Vulnersosv - Page 147 of Vulnersosv Vulnerabilities List

vulnersOsv•added 2025/12/26 6:30 p.m.•9 views

@afaizal/apidoc-swagger (>=0.2.2 <=0.3.7), @b1cloud/apidoc-postman (=1.0.0) +93 more potentially affected by CVE-2025-13158 via apidoc-core (>=0.2.2 <=0.8.3)

apidoc-core NPM version =0.2.2, =0.2.2, =1.0.2, =1.0.1, =1.0.5, =4.1.2, =0.0.0, =1.0.2, =4.5.0, =0.17.6, =0.17.9 - abstract-scheduler =0.6.0 and more Source cves: CVE-2025-13158 Source advisory: SNYK:JS-APIDOCCORE-14723211...

9.3CVSS5.8AI score0.00443EPSS

vulnersOsv•added 2025/12/26 6:26 p.m.•9 views

@n8n/ai-workflow-builder (>=1.0.0 <=1.0.1), @n8n/backend-common (>=1.0.0 <=1.0.1) +5 more potentially affected by CVE-2025-68697 via @n8n/config (>=2.0.0-rc.0 <=2.0.0-rc.1)

@n8n/config NPM version =2.0.0-rc.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2025-68697 Source advisory: SNYK:JS-N8NCONFIG-14723278...

7.1CVSS5.8AI score0.00242EPSS

vulnersOsv•added 2025/12/26 5:30 p.m.•7 views

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2025-61914 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2025-61914 Source advisory: OSV:GHSA-58JC-RCG5-95F3...

7.3CVSS5.8AI score0.00217EPSS

vulnersOsv•added 2025/12/26 3:30 p.m.•7 views

3loc (>=0.1.0 <=0.4.0), 3scale (>=0.2.0 <=0.6.2) +657 more potentially affected by CVE-2025-25341 via libxmljs (>=0.10.0 <=1.0.11)

libxmljs NPM version =0.10.0, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =0.1.0, =1.0.1, =1.2.0 and more Source cves: CVE-2025-25341 Source advisory: OSV:GHSA-JV72-59WQ-8RXM...

7.5CVSS5.8AI score0.00388EPSS

vulnersOsv•added 2025/12/26 3:30 p.m.•9 views

3loc (>=0.1.0 <=0.4.0), 3scale (>=0.2.0 <=0.6.2) +657 more potentially affected by CVE-2025-25341 via libxmljs (>=0.10.0 <=1.0.9)

7.5CVSS5.8AI score0.00388EPSS

vulnersOsv•added 2025/12/26 2:43 a.m.•3 views

careful (>=0.1.0 <=0.2.0), dxh-test-package (=1.1.2) +7 more potentially affected by CVE-2025-15095 via httpbin (=0.10.2)

httpbin PYPI version =0.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on httpbin and may be impacted: - careful =0.1.0, =0.1.4, =0.1.6, =0.3.2, =0.0.1, =0.7.1, =2.2.1, =2.7.5 Source cves: CVE-2025-15095 Source advisory: SNYK:PYTHON-HTTPBIN-14723357...

5.1CVSS5.8AI score0.00253EPSS

vulnersOsv•added 2025/12/24 12:0 p.m.•5 views

aperture-shared (=0.1.0), assemblylift-awslambda-host (>=0.2.0 <=0.3.0) +98 more potentially affected by unknown CVE via capnp (>=0.0.1 <=0.23.2)

capnp CARGO version =0.0.1, =0.2.0, =0.3.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.0.1, =0.1.0, =0.0.1, =0.4.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0143...

5.5AI score

vulnersOsv•added 2025/12/23 11:54 p.m.•4 views

@acabai/android (>=1.0.0 <=2.0.6), @acabai/core (>=1.0.0 <=1.0.6) +926 more potentially affected by CVE-2025-68665 via @langchain/core (>=0.0.0 <=0.3.8)

@langchain/core NPM version =0.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.6, =1.0.5, =0.1.2, =0.0.1, =1.2.27, =0.1.7, =3.0.0-beta.65.0, =8.0.0, =10.0.0, =11.0.0 and more Source cves: CVE-2025-68665 Source advisory: SNYK:JS-LANGCHAINCORE-14563113...

vulnersOsv•added 2025/12/23 11:54 p.m.•8 views

0pflow (>=0.1.0-dev.0de2bc6 <=0.1.0-dev.f5622ac), @0xgasless/agent-sdk (>=0.1.1 <=0.1.2) +1359 more potentially affected by CVE-2025-68665 via @langchain/core (>=1.0.1 <=1.1.8-dev-1766775128110)

@langchain/core NPM version =1.0.1, =0.1.0-dev.0de2bc6, =0.1.1, =1.0.0, =0.1.0, =2.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.51.1 and more Source cves: CVE-2025-68665 Source advisory: SNYK:JS-LANGCHAINCORE-14563113...

vulnersOsv•added 2025/12/23 11:4 p.m.•3 views

accessiqlue (=2025.12.21154255), agent-builder (>=0.0.2 <=0.1.7) +346 more potentially affected by CVE-2025-68664 via langchain-core (>=0.4.0.dev0 <=1.2.4)

langchain-core PYPI version =0.4.0.dev0, =0.0.2, =0.1.0, =0.1.0, =0.1.1 - ai-benchmark-analyzer =2025.12.21193050 - ai-claim-essence =2025.12.20202921 - ai-design-insights =2025.12.21145447 - ai-mysql-translator =2025.12.21101721 - ai-reliability-analyzer =2025.12.21171415 - ai-risk-extractor...

vulnersOsv•added 2025/12/23 11:4 p.m.•8 views

a-data-processing (=0.0.1), a-mailx (=0.1.0) +1224 more potentially affected by CVE-2025-68664 via langchain-core (>=0.0.1 <=0.3.8)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 and more Source cves: CVE-2025-68664 Source advisory: SNYK:PYTHON-LANGCHAINCORE-14560681...

vulnersOsv•added 2025/12/23 9:51 p.m.•3 views

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +11444 more potentially affected by CVE-2025-14927 via transformers (>=2.10.0 <=5.9.0)

transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =4.0.2 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14927 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564366...

vulnersOsv•added 2025/12/23 9:51 p.m.•5 views

aana (>=0.2.1 <=0.2.2), abgrouponline (>=1.0.0 <=1.0.2) +594 more potentially affected by CVE-2025-14922 via diffusers (>=0.10.2 <=0.9.0)

diffusers PYPI version =0.10.2, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.0.1, =0.0.3, =0.0.1, =1.8.20, =1.19.0 - ainothard =1.2.0 and more Source cves: CVE-2025-14922 Source advisory: SNYK:PYTHON-DIFFUSERS-14567485...

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +11444 more potentially affected by CVE-2025-14928 via transformers (>=2.10.0 <=5.9.0)

transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =4.0.2 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14928 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564364...

10CVSS7.2AI score0.0083EPSS

a2a-smol-adapter (=0.1.0), agent-lifecycle-toolkit (>=0.2.1 <=0.10.1) +104 more potentially affected by CVE-2025-14931 via smolagents (>=0.1.3 <=1.9.2)

smolagents PYPI version =0.1.3, =0.2.1, =0.1.0, =0.1.5, =0.1.6, =0.0.1, =0.3.4, =1.0.0, =1.0.1 and more Source cves: CVE-2025-14931 Source advisory: SNYK:PYTHON-SMOLAGENTS-14567305...

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +11444 more potentially affected by CVE-2025-14921 via transformers (>=2.10.0 <=5.9.0)

transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =4.0.2 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14921 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564365...

vulnersOsv•added 2025/12/23 9:50 p.m.•5 views

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +11444 more potentially affected by CVE-2025-14924 via transformers (>=2.10.0 <=5.9.0)

transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =4.0.2 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14924 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564363...

vulnersOsv•added 2025/12/23 9:50 p.m.•3 views

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +3856 more potentially affected by CVE-2025-14920 via transformers (>=2.10.0 <=5.0.0rc0)

transformers PYPI version =2.10.0, =0.10.11, =0.5.5, =0.0.4.80, =0.2.1, =0.1.0, =0.1.1, =1.3.8, =1.5.3 - acace-coherence-checker =0.1.0 - acace-compression-engine =0.1.0 - acace-semantic-analyzer =0.1.0 - acace-sentiment-analyzer =0.1.0 and more Source cves: CVE-2025-14920 Source advisory:...

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +11444 more potentially affected by CVE-2025-14929 via transformers (>=2.10.0 <=5.9.0)

transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =4.0.2 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14929 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564275...

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +11444 more potentially affected by CVE-2025-14930 via transformers (>=2.10.0 <=5.9.0)

transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =4.0.2 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14930 Source advisory: SNYK:PYTHON-TRANSFORMERS-14563374...

vulnersOsv•added 2025/12/23 9:50 p.m.•5 views

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +11444 more potentially affected by CVE-2025-14926 via transformers (>=2.10.0 <=5.9.0)

transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =4.0.2 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14926 Source advisory: SNYK:PYTHON-TRANSFORMERS-14560695...

vulnersOsv•added 2025/12/23 9:41 p.m.•4 views

angorapy (>=0.9.1 <=0.10.8), apple-hdr-heic (=0.1.0) +65 more potentially affected by CVE-2025-12840 via openexr (=3.4.12)

openexr PYPI version =3.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on openexr and may be impacted: - angorapy =0.9.1, =0.5.0, =0.2.5, =0.1.0rc1, =0.0.1, =0.1.0, =0.2.1, =0.0.4, =0.1.7, =0.0.1, =0.1.1, =0.0.0, =0.0.4 and more Source cves:...

7.8CVSS7AI score0.00158EPSS

vulnersOsv•added 2025/12/23 9:41 p.m.•7 views

angorapy (>=0.9.1 <=0.10.8), apple-hdr-heic (=0.1.0) +65 more potentially affected by CVE-2025-12839 via openexr (=3.4.12)

7.8CVSS7AI score0.00158EPSS

vulnersOsv•added 2025/12/23 9:41 p.m.•4 views

angorapy (>=0.9.1 <=0.10.8), apple-hdr-heic (=0.1.0) +65 more potentially affected by CVE-2025-12495 via openexr (=3.4.12)

7.8CVSS7AI score0.00158EPSS

vulnersOsv•added 2025/12/23 9:30 p.m.•6 views

agentengine (>=0.1.5 <=0.1.8), deepmost (=0.5.2) +13 more potentially affected by CVE-2025-14931 via smolagents (>=0.1.3 <=1.23.0)

smolagents PYPI version =0.1.3, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.16.0, =2.4.0, =0.0.1.dev0, =0.0.1, =0.3.0, =0.3.7 Source cves: CVE-2025-14931 Source advisory: OSV:GHSA-Q9R5-6HRR-9PH7...

10CVSS7.7AI score0.0083EPSS

vulnersOsv•added 2025/12/23 9:15 p.m.•5 views

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +2034 more potentially affected by CVE-2025-14928 via transformers (>=2.10.0 <=4.57.0)

transformers PYPI version =2.10.0, =0.0.4.80, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.1, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.2.11 and more Source cves: CVE-2025-14928 Source advisory: OSV:PYSEC-2025-216...

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +2063 more potentially affected by CVE-2025-14930 via transformers (>=2.10.0 <=4.57.1)

vulnersOsv•added 2025/12/23 9:15 p.m.•5 views

01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +3846 more potentially affected by CVE-2025-14929 via transformers (>=2.10.0 <=4.9.2)

vulnersOsv•added 2025/12/23 9:15 p.m.•3 views

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +2034 more potentially affected by CVE-2025-14926 via transformers (>=2.10.0 <=4.57.0)

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1951 more potentially affected by CVE-2025-14921 via transformers (>=2.10.0 <=4.54.1)

vulnersOsv•added 2025/12/23 9:15 p.m.•3 views

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1951 more potentially affected by CVE-2025-14920 via transformers (>=2.10.0 <=4.54.1)

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1952 more potentially affected by CVE-2025-14924 via transformers (>=2.10.0 <=4.55.0)

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +2034 more potentially affected by CVE-2025-14927 via transformers (>=2.10.0 <=4.57.0)

vulnersOsv•added 2025/12/23 9:5 p.m.•2 views

3-04-2025-ttm (=0.1.0), a2 (>=0.10.5 <=0.10.13) +3194 more potentially affected by CVE-2025-14925 via accelerate (>=0.10.0 <=1.9.0)

accelerate PYPI version =0.10.0, =0.10.5, =0.2.1, =0.1.1.dev1, =0.0.1, =0.1.0, =1.1.0, =1.3.8, =0.1.1, =0.2.1, =0.1.2, =0.0.2, =0.0.8, =1.9.5.1 and more Source cves: CVE-2025-14925 Source advisory: SNYK:PYTHON-ACCELERATE-14566490...

vulnersOsv•added 2025/12/23 8:8 p.m.•6 views

@alvedder/deepagents (>=1.8.1-alvedder.0 <=1.8.3-alvedder.0), @axiom-lattice/agent-eval (>=2.1.9 <=2.1.70) +38 more potentially affected by CVE-2025-68665 via langchain (>=1.0.2 <=1.2.27)

langchain NPM version =1.0.2, =1.8.1-alvedder.0, =2.1.9, =2.1.0, =1.0.11, =2.1.0, =1.0.1, =1.0.0, =1.0.0, =0.1.3, =3.66.0, =3.66.0, =1.0.0, =0.1.0, =5.7.2, =5.9.1 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...

vulnersOsv•added 2025/12/23 8:8 p.m.•6 views

10minions-engine (>=0.0.1 <=0.0.4), @0xd541ecb3/byte-babe (>=1.0.0 <=1.2.1) +717 more potentially affected by CVE-2025-68665 via langchain (>=0.0.100 <=0.3.35)

langchain NPM version =0.0.100, =0.0.1, =1.0.0, =0.0.1, =0.0.6, =0.1.4, =3.0.0-beta.65.0, =0.0.11, =0.0.0, =0.0.2-alpha, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =0.2.0 and more Source cves: CVE-2025-68665 Source advisory: OSV:GHSA-R399-636X-V7F6...

vulnersOsv•added 2025/12/23 8:8 p.m.•8 views

@acabai/android (>=1.0.0 <=2.0.6), @acabai/core (>=1.0.0 <=1.0.6) +926 more potentially affected by CVE-2025-68665 via @langchain/core (>=0.0.0 <=0.3.8)

vulnersOsv•added 2025/12/23 8:8 p.m.•10 views

0pflow (>=0.1.0-dev.0de2bc6 <=0.1.0-dev.f5622ac), @0xgasless/agent-sdk (>=0.1.1 <=0.1.2) +1359 more potentially affected by CVE-2025-68665 via @langchain/core (>=1.0.1 <=1.1.8-dev-1766775128110)

vulnersOsv•added 2025/12/23 6:46 p.m.•3 views

accessiqlue (=2025.12.21154255), agent-builder (>=0.0.2 <=0.1.7) +335 more potentially affected by CVE-2025-68664 via langchain-core (>=1.0.0 <=1.2.4)

langchain-core PYPI version =1.0.0, =0.0.2, =0.1.0, =0.1.0, =0.1.1 - ai-benchmark-analyzer =2025.12.21193050 - ai-claim-essence =2025.12.20202921 - ai-design-insights =2025.12.21145447 - ai-mysql-translator =2025.12.21101721 - ai-reliability-analyzer =2025.12.21171415 - ai-risk-extractor...

vulnersOsv•added 2025/12/23 6:46 p.m.•5 views

a-data-processing (=0.0.1), a-mailx (=0.1.0) +1224 more potentially affected by CVE-2025-68664 via langchain-core (>=0.0.1 <=0.3.8)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 and more Source cves: CVE-2025-68664 Source advisory: OSV:GHSA-C67J-W6G6-Q2CM...

vulnersOsv•added 2025/12/23 6:30 p.m.•3 views

eq3btsmart (=0.0.0), hass-auth-synology (>=0.0.0 <=0.4.28) +5 more potentially affected by CVE-2025-65713 via homeassistant (>=0.83.3 <=2024.12.5)

homeassistant PYPI version =0.83.3, =0.0.0, =2021.4.0, =0.4.11, =1.2.0, =0.3.0, =0.13.85 Source cves: CVE-2025-65713 Source advisory: OSV:GHSA-PP3G-XMM4-5CW9...

4CVSS5.4AI score0.00362EPSS

vulnersOsv•added 2025/12/23 2:22 p.m.•8 views

ba.sake:hepek-components_2.12 (>=0.7.0 <=0.8.0), ba.sake:hepek-components_2.13 (>=0.7.0 <=0.9.0) +327 more potentially affected by CVE-2026-0858 via net.sourceforge.plantuml:plantuml (>=1.2017.12 <=1.2025.7)

net.sourceforge.plantuml:plantuml MAVEN version =1.2017.12, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.0.2, =0.0.1, =0.0.59, =0.0.46, =0.0.46, =1.4.0, =2.0.0-M4 and more Source cves: CVE-2026-0858 Source advisory: SNYK:JAVA-NETSOURCEFORGEPLANTUML-14552230...

6.1CVSS5.4AI score0.00303EPSS

vulnersOsv•added 2025/12/22 9:36 p.m.•1 views

@fedify/botkit (=0.3.4), @fedify/botkit-sqlite (=0.3.4) potentially affected by CVE-2025-68475 via @fedify/fedify (=1.9.12)

@fedify/fedify NPM version =1.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.3.4 - @fedify/botkit-sqlite =0.3.4 Source cves: CVE-2025-68475 Source advisory: SNYK:JS-FEDIFYFEDIFY-14552161...

7.5CVSS5.7AI score0.00481EPSS

vulnersOsv•added 2025/12/22 9:36 p.m.•6 views

@de-otio/trellis (>=0.4.0 <=0.7.1), @fedify/amqp (>=0.1.0 <=0.2.0-dev.12) +6 more potentially affected by CVE-2025-68475 via @fedify/fedify (>=1.10.0 <=1.5.0)

@fedify/fedify NPM version =1.10.0, =0.4.0, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.2.0, =0.0.1, =0.1.0, =1.1.20 Source cves: CVE-2025-68475 Source advisory: SNYK:JS-FEDIFYFEDIFY-14552161...

vulnersOsv•added 2025/12/22 9:36 p.m.•6 views

@de-otio/trellis (>=0.4.0 <=0.7.1), @fedify/amqp (>=0.1.0 <=0.2.0-dev.12) +6 more potentially affected by CVE-2025-68475 via @fedify/fedify (>=0.10.2 <=1.5.0)

@fedify/fedify NPM version =0.10.2, =0.4.0, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =1.1.20 Source cves: CVE-2025-68475 Source advisory: OSV:GHSA-RCHF-XWX2-HM93...

vulnersOsv•added 2025/12/22 9:36 p.m.•2 views

@fedify/botkit (=0.3.4), @fedify/botkit-sqlite (=0.3.4) potentially affected by CVE-2025-68475 via @fedify/fedify (=1.9.12)

7.5CVSS5.7AI score0.00481EPSS

vulnersOsv•added 2025/12/22 9:36 p.m.•8 views

@fedify/botkit (>=0.3.0-dev.125 <=0.3.0-dev.131) potentially affected by CVE-2025-68475 via @fedify/fedify (=1.8.1-dev.1262)

@fedify/fedify NPM version =1.8.1-dev.1262 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.3.0-dev.125, =0.3.0-dev.131 Source cves: CVE-2025-68475 Source advisory: OSV:GHSA-RCHF-XWX2-HM93...

vulnersOsv•added 2025/12/22 9:36 p.m.•11 views

@fedify/botkit (>=0.3.0-dev.125 <=0.3.0-dev.131) potentially affected by CVE-2025-68475 via @fedify/fedify (=1.8.1-dev.1262)

vulnersOsv•added 2025/12/22 8:20 p.m.•5 views

ai-utilities (>=1.0.0 <=1.0.0b3), auto-pr (=1.2.0) +23 more potentially affected by CVE-2025-68480 via marshmallow (>=4.0.0 <=4.1.1)

marshmallow PYPI version =4.0.0, =1.0.0, =3.0.0, =2.3.1, =3.31.0, =1.8.0, =2.0.3, =0.0.1, =1.115.1, =0.0.1, =1.4.5, =6.0.0, =6.25.7 - nvidia-tao-core =6.0.0 and more Source cves: CVE-2025-68480 Source advisory: OSV:GHSA-428G-F7CQ-PGP5...

5.3CVSS6AI score0.00252EPSS