soprano-tts (0.0.2) potentially affected by CVE-2025-3163 via lmdeploy (0.17.0)

lmdeploy PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on lmdeploy and may be impacted: - soprano-tts 0.0.2 Source cves: CVE-2025-3163 Source advisory: SNYK:PYTHON-LMDEPLOY-10343889...

soprano-tts (0.0.2) potentially affected by CVE-2025-3162 via lmdeploy (0.17.0)

lmdeploy PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on lmdeploy and may be impacted: - soprano-tts 0.0.2 Source cves: CVE-2025-3162 Source advisory: SNYK:PYTHON-LMDEPLOY-9723887...

gix-fs (>=0.1.0, <=0.9.1), gix-lock (>=5.0.0, <=12.0.1) +1 more potentially affected by CVE-2025-31130 via gix-features (>=0.29.0, <=0.37.2)

gix-features CARGO version =0.29.0, =0.1.0, =5.0.0, =5.0.3, =12.0.1 Source cves: CVE-2025-31130 Source advisory: OSV:RUSTSEC-2025-0021...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28224 more potentially affected by CVE-2025-3136 via torch (>=1.0.0, <=2.14.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-3136 Source advisory: SNYK:PYTHON-TORCH-10337825...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28224 more potentially affected by CVE-2025-3121 via torch (>=1.0.0, <=2.14.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-3121 Source advisory: SNYK:PYTHON-TORCH-10337834...

@crabnebula/taurify-api (>=0.1.0, <=0.1.5), @huakunshen/kunkun-ip-info (0.0.7) +13 more potentially affected by CVE-2025-31477 via @tauri-apps/plugin-shell (>=2.0.0, <=2.0.1)

@tauri-apps/plugin-shell NPM version =2.0.0, =0.1.0, =0.0.4-beta.2, =0.0.4-alpha.5, =0.6.0, =0.4.0, =0.1.9, =0.0.2-alpha.0, =0.4.0, =0.0.1, =1.1.0, =2.6.1 Source cves: CVE-2025-31477 Source advisory: OSV:GHSA-C9PR-Q8GX-3MGP...

@accounter/client (>=0.0.4-alpha-20250320090944-cdc782d0161db7e3f975b7da0860200fd07b490b, <=0.0.4-alpha-20250326170142-96e7a3c4676b50d865f58a42522ed17e4da19ca8), @adithya07/nextn (0.1.0) +28 more potentially affected by CVE-2025-30218 via next (15.2.3)

next NPM version 15.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @accounter/client =0.0.4-alpha-20250320090944-cdc782d0161db7e3f975b7da0860200fd07b490b, =0.1.0, =0.1.8, =0.0.2, =0.1.10, =1.0.0, =0.1.0, =0.1.39, =0.1.4...

@ninetailed/experience.js-next-esr (>=7.18.8, <=7.18.12-alpha.3) potentially affected by CVE-2025-30218 via next (13.5.9)

next NPM version 13.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @ninetailed/experience.js-next-esr =7.18.8, =7.18.12-alpha.3 Source cves: CVE-2025-30218 Source advisory: OSV:GHSA-223J-4RM8-MRMF...

@514labs/design-system-base (>=0.4.13, <=0.4.69), @514labs/event-capture (>=0.4.13, <=0.4.69) +9 more potentially affected by CVE-2025-30218 via next (14.2.25)

next NPM version 14.2.25 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @514labs/design-system-base =0.4.13, =0.4.13, =0.1.0, =1.0.8, =0.1.99, =2.1.28, =3.0.5, =3.0.6 - upcloud 1.1.4 Source cves: CVE-2025-30218 Source...

com.vip.saturn:saturn-console (>=3.0.0-m1, <=3.5.1), com.vip.saturn:saturn-it (>=3.0.0-m5, <=3.5.1) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console-api (>=3.0.0-m1, <=3.5.1)

com.vip.saturn:saturn-console-api MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m5, =3.5.1 Source cves: CVE-2025-29085 Source advisory: SNYK:JAVA-COMVIPSATURN-9749461...

@adobe/helix-importer (>=3.4.65, <=3.4.79), @adobe/helix-md2docx (>=2.2.0, <=2.2.7) +93 more potentially affected by CVE-2025-71319 via image-size (>=2.0.0, <=2.0.1)

image-size NPM version =2.0.0, =3.4.65, =2.2.0, =2.6.5, =1.3.47, =1.4.2, =1.0.1-alpha.1, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427...

@adobe/helix-importer (>=3.1.2, <=3.4.79), @adobe/helix-md2docx (>=2.1.38, <=2.1.107) +145 more potentially affected by CVE-2025-71319 via image-size (>=1.1.0, <=1.2.0)

image-size NPM version =1.1.0, =3.1.2, =2.1.38, =1.0.0, =2.4.3, =1.1.1, =1.0.0, =1.0.0-B001, =0.0.28, =2.17.13, =0.17.6, =1.16.10, =7.1.0, =0.0.1, =1.1.69, =5.0.0-alpha.27, =5.0.0-alpha.39 and more Source cves: CVE-2025-71319 Source advisory: OSV:GHSA-M5QC-5HW7-8VG7...

org.webjars.npm:datauri (>=1.1.0, <=2.0.0), org.webjars.npm:image-thumbnail (1.0.15) +1 more potentially affected by unknown CVE via org.webjars.npm:image-size (>=0.5.5, <=2.0.0-alpha.1)

org.webjars.npm:image-size MAVEN version =0.5.5, =1.1.0, =2.7.1, =2.7.2 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGWEBJARSNPM-9634165...

abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +635 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.23.5)

pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PPH8-GCV7-4QJ5...

@diffuse-dev/particles-ui (0.0.53), @react-router/serve (>=7.0.0-pre.0, <=7.4.0) +2 more potentially affected by CVE-2025-31137 via @react-router/express (>=7.0.0, <=7.4.0-pre.0)

@react-router/express NPM version =7.0.0, =7.0.0-pre.0, =0.1.0-xyd.22, =0.1.0-xyd.20, =0.1.0-xyd.29 Source cves: CVE-2025-31137 Source advisory: OSV:GHSA-4Q56-CRQP-V477...

@common-stack/frontend-stack-react (>=8.0.1-alpha.0, <=8.4.1-alpha.0), @epic-web/workshop-app (>=5.6.0, <=5.28.0) +4 more potentially affected by CVE-2025-31137 via @remix-run/express (>=2.11.1, <=2.16.2-pre.0)

@remix-run/express NPM version =2.11.1, =8.0.1-alpha.0, =5.6.0, =0.1.49, =2.11.1-pre.0, =0.0.5, =3.0.0, =3.4.6 Source cves: CVE-2025-31137 Source advisory: OSV:GHSA-4Q56-CRQP-V477...

abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +635 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.23.5)

pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0020...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +372 more potentially affected by unknown CVE via aws-cdk-lib (>=2.37.1, <=2.186.0)

aws-cdk-lib NPM version =2.37.1, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =3.1.28-next-4.0 and more Source cves: unknown CVE Source advisory:...

@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +41 more potentially affected by CVE-2025-31125 via vite (>=6.1.0, <=6.1.2)

vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +443 more potentially affected by CVE-2025-31125 via vite (>=5.0.0, <=5.4.15)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-31125 Source advisory: OSV:GHSA-4R4M-QW57-CHR8...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +57 more potentially affected by CVE-2025-31125 via vite (>=6.0.0, <=6.0.11)

vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =5.0.0-alpha.38 and more Sour...

@aicblock/cli (>=1.0.0, <=1.0.1), @angular-devkit/build-angular (>=19.2.1, <=20.0.0-next.3) +41 more potentially affected by CVE-2025-31125 via vite (>=6.2.0, <=6.2.3)

vite NPM version =6.2.0, =1.0.0, =19.2.1, =19.2.1, =0.55.0, =0.21.2-4.1, =1.0.0, =1.0.410, =3.8.0, =5.0.0-alpha.40, =1.0.0-next.1, =2.0.0-next.3 and more Source cves: CVE-2025-31125 Source advisory: OSV:GHSA-4R4M-QW57-CHR8...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +508 more potentially affected by CVE-2025-31125 via vite (>=4.0.0, <=4.5.9)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2025-31125 Source advisory: OSV:GHSA-4R4M-QW57-CHR8...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28224 more potentially affected by CVE-2025-3001 via torch (>=1.0.0, <=2.14.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-3001 Source advisory: SNYK:PYTHON-TORCH-10337828...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28224 more potentially affected by CVE-2025-3000 via torch (>=1.0.0, <=2.14.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-3000 Source advisory: SNYK:PYTHON-TORCH-10337826...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.1.0, <=0.8.0) +1 more potentially affected by unknown CVE via tough (>=0.1.0, <=0.13.0)

tough CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-J8X2-777P-23FC...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.1.0, <=0.8.0) +1 more potentially affected by CVE-2025-2886 via tough (>=0.1.0, <=0.13.0)

tough CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0 Source cves: CVE-2025-2886 Source advisory: OSV:GHSA-V4WR-J3W6-MXQC...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.1.0, <=0.8.0) +1 more potentially affected by CVE-2025-2885 via tough (>=0.1.0, <=0.13.0)

tough CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0 Source cves: CVE-2025-2885 Source advisory: OSV:GHSA-5VMP-M5V2-HX47...

io.micronaut.testresources:micronaut-test-resources-infinispan (>=3.0.0-m5, <=4.0.0-m1), io.quarkus:quarkus-test-infinispan-client (>=2.5.0.cr1, <=3.2.0.final) +54 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-server-rest (>=7.0.0.cr1, <=16.3.0.dev01)

org.infinispan:infinispan-server-rest MAVEN version =7.0.0.cr1, =3.0.0-m5, =2.5.0.cr1, =8.0.0.beta1, =7.0.0.cr1, =15.0.14.final, =9.3.0.cr1, =9.3.0.cr1, =8.0.0.alpha1, =9.0.0.beta1, =9.0.0.beta1, =15.0.0.cr1, =15.0.0.cr1, =12.1.1.final, =12.1.1.final, =16.2.3 and more Source cves: CVE-2024-6875...

@abios/abios-redoc-cli (>=0.12.4, <=0.15.0), @acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94) +53 more potentially affected by CVE-2024-57083 via redoc (>=2.0.0, <=2.2.0)

redoc NPM version =2.0.0, =0.12.4, =2.13.1, =2.13.1, =0.0.1, =1.0.0, =2.6.10, =1.0.0, =1.0.1, =1.18.2, =0.0.2, =0.1.4, =0.2.1, =9.0.0, =0.1.0, =0.5.0 and more Source cves: CVE-2024-57083 Source advisory: OSV:GHSA-9RHG-254W-FH9X...

@excelltechkylc/code-generator (>=1.0.0, <=1.0.1), @excelltechkylc/compiler (>=1.0.0, <=1.0.1) +5 more potentially affected by CVE-2024-38985 via depath (1.0.6)

depath NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on depath and may be impacted: - @excelltechkylc/code-generator =1.0.0, =1.0.0, =1.0.6, =1.0.6, =1.0.0, =1.0.4 - vitis-lowcode-renderer 1.0.0 - vitis-lowcode-simulator-renderer 1.0.0...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=6.1.2), io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=1.0.0) +30 more potentially affected by CVE-2024-11735 via org.keycloak:keycloak-quarkus-server (>=12.0.0, <=26.7.3)

org.keycloak:keycloak-quarkus-server MAVEN version =12.0.0, =2.5.6-24.0, =0.1.0, =8.1, =26.3.0, =26.1.0, =26.4.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.4.0, =26.1.0, =26.6.0, =26.2.0, =26.7.3 and more...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.1.0, <=0.8.0) +1 more potentially affected by CVE-2025-2888 via tough (>=0.1.0, <=0.13.0)

tough CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0 Source cves: CVE-2025-2888 Source advisory: OSV:GHSA-76G3-38JV-WXH4...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.1.0, <=0.8.0) +1 more potentially affected by CVE-2025-2887 via tough (>=0.1.0, <=0.13.0)

tough CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0 Source cves: CVE-2025-2887 Source advisory: OSV:GHSA-Q6R9-R9PW-4CF7...

0wcc9yywcywy (1.0.0), 0wu8yw8by8cw (1.0.0) +2414 more potentially affected by CVE-2024-12905 via tar-fs (>=3.0.2, <=3.0.6)

tar-fs NPM version =3.0.2, =0.0.1, =2.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-12905 Source advisory: OSV:GHSA-PQ67-2WWV-3XJX...

007putra-my-bot (1.1.1), 10bis-shufersal-automation (1.0.0) +4595 more potentially affected by CVE-2024-12905 via tar-fs (>=2.0.0, <=2.1.1)

tar-fs NPM version =2.0.0, =0.2.0, =1.0.0, =1.0.0, =0.107.10, =1.19.19, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2024-12905 Source advisory: OSV:GHSA-PQ67-2WWV-3XJX...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +160 more potentially affected by CVE-2024-12905 via tar-fs (>=1.0.0, <=1.16.3)

tar-fs NPM version =1.0.0, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.4 - @elm-node/npm-scripts 1.0.0 - @hlsrules-test/fc-libreoffice 1.0.0 and more Source cves: CVE-2024-12905 Source advisory: OSV:GHSA-PQ67-2WWV-3XJX...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +63 more potentially affected by CVE-2025-27793 via vega-functions (>=5.5.0, <=5.16.0)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =0.5.0, =1.0.0, =1.0.7, =0.1.4, =1.2.3 and more Source cves: CVE-2025-27793 Source advisory: OSV:GHSA-963H-3V39-3PQF...

@ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9), @ekyc_qoobiss/qbs-ect-cmp (>=1.2.0, <=4.8.0) +64 more potentially affected by CVE-2025-27793 via vega (>=5.0.0, <=5.31.0)

vega NPM version =5.0.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =0.5.0, =1.0.0, =1.0.7, =0.1.4, =0.6.2, =0.1.0, =0.1.6 and more Source cves: CVE-2025-27793 Source advisory: OSV:GHSA-963H-3V39-3PQF...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +62 more potentially affected by CVE-2025-26619 via vega-functions (>=5.5.0, <=5.15.0)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.0, =1.0.7, =0.1.4, =0.6.2, =0.6.4 and more Source cves: CVE-2025-26619 Source advisory: OSV:GHSA-RCW3-WMX7-CPHR...

@ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9), @ekyc_qoobiss/qbs-ect-cmp (>=1.2.0, <=4.8.0) +63 more potentially affected by CVE-2025-26619 via vega (>=5.0.0, <=5.30.0)

vega NPM version =5.0.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.0, =1.0.7, =0.1.4, =0.6.2, =0.1.0, =1.0.1, =1.0.8 and more Source cves: CVE-2025-26619 Source advisory: OSV:GHSA-RCW3-WMX7-CPHR...

addr2line (>=0.1.0, <=0.3.0), ai4ose-tg-rcore-tutorial-ch8-doom (0.1.0-preview.1) +142 more potentially affected by unknown CVE via xmas-elf (>=0.3.0, <=0.9.1)

xmas-elf CARGO version =0.3.0, =0.1.0, =0.1.4, =0.1.0, =0.1.0, =0.1.1, =0.11.0-beta, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.0, =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9CC5-2PQ7-HFJ8...

@directus/api (>=15.0.0, <=24.0.1), @linotype/directus-extension-linotype (>=1.2.2, <=1.3.5) +8 more potentially affected by CVE-2025-30353 via directus (>=9.21.2, <=11.4.1)

directus NPM version =9.21.2, =15.0.0, =1.2.2, =0.1.0, =1.0.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2025-30353 Source advisory: OSV:GHSA-FM3H-P9WM-H74H...

@directus/api (>=15.0.0, <=24.0.1), @linotype/directus-extension-linotype (>=1.2.2, <=1.3.5) +8 more potentially affected by CVE-2025-30352 via directus (>=9.6.0, <=11.4.1)

directus NPM version =9.6.0, =15.0.0, =1.2.2, =0.1.0, =1.0.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2025-30352 Source advisory: OSV:GHSA-7WQ3-JR35-275C...

@citrineos/server (>=1.1.1, <=1.8.1), @directus-forge/extensions (>=0.0.1, <=0.0.6) +37 more potentially affected by CVE-2025-30351 via @directus/types (>=11.0.7, <=12.2.2)

@directus/types NPM version =11.0.7, =1.1.1, =0.0.1, =1.0.0, =18.0.0, =1.0.0, =1.0.0, =11.0.0, =1.2.2, =0.0.3, =0.0.1, =0.0.15 and more Source cves: CVE-2025-30351 Source advisory: OSV:GHSA-56P6-QW3C-FQ2G...

@directus/api (>=18.0.0, <=24.0.1), @linotype/directus-extension-linotype (>=1.2.2, <=1.3.5) +2 more potentially affected by CVE-2025-30351 via directus (>=10.10.0, <=11.4.1)

directus NPM version =10.10.0, =18.0.0, =1.2.2, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-30351 Source advisory: OSV:GHSA-56P6-QW3C-FQ2G...

@directus/api (21.0.1), @linotype/directus-extension-linotype (>=1.2.2, <=1.3.5) +3 more potentially affected by CVE-2025-30351 via @directus/api (>=18.0.0, <=24.0.0)

@directus/api NPM version =18.0.0, =1.2.2, =10.10.0, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-30351 Source advisory: OSV:GHSA-56P6-QW3C-FQ2G...

@directus/api (>=15.0.0, <=24.0.1), @linotype/directus-extension-linotype (>=1.2.2, <=1.3.5) +8 more potentially affected by CVE-2025-30350 via directus (>=9.26.0, <=11.4.1)

directus NPM version =9.26.0, =15.0.0, =1.2.2, =0.1.0, =1.0.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2025-30350 Source advisory: OSV:GHSA-RV78-QQRQ-73M5...

@arc-directus/api (>=12.0.0, <=12.0.6), @deconz-community/directus-extension-ddf-store (0.1.0) +21 more potentially affected by CVE-2025-30350 via @directus/storage-driver-s3 (>=9.22.0, <=12.0.0)

@directus/storage-driver-s3 NPM version =9.22.0, =12.0.0, =9.25.0, =1.2.2, =11.1.0, =10.3.1, =1.0.5, =1.0.10, =0.1.0, =9.22.0, =11.4.1 and more Source cves: CVE-2025-30350 Source advisory: OSV:GHSA-RV78-QQRQ-73M5...

@arc-directus/api (>=12.0.0, <=12.0.6), @deconz-community/directus-extension-ddf-store (0.1.0) +21 more potentially affected by CVE-2025-30225 via @directus/storage-driver-s3 (>=9.22.0, <=12.0.0)

@directus/storage-driver-s3 NPM version =9.22.0, =12.0.0, =9.25.0, =1.2.2, =11.1.0, =10.3.1, =1.0.5, =1.0.10, =0.1.0, =9.22.0, =11.4.1 and more Source cves: CVE-2025-30225 Source advisory: OSV:GHSA-J8XJ-7JFF-46MX...