@amcharts/amcharts4 (4.9.21), @anarmawala/vite-plugin-icons (>=0.1.0, <=0.1.1) +58 more potentially affected by CVE-2025-25977 via canvg (>=3.0.0, <=3.0.10)

canvg NPM version =3.0.0, =0.1.0, =1.13.6, =0.2.2, =1.31.0, =1.19.0, =1.0.0, =8.5.1-beta, =0.1.0, =0.1.2, =10.0.1, =10.0.1, =2.0.4, =0.1.4, =0.1.5 and more Source cves: CVE-2025-25977 Source advisory: OSV:GHSA-V2MW-5MCH-W8C5...

@ts3d-hoops/web-viewer (>=2026.5.0, <=2026.6.0), @ts3d-hoops/web-viewer-components (>=2026.5.0, <=2026.6.0) +5 more potentially affected by CVE-2025-25977 via canvg (4.0.1)

canvg NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on canvg and may be impacted: - @ts3d-hoops/web-viewer =2026.5.0, =2026.5.0, =2026.5.0, =2026.5.0, =0.1.3, =1.22.9-beta.0, =1.0.9, =3.0.9 Source cves: CVE-2025-25977 Source advisory:...

akd (>=0.7.3, <=0.7.7), akd_client (>=0.7.6, <=0.7.7) +41 more potentially affected by CVE-2025-53605 via protobuf (>=3.0.0, <=3.7.1)

protobuf CARGO version =3.0.0, =0.7.3, =0.7.6, =0.2.5, =0.5.12, =0.18.1, =0.7.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.8.0, =0.9.3 and more Source cves: CVE-2025-53605 Source advisory: OSV:GHSA-2GH3-RMM4-6RQ5...

a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5498 more potentially affected by CVE-2025-4432 via ring (>=0.13.5, <=0.17.9)

ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.2, =0.2.3 and more Source cves: CVE-2025-4432 Source advisory: OSV:GHSA-4P46-PWFR-66X6...

@acronis-platform/ui-component-library (1.33.0), @elasticview/plugin-sdk (>=1.0.0, <=1.0.18) +28 more potentially affected by CVE-2025-27597 via vue-i18n (>=10.0.0, <=10.0.5)

vue-i18n NPM version =10.0.0, =1.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.13.0 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

@acegroup/cli-templates-vue3-element-admin (1.0.0), @actindo/core-ui (>=0.0.12, <=0.0.75) +405 more potentially affected by CVE-2025-27597 via vue-i18n (>=9.1.0, <=9.14.2)

vue-i18n NPM version =9.1.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.23, =0.0.6-alpha-2.5, =0.1.87, =0.0.1-beta.1, =1.6.4, =1.6.6 and more Source cves:...

@dv.net/docs-vitepress-openapi (>=1.0.7, <=1.0.8), @emahuni/directus.distilled-app-internals (>=1.1.2-app-13.7.1, <=13.7.1-1.1.0) +33 more potentially affected by CVE-2025-27597 via vue-i18n (>=11.0.0, <=11.1.1)

vue-i18n NPM version =11.0.0, =1.0.7, =1.1.2-app-13.7.1, =0.0.1, =0.0.1, =0.0.1, =0.2.550, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.15.0 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

@_lan/uni-libs (0.0.3), @aosweb/osui (>=0.0.23, <=0.0.25) +308 more potentially affected by CVE-2025-27597 via @intlify/core-base (>=9.1.0, <=9.1.10)

@intlify/core-base NPM version =9.1.0, =0.0.23, =1.0.0, =0.1.87, =0.3.0, =0.0.0, =0.12.0, =1.6.0, =1.1.0, =0.0.1, =3.0.0-3060520221121001, =3.0.0-4020320240708001, =3.0.0-alpha-5030120260930001 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

@_lan/uni-libs (0.0.3), @aosweb/osui (>=0.0.23, <=0.0.25) +312 more potentially affected by CVE-2025-27597 via @intlify/message-resolver (>=9.1.0, <=9.1.10)

@intlify/message-resolver NPM version =9.1.0, =0.0.23, =1.0.0, =0.1.87, =0.3.0, =0.0.0, =0.12.0, =1.6.0, =1.1.0, =0.0.1, =3.0.0-3060520221121001, =3.0.0-4020320240708001, =3.0.0-alpha-5030120260930001 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

petite-vue-i18n (9.2.0-alpha.7), vue-i18n (9.2.0-alpha.7) potentially affected by CVE-2025-27597 via @intlify/vue-i18n-core (9.2.0-alpha.7)

@intlify/vue-i18n-core NPM version 9.2.0-alpha.7 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/vue-i18n-core and may be impacted: - petite-vue-i18n 9.2.0-alpha.7 - vue-i18n 9.2.0-alpha.7 Source cves: CVE-2025-27597 Source advisory:...

-fides-amor-et-lux (1.0.0), 0xppl-solana-portfolio (1.0.0) +9353 more potentially affected by CVE-2025-27152 via axios (>=1.0.0, <=1.8.1)

axios NPM version =1.0.0, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =2.1.0, =3.0.0-beta.10, =0.2.1, =0.5.0, =0.6.2 and more Source cves: CVE-2025-27152 Source advisory: OSV:GHSA-JR5F-V2JV-69X6...

a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5498 more potentially affected by CVE-2025-4432 via ring (>=0.13.5, <=0.17.9)

ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.2, =0.2.3 and more Source cves: CVE-2025-4432 Source advisory: OSV:RUSTSEC-2025-0009...

adbdgl-adapter (>=1.0.0, <=3.0.1), alignn (>=2021.9.29, <=2025.4.1) +96 more potentially affected by unknown CVE via dgl (>=0.5.3, <=2.2.1)

dgl PYPI version =0.5.3, =1.0.0, =2021.9.29, =2022.10.23, =0.0.4, =1.0.0a2, =0.1.0, =1.0.21, =0.1.1, =1.0.0b3, =0.0.1, =0.2.0, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DGL-9295806...

a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5254 more potentially affected by unknown CVE via ring (>=0.13.5, <=0.16.20)

ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.2, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0010...

com.antonyudin.wildfly.security:ay-securityrealm-ejb (1.0), org.jboss.as:hal-testsuite-basic (0.0.6) +18 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (>=3.0.0.beta17, <=34.0.0.beta6)

org.wildfly.core:wildfly-elytron-integration MAVEN version =3.0.0.beta17, =5.0.0.alpha6, =3.0.0.beta17, =5.0.0.alpha6, =3.0.0.beta17, =13.0.0.beta1, =5.0.0.alpha6, =3.0.0.beta22, =40.0.0.beta1, =28.0.0.beta1, =29.0.0.alpha1, =28.0.0.beta1, =28.0.0.beta1, =41.0.0.final and more Source cves:...

openpgp-ca (>=0.12.0-alpha.1, <=0.12.0), openpgp-ca-lib (>=0.12.0-alpha.1, <=0.13.0) +2 more potentially affected by unknown CVE via openpgp-card-sequoia (>=0.0.5, <=0.1.5)

openpgp-card-sequoia CARGO version =0.0.5, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.1.0, =0.0.1, =0.0.15 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0011...

actix-elastic (>=1.0.0, <=1.0.7), actix-nats (>=0.4.0, <=0.4.1) +220 more potentially affected by unknown CVE via backoff (>=0.1.6, <=0.4.0)

backoff CARGO version =0.1.6, =1.0.0, =0.4.0, =0.2.0, =0.1.0, =0.2.0, =0.5.1, =0.2.0-beta.0, =0.6.0, =0.2.0, =0.5.0 - adventure-rusoto-ecs 0.4.0 - adventure-rusoto-sns 0.4.0 - adventure-rusoto-sqs 0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0012...

0xble (>=14.0.0, <=21.9.1), 100xchat (>=1.1.5, <=1.3.5) +4467 more potentially affected by CVE-2025-9910 via jsondiffpatch (>=0.0.11, <=0.6.2)

jsondiffpatch NPM version =0.0.11, =14.0.0, =1.1.5, =1.0.0, =1.0.0, =1.0.4, =0.10.6, =0.1.6, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.1, =0.1.0-alpha.1, =0.1.0, =1.1.0, =0.3.1, =1.2.4 and more Source cves: CVE-2025-9910 Source advisory: SNYK:JS-JSONDIFFPATCH-10369031...

@assistant-ui/react-ai-sdk (>=0.5.2, <=0.5.4), @avmkit/pipeline (1.0.3) +86 more potentially affected by CVE-2024-53384 via tsup (>=8.0.0, <=8.3.0)

tsup NPM version =8.0.0, =0.5.2, =1.0.1, =1.0.0, =0.0.2, =0.1.5, =1.0.0, =0.0.15, =0.0.0, =1.0.10, =1.4.2, =2.0.0, =2.0.2 and more Source cves: CVE-2024-53384 Source advisory: OSV:GHSA-3MV9-4H5G-VHG3...

anima-pull2load (>=1.0.1, <=1.0.3), freighter (0.0.1) potentially affected by CVE-2024-51091 via seajs (>=2.0.0, <=2.2.1)

seajs NPM version =2.0.0, =1.0.1, =1.0.3 - freighter 0.0.1 Source cves: CVE-2024-51091 Source advisory: OSV:GHSA-PFR4-4397-3HG8...

adversarial-attacks-white-black-box (0.1.7), americodraws (>=0.1.0, <=0.1.5) +109 more potentially affected by CVE-2025-25302 via rembg (>=2.0.57, <=2.0.85)

rembg PYPI version =2.0.57, =0.1.0, =0.0.64, =0.3.3, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.4 and more Source cves: CVE-2025-25302 Source advisory: SNYK:PYTHON-REMBG-9296365...

adversarial-attacks-white-black-box (0.1.7), americodraws (>=0.1.0, <=0.1.5) +109 more potentially affected by CVE-2025-25301 via rembg (>=2.0.57, <=2.0.85)

rembg PYPI version =2.0.57, =0.1.0, =0.0.64, =0.3.3, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.4 and more Source cves: CVE-2025-25301 Source advisory: SNYK:PYTHON-REMBG-9296372...

10xanswers (>=1.0.0, <=1.1.18), 24social-ui (>=1.0.0, <=1.0.1) +8746 more potentially affected by CVE-2024-53382 via prismjs (>=1.2.0, <=1.29.0)

prismjs NPM version =1.2.0, =1.0.0, =1.0.0, =0.1.13, =0.3.0, =0.3.0, =0.5.0, =1.0.0, =0.1.0, =0.1.2, =1.0.0, =1.0.23, =1.0.1, =1.0.0, =1.0.3, =1.0.0, =2.0.0-beta.0 and more Source cves: CVE-2024-53382 Source advisory: OSV:GHSA-X7HR-W5R2-H6WG...

bigstarter (>=0.1.0, <=0.1.1), grasp-mcp-server (>=3.11.0, <=3.21.0) +2 more potentially affected by unknown CVE via kuzu (>=0.5.0, <=0.7.1)

kuzu NPM version =0.5.0, =0.1.0, =3.11.0, =0.0.4, =1.0.3, =1.1.4 Source cves: unknown CVE Source advisory: SNYK:JS-KUZU-12179283...

bigstarter (>=0.1.0, <=0.1.1), grasp-mcp-server (>=3.11.0, <=3.21.0) +2 more potentially affected by unknown CVE via kuzu (>=0.5.0, <=0.7.1)

kuzu NPM version =0.5.0, =0.1.0, =3.11.0, =0.0.4, =1.0.3, =1.1.4 Source cves: unknown CVE Source advisory: SNYK:JS-KUZU-11502184...

@lume/element (>=0.1.2, <=0.5.6), @lume/variable (>=0.1.1, <=0.6.1) +9 more potentially affected by CVE-2025-27108 via dom-expressions (>=0.6.0, <=0.36.18)

dom-expressions NPM version =0.6.0, =0.1.2, =0.1.1, =0.20.0, =0.4.2, =0.2.2, =0.2.0, =0.2.1, =0.3.0, =0.4.5, =0.5.1 - webfps 1.4.0 Source cves: CVE-2025-27108 Source advisory: OSV:GHSA-HW62-58PR-7WC5...

@agent-embed/js (>=0.0.1, <=0.0.45), @altbot/js (>=1.0.0, <=1.0.1) +268 more potentially affected by CVE-2025-27109 via solid-js (>=1.0.0, <=1.9.3)

solid-js NPM version =1.0.0, =0.0.1, =1.0.0, =1.1.7, =0.0.1, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =0.1.26, =0.0.1, =0.0.1-3.1-dev, =0.0.17 - @codyg/datatables 0.0.1 - @converseform.com/js 0.2.31 and more Source cves: CVE-2025-27109 Source advisory: OSV:GHSA-3QXH-P7JC-5XH6...

ai.djl.timeseries:timeseries (>=0.19.0, <=0.38.0), ai.mindconnect:mc-agent-admin-ui-app (>=0.0.2, <=0.8.4) +665 more potentially affected by CVE-2025-1686 via io.pebbletemplates:pebble (>=2.5.0, <=4.1.2)

io.pebbletemplates:pebble MAVEN version =2.5.0, =0.19.0, =0.0.2, =0.0.2, =0.0.2, =0.6.0, =0.0.2, =0.0.3, =0.0.2, =0.0.2, =0.0.2, =0.8.4 - ai.mindconnect:mc-agent-runtime-feature-core 0.8.4 - ai.mindconnect:mc-agent-runtime-feature-file-upload 0.8.4 - ai.mindconnect:mc-agent-runtime-feature-skills...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.20), @silgi/better-auth (>=0.0.5, <=0.0.12) +1 more potentially affected by CVE-2025-71403 via better-auth (>=1.0.0, <=1.1.20-beta.5)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.5, =1.1.368, =1.1.416 Source cves: CVE-2025-71403 Source advisory: OSV:GHSA-VP58-J275-797X...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.19), @silgi/better-auth (>=0.0.5, <=0.0.12) +1 more potentially affected by CVE-2025-27143 via better-auth (>=1.0.0, <=1.1.19-beta.3)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.5, =1.1.368, =1.1.416 Source cves: CVE-2025-27143 Source advisory: OSV:GHSA-HJPM-7MRM-26W8...

blit-server (>=0.20.0, <=0.28.3), dahua-camera-rtsp (>=0.3.0, <=0.3.1) +8 more potentially affected by unknown CVE via openh264-sys2 (>=0.1.17, <=0.7.1)

openh264-sys2 CARGO version =0.1.17, =0.20.0, =0.3.0, =0.1.0, =0.1.9, =0.1.33, =0.2.0, =0.1.0, =0.4.0, =0.5.5 Source cves: unknown CVE Source advisory: OSV:GHSA-5PMW-9J92-3C4C...

blit-server (>=0.20.0, <=0.28.3), dahua-camera-rtsp (>=0.3.0, <=0.3.1) +8 more potentially affected by CVE-2025-27091 via openh264-sys2 (>=0.1.17, <=0.7.1)

openh264-sys2 CARGO version =0.1.17, =0.20.0, =0.3.0, =0.1.0, =0.1.9, =0.1.33, =0.2.0, =0.1.0, =0.4.0, =0.5.5 Source cves: CVE-2025-27091 Source advisory: OSV:RUSTSEC-2025-0008...

cymrust (>=0.3.0, <=0.3.4), honeypot_blacklist (0.1.0) +4 more potentially affected by unknown CVE via resolve (>=0.1.2, <=0.2.0)

resolve CARGO version =0.1.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0013...

@mythpe/js-helpers (>=4.0.45, <=4.0.99), @ng-zi/extensions (>=18.0.20, <=18.0.24) +4 more potentially affected by CVE-2025-25299 via ckeditor5-premium-features (>=42.0.2, <=43.3.1)

ckeditor5-premium-features NPM version =42.0.2, =4.0.45, =18.0.20, =0.0.8, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...

@authorium/ckeditor5-build-multi-root (>=41.3.1, <=41.4.2), @eagerworks/ckeditor5-build-multi-root (>=41.4.2-auth.1, <=41.4.2) +8 more potentially affected by CVE-2025-25299 via @ckeditor/ckeditor5-real-time-collaboration (>=41.3.0-alpha.2, <=44.2.0-alpha.16)

@ckeditor/ckeditor5-real-time-collaboration NPM version =41.3.0-alpha.2, =41.3.1, =41.4.2-auth.1, =1.0.1, =4.0.45, =18.0.20, =0.0.8, =41.3.0-alpha.2, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...

directus (>=11.0.0, <=11.1.1) potentially affected by CVE-2025-27089 via @directus/api (>=22.0.0, <=23.0.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.1.1 Source cves: CVE-2025-27089 Source advisory: OSV:GHSA-99VM-5V2H-H6R6...

@directus/api (>=20.0.0-rc.0, <=23.0.0) potentially affected by CVE-2025-27089 via directus (>=11.0.0, <=11.1.1)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.0.0 Source cves: CVE-2025-27089 Source advisory: OSV:GHSA-99VM-5V2H-H6R6...

xorc-notifications (0.1.0) potentially affected by CVE-2025-53604 via web-push (0.4.2)

web-push CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on web-push and may be impacted: - xorc-notifications 0.1.0 Source cves: CVE-2025-53604 Source advisory: OSV:RUSTSEC-2025-0015...

@alell/azure-pipelines-task-jsonpath-plus (1.1.3), @appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11) +263 more potentially affected by CVE-2025-1302 via jsonpath-plus (>=10.0.0, <=10.2.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.4 and more Source cves: CVE-2025-1302 Source advisory: OSV:GHSA-HW8R-X6GR-5GJP...

com.databricks:automatedml_2.11 (0.7.2), com.github.aishfenton:vegas-flink_2.11 (0.3.4) +11 more potentially affected by CVE-2025-25304 via org.webjars.bower:vega (>=1.5.4, <=3.0.0-rc4)

org.webjars.bower:vega MAVEN version =1.5.4, =0.3.6, =0.3.6, =0.3.6, =1.1.0, =2.1.0, =1.0.10, =2.0.1 Source cves: CVE-2025-25304 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-8730845...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +10129 more potentially affected by CVE-2025-25290 via @octokit/request (>=2.1.1, <=8.1.5)

@octokit/request NPM version =2.1.1, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25290 Source advisory: OSV:GHSA-RMVR-2PP2-XJ38...

@javamodules/indexer (>=1.0.4, <=1.0.5), @resultify/rh-cli (>=1.0.0, <=1.3.2) potentially affected by CVE-2025-25290 via @octokit/request (>=9.0.1, <=9.1.3)

@octokit/request NPM version =9.0.1, =1.0.4, =1.0.0, =1.3.2 Source cves: CVE-2025-25290 Source advisory: OSV:GHSA-RMVR-2PP2-XJ38...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +10110 more potentially affected by CVE-2025-25289 via @octokit/request-error (>=1.2.1, <=5.1.0)

@octokit/request-error NPM version =1.2.1, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25289 Source advisory: OSV:GHSA-XX4V-PRFH-6CGC...

@zendeskgarden/scripts (>=2.1.0, <=2.4.3) potentially affected by CVE-2025-25289 via @octokit/request-error (>=6.1.1, <=6.1.4)

@octokit/request-error NPM version =6.1.1, =2.1.0, =2.4.3 Source cves: CVE-2025-25289 Source advisory: OSV:GHSA-XX4V-PRFH-6CGC...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +9499 more potentially affected by CVE-2025-25288 via @octokit/plugin-paginate-rest (>=1.1.2, <=8.0.0)

@octokit/plugin-paginate-rest NPM version =1.1.2, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25288 Source advisory: OSV:GHSA-H5C3-5R3R-RR8Q...

@activeboxes/piece-github (0.4.1), @activepieces/piece-github (>=0.3.11, <=0.4.1) +153 more potentially affected by CVE-2025-25288 via @octokit/plugin-paginate-rest (>=10.0.0, <=11.4.0)

@octokit/plugin-paginate-rest NPM version =10.0.0, =0.3.11, =0.1.5-alpha.0, =1.0.1, =0.2.4, =1.0.0, =3.0.0-next.5, =1.0.0, =0.5.1, =5.0.7, =0.2.0, =0.21.0, =0.25.7 and more Source cves: CVE-2025-25288 Source advisory: OSV:GHSA-H5C3-5R3R-RR8Q...

@javamodules/indexer (>=1.0.4, <=1.0.5) potentially affected by CVE-2025-25285 via @octokit/endpoint (10.0.0)

@octokit/endpoint NPM version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @octokit/endpoint and may be impacted: - @javamodules/indexer =1.0.4, =1.0.5 Source cves: CVE-2025-25285 Source advisory: OSV:GHSA-X4C5-C7RF-JJGV...

@ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9), @ekyc_qoobiss/qbs-ect-cmp (>=1.2.0, <=4.8.0) +61 more potentially affected by CVE-2025-25304 via vega (>=5.0.0, <=5.25.0)

vega NPM version =5.0.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.1.4, =0.6.2, =0.1.0, =1.0.1, =0.11.4, =0.11.8 and more Source cves: CVE-2025-25304 Source advisory: OSV:GHSA-MP7W-MHCV-673J...

fyrox-animation (0.2.0), fyrox-graph (0.1.0) +2 more potentially affected by unknown CVE via fyrox-core (0.28.1)

fyrox-core CARGO version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on fyrox-core and may be impacted: - fyrox-animation 0.2.0 - fyrox-graph 0.1.0 - fyrox-resource 0.12.0 - fyrox-sound 0.35.0 Source cves: unknown CVE Source advisory:...

@3t-transform/threeteeui (>=1.5.1, <=1.12.1), @8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4) +629 more potentially affected by CVE-2025-26791 via dompurify (>=3.0.0, <=3.2.3)

dompurify NPM version =3.0.0, =1.5.1, =0.18.0-beta.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =6.4.10, =5.1.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =0.1.1, =0.1.4-alpha.3 and more Source cves: CVE-2025-26791 Source advisory: OSV:GHSA-VHXF-7VQR-MRJG...