card-ocr-fastmcp (1.0.0) potentially affected by CVE-2025-9262 via @wong2/mcp-cli (1.13.0)

@wong2/mcp-cli NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @wong2/mcp-cli and may be impacted: - card-ocr-fastmcp 1.0.0 Source cves: CVE-2025-9262 Source advisory: SNYK:JS-WONG2MCPCLI-12205740...

2d-json-schema-editor-visual (>=1.0.2, <=1.0.7), 37sy-build (>=1.0.0, <=1.3.3) +4364 more potentially affected by CVE-2025-9288 via sha.js (>=2.1.1, <=2.4.11)

sha.js NPM version =2.1.1, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =0.1.6, =1.0.0, =0.0.4, =0.1.0, =7.13.4, =18.0.0, =18.1.2 - @ajhyndman/relay 1.6.0-1 - @aldendaniels/react-scripts 0.8.3 and more Source cves: CVE-2025-9288 Source advisory: SNYK:JS-SHAJS-12089400...

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +31 more potentially affected by CVE-2025-57749 via n8n-core (>=1.0.0, <=1.105.3)

n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =0.1.1, =0.4.1, =1.1.0, =1.2.3 - n8n-nodes-fxcm 1.0.1 and more Source cves: CVE-2025-57749 Source advisory: SNYK:JS-N8NCORE-12081401...

@5ht/express (>=1.0.6, <=2.2.0), @audius/sdk (>=0.0.3-beta.1, <=7.1.1) +7 more potentially affected by CVE-2025-9287 via cipher-base (1.0.4)

cipher-base NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cipher-base and may be impacted: - @5ht/express =1.0.6, =0.0.3-beta.1, =6.0.4, =1.0.1, =1.5.2-beta.1, =1.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.11 Source cves: CVE-2025-9287...

@6missedcalls-ai/zora-mcp-server (>=0.1.2, <=0.1.3), @aurracloud/agentkit (>=0.9.0, <=0.10.0) +38 more potentially affected by unknown CVE via x402 (>=0.1.2, <=0.4.3)

x402 NPM version =0.1.2, =0.1.2, =0.9.0, =0.1.0-alpha.1, =0.0.1, =0.0.1, =0.0.1, =0.0.0-nightly-20250711210411, =0.3.0, =0.0.3, =0.1.2, =0.1.3 - @openflow-sh/sdk 1.0.0 - @thorium-dev-group/x402-mcp-extension 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3J63-5H8P-GF7C...

@6missedcalls-ai/zora-mcp-server (>=0.1.2, <=0.1.3), @aurracloud/agentkit (>=0.9.0, <=0.10.0) +38 more potentially affected by unknown CVE via x402 (>=0.1.2, <=0.4.3)

x402 NPM version =0.1.2, =0.1.2, =0.9.0, =0.1.0-alpha.1, =0.0.1, =0.0.1, =0.0.1, =0.0.0-nightly-20250711210411, =0.3.0, =0.0.3, =0.1.2, =0.1.3 - @openflow-sh/sdk 1.0.0 - @thorium-dev-group/x402-mcp-extension 0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-X402-12239904...

x402-native-token-payment-demo (>=0.0.0-alpha, <=0.0.1) potentially affected by unknown CVE via x402-hono (0.3.4)

x402-hono NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on x402-hono and may be impacted: - x402-native-token-payment-demo =0.0.0-alpha, =0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-3J63-5H8P-GF7C...

x402-native-token-payment-demo (>=0.0.0-alpha, <=0.0.1) potentially affected by unknown CVE via x402-hono (0.3.4)

x402-hono NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on x402-hono and may be impacted: - x402-native-token-payment-demo =0.0.0-alpha, =0.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-X402HONO-12239901...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @directus/api (>=15.0.0, <=28.0.2) +3 more potentially affected by CVE-2025-55746 via directus (>=10.8.3, <=11.9.2)

directus NPM version =10.8.3, =1.6.3, =15.0.0, =1.2.2, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-55746 Source advisory: OSV:GHSA-MV33-9F6J-PFMC...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @deconz-community/directus-extension-ddf-store (0.1.0) +5 more potentially affected by CVE-2025-55746 via @directus/api (>=14.1.0, <=28.0.1)

@directus/api NPM version =14.1.0, =1.6.3, =1.2.2, =10.8.0, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-55746 Source advisory: OSV:GHSA-MV33-9F6J-PFMC...

directus (>=11.9.0, <=11.9.2) potentially affected by CVE-2025-55746 via @directus/api (>=28.0.0, <=28.0.2)

@directus/api NPM version =28.0.0, =11.9.0, =11.9.2 Source cves: CVE-2025-55746 Source advisory: SNYK:JS-DIRECTUSAPI-12079023...

com.liferay:com.liferay.journal.content.web (>=1.0.0, <=2.0.8), com.liferay:com.liferay.journal.item.selector.web (>=1.0.0, <=1.0.5) potentially affected by CVE-2025-43737 via com.liferay:com.liferay.journal.web (>=1.0.0, <=1.5.0)

com.liferay:com.liferay.journal.web MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.5 Source cves: CVE-2025-43737 Source advisory: SNYK:JAVA-COMLIFERAY-12089394...

https-curl (1.7.9), multi-installer (0.0.1) +3 more potentially affected by CVE-2025-55294 via screenshot-desktop (>=1.1.0, <=1.15.1)

screenshot-desktop NPM version =1.1.0, =1.0.0, =1.0.0, =1.3.0, =1.3.6 Source cves: CVE-2025-55294 Source advisory: OSV:GHSA-GJX4-2C7G-FM94...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @alkemio/excalidraw (>=0.17.1-alkemio-5, <=0.19.0-alkemio-1) +150 more potentially affected by CVE-2025-54881 via mermaid (>=10.9.0, <=10.9.3)

mermaid NPM version =10.9.0, =0.18.0-beta.0, =0.17.1-alkemio-5, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =1.1.4, =0.0.1, =0.114.3, =0.0.4-2, =0.0.1, =0.5.0-1848650, =0.17.1, =0.17.3 and more Source cves: CVE-2025-54881 Source advisory: OSV:GHSA-7RQQ-PRVP-X9JH...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @afyercu/tuboshu-components (>=0.0.1, <=0.0.3) +929 more potentially affected by CVE-2025-54881 via mermaid (>=10.9.0, <=11.9.0)

mermaid NPM version =10.9.0, =0.18.0-beta.0, =0.0.1, =0.1.1, =0.1.0, =0.0.33, =7.0.0-14755068042, =1.3.2, =0.17.1-alkemio-5, =0.5.3, =0.4.3, =3.126.1, =4.27.0, =1.0.0, =2.2.7, =2.2.12 and more Source cves: CVE-2025-54881 Source advisory: SNYK:JS-MERMAID-12027649...

@cbnventures/docusaurus-preset-nova (>=0.15.0, <=0.15.4), @changmao/reveal-md (6.1.4-chanmao0.0) +102 more potentially affected by CVE-2025-54881 via mermaid (>=11.0.0, <=11.9.0)

mermaid NPM version =11.0.0, =0.15.0, =15.1.25, =0.0.2, =13.34.0, =0.1.0, =12.81.0, =0.0.11, =13.46.0, =8.0.216, =12.28.0, =13.5.39, =12.28.0, =0.0.49, =1.1.188 and more Source cves: CVE-2025-54881 Source advisory: OSV:GHSA-7RQQ-PRVP-X9JH...

@changmao/reveal-md (6.1.4-chanmao0.0), @clidey/dory (0.35.0) +94 more potentially affected by CVE-2025-54880 via mermaid (>=11.2.0, <=11.9.0)

mermaid NPM version =11.2.0, =15.1.29, =0.0.2, =13.34.0, =0.1.0, =12.81.0, =0.0.11, =13.46.0, =8.0.223, =12.37.0, =13.5.47, =12.37.0, =0.0.54, =12.37.0, =13.264.0 and more Source cves: CVE-2025-54880 Source advisory: OSV:GHSA-8GWM-58G9-J8PW...

@changmao/reveal-md (6.1.4-chanmao0.0), @clidey/dory (0.35.0) +94 more potentially affected by CVE-2025-54880 via mermaid (>=11.2.0, <=11.9.0)

mermaid NPM version =11.2.0, =15.1.29, =0.0.2, =13.34.0, =0.1.0, =12.81.0, =0.0.11, =13.46.0, =8.0.223, =12.37.0, =13.5.47, =12.37.0, =0.0.54, =12.37.0, =13.264.0 and more Source cves: CVE-2025-54880 Source advisory: SNYK:JS-MERMAID-12027657...

https-curl (1.7.9), multi-installer (0.0.1) +3 more potentially affected by CVE-2025-55294 via screenshot-desktop (>=1.1.0, <=1.15.1)

screenshot-desktop NPM version =1.1.0, =1.0.0, =1.0.0, =1.3.0, =1.3.6 Source cves: CVE-2025-55294 Source advisory: SNYK:JS-SCREENSHOTDESKTOP-12028632...

@bookshop/browser (3.11.0-rc.0), @bookshop/generate (3.11.0-rc.0) +25 more potentially affected by CVE-2025-55303 via astro (>=4.0.0, <=4.16.18)

astro NPM version =4.0.0, =0.40.5, =0.38.0, =0.38.0, =2.8.4, =0.2.0, =0.1.0, =0.0.0-dev-20231211183354, =0.0.3, =0.0.3, =0.0.5, =0.0.1, =1.0.2, =1.0.9 and more Source cves: CVE-2025-55303 Source advisory: OSV:GHSA-XF8X-J4P2-F749...

@bookshop/browser (3.11.0-rc.0), @bookshop/generate (3.11.0-rc.0) +25 more potentially affected by CVE-2025-55303 via astro (>=4.0.0, <=4.16.18)

astro NPM version =4.0.0, =0.40.5, =0.38.0, =0.38.0, =2.8.4, =0.2.0, =0.1.0, =0.0.0-dev-20231211183354, =0.0.3, =0.0.3, =0.0.5, =0.0.1, =1.0.2, =1.0.9 and more Source cves: CVE-2025-55303 Source advisory: SNYK:JS-ASTRO-12027668...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +23 more potentially affected by CVE-2025-55303 via astro (>=5.0.0-beta.5, <=5.12.8)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.0.1, =1.25.426-4, =0.6.2, =0.0.0-dev-20250414184926, =0.0.1, =0.0.1, =0.0.1, =2.1.22, =1.0.3, =0.1.0, =0.4.2 and more Source cves: CVE-2025-55303 Source advisory: OSV:GHSA-XF8X-J4P2-F749...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +23 more potentially affected by CVE-2025-55303 via astro (>=5.0.0-beta.5, <=5.12.8)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.0.1, =1.25.426-4, =0.6.2, =0.0.0-dev-20250414184926, =0.0.1, =0.0.1, =0.0.1, =2.1.22, =1.0.3, =0.1.0, =0.4.2 and more Source cves: CVE-2025-55303 Source advisory: SNYK:JS-ASTRO-12027668...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +394 more potentially affected by CVE-2025-55303 via @astrojs/internal-helpers (>=0.0.0-markdoc-config-changes-20230626153541, <=0.7.1)

@astrojs/internal-helpers NPM version =0.0.0-markdoc-config-changes-20230626153541, =0.0.1, =1.0.0, =1.0.0, =0.0.17, =0.0.2, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.0-ast-20240419160649, =0.0.0-10745-20240410180016, =6.2.0, =4.1.0, =4.3.3 and more Source cves:...

at.ganzleicht.vaadin:vaadin-server (>=9.1.1, <=9.1.3), br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (>=2.0.0, <=5.1.0) +663 more potentially affected by CVE-2025-43740 via com.liferay.portal:com.liferay.portal.kernel (>=1.0.0, <=166.0.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version =1.0.0, =9.1.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =0.0.2.release, =0.0.2.release, =0.0.2.release, =0.0.2.release, =0.0.2.release, =1.0.0.release - com.gitee.pif...

40au-isteven-angular-multiselect (4.0.0), @0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5) +503 more potentially affected by CVE-2025-4690 via angular-sanitize (>=1.2.27, <=1.8.3)

angular-sanitize NPM version =1.2.27, =4.13.7-rc4, =0.0.1, =0.0.1, =0.1.0, =2.0.0, =0.3.2, =0.2.7, =1.0.0, =1.0.0, =0.2.1, =0.0.1, =1.0.0, =3.0.2, =4.16.5 and more Source cves: CVE-2025-4690 Source advisory: SNYK:JS-ANGULARSANITIZE-12177871...

com.github.grantlittle:bdd-reporting-server (>=0.1.5, <=0.1.7), com.github.grantlittle:bdd-reporting-service (0.1.9) +59 more potentially affected by CVE-2025-4690 via org.webjars.bower:angular-sanitize (>=1.2.29, <=1.8.2)

org.webjars.bower:angular-sanitize MAVEN version =1.2.29, =0.1.5, =0.5.0, =0.5.0, =0.5.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1 and more Source cves: CVE-2025-4690 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-12177873...

net.aequologica.neo:geppaequo-tags (>=0.5.3, <=0.6.0), net.aequologica.neo:geppaequo-web (>=0.5.3, <=0.6.0) +4 more potentially affected by CVE-2025-4690 via org.webjars.npm:angular-sanitize (>=1.5.0-beta.0, <=1.8.3)

org.webjars.npm:angular-sanitize MAVEN version =1.5.0-beta.0, =0.5.3, =0.5.3, =0.6.0 - org.webjars.npm:angular-auto-complete 1.7.4 - org.webjars.npm:angular-material-calendar 0.2.14 - org.webjars.npm:angular-schema-form 0.8.13 - org.webjars.npm:github-com-showdownjs-ng-showdown 1.1.0 Source cves:...

aella-gateway-admin (>=1.0.5, <=1.0.9), angus-router (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2025-9095 via express-gateway (1.16.11)

express-gateway NPM version 1.16.11 is affected by a known vulnerability. The following packages have a transitive dependency on express-gateway and may be impacted: - aella-gateway-admin =1.0.5, =0.1.0, =1.0.0, =0.0.1, =0.0.5, =0.0.6 - factoria.rae.identity 1.0.0 - wawole-gateway 1.0.0 Source...

aella-gateway-admin (>=1.0.5, <=1.0.9), angus-router (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2025-9096 via express-gateway (1.16.11)

express-gateway NPM version 1.16.11 is affected by a known vulnerability. The following packages have a transitive dependency on express-gateway and may be impacted: - aella-gateway-admin =1.0.5, =0.1.0, =1.0.0, =0.0.1, =0.0.5, =0.0.6 - factoria.rae.identity 1.0.0 - wawole-gateway 1.0.0 Source...

choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2025-55207 via @astrojs/node (>=9.2.2, <=9.3.0)

@astrojs/node NPM version =9.2.2, =0.3.1, =0.4.0 Source cves: CVE-2025-55207 Source advisory: OSV:GHSA-9X9C-GHC5-JHW9...

choco-astro (>=0.3.1, <=0.4.0) potentially affected by CVE-2025-55207 via @astrojs/node (>=9.2.2, <=9.3.0)

@astrojs/node NPM version =9.2.2, =0.3.1, =0.4.0 Source cves: CVE-2025-55207 Source advisory: SNYK:JS-ASTROJSNODE-11951436...

taky-cache-loop (0.0.1), taky-redis-throttle (0.0.1) potentially affected by unknown CVE via every-time (0.0.0)

every-time NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on every-time and may be impacted: - taky-cache-loop 0.0.1 - taky-redis-throttle 0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19990...

failing-line (0.0.1), mp3s (0.0.0) +3 more potentially affected by unknown CVE via findall (0.0.4)

findall NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on findall and may be impacted: - failing-line 0.0.1 - mp3s 0.0.0 - ourtunes =0.0.0, =0.0.2, =0.0.3, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20572...

1-exceptions-handler (1.0.13), 10-20-day-exam (1.0.0) +2605 more potentially affected by unknown CVE via http (>=0.0.0, <=0.0.1-security)

http NPM version =0.0.0, =1.0.1, =2.0.0, =0.0.1, =0.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-22760...

000tea (1.4.5), 00tea (1.4.4) +838 more potentially affected by unknown CVE via name (0.0.2)

name NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on name and may be impacted: - 000tea 1.4.5 - 00tea 1.4.4 - 01q 1.5.1 - 032we 1.5.7 - 0tea 1.4.3 - 123qaz 1.1.1 - 12we 1.6.9 - 12wea 1.5.5 - 1qwe 1.4.6 - 1qwer 1.4.7 - 1qwert 1.4.8 -...

@biuauth/modal (>=6.1.2, <=6.2.1), @biuauth/ui (>=6.2.0, <=6.2.11) +6 more potentially affected by unknown CVE via reat (0.0.1-security)

reat NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reat and may be impacted: - @biuauth/modal =6.1.2, =6.2.0, =6.1.23, =1.0.0, =2.0.8, =1.1.1, =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31896...

bismagul_project08_quiz (>=1.0.0, <=1.0.1), cli-advanture-game (1.0.0) +5 more potentially affected by unknown CVE via calk (0.0.1-security)

calk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on calk and may be impacted: - bismagulproject08quiz =1.0.0, =1.0.0, =1.0.0, =1.0.1 - todoterminallist 1.0.0 - zhs-cli-advanture-game 1.0.0 Source cves: unknown CVE Source...

04-rsib_contact-numbers-menue_cli (>=1.0.0, <=1.0.1), advanture-game-by-sam (>=1.0.0, <=1.0.1) +2 more potentially affected by unknown CVE via chak (0.0.1-security)

chak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 1.0.0 Source cves: unknown CVE Source advisory:...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +11 more potentially affected by unknown CVE via new-struct (>=0.0.4, <=0.1.1)

new-struct NPM version =0.0.4, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27369...

@uni-cli/cli (>=1.0.6, <=1.0.12), @uni-cli/init (1.0.12) +1 more potentially affected by unknown CVE via fs-extar (0.0.1-security)

fs-extar NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fs-extar and may be impacted: - @uni-cli/cli =1.0.6, =1.0.12 - @uni-cli/init 1.0.12 - hwsz-tools 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-21006...

evy-fanyi (>=0.0.1, <=0.0.2), starry_icon_tool (1.0.0) potentially affected by unknown CVE via langdet (0.0.1-security)

langdet NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on langdet and may be impacted: - evy-fanyi =0.0.1, =0.0.2 - starryicontool 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24945...

devel_core (>=0.0.1, <=0.0.8) potentially affected by unknown CVE via requets (0.0.1-security)

requets NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32115...

fox (>=1.1.0, <=1.6.2), prova (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via simple.io (2.0.0)

simple.io NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on simple.io and may be impacted: - fox =1.1.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33280...

ftms (1.0.0), package-ftms (1.0.0) potentially affected by unknown CVE via requset (0.0.1-security)

requset NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requset and may be impacted: - ftms 1.0.0 - package-ftms 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32120...

23march (1.0.0), @castyiglitchxz/alert-box-package (>=1.0.0, <=1.2.5) +30 more potentially affected by unknown CVE via node.js (0.0.1-security)

node.js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node.js and may be impacted: - 23march 1.0.0 - @castyiglitchxz/alert-box-package =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.5, =1.0.0, =1.2.5, =1.2.1, =0.0.1, =2.2.0,...

rs265_text-based-adventure-game (>=1.0.4, <=1.0.6) potentially affected by unknown CVE via halk (0.0.1-security)

halk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on halk and may be impacted: - rs265text-based-adventure-game =1.0.4, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22133...

adaptive-fs (>=1.1.0, <=1.3.2), ajato (0.0.1-wip) +1 more potentially affected by unknown CVE via mogoose (0.0.1-security)

mogoose NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mogoose and may be impacted: - adaptive-fs =1.1.0, =1.0.48, =1.1.26 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26613...

@alancastro06/coolsolelog (22.14.0), albot (>=0.1.0, <=0.14.1) +43 more potentially affected by unknown CVE via ansi-codes (>=0.0.0, <=2.0.0)

ansi-codes NPM version =0.0.0, =0.1.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.1, =0.0.0, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-14554...

@itutoring/itutoring_application_js_api (>=1.3.3, <=1.20.7), html-to-unicode (>=1.0.0, <=1.0.2) +2 more potentially affected by unknown CVE via reacct (0.0.1-security)

reacct NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reacct and may be impacted: - @itutoring/itutoringapplicationjsapi =1.3.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31760...