-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0.3.20-beta.11 (0.3.19) +24551 more potentially affected by CVE-2025-27789 via @babel/runtime (>=7.0.0, <=7.26.9)

@babel/runtime NPM version =7.0.0, =1.0.1, =1.0.5, =0.1.0, =0.2.0, =0.1.0, =1.3.4, =0.1.0, =1.0.6, =1.1.3 and more Source cves: CVE-2025-27789 Source advisory: OSV:GHSA-968P-4WVH-CQC8...

3nit-utils (>=0.24.0, <=1.0.2), 6ix (0.0.0-canary.0) +564 more potentially affected by CVE-2025-27789 via @babel/runtime-corejs2 (>=7.0.0, <=7.22.11)

@babel/runtime-corejs2 NPM version =7.0.0, =0.24.0, =0.0.0-canary.0, =0.0.1, =0.4.0-next.8, =7.0.2, =0.0.1-canary.49, =1.0.0, =0.4.0, =2.0.0-5, =2.1.0, =1.0.22, =2.0.0-5, =2.0.0-6 and more Source cves: CVE-2025-27789 Source advisory: OSV:GHSA-968P-4WVH-CQC8...

4paradigm_robot_service (>=0.0.1, <=0.0.16), @22g/tb-register (1.2.2) +2324 more potentially affected by CVE-2025-27789 via @babel/helpers (>=7.0.0-beta.4, <=7.26.9)

@babel/helpers NPM version =7.0.0-beta.4, =0.0.1, =0.0.2, =0.3.10, =0.3.6, =0.3.0, =0.3.6, =0.5.10, =0.5.12, =0.3.7, =0.7.18 and more Source cves: CVE-2025-27789 Source advisory: OSV:GHSA-968P-4WVH-CQC8...

@mockoon/cli (>=9.0.0, <=9.1.0), @mockoon/serverless (>=9.0.0, <=9.1.0) potentially affected by CVE-2025-59049 via @mockoon/commons-server (>=9.0.0, <=9.1.0)

@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =9.1.0 Source cves: CVE-2025-59049 Source advisory: OSV:GHSA-W7F9-WQC4-3WXR...

@amcharts/amcharts4 (4.9.21), @anarmawala/vite-plugin-icons (>=0.1.0, <=0.1.1) +58 more potentially affected by CVE-2025-25977 via canvg (>=3.0.0, <=3.0.10)

canvg NPM version =3.0.0, =0.1.0, =1.13.6, =0.2.2, =1.31.0, =1.19.0, =1.0.0, =8.5.1-beta, =0.1.0, =0.1.2, =10.0.1, =10.0.1, =2.0.4, =0.1.4, =0.1.5 and more Source cves: CVE-2025-25977 Source advisory: OSV:GHSA-V2MW-5MCH-W8C5...

@ts3d-hoops/web-viewer (>=2026.5.0, <=2026.6.0), @ts3d-hoops/web-viewer-components (>=2026.5.0, <=2026.6.0) +5 more potentially affected by CVE-2025-25977 via canvg (4.0.1)

canvg NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on canvg and may be impacted: - @ts3d-hoops/web-viewer =2026.5.0, =2026.5.0, =2026.5.0, =2026.5.0, =0.1.3, =1.22.9-beta.0, =1.0.9, =3.0.9 Source cves: CVE-2025-25977 Source advisory:...

akd (>=0.7.3, <=0.7.7), akd_client (>=0.7.6, <=0.7.7) +42 more potentially affected by CVE-2025-53605 via protobuf (>=3.0.0, <=3.7.1)

protobuf CARGO version =3.0.0, =0.7.3, =0.7.6, =0.2.5, =0.5.12, =0.18.1, =0.7.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.8.0, =0.9.3 and more Source cves: CVE-2025-53605 Source advisory: OSV:GHSA-2GH3-RMM4-6RQ5...

a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5509 more potentially affected by CVE-2025-4432 via ring (>=0.13.5, <=0.17.9)

ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.1 and more Source cves: CVE-2025-4432 Source advisory: OSV:GHSA-4P46-PWFR-66X6...

@acronis-platform/ui-component-library (1.33.0), @aesoper/i18n (>=1.0.56, <=1.0.57) +29 more potentially affected by CVE-2025-27597 via vue-i18n (>=10.0.0, <=10.0.5)

vue-i18n NPM version =10.0.0, =1.0.56, =1.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.13.0 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

petite-vue-i18n (9.2.0-alpha.7), vue-i18n (9.2.0-alpha.7) potentially affected by CVE-2025-27597 via @intlify/vue-i18n-core (9.2.0-alpha.7)

@intlify/vue-i18n-core NPM version 9.2.0-alpha.7 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/vue-i18n-core and may be impacted: - petite-vue-i18n 9.2.0-alpha.7 - vue-i18n 9.2.0-alpha.7 Source cves: CVE-2025-27597 Source advisory:...

@acegroup/cli-templates-vue3-element-admin (1.0.0), @actindo/core-ui (>=0.0.12, <=0.0.75) +405 more potentially affected by CVE-2025-27597 via vue-i18n (>=9.1.0, <=9.14.2)

vue-i18n NPM version =9.1.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =0.1.87, =0.0.1-beta.1, =1.6.4, =1.6.6 and more Source cves:...

@dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8), @emahuni/directus.distilled-app-internals (>=1.1.2-app-13.7.1, <=13.7.1-1.1.0) +33 more potentially affected by CVE-2025-27597 via vue-i18n (>=11.0.0, <=11.1.1)

vue-i18n NPM version =11.0.0, =1.0.7, =1.1.2-app-13.7.1, =0.0.1, =0.0.1, =0.0.1, =0.2.550, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.15.0 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

@_lan/uni-libs (0.0.3), @aosweb/osui (>=0.0.23, <=0.0.25) +307 more potentially affected by CVE-2025-27597 via @intlify/core-base (>=9.1.0, <=9.1.10)

@intlify/core-base NPM version =9.1.0, =0.0.23, =1.0.0, =0.1.87, =0.3.0, =0.0.0, =0.12.0, =1.6.0, =1.1.0, =0.0.1, =3.0.0-3060520221121001, =3.0.0-4020320240708001, =3.0.0-alpha-5020520260829001 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

@_lan/uni-libs (0.0.3), @aosweb/osui (>=0.0.23, <=0.0.25) +311 more potentially affected by CVE-2025-27597 via @intlify/message-resolver (>=9.1.0, <=9.1.10)

@intlify/message-resolver NPM version =9.1.0, =0.0.23, =1.0.0, =0.1.87, =0.3.0, =0.0.0, =0.12.0, =1.6.0, =1.1.0, =0.0.1, =3.0.0-3060520221121001, =3.0.0-4020320240708001, =3.0.0-alpha-5020520260829001 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

-fides-amor-et-lux (1.0.0), 0xppl-solana-portfolio (1.0.0) +9342 more potentially affected by CVE-2025-27152 via axios (>=1.0.0, <=1.8.1)

axios NPM version =1.0.0, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =2.1.0, =3.0.0-beta.10, =0.2.1, =0.5.0, =0.6.2 and more Source cves: CVE-2025-27152 Source advisory: OSV:GHSA-JR5F-V2JV-69X6...

a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5509 more potentially affected by CVE-2025-4432 via ring (>=0.13.5, <=0.17.9)

ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.1 and more Source cves: CVE-2025-4432 Source advisory: OSV:RUSTSEC-2025-0009...

adbdgl-adapter (>=1.0.0, <=3.0.1), alignn (>=2021.9.29, <=2025.4.1) +94 more potentially affected by unknown CVE via dgl (>=0.5.3, <=2.2.1)

dgl PYPI version =0.5.3, =1.0.0, =2021.9.29, =2022.10.23, =0.0.4, =1.0.0a2, =0.1.0, =1.0.21, =0.1.1, =1.0.0b3, =0.0.1, =0.2.0, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DGL-9295806...

a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5271 more potentially affected by unknown CVE via ring (>=0.13.5, <=0.16.20)

ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.2, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0010...

com.antonyudin.wildfly.security:ay-securityrealm-ejb (1.0), org.jboss.as:hal-testsuite-basic (0.0.6) +18 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (>=3.0.0.beta17, <=34.0.0.beta4)

org.wildfly.core:wildfly-elytron-integration MAVEN version =3.0.0.beta17, =5.0.0.alpha6, =3.0.0.beta17, =5.0.0.alpha6, =3.0.0.beta17, =13.0.0.beta1, =5.0.0.alpha6, =3.0.0.beta22, =40.0.0.beta1, =28.0.0.beta1, =29.0.0.alpha1, =28.0.0.beta1, =28.0.0.beta1, =41.0.0.final and more Source cves:...

actix-elastic (>=1.0.0, <=1.0.7), actix-nats (>=0.4.0, <=0.4.1) +221 more potentially affected by unknown CVE via backoff (>=0.1.6, <=0.4.0)

backoff CARGO version =0.1.6, =1.0.0, =0.4.0, =0.2.0, =0.1.0, =0.2.0, =0.5.1, =0.2.0-beta.0, =0.6.0, =0.2.0, =0.5.0 - adventure-rusoto-ecs 0.4.0 - adventure-rusoto-sns 0.4.0 - adventure-rusoto-sqs 0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0012...

openpgp-ca (>=0.12.0-alpha.1, <=0.12.0), openpgp-ca-lib (>=0.12.0-alpha.1, <=0.13.0) +2 more potentially affected by unknown CVE via openpgp-card-sequoia (>=0.0.5, <=0.1.5)

openpgp-card-sequoia CARGO version =0.0.5, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.1.0, =0.0.1, =0.0.15 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0011...

0xble (>=14.0.0, <=21.9.1), 100xchat (>=1.1.5, <=1.3.5) +4469 more potentially affected by CVE-2025-9910 via jsondiffpatch (>=0.0.11, <=0.6.2)

jsondiffpatch NPM version =0.0.11, =14.0.0, =1.1.5, =1.0.0, =1.0.0, =1.0.4, =0.10.6, =0.1.6, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.1, =0.1.0-alpha.1, =0.1.0, =0.3.1, =0.5.10, =1.2.4 and more Source cves: CVE-2025-9910 Source advisory: SNYK:JS-JSONDIFFPATCH-1036903...

@assistant-ui/react-ai-sdk (>=0.5.2, <=0.5.4), @avmkit/pipeline (1.0.3) +95 more potentially affected by CVE-2024-53384 via tsup (>=8.0.0, <=8.3.0)

tsup NPM version =8.0.0, =0.5.2, =1.0.1, =1.0.0, =3.0.0-canary.0.0c9beb2ae, =4.0.0-canary.0.0c9beb2ae, =0.1.0-canary.0.0c9beb2ae, =0.0.2, =0.1.5, =0.1.0-canary.0.0c9beb2ae, =1.0.0, =0.0.15, =0.0.1-canary.0.0c9beb2ae, =0.0.1 and more Source cves: CVE-2024-53384 Source advisory:...

anima-pull2load (>=1.0.1, <=1.0.3), freighter (0.0.1) potentially affected by CVE-2024-51091 via seajs (>=2.0.0, <=2.2.1)

seajs NPM version =2.0.0, =1.0.1, =1.0.3 - freighter 0.0.1 Source cves: CVE-2024-51091 Source advisory: OSV:GHSA-PFR4-4397-3HG8...

adversarial-attacks-white-black-box (0.1.7), americodraws (>=0.1.0, <=0.1.5) +105 more potentially affected by CVE-2025-25302 via rembg (>=2.0.57, <=2.0.83)

rembg PYPI version =2.0.57, =0.1.0, =0.0.64, =0.3.3, =0.1.0, =0.4.0, =0.1.0, =0.1.4 - cinewiz 2.0.0 and more Source cves: CVE-2025-25302 Source advisory: SNYK:PYTHON-REMBG-9296365...

adversarial-attacks-white-black-box (0.1.7), americodraws (>=0.1.0, <=0.1.5) +105 more potentially affected by CVE-2025-25301 via rembg (>=2.0.57, <=2.0.83)

rembg PYPI version =2.0.57, =0.1.0, =0.0.64, =0.3.3, =0.1.0, =0.4.0, =0.1.0, =0.1.4 - cinewiz 2.0.0 and more Source cves: CVE-2025-25301 Source advisory: SNYK:PYTHON-REMBG-9296372...

10xanswers (>=1.0.0, <=1.1.16), 24social-ui (>=1.0.0, <=1.0.1) +8703 more potentially affected by CVE-2024-53382 via prismjs (>=1.2.0, <=1.29.0)

prismjs NPM version =1.2.0, =1.0.0, =1.0.0, =0.1.13, =0.3.0, =0.3.0, =0.5.0, =1.0.0, =0.1.0, =0.1.2, =1.0.0, =1.0.23, =1.0.1, =1.0.0, =1.0.3, =1.0.0, =2.0.0-beta.0 and more Source cves: CVE-2024-53382 Source advisory: OSV:GHSA-X7HR-W5R2-H6WG...

bigstarter (>=0.1.0, <=0.1.1), grasp-mcp-server (>=3.11.0, <=3.21.0) +2 more potentially affected by unknown CVE via kuzu (>=0.5.0, <=0.7.1)

kuzu NPM version =0.5.0, =0.1.0, =3.11.0, =0.0.4, =1.0.3, =1.1.4 Source cves: unknown CVE Source advisory: SNYK:JS-KUZU-12179283...

bigstarter (>=0.1.0, <=0.1.1), grasp-mcp-server (>=3.11.0, <=3.21.0) +2 more potentially affected by unknown CVE via kuzu (>=0.5.0, <=0.7.1)

kuzu NPM version =0.5.0, =0.1.0, =3.11.0, =0.0.4, =1.0.3, =1.1.4 Source cves: unknown CVE Source advisory: SNYK:JS-KUZU-11502184...

@lume/element (>=0.1.2, <=0.5.6), @lume/variable (>=0.1.1, <=0.6.1) +9 more potentially affected by CVE-2025-27108 via dom-expressions (>=0.6.0, <=0.36.18)

dom-expressions NPM version =0.6.0, =0.1.2, =0.1.1, =0.20.0, =0.4.2, =0.2.2, =0.2.0, =0.2.1, =0.3.0, =0.4.5, =0.5.1 - webfps 1.4.0 Source cves: CVE-2025-27108 Source advisory: OSV:GHSA-HW62-58PR-7WC5...

@agent-embed/js (>=0.0.1, <=0.0.45), @altbot/js (>=1.0.0, <=1.0.1) +261 more potentially affected by CVE-2025-27109 via solid-js (>=1.0.0, <=1.9.3)

solid-js NPM version =1.0.0, =0.0.1, =1.0.0, =1.1.7, =0.0.1, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =0.1.26, =0.0.1, =0.0.1-3.1-dev, =0.0.17 - @codyg/datatables 0.0.1 - @converseform.com/js 0.2.31 and more Source cves: CVE-2025-27109 Source advisory: OSV:GHSA-3QXH-P7JC-5XH6...

ai.djl.timeseries:timeseries (>=0.19.0, <=0.36.0), ai.mindconnect:mc-agent-admin-ui-app (>=0.0.2, <=0.4.0) +642 more potentially affected by CVE-2025-1686 via io.pebbletemplates:pebble (>=2.5.0, <=4.1.2)

io.pebbletemplates:pebble MAVEN version =2.5.0, =0.19.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.3, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.3.0, =0.1.5, =0.3.0, =0.1.0, =2.5.0, =2.5.2 and more Source cves: CVE-2025-1686 Source advisory: SNYK:JAVA-IOPEBBLETEMPLATES-8745594...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.20), @silgi/better-auth (>=0.0.5, <=0.0.12) +1 more potentially affected by CVE-2025-71403 via better-auth (>=1.0.0, <=1.1.20-beta.5)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.5, =1.1.368, =1.1.416 Source cves: CVE-2025-71403 Source advisory: OSV:GHSA-VP58-J275-797X...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.19), @silgi/better-auth (>=0.0.5, <=0.0.12) +1 more potentially affected by CVE-2025-27143 via better-auth (>=1.0.0, <=1.1.19-beta.3)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.5, =1.1.368, =1.1.416 Source cves: CVE-2025-27143 Source advisory: OSV:GHSA-HJPM-7MRM-26W8...

blit-server (>=0.20.0, <=0.28.3), dahua-camera-rtsp (>=0.3.0, <=0.3.1) +8 more potentially affected by unknown CVE via openh264-sys2 (>=0.1.17, <=0.7.1)

openh264-sys2 CARGO version =0.1.17, =0.20.0, =0.3.0, =0.1.0, =0.1.9, =0.1.33, =0.2.0, =0.1.0, =0.4.0, =0.5.5 Source cves: unknown CVE Source advisory: OSV:GHSA-5PMW-9J92-3C4C...

blit-server (>=0.20.0, <=0.28.3), dahua-camera-rtsp (>=0.3.0, <=0.3.1) +8 more potentially affected by CVE-2025-27091 via openh264-sys2 (>=0.1.17, <=0.7.1)

openh264-sys2 CARGO version =0.1.17, =0.20.0, =0.3.0, =0.1.0, =0.1.9, =0.1.33, =0.2.0, =0.1.0, =0.4.0, =0.5.5 Source cves: CVE-2025-27091 Source advisory: OSV:RUSTSEC-2025-0008...

cymrust (>=0.3.0, <=0.3.4), honeypot_blacklist (0.1.0) +4 more potentially affected by unknown CVE via resolve (>=0.1.2, <=0.2.0)

resolve CARGO version =0.1.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0013...

@authorium/ckeditor5-build-multi-root (>=41.3.1, <=41.4.2), @eagerworks/ckeditor5-build-multi-root (>=41.4.2-auth.1, <=41.4.2) +8 more potentially affected by CVE-2025-25299 via @ckeditor/ckeditor5-real-time-collaboration (>=41.3.0-alpha.2, <=44.2.0-alpha.16)

@ckeditor/ckeditor5-real-time-collaboration NPM version =41.3.0-alpha.2, =41.3.1, =41.4.2-auth.1, =1.0.1, =4.0.45, =18.0.20, =0.0.8, =41.3.0-alpha.2, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...

@mythpe/js-helpers (>=4.0.45, <=4.0.99), @ng-zi/extensions (>=18.0.20, <=18.0.24) +4 more potentially affected by CVE-2025-25299 via ckeditor5-premium-features (>=42.0.2, <=43.3.1)

ckeditor5-premium-features NPM version =42.0.2, =4.0.45, =18.0.20, =0.0.8, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...

@directus/api (>=20.0.0-rc.0, <=23.0.0) potentially affected by CVE-2025-27089 via directus (>=11.0.0, <=11.1.1)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.0.0 Source cves: CVE-2025-27089 Source advisory: OSV:GHSA-99VM-5V2H-H6R6...

directus (>=11.0.0, <=11.1.1) potentially affected by CVE-2025-27089 via @directus/api (>=22.0.0, <=23.0.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.1.1 Source cves: CVE-2025-27089 Source advisory: OSV:GHSA-99VM-5V2H-H6R6...

xorc-notifications (0.1.0) potentially affected by CVE-2025-53604 via web-push (0.4.2)

web-push CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on web-push and may be impacted: - xorc-notifications 0.1.0 Source cves: CVE-2025-53604 Source advisory: OSV:RUSTSEC-2025-0015...

@alell/azure-pipelines-task-jsonpath-plus (1.1.3), @appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11) +260 more potentially affected by CVE-2025-1302 via jsonpath-plus (>=10.0.0, <=10.2.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.4 and more Source cves: CVE-2025-1302 Source advisory: OSV:GHSA-HW8R-X6GR-5GJP...

com.databricks:automatedml_2.11 (0.7.2), com.github.aishfenton:vegas-flink_2.11 (0.3.4) +11 more potentially affected by CVE-2025-25304 via org.webjars.bower:vega (>=1.5.4, <=3.0.0-rc4)

org.webjars.bower:vega MAVEN version =1.5.4, =0.3.6, =0.3.6, =0.3.6, =1.1.0, =2.1.0, =1.0.10, =2.0.1 Source cves: CVE-2025-25304 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-8730845...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +10125 more potentially affected by CVE-2025-25290 via @octokit/request (>=2.1.1, <=8.1.5)

@octokit/request NPM version =2.1.1, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25290 Source advisory: OSV:GHSA-RMVR-2PP2-XJ38...

@javamodules/indexer (>=1.0.4, <=1.0.5), @resultify/rh-cli (>=1.0.0, <=1.3.2) potentially affected by CVE-2025-25290 via @octokit/request (>=9.0.1, <=9.1.3)

@octokit/request NPM version =9.0.1, =1.0.4, =1.0.0, =1.3.2 Source cves: CVE-2025-25290 Source advisory: OSV:GHSA-RMVR-2PP2-XJ38...

@zendeskgarden/scripts (>=2.1.0, <=2.4.3) potentially affected by CVE-2025-25289 via @octokit/request-error (>=6.1.1, <=6.1.4)

@octokit/request-error NPM version =6.1.1, =2.1.0, =2.4.3 Source cves: CVE-2025-25289 Source advisory: OSV:GHSA-XX4V-PRFH-6CGC...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +10106 more potentially affected by CVE-2025-25289 via @octokit/request-error (>=1.2.1, <=5.1.0)

@octokit/request-error NPM version =1.2.1, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25289 Source advisory: OSV:GHSA-XX4V-PRFH-6CGC...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +9490 more potentially affected by CVE-2025-25288 via @octokit/plugin-paginate-rest (>=1.1.2, <=8.0.0)

@octokit/plugin-paginate-rest NPM version =1.1.2, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25288 Source advisory: OSV:GHSA-H5C3-5R3R-RR8Q...

@activeboxes/piece-github (0.4.1), @activepieces/piece-github (>=0.3.11, <=0.4.1) +157 more potentially affected by CVE-2025-25288 via @octokit/plugin-paginate-rest (>=10.0.0, <=11.4.0)

@octokit/plugin-paginate-rest NPM version =10.0.0, =0.3.11, =0.1.5-alpha.0, =1.0.1, =0.2.4, =1.0.0, =3.0.0-next.5, =1.0.0, =0.5.1, =5.0.7, =0.2.0, =0.21.0, =0.25.7 and more Source cves: CVE-2025-25288 Source advisory: OSV:GHSA-H5C3-5R3R-RR8Q...