sozu (>=0.12.0-alpha1, <=0.13.1), sozu-client (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2025-47737 via trailer (0.1.2)

trailer CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on trailer and may be impacted: - sozu =0.12.0-alpha1, =0.1.0, =0.11.59, =0.12.0-alpha1, =0.12.0-alpha1, =0.11.59, =0.13.0 Source cves: CVE-2025-47737 Source advisory:...

@dm3-org/delivery-service (>=1.4.0, <=1.7.1), @dm3-org/dm3-backend (>=1.0.1, <=1.7.1) +18 more potentially affected by unknown CVE via @dm3-org/dm3-lib-shared (1.7.2)

@dm3-org/dm3-lib-shared NPM version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on @dm3-org/dm3-lib-shared and may be impacted: - @dm3-org/delivery-service =1.4.0, =1.0.1, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =0.0.1-alpha1, =1.0.5, =1.4.0,...

org.webjars.bower:angular-trix (1.0.2), org.webjars.bower:github-com-sachinchoolur-angular-trix (1.0.2) potentially affected by CVE-2025-46812 via org.webjars.bower:trix (0.9.9)

org.webjars.bower:trix MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bower:trix and may be impacted: - org.webjars.bower:angular-trix 1.0.2 - org.webjars.bower:github-com-sachinchoolur-angular-trix 1.0.2 Source cves:...

@burger-editor/blocks (>=4.0.0-alpha.1, <=4.0.0-alpha.4), @burger-editor/client (>=4.0.0-alpha.1, <=4.0.0-alpha.4) +3 more potentially affected by CVE-2025-46812 via trix (>=2.0.8, <=2.1.13)

trix NPM version =2.0.8, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =1.0.1, =1.0.3 Source cves: CVE-2025-46812 Source advisory: OSV:GHSA-MCRW-746G-9Q8H...

asn-tools (>=0.2.2, <=0.2.5), bitslideslib (>=0.1.1, <=0.1.2) +13 more potentially affected by unknown CVE via shaman (0.1.0)

shaman CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shaman and may be impacted: - asn-tools =0.2.2, =0.1.1, =0.2.0, =0.2.9, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory:...

mod3d-gl (>=0.1.0, <=0.2.0), mod3d-gltf (>=0.1.0, <=0.2.0) +1 more potentially affected by unknown CVE via mod3d-base (>=0.1.0, <=0.2.0)

mod3d-base CARGO version =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0171...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28224 more potentially affected by CVE-2025-4287 via torch (>=1.0.0, <=2.14.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-4287 Source advisory: SNYK:PYTHON-TORCH-10332643...

sozu (>=0.12.0-alpha1, <=0.13.1), sozu-client (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2025-47737 via trailer (0.1.2)

trailer CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on trailer and may be impacted: - sozu =0.12.0-alpha1, =0.1.0, =0.11.59, =0.12.0-alpha1, =0.12.0-alpha1, =0.11.59, =0.13.0 Source cves: CVE-2025-47737 Source advisory:...

anti-debugging (0.0.0), capcom0 (0.1.1) +9 more potentially affected by CVE-2024-58253 via obfstr (>=0.1.1, <=0.3.0)

obfstr CARGO version =0.1.1, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =1.0.3, =0.1.0, =0.6.0, =0.6.0, =0.11.0 Source cves: CVE-2024-58253 Source advisory: OSV:GHSA-V2P5-Q653-9J99...

@iflow-mcp/git-mcp (1.0.0), mtmag (0.0.1) +4 more potentially affected by CVE-2025-4144 via @cloudflare/workers-oauth-provider (0.0.2)

@cloudflare/workers-oauth-provider NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @cloudflare/workers-oauth-provider and may be impacted: - @iflow-mcp/git-mcp 1.0.0 - mtmag 0.0.1 - mtmaiadmin =0.0.694, =0.0.1, =0.8.11, =0.8.17 Source...

@iflow-mcp/git-mcp (1.0.0), mtmag (0.0.1) +4 more potentially affected by CVE-2025-4143 via @cloudflare/workers-oauth-provider (0.0.2)

@cloudflare/workers-oauth-provider NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @cloudflare/workers-oauth-provider and may be impacted: - @iflow-mcp/git-mcp 1.0.0 - mtmag 0.0.1 - mtmaiadmin =0.0.694, =0.0.1, =0.8.11, =0.8.17 Source...

@oconva/qvikchat (>=1.0.0, <=2.0.0-alpha.4), genkit-intro (1.0.0) +3 more potentially affected by unknown CVE via @genkit-ai/firebase (0.5.17)

@genkit-ai/firebase NPM version 0.5.17 is affected by a known vulnerability. The following packages have a transitive dependency on @genkit-ai/firebase and may be impacted: - @oconva/qvikchat =1.0.0, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-GENKITAIFIREBASE-12671227...

@blinkk/root-cms (>=1.2.0, <=2.0.0-rc.1), @genkit-ai/ai (>=0.5.0-rc.0, <=0.9.0) +47 more potentially affected by unknown CVE via @genkit-ai/core (>=0.5.0, <=0.9.0-rc.3)

@genkit-ai/core NPM version =0.5.0, =1.2.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.7, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0-rc.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-GENKITAICORE-12671226...

org.webjars.npm:bitcore-lib (0.15.0), org.webjars.npm:bitcore-mnemonic (1.5.0) +5 more potentially affected by CVE-2025-27611 via org.webjars.npm:base-x (3.0.8)

org.webjars.npm:base-x MAVEN version 3.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:base-x and may be impacted: - org.webjars.npm:bitcore-lib 0.15.0 - org.webjars.npm:bitcore-mnemonic 1.5.0 - org.webjars.npm:bs58 4.0.1 -...

audio-video-metadata (>=0.1.0, <=0.1.7), fselect (>=0.3.2, <=0.8.11) +4 more potentially affected by unknown CVE via mp3-metadata (>=0.1.1, <=0.3.4)

mp3-metadata CARGO version =0.1.1, =0.1.0, =0.3.2, =0.1.2, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:GHSA-927Q-G9W9-PM54...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +508 more potentially affected by CVE-2025-46565 via vite (>=4.0.0, <=4.5.11)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2025-46565 Source advisory: OSV:GHSA-859W-5945-R5V3...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +445 more potentially affected by CVE-2025-46565 via vite (>=5.0.0, <=5.4.17)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-46565 Source advisory: OSV:GHSA-859W-5945-R5V3...

@angular-devkit/build-angular (>=20.0.0-next.7, <=20.0.0-next.8), @angular/build (>=20.0.0-next.7, <=20.0.0-next.8) +31 more potentially affected by CVE-2025-46565 via vite (>=6.3.0, <=6.3.3)

vite NPM version =6.3.0, =20.0.0-next.7, =20.0.0-next.7, =1.92.0, =0.0.10, =1.0.101, =0.0.1, =2.15.20, =0.2.0, =0.2.5 - @nebula-db/orm 0.2.3 - @nebula-db/plugin-cache 0.2.3 and more Source cves: CVE-2025-46565 Source advisory: OSV:GHSA-859W-5945-R5V3...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +92 more potentially affected by CVE-2025-46565 via vite (>=6.0.0, <=6.1.4)

vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =5.0.0-alpha.39 and more Sour...

@aicblock/cli (>=1.0.0, <=1.0.1), @aklesky/vite-config (1.0.1) +47 more potentially affected by CVE-2025-46565 via vite (>=6.2.0, <=6.2.6)

vite NPM version =6.2.0, =1.0.0, =19.2.1, =19.2.1, =0.55.0, =0.21.2-4.1, =1.0.0, =1.0.410, =3.8.0, =1.47.0, =5.0.0-alpha.40, =5.0.0-alpha.45 - @darkyzhou-powered/waku 0.21.24 and more Source cves: CVE-2025-46565 Source advisory: OSV:GHSA-859W-5945-R5V3...

@acala-network/api (>=0.2.0-beta.1, <=0.2.0-beta.8), @acala-network/types (>=0.2.0-beta.1, <=0.2.0-beta.8) +404 more potentially affected by CVE-2025-27611 via base-x (>=3.0.0, <=3.0.10)

base-x NPM version =3.0.0, =0.2.0-beta.1, =0.2.0-beta.1, =0.0.3, =0.1.2, =0.3.7, =0.1.7, =1.0.0, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2025-27611 Source advisory: OSV:GHSA-XQ7P-G2VC-G82P...

@1tokenfe/cross-inpage-provider-injected (2.2.46), @1tokenfe/inpage-providers-hub (2.2.46) +129 more potentially affected by CVE-2025-27611 via base-x (4.0.0)

base-x NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on base-x and may be impacted: - @1tokenfe/cross-inpage-provider-injected 2.2.46 - @1tokenfe/inpage-providers-hub 2.2.46 - @1tokenfe/onetoken-alph-provider 2.2.46 -...

@astrobase/core (>=0.2.0, <=0.4.0), @indiebackend/domain-ids (>=0.0.1, <=1.0.3) +2 more potentially affected by CVE-2025-27611 via base-x (5.0.0)

base-x NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on base-x and may be impacted: - @astrobase/core =0.2.0, =0.0.1, =0.0.11, =0.5.0, =0.5.15 Source cves: CVE-2025-27611 Source advisory: OSV:GHSA-XQ7P-G2VC-G82P...

net.aequologica.neo:dagr-vebchar (0.5.2-alpha), net.aequologica.neo:dagr-web (0.5.2-alpha) +108 more potentially affected by CVE-2025-0716 via org.webjars.npm:angular (>=1.2.32, <=1.8.3)

org.webjars.npm:angular MAVEN version =1.2.32, =0.5.2, =0.5.2, =5.2.0-rc1, =5.2.0-rc1, =5.2.0-rc1, =5.2.0-rc1, =5.2.0-rc1, =0.4.0, =1.1.3 and more Source cves: CVE-2025-0716 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-9919775...

com.github.grantlittle:bdd-reporting-server (>=0.1.5, <=0.1.7), com.github.grantlittle:bdd-reporting-service (0.1.9) +697 more potentially affected by CVE-2025-0716 via org.webjars.bower:angular (>=1.0.7, <=1.8.3)

org.webjars.bower:angular MAVEN version =1.0.7, =0.1.5, =1.1.0, =0.4.4, =0.4.4, =0.3.5, =0.4.1, =0.4.4, =0.3.5, =0.4.4, =0.5.1 and more Source cves: CVE-2025-0716 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-9919774...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3309 more potentially affected by CVE-2025-0716 via angular (>=1.0.8, <=1.8.3)

angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2025-0716 Source advisory: OSV:GHSA-J58C-WW9W-PWP5...

@abaplint/database-snowflake (>=2.7.93, <=2.7.101), @altimateai/datamate (>=0.0.19-beta.2, <=0.4.4) +165 more potentially affected by CVE-2025-46328 via snowflake-sdk (>=1.10.0, <=2.0.2)

snowflake-sdk NPM version =1.10.0, =2.7.93, =0.0.19-beta.2, =0.0.5, =8.0.0, =0.1.0, =0.1.0, =1.8.0, =0.0.0, =0.4.4, =0.7.17, =0.0.2, =1.0.2, =1.0.93, =0.0.0-beta.1, =0.0.36 and more Source cves: CVE-2025-46328 Source advisory: OSV:GHSA-WMJQ-JRM2-9WFR...

at.reilaender.asciidoctorj.bootconfig2adoc:bootconfig2adoc-adoc (>=0.1.2, <=0.1.3), at.reilaender.asciidoctorj.bootconfig2adoc:bootconfig2adoc-core (>=0.1.2, <=0.1.3) +516 more potentially affected by CVE-2025-43857 via org.jruby:jruby-stdlib (>=1.6.7.2, <=10.1.1.0)

org.jruby:jruby-stdlib MAVEN version =1.6.7.2, =0.1.2, =0.1.2, =1.0.2, =1.0.0, =1.0, =2.0, =0.1.0, =0.1.0, =1.0.0, =1.0.2, =1.4.0, =2.0.0-m3, =2.0.0-m4 and more Source cves: CVE-2025-43857 Source advisory: SNYK:JAVA-ORGJRUBY-10557729...

audio-video-metadata (>=0.1.0, <=0.1.7), fselect (>=0.3.2, <=0.8.11) +4 more potentially affected by unknown CVE via mp3-metadata (>=0.1.1, <=0.3.4)

mp3-metadata CARGO version =0.1.1, =0.1.0, =0.3.2, =0.1.2, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0027...

a3mo_lib (>=0.1.0, <=0.1.1), abra (0.0.1) +4425 more potentially affected by unknown CVE via rustc-serialize (>=0.1.5, <=0.3.25)

rustc-serialize CARGO version =0.1.5, =0.1.0, =0.1.7, =0.2.0-beta.4, =0.0.6, =0.1.0, =0.2.1, =0.1.4, =0.1.1, =0.1.0, =0.9.0, =0.1.0, =0.3.3, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0025...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3985 via org.apereo.cas:cas-management-webapp-support (>=5.0.0, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3985 Source advisory: SNYK:JAVA-ORGAPEREOCAS-9893216...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3984 via org.apereo.cas:cas-management-webapp-support (>=5.0.0, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3984 Source advisory: SNYK:JAVA-ORGAPEREOCAS-9893219...

@blubox/body-parser (>=1.0.0, <=1.0.1), @breautek/storm (>=8.0.0, <=8.4.0) +70 more potentially affected by CVE-2025-46653 via formidable (>=3.2.4, <=3.5.2)

formidable NPM version =3.2.4, =1.0.0, =8.0.0, =0.0.1, =0.0.1, =0.0.1, =3.4.4, =0.1036.4000, =40.0.1, =1.2.1, =0.2.14, =16.0.1, =2.13.1, =2.15.3 and more Source cves: CVE-2025-46653 Source advisory: OSV:GHSA-75V8-2H7P-7M2M...

@compas/server (>=0.0.219, <=0.17.0), @eamic/server (>=1.0.1, <=1.0.3) +23 more potentially affected by CVE-2025-46653 via formidable (>=2.1.1, <=2.1.2)

formidable NPM version =2.1.1, =0.0.219, =1.0.1, =3.0.0-alpha.21, =1.0.10, =1.8.8, =0.141.0, =0.0.219, =1.13.0, =1.0.9, =1.3.15, =0.1.0, =0.21.7, =0.1.0, =1.1.0 and more Source cves: CVE-2025-46653 Source advisory: OSV:GHSA-75V8-2H7P-7M2M...

@cedarjs/api-server (>=0.0.4, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=5.0.7-next.219, <=7.0.0-canary.3122) +53 more potentially affected by unknown CVE via @escape.tech/graphql-armor-cost-limit (>=2.0.0, <=2.4.1)

@escape.tech/graphql-armor-cost-limit NPM version =2.0.0, =0.0.4, =5.0.7-next.219, =0.0.4, =5.0.4-next.167, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =7.0.0-canary.3092, =0.0.4, =7.0.0-canary.3114, =0.0.4, =9.0.0-canary.1784 and more Source cves: unknown CVE Source advisory:...

31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.5-alpha-20250505082538-38c58bebc71a033977733a447a842c7e011f7c8f) +122 more potentially affected by CVE-2025-43865 via react-router (>=7.0.0, <=7.5.1-pre.0)

react-router NPM version =7.0.0, =0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, =0.0.2, =0.2.3, =1.1.0, =3.0.0-alpha.11, =3.0.0-alpha.10, =15.0.12, =0.0.1-ssmch, =0.0.1-dev.8, =0.0.1-0, =0.0.2-1 and more Source cves: CVE-2025-43865 Source advisory: OSV:GHSA-CPJ6-FHP6-MR6J...

@accounter/client (>=0.0.4-alpha-20250218215417-09067250dfe59d52ff05e9ab3ed5ed3c462043f4, <=0.0.5-alpha-20250505082538-38c58bebc71a033977733a447a842c7e011f7c8f), @boxyhq/react-ui (3.4.0) +71 more potentially affected by CVE-2025-43864 via react-router (>=7.2.0, <=7.5.1-pre.0)

react-router NPM version =7.2.0, =0.0.4-alpha-20250218215417-09067250dfe59d52ff05e9ab3ed5ed3c462043f4, =0.2.3, =15.2.2, =0.0.1-ssmch, =0.0.1-dev.8, =0.0.1-0, =0.0.1-alpha.6, =16.0.29, =0.0.2, =13.34.0, =0.3.4, =13.33.0, =0.0.11, =0.4.4 and more Source cves: CVE-2025-43864 Source advisory:...

@arken/evolution-protocol (>=2.0.2, <=2.0.14), @arken/forge-protocol (>=0.1.0, <=0.1.6) +59 more potentially affected by CVE-2025-43855 via @trpc/server (>=11.0.0-next-beta.193, <=11.1.0)

@trpc/server NPM version =11.0.0-next-beta.193, =2.0.2, =0.1.0, =1.5.0, =0.1.1, =0.1.0, =0.0.1-alpha.9, =0.0.1-rc.7, =0.13.1-rc.25, =0.0.1-rc.2, =0.1.0, =0.1.0, =0.0.226, =0.1.0-alpha.0, =0.1.0-alpha.3 and more Source cves: CVE-2025-43855 Source advisory: OSV:GHSA-PJ3V-9CM8-GVJ8...

mcai_worker_sdk (>=0.11.0-alpha, <=2.2.1), srt_media (>=0.0.1, <=0.1.0) potentially affected by unknown CVE via stainless_ffmpeg (>=0.2.4, <=0.3.10)

stainlessffmpeg CARGO version =0.2.4, =0.11.0-alpha, =0.0.1, =0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0169...

alloy-rs (0.2.1), anndata (0.2.0) +112 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.18.0)

arrow2 CARGO version =0.5.3, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.0.1, =0.1.0, =0.2.1, =0.2.2, =0.4.0, =0.1.0, =0.1.0, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0038...

aabb_physics (>=0.1.0, <=0.1.1), acolor (>=0.0.2, <=0.0.11) +118 more potentially affected by unknown CVE via macroquad (>=0.2.9, <=0.4.16)

macroquad CARGO version =0.2.9, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0035...

com.gitee.zodiacstack.base:zodiac-base-sdk-net (1.7.1), com.github.searls:jasmine-maven-plugin (>=3.0-alpha-01, <=3.0-beta-02) +199 more potentially affected by CVE-2025-5889 via org.webjars.npm:brace-expansion (>=1.1.15, <=5.0.9)

org.webjars.npm:brace-expansion MAVEN version =1.1.15, =3.0-alpha-01, =1.6.0, =5.0.0, =5.0.0, =1.1.4, =0.3.2, =0.28.0, =2.15.2, =1.3.0, =0.3.0, =2.0.3, =3.0.2 and more Source cves: CVE-2025-5889 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-10360988...

de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +107 more potentially affected by CVE-2024-42699 via org.opencms:opencms-core (>=8.0.1, <=9.5.3)

org.opencms:opencms-core MAVEN version =8.0.1, =8.5.1.1, =8.5.1.1, =8.0.1, =8.0.1, =8.0.4, =8.5.0, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.5.0, =8.5.2 and more Source cves: CVE-2024-42699 Source advisory: SNYK:JAVA-ORGOPENCMS-9802334...

de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +107 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (>=8.0.1, <=9.5.3)

org.opencms:opencms-core MAVEN version =8.0.1, =8.5.1.1, =8.5.1.1, =8.0.1, =8.0.1, =8.0.4, =8.5.0, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.5.0, =8.5.2 and more Source cves: CVE-2024-41446 Source advisory: SNYK:JAVA-ORGOPENCMS-9802335...

org.webjars.npm:angular-lock (2.0.3), org.webjars.npm:auth0-js (>=8.4.0, <=9.28.0) +11 more potentially affected by CVE-2025-46653 via org.webjars.npm:formidable (>=1.2.2, <=2.1.2)

org.webjars.npm:formidable MAVEN version =1.2.2, =8.4.0, =4.0.0-alpha, =1.1.0, =2.1.7, =1.0.6, =3.3.1, =7.1.6 - org.webjars.npm:supertest 3.4.2 Source cves: CVE-2025-46653 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-10006768...

adorable-cli (>=0.1.10, <=0.2.9), agent-memory-labs (>=0.1.0, <=0.1.14) +163 more potentially affected by CVE-2025-28197 via crawl4ai (>=0.3.731, <=0.9.3)

crawl4ai PYPI version =0.3.731, =0.1.10, =0.1.0, =0.2.1, =0.1.6, =0.1.0, =0.6.0, =0.1.0, =0.1.2, =0.1.0, =0.1.10, =0.10.0, =0.12.0, =0.5.3, =0.5.4 and more Source cves: CVE-2025-28197 Source advisory: SNYK:PYTHON-CRAWL4AI-10116190...

de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +107 more potentially affected by CVE-2024-41447 via org.opencms:opencms-core (>=8.0.1, <=9.5.3)

org.opencms:opencms-core MAVEN version =8.0.1, =8.5.1.1, =8.5.1.1, =8.0.1, =8.0.1, =8.0.4, =8.5.0, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.5.0, =8.5.2 and more Source cves: CVE-2024-41447 Source advisory: SNYK:JAVA-ORGOPENCMS-9802336...

@5minds/processcube_engine (>=19.0.0-beta.8, <=20.0.0-renovate-fd1892-me5sbqz0), @bitcoin-computer/components (>=0.24.1-beta.0, <=0.26.0-beta.0) +8 more potentially affected by CVE-2025-32792 via ses (>=1.0.0, <=1.11.0)

ses NPM version =1.0.0, =19.0.0-beta.8, =0.24.1-beta.0, =0.18.0-beta.0, =4.4.0, =0.0.1, =0.3.0-beta.0, =4.3.0-alpha.1, =4.5.0, =16.2.0, =16.3.2 Source cves: CVE-2025-32792 Source advisory: OSV:GHSA-H9W6-F932-GQ62...

@chainlink/external-adapter-framework (>=1.7.5, <=1.7.7), @intuned/runtime (1.3.15) +89 more potentially affected by CVE-2025-32442 +1 more via fastify (4.29.0)

fastify NPM version 4.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastify and may be impacted: - @chainlink/external-adapter-framework =1.7.5, =1.3.14-ts-runtime-helpers, =0.0.0-a2a-20250421213654, =3.26.12-beta.2, =0.0.2, =0.3.23, =1.1.26,...

@andesite-lab/andesite-core (>=1.60.2, <=1.62.0), @bechara/crux (>=6.0.0-alpha.1, <=6.6.2) +151 more potentially affected by CVE-2025-32442 +1 more via fastify (>=5.0.0, <=5.3.1)

fastify NPM version =5.0.0, =1.60.2, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.11, =1.9.4, =2.0.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 and more Source cves: CVE-2025-32442, CVE-2026-33806 Source advisory:...