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-8730845...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +10096 more potentially affected by CVE-2025-25290 via @octokit/request (>=2.1.1, <=8.1.5)

@octokit/request NPM version =2.1.1, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25290 Source advisory: OSV:GHSA-RMVR-2PP2-XJ38...

@javamodules/indexer (>=1.0.4, <=1.0.5), @resultify/rh-cli (>=1.0.0, <=1.3.2) potentially affected by CVE-2025-25290 via @octokit/request (>=9.0.1, <=9.1.3)

@octokit/request NPM version =9.0.1, =1.0.4, =1.0.0, =1.3.2 Source cves: CVE-2025-25290 Source advisory: OSV:GHSA-RMVR-2PP2-XJ38...

@zendeskgarden/scripts (>=2.1.0, <=2.4.3) potentially affected by CVE-2025-25289 via @octokit/request-error (>=6.1.1, <=6.1.4)

@octokit/request-error NPM version =6.1.1, =2.1.0, =2.4.3 Source cves: CVE-2025-25289 Source advisory: OSV:GHSA-XX4V-PRFH-6CGC...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +10077 more potentially affected by CVE-2025-25289 via @octokit/request-error (>=1.2.1, <=5.1.0)

@octokit/request-error NPM version =1.2.1, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25289 Source advisory: OSV:GHSA-XX4V-PRFH-6CGC...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +9461 more potentially affected by CVE-2025-25288 via @octokit/plugin-paginate-rest (>=1.1.2, <=8.0.0)

@octokit/plugin-paginate-rest NPM version =1.1.2, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25288 Source advisory: OSV:GHSA-H5C3-5R3R-RR8Q...

@activeboxes/piece-github (0.4.1), @activepieces/piece-github (>=0.3.11, <=0.4.1) +157 more potentially affected by CVE-2025-25288 via @octokit/plugin-paginate-rest (>=10.0.0, <=11.4.0)

@octokit/plugin-paginate-rest NPM version =10.0.0, =0.3.11, =0.1.5-alpha.0, =1.0.1, =0.2.4, =1.0.0, =3.0.0-next.5, =1.0.0, =0.5.1, =5.0.7, =0.2.0, =0.21.0, =0.25.7 and more Source cves: CVE-2025-25288 Source advisory: OSV:GHSA-H5C3-5R3R-RR8Q...

@javamodules/indexer (>=1.0.4, <=1.0.5) potentially affected by CVE-2025-25285 via @octokit/endpoint (10.0.0)

@octokit/endpoint NPM version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @octokit/endpoint and may be impacted: - @javamodules/indexer =1.0.4, =1.0.5 Source cves: CVE-2025-25285 Source advisory: OSV:GHSA-X4C5-C7RF-JJGV...

@ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9), @ekyc_qoobiss/qbs-ect-cmp (>=1.2.0, <=4.8.0) +62 more potentially affected by CVE-2025-25304 via vega (>=5.0.0, <=5.25.0)

vega NPM version =5.0.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.0, =1.0.7, =0.1.4, =0.6.2, =0.1.0, =1.0.1, =1.0.8 and more Source cves: CVE-2025-25304 Source advisory: OSV:GHSA-MP7W-MHCV-673J...

fyrox-animation (0.2.0), fyrox-graph (0.1.0) +2 more potentially affected by unknown CVE via fyrox-core (0.28.1)

fyrox-core CARGO version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on fyrox-core and may be impacted: - fyrox-animation 0.2.0 - fyrox-graph 0.1.0 - fyrox-resource 0.12.0 - fyrox-sound 0.35.0 Source cves: unknown CVE Source advisory:...

@3t-transform/threeteeui (>=1.5.1, <=1.11.0), @8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4) +626 more potentially affected by CVE-2025-26791 via dompurify (>=3.0.0, <=3.2.3)

dompurify NPM version =3.0.0, =1.5.1, =0.18.0-beta.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =6.4.10, =5.1.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =0.1.1, =0.1.4-alpha.3 and more Source cves: CVE-2025-26791 Source advisory: OSV:GHSA-VHXF-7VQR-MRJG...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8275 more potentially affected by unknown CVE via elliptic (>=6.0.2, <=6.6.0)

elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VJH7-7G9H-FJFH...

@oberd/olive-middleware-koa (>=1.2.7, <=1.3.2), @ysdn/admin (>=1.0.0, <=1.0.2) +211 more potentially affected by CVE-2025-25200 via koa (>=0.0.1, <=0.21.0)

koa NPM version =0.0.1, =1.2.7, =1.0.0, =0.1.0, =0.1.3, =0.0.2, =2.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.17 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...

@0xyy/elpis (>=1.0.0, <=1.0.2), @1234wu/elpis (>=1.0.0, <=1.0.4) +1397 more potentially affected by CVE-2025-25200 via koa (>=2.0.0, <=2.15.3)

koa NPM version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =1.0.0, =1.1.0 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...

91jin (>=0.1.7, <=0.1.8), @aftonbladet/roc-package-web-app-gaea (>=0.1.0, <=0.4.1) +147 more potentially affected by CVE-2025-25200 via koa (>=1.0.0, <=1.7.0)

koa NPM version =1.0.0, =0.1.7, =0.1.0, =2.4.1, =0.0.2, =0.0.1, =0.1.0, =0.4.11, =0.1.0, =0.0.2, =1.2.1 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...

@sap/adp-abap (1.1.37), @sap/adp-cf (1.1.37) +8 more potentially affected by CVE-2025-24876 via @sap/approuter (>=2.6.1, <=15.0.0)

@sap/approuter NPM version =2.6.1, =1.1.36, =1.9.6, =3.4.0, =0.1.0, =3.3.11 Source cves: CVE-2025-24876 Source advisory: OSV:GHSA-CPFX-964W-4JVP...

lemmy_api (>=0.18.0-rc.4, <=0.18.0), lemmy_api_crud (>=0.18.0-rc.4, <=0.18.0) +3 more potentially affected by CVE-2025-25194 +1 more via activitypub_federation (0.4.7)

activitypubfederation CARGO version 0.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on activitypubfederation and may be impacted: - lemmyapi =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0-rc.4, =0.18.0 Source cves: CVE-2025-25194,...

@aadarshjr/reweb-js (>=1.0.7, <=1.0.17), @acentswap/ace-core-trial (>=10.4.0, <=10.7.0) +1732 more potentially affected by CVE-2024-11831 via serialize-javascript (>=6.0.0, <=6.0.1)

serialize-javascript NPM version =6.0.0, =1.0.7, =10.4.0, =9.0.0, =10.0.0, =10.0.0, =10.5.0, =10.4.0, =1.1.8, =0.4.10, =5.0.0, =6.0.0 and more Source cves: CVE-2024-11831 Source advisory: OSV:GHSA-76P7-773F-R4Q5...

gpt-cli (>=0.0.13, <=0.0.20), htmlentity (>=0.1.0, <=1.2.0) +5 more potentially affected by unknown CVE via grcov (>=0.5.15, <=0.8.13)

grcov CARGO version =0.5.15, =0.0.13, =0.1.0, =0.2.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-QM2P-4W45-V2VR...

84447xe5t8 (1.0.0), @0xsquid/deposit-widget (>=0.0.2-beta.0, <=0.2.0) +255 more potentially affected by unknown CVE via @coinbase/wallet-sdk (>=4.0.0, <=4.2.4)

@coinbase/wallet-sdk NPM version =4.0.0, =0.0.2-beta.0, =2.1.11-beta.0, =3.0.0-beta.16, =0.0.1, =0.2.1, =5.50.0, =1.0.77-4.0, =0.0.1, =1.0.0-beta.1, =0.0.1, =0.0.1, =0.0.73-rc and more Source cves: unknown CVE Source advisory: OSV:GHSA-8RGJ-285W-QCQ4...

128981semzub (1.0.1), 1food-menu (>=0.0.1, <=0.3.8) +25291 more potentially affected by unknown CVE via esbuild (>=0.0.0, <=0.24.2)

esbuild NPM version =0.0.0, =0.0.1, =0.0.1, =1.0.0, =1.0.1, =0.1.0, =0.0.1, =0.0.4, =0.0.1, =1.0.0, =1.1.0 - 7qb-cli 2.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-67MH-4WV8-2F99...

at.reilaender.asciidoctorj.bootconfig2adoc:bootconfig2adoc-adoc (>=0.1.2, <=0.1.3), at.reilaender.asciidoctorj.bootconfig2adoc:bootconfig2adoc-core (>=0.1.2, <=0.1.3) +513 more potentially affected by CVE-2025-25186 via org.jruby:jruby-stdlib (>=1.6.7.2, <=10.1.1.0)

org.jruby:jruby-stdlib MAVEN version =1.6.7.2, =0.1.2, =0.1.2, =1.0.2, =1.0.0, =1.0, =2.0, =0.1.0, =0.1.0, =1.0.0, =1.0.2, =1.4.0, =2.0.0-m3, =2.0.0-m4 and more Source cves: CVE-2025-25186 Source advisory: SNYK:JAVA-ORGJRUBY-10557730...

datafu (>=0.0.6, <=0.0.7) potentially affected by unknown CVE via totally-safe-transmute (0.0.3)

totally-safe-transmute CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on totally-safe-transmute and may be impacted: - datafu =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0030...

@4verburga/alpine-spanishplus (>=1.6.6, <=3.0.2), @4xeverburga/alpine-spanishplus (>=3.0.1, <=3.2.0) +134 more potentially affected by CVE-2025-24981 via @nuxtjs/mdc (>=0.1.6, <=0.12.1)

@nuxtjs/mdc NPM version =0.1.6, =1.6.6, =3.0.1, =0.1.1, =0.0.2, =1.0.7, =1.0.7, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.0.3, =0.0.2, =0.0.1, =0.0.4 and more Source cves: CVE-2025-24981 Source advisory: OSV:GHSA-J82M-PC2V-2484...

@rpldy/chunked-uploady (>=1.6.1-rc.0, <=1.9.0), @rpldy/retry-hooks (>=1.6.1-rc.0, <=1.9.0) +8 more potentially affected by CVE-2024-57082 via @rpldy/uploader (>=1.6.1, <=1.9.0-rc.2)

@rpldy/uploader NPM version =1.6.1, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.9.0 Source cves: CVE-2024-57082 Source advisory: OSV:GHSA-PC47-G7GV-4GPW...

1filecompiler (0.0.2), @adrian.u/adritoolbox (>=1.0.0, <=1.1.0) +801 more potentially affected by CVE-2024-57077 via utils-extend (1.0.8)

utils-extend NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on utils-extend and may be impacted: - 1filecompiler 0.0.2 - @adrian.u/adritoolbox =1.0.0, =0.1.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.0.1, =0.37.8, =1.0.1, =0.1.0, =1.0.2,...

@funboxteam/blueprinter (>=5.3.2, <=6.1.0), @henrycatalinismith/11tysnap (0.0.15) +1 more potentially affected by CVE-2024-57075 via eazy-logger (>=4.0.0, <=4.0.1)

eazy-logger NPM version =4.0.0, =5.3.2, =2.28.0, =2.28.2 Source cves: CVE-2024-57075 Source advisory: OSV:GHSA-R7JX-5M6M-CPG9...

@agniflow-ui/panda-preset (0.0.4), @agniflow-ui/react (>=0.0.1, <=0.0.4) +345 more potentially affected by CVE-2024-57079 via @zag-js/core (>=0.0.0-dev-20220406144843, <=0.82.1)

@zag-js/core NPM version =0.0.0-dev-20220406144843, =0.0.1, =0.0.1, =0.0.3-02402d7.0, =0.0.28-86b217d.0, =0.1.0, =0.0.0-rc-20221106094212, =0.0.0-rc-20221106094212, =0.1.0, =0.0.0-rc-20221106094212, =0.0.17, =0.0.2, =0.0.10 - @atlrdsgn/kit 0.3.7 - @beae-ui/accordion 1.0.0 - @beae-ui/pin-input 1.0...

@stryker-mutator/core (>=8.0.0, <=8.7.0), @stryker-mutator/cucumber-runner (>=8.0.0, <=8.7.0) +10 more potentially affected by CVE-2024-57085 via @stryker-mutator/util (>=8.0.0, <=8.7.0)

@stryker-mutator/util NPM version =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.2.2, =1.0.7, =1.0.14 Source cves: CVE-2024-57085 Source advisory: OSV:GHSA-9J5Q-479X-43G2...

@frangoteam/fuxa (>=1.1.19, <=1.2.4), @frangoteam/fuxa-min (>=1.1.19, <=1.2.4) +13 more potentially affected by CVE-2024-57086 via node-opcua-alarm-condition (>=2.119.0, <=2.134.0)

node-opcua-alarm-condition NPM version =2.119.0, =1.1.19, =1.1.19, =2.3.1, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =0.1.0, =0.1.7 - node-red-contrib-opcua-test 0.0.3 Source cves: CVE-2024-57086 Source advisory: OSV:GHSA-GVWQ-6FMX-28XM...

3h1-ui (>=3.0.0-liingyun.1, <=3.0.0-next.266), @ayu-mu/core-common (>=1.0.0, <=1.0.2) +164 more potentially affected by CVE-2024-57080 via vxe-table (>=4.1.0, <=4.8.10)

vxe-table NPM version =4.1.0, =3.0.0-liingyun.1, =1.0.0, =1.2.3, =0.16.13, =0.1.1-beta.0, =1.0.0, =1.0.6, =1.0.0, =1.0.4, =0.13.25, =0.1.5-dev.9, =0.1.5-dev.9, =0.1.6-dev.1 and more Source cves: CVE-2024-57080 Source advisory: OSV:GHSA-89FP-F5MX-748X...

@alvori/app (>=1.0.0-beta.11, <=1.0.0-beta.12), @enhanced-dom/intl (>=0.0.1, <=0.2.0) +111 more potentially affected by CVE-2024-57072 via module-from-string (>=3.3.0, <=3.3.1)

module-from-string NPM version =3.3.0, =1.0.0-beta.11, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.3.0 and more Source cves: CVE-2024-57072 Source advisory: OSV:GHSA-Q5J8-9M9G-X2JH...

@adhawk/analytics-pixel-loader (>=0.0.2, <=2.0.2), @adhawk/analytics.js-integration-freshdesk (0.1.0) +141 more potentially affected by CVE-2024-57066 via @ndhoule/defaults (2.0.1)

@ndhoule/defaults NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ndhoule/defaults and may be impacted: - @adhawk/analytics-pixel-loader =0.0.2, =1.2.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.1.0 -...