org.elasticsearch.test:framework (>=9.1.0 <=9.1.10), org.elasticsearch.test:yaml-rest-runner (>=9.1.0 <=9.1.10) +1 more potentially affected by CVE-2025-37727 via org.elasticsearch:elasticsearch (>=9.1.0 <=9.1.4)

org.elasticsearch:elasticsearch MAVEN version =9.1.0, =9.1.0, =9.1.0, =9.1.2, =9.1.4 Source cves: CVE-2025-37727 Source advisory: OSV:GHSA-56R7-H6MW-RCFV...

net.sc8s:elastic-testkit_2.13 (>=0.102.0 <=0.110.0), org.elasticsearch.test:framework (>=9.0.0 <=9.0.7) +3 more potentially affected by CVE-2025-37727 via org.elasticsearch:elasticsearch (>=9.0.0-beta1 <=9.0.7)

org.elasticsearch:elasticsearch MAVEN version =9.0.0-beta1, =0.102.0, =9.0.0, =9.0.0, =1.7.es904.0, =9.0.0, =9.0.3 Source cves: CVE-2025-37727 Source advisory: OSV:GHSA-56R7-H6MW-RCFV...

net.sc8s:elastic-testkit_2.13 (>=0.102.0 <=0.110.0), org.elasticsearch.test:framework (>=9.0.0 <=9.0.7) +3 more potentially affected by CVE-2025-37727 via org.elasticsearch:elasticsearch (>=9.0.0-beta1 <=9.0.7)

org.elasticsearch:elasticsearch MAVEN version =9.0.0-beta1, =0.102.0, =9.0.0, =9.0.0, =1.7.es904.0, =9.0.0, =9.0.3 Source cves: CVE-2025-37727 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-13517507...

com.farcsal.dql:query-es (=0.8.0), com.github.ben-manes.caffeine:simulator (>=3.0.4 <=3.0.5) +14 more potentially affected by CVE-2025-37727 via org.elasticsearch:elasticsearch (>=8.0.0-alpha1 <=8.18.7)

org.elasticsearch:elasticsearch MAVEN version =8.0.0-alpha1, =3.0.4, =1.2.0, =0.83.0, =7.23.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.10.0, =1.6.es801.0, =1.7.es8184.0 and more Source cves: CVE-2025-37727 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-13517507...

org.elasticsearch.test:framework (>=9.1.0 <=9.1.10), org.elasticsearch.test:yaml-rest-runner (>=9.1.0 <=9.1.10) +1 more potentially affected by CVE-2025-37727 via org.elasticsearch:elasticsearch (>=9.1.0 <=9.1.4)

org.elasticsearch:elasticsearch MAVEN version =9.1.0, =9.1.0, =9.1.0, =9.1.2, =9.1.4 Source cves: CVE-2025-37727 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-13517507...

ai.ylyue:yue-library-data-es (>=j8.2.2.0 <=j11.2.2.0), ca.bc.gov.tno:elastic (>=0.0.1-alpha <=0.0.5-alpha) +106 more potentially affected by CVE-2025-37727 via org.elasticsearch.plugin:reindex-client (>=7.0.0-alpha1 <=7.9.3)

org.elasticsearch.plugin:reindex-client MAVEN version =7.0.0-alpha1, =j8.2.2.0, =0.0.1-alpha, =2.1.0.M8, =2.1.0.M8, =1.4.1, =1.4.0, =2.0.5, =7.0.0, =1.1.0, =5.0.3.7.4, =5.0.3.6, =0.0.1, =1.0.2, =1.0.3 - com.cherokeesoft.fias:Fias =1.0.1 and more Source cves: CVE-2025-37727 Source advisory:...

org.elasticsearch.test:framework (>=8.19.0 <=8.19.16), org.elasticsearch.test:yaml-rest-runner (>=8.19.0 <=8.19.16) +1 more potentially affected by CVE-2025-37727 via org.elasticsearch:elasticsearch (>=8.19.0 <=8.19.4)

org.elasticsearch:elasticsearch MAVEN version =8.19.0, =8.19.0, =8.19.0, =8.19.2, =8.19.4 Source cves: CVE-2025-37727 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-13517507...

argus-notification-msteams (=0.5.1), argus-server (>=1.0.0 <=1.22.1) +97 more potentially affected by CVE-2025-61783 via social-auth-app-django (>=5.0.0 <=5.4.3)

social-auth-app-django PYPI version =5.0.0, =1.0.0, =1.0.0, =4.14.0, =0.4.3, =0.8.7, =0.0.2a17, =1.0.0, =1.0.0, =2026.6.0, =1.2.0, =4.8.0, =0.0.2, =0.0.16 and more Source cves: CVE-2025-61783 Source advisory: SNYK:PYTHON-SOCIALAUTHAPPDJANGO-13512562...

argus-notification-msteams (=0.5.1), argus-server (>=1.0.0 <=1.22.1) +113 more potentially affected by CVE-2025-61783 via social-auth-app-django (>=0.1.0 <=5.4.3)

social-auth-app-django PYPI version =0.1.0, =1.0.0, =1.0.0, =4.14.0, =0.15.0, =0.3.23, =0.8.7, =0.0.2a17, =1.0.0, =2.1.0, =1.0.1, =1.0.0, =1.0.8 and more Source cves: CVE-2025-61783 Source advisory: OSV:GHSA-WV4W-6QV2-QQFG...

@better-auth/cli (>=0.0.1 <=1.3.25), @bgord/bun (>=0.18.0 <=0.29.10) +21 more potentially affected by CVE-2025-61928 via better-auth (>=0.4.10-beta.10 <=1.3.25)

better-auth NPM version =0.4.10-beta.10, =0.0.1, =0.18.0, =0.5.11, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =1.0.0, =0.0.5, =0.0.5, =1.1.368, =1.2.13, =1.2.106 and more Source cves: CVE-2025-61928 Source advisory: OSV:GHSA-99H5-PJCV-GR6V...

@better-auth/cli (>=1.2.0 <=1.3.25), @bgord/bun (>=0.18.0 <=0.29.10) +17 more potentially affected by CVE-2025-61928 via better-auth (>=1.2.0-beta.18 <=1.3.25)

better-auth NPM version =1.2.0-beta.18, =1.2.0, =0.18.0, =0.5.11, =0.0.0, =0.1.174, =1.0.2, =1.0.5, =1.0.0, =0.0.5, =1.2.13, =3.7.1, =1.0.12, =1.1.0 and more Source cves: CVE-2025-61928 Source advisory: SNYK:JS-BETTERAUTH-13537497...

io.github.regychang:flinkify-flink-core (>=0.2.1 <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-sqlserver-cdc (=3.2.0)

org.apache.flink:flink-connector-sqlserver-cdc MAVEN version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-connector-sqlserver-cdc and may be impacted: - io.github.regychang:flinkify-flink-core =0.2.1, =0.2.2 Source cves...

io.github.regychang:flinkify-flink-core (>=0.2.1 <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-oracle-cdc (=3.2.0)

org.apache.flink:flink-connector-oracle-cdc MAVEN version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-connector-oracle-cdc and may be impacted: - io.github.regychang:flinkify-flink-core =0.2.1, =0.2.2 Source cves:...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (=1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1 <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0 <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: OSV:GHSA-WQM3-W3P6-XJGM...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n (>=0.1.0 <=0.227.0) +8 more potentially affected by unknown CVE via n8n-nodes-base (>=0.1.0 <=0.9.0)

n8n-nodes-base NPM version =0.1.0, =0.216.1, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-13524401...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by unknown CVE via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: unknown CVE Source advisory: SNYK:JS-N8N-13524400...

@imagina/n8n-nodes-iwhatsapp (>=0.1.0 <=0.2.7), @mosano-tech/n8n (=0.3.0) +19 more potentially affected by unknown CVE via n8n-nodes-base (>=0.101.0 <=0.9.0)

n8n-nodes-base NPM version =0.101.0, =0.1.0, =0.216.1, =0.1.0, =0.1.0, =0.18.0, =0.1.0, =1.0.0, =0.1.0, =0.2.14, =0.2.16 and more Source cves: unknown CVE Source advisory: OSV:GHSA-365G-VJW2-GRX8...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by unknown CVE via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-365G-VJW2-GRX8...

copilot-studio-datainsight (>=0.0.1 <=0.0.6), flowise (>=1.6.1 <=2.2.8) potentially affected by CVE-2025-61913 via flowise-components (>=1.3.4 <=2.2.8)

flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =2.2.8 Source cves: CVE-2025-61913 Source advisory: OSV:GHSA-JV9M-VF54-CHJJ...

io.github.regychang:flinkify-flink-core (>=0.2.1 <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-oracle-cdc (=3.2.0)

org.apache.flink:flink-connector-oracle-cdc MAVEN version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-connector-oracle-cdc and may be impacted: - io.github.regychang:flinkify-flink-core =0.2.1, =0.2.2 Source cves:...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (=1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1 <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0 <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-13539423...

io.github.regychang:flinkify-flink-core (>=0.2.1 <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-sqlserver-cdc (=3.2.0)

org.apache.flink:flink-connector-sqlserver-cdc MAVEN version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-connector-sqlserver-cdc and may be impacted: - io.github.regychang:flinkify-flink-core =0.2.1, =0.2.2 Source cves...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (=24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (=24.3.0.0) +8 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=24.0.0 <=24.0.5)

org.keycloak:keycloak-model-storage-services MAVEN version =24.0.0, =2.5.6-24.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.5 Source cves: CVE-2025-9162 Source advisory: OSV:GHSA-8HXP-QMPH-W5GQ...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0 <=5.5.1), net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1 <=9.1) +27 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=26.0.0 <=26.5.6)

org.keycloak:keycloak-model-storage-services MAVEN version =26.0.0, =4.1.0-26.0, =8.1, =26.3.0, =26.1.0, =26.4.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.4.0, =26.1.0, =26.2.0, =26.2.0, =26.5.6 - org.keycloak.testframework:keycloak-test-framework-oauth-nimbus-poc...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1 <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0 <=26.3.3) +21 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=26.3.0 <=26.3.3)

org.keycloak:keycloak-model-storage-services MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.3 and more Source cves: CVE-2025-...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0 <=4.0.5-25.0), org.keycloak:keycloak-dependencies-server-all (>=25.0.0 <=25.0.6) +6 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=25.0.0 <=25.0.6)

org.keycloak:keycloak-model-storage-services MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.6 Source cves: CVE-2025-9162 Source advisory: OSV:GHSA-8HXP-QMPH-W5GQ...

@iflow-mcp/theycallmeholla-schema-org-mcp (=0.1.0), @wonderwhy-er/desktop-commander (>=0.2.29-alpha.3 <=0.2.29-alpha.4) +2 more potentially affected by CVE-2025-11491 via @wonderwhy-er/desktop-commander (>=0.1.39 <=0.2.42)

@wonderwhy-er/desktop-commander NPM version =0.1.39, =0.2.29-alpha.3, =1.0.0, =1.0.1 - familiar-mcp =0.1.0 Source cves: CVE-2025-11491 Source advisory: SNYK:JS-WONDERWHYERDESKTOPCOMMANDER-13535096...

@iflow-mcp/theycallmeholla-schema-org-mcp (=0.1.0), @wonderwhy-er/desktop-commander (>=0.2.29-alpha.3 <=0.2.29-alpha.4) +2 more potentially affected by CVE-2025-11490 via @wonderwhy-er/desktop-commander (>=0.1.39 <=0.2.42)

@wonderwhy-er/desktop-commander NPM version =0.1.39, =0.2.29-alpha.3, =1.0.0, =1.0.1 - familiar-mcp =0.1.0 Source cves: CVE-2025-11490 Source advisory: SNYK:JS-WONDERWHYERDESKTOPCOMMANDER-13535095...

@iflow-mcp/theycallmeholla-schema-org-mcp (=0.1.0), @wonderwhy-er/desktop-commander (>=0.2.29-alpha.3 <=0.2.29-alpha.4) +2 more potentially affected by CVE-2025-11489 via @wonderwhy-er/desktop-commander (>=0.1.39 <=0.2.42)

@wonderwhy-er/desktop-commander NPM version =0.1.39, =0.2.29-alpha.3, =1.0.0, =1.0.1 - familiar-mcp =0.1.0 Source cves: CVE-2025-11489 Source advisory: SNYK:JS-WONDERWHYERDESKTOPCOMMANDER-13535094...

deno_cli (>=0.18.0-preview4 <=0.23.0), deno_cli_snapshots (>=0.0.3 <=0.19.0) +2 more potentially affected by CVE-2025-61787 via deno (>=0.15.0 <=0.6.0)

deno CARGO version =0.15.0, =0.18.0-preview4, =0.0.3, =0.0.1, =0.23.0 Source cves: CVE-2025-61787 Source advisory: OSV:GHSA-M2GF-X3F6-8HQ3...

deno_cli (>=0.18.0-preview4 <=0.23.0), deno_cli_snapshots (>=0.0.3 <=0.19.0) +2 more potentially affected by CVE-2025-61786 via deno (>=0.15.0 <=0.6.0)

deno CARGO version =0.15.0, =0.18.0-preview4, =0.0.3, =0.0.1, =0.23.0 Source cves: CVE-2025-61786 Source advisory: OSV:GHSA-QQ26-84MH-26J9...

raiden (>=0.100.2 <=0.100.3rc1) potentially affected by CVE-2025-61672 via matrix-synapse (=0.33.9)

matrix-synapse PYPI version =0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2, =0.100.3rc1 Source cves: CVE-2025-61672 Source advisory: OSV:GHSA-FH66-FCV5-JJFR...

forc (>=0.1.3 <=0.33.0), forc-client (>=0.20.1 <=0.33.0) +30 more potentially affected by unknown CVE via fuel-vm (>=0.11.1 <=0.4.1)

fuel-vm CARGO version =0.11.1, =0.1.3, =0.20.1, =0.14.0, =0.14.0, =0.1.8, =0.14.0, =0.14.0, =0.30.1, =0.14.0, =0.9.1, =0.9.1, =0.9.1, =0.11.2, =0.1.2, =0.9.1, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2PGJ-5CV2-6XXW...

deno_cli (>=0.18.0-preview4 <=0.23.0), deno_cli_snapshots (>=0.0.3 <=0.19.0) +2 more potentially affected by CVE-2025-61785 via deno (>=0.15.0 <=0.6.0)

deno CARGO version =0.15.0, =0.18.0-preview4, =0.0.3, =0.0.1, =0.23.0 Source cves: CVE-2025-61785 Source advisory: OSV:GHSA-VG2R-RMGP-CGQJ...

jllama-py (>=1.0.0 <=1.1.14) potentially affected by CVE-2025-61784 via llamafactory (=0.9.3)

llamafactory PYPI version =0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on llamafactory and may be impacted: - jllama-py =1.0.0, =1.1.14 Source cves: CVE-2025-61784 Source advisory: SNYK:PYTHON-LLAMAFACTORY-13450903...

jllama-py (>=1.0.0 <=1.1.14) potentially affected by CVE-2025-61784 via llamafactory (=0.9.3)

llamafactory PYPI version =0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on llamafactory and may be impacted: - jllama-py =1.0.0, =1.1.14 Source cves: CVE-2025-61784 Source advisory: OSV:GHSA-527M-2XHR-J27G...

agentics-py (>=0.0.0 <=0.0.5), agilerl (>=2.3.5 <=2.4.1.dev1) +16 more potentially affected by CVE-2025-61620 via vllm (>=0.10.0 <=0.10.2)

vllm PYPI version =0.10.0, =0.0.0, =2.3.5, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.5, =1.0.0, =0.2.4, =0.1.1, =0.1.2, =0.1.2, =0.1.0, =0.1.2 and more Source cves: CVE-2025-61620 Source advisory: SNYK:PYTHON-VLLM-13450626...

agentics-py (>=0.0.0 <=0.0.5), agilerl (>=2.3.5 <=2.4.1.dev1) +16 more potentially affected by CVE-2025-59425 via vllm (>=0.10.0 <=0.10.2)

vllm PYPI version =0.10.0, =0.0.0, =2.3.5, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.5, =1.0.0, =0.2.4, =0.1.1, =0.1.2, =0.1.2, =0.1.0, =0.1.2 and more Source cves: CVE-2025-59425 Source advisory: OSV:GHSA-WR9H-G72X-MWHM...

agentics-py (>=0.0.0 <=0.0.5), agilerl (>=2.3.5 <=2.4.1.dev1) +16 more potentially affected by CVE-2025-59425 via vllm (>=0.10.0 <=0.10.2)

vllm PYPI version =0.10.0, =0.0.0, =2.3.5, =0.1.0, =1.0.1rc1, =0.0.4, =0.1.5, =1.0.0, =0.2.4, =0.1.1, =0.1.2, =0.1.2, =0.1.0, =0.1.2 and more Source cves: CVE-2025-59425 Source advisory: SNYK:PYTHON-VLLM-13449923...

0.extends.fc (=1.0.65), 0.extends.react (=1.0.51) +12077 more potentially affected by CVE-2025-13033 via nodemailer (>=0.1.18 <=7.0.6)

nodemailer NPM version =0.1.18, =1.0.49, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 10er10 =0.23.0 and more Source cves: CVE-2025-13033 Source advisory: OSV:GHSA-MM7P-FCC7-PG87...

06-04_1 (=1.0.0), 126-email-mcp-server (>=1.0.2 <=1.0.4) +1034 more potentially affected by unknown CVE via nodemailer (>=7.0.10 <=7.0.6)

nodemailer NPM version =7.0.10, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.1-develop-4412ca-mfm8hzs3, =1.0.0, =1.0.0, =0.10.0, =0.2.17, =0.5.0, =0.3.9, =0.1.6, =0.1.7 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-13378253...

abdelrahman-obfuscate (>=1.0.0 <=1.0.1), abdo (=2.0.0) +252 more potentially affected by CVE-2025-61765 via python-socketio (>=2.0.0 <=5.13.0)

python-socketio PYPI version =2.0.0, =1.0.0, =2.0.0, =2.1.0, =0.1.1, =0.1.2, =0.1.1, =1.0.0, =0.0.2, =4.0.4, =0.1.1, =4.1.0, =0.16.0, =0.20.2 and more Source cves: CVE-2025-61765 Source advisory: OSV:GHSA-G8C6-8FJJ-2R4M...

org.keycloak.testframework:keycloak-test-framework-clustering (=26.4.0), org.keycloak.testframework:keycloak-test-framework-core (=26.4.0) +14 more potentially affected by CVE-2025-11419 via org.keycloak:keycloak-quarkus-dist (=26.4.0)

org.keycloak:keycloak-quarkus-dist MAVEN version =26.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-dist and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering =26.4.0 -...

org.keycloak:keycloak-junit5 (>=26.0.0 <=26.0.1), org.keycloak:keycloak-test-framework (>=26.0.0 <=26.0.1) potentially affected by CVE-2025-11419 via org.keycloak:keycloak-quarkus-dist (>=26.0.0 <=26.0.1)

org.keycloak:keycloak-quarkus-dist MAVEN version =26.0.0, =26.0.0, =26.0.0, =26.0.1 Source cves: CVE-2025-11419 Source advisory: SNYK:JAVA-ORGKEYCLOAK-13517527...

org.keycloak.testframework:keycloak-test-framework-core (>=26.1.0 <=26.2.1), org.keycloak.testframework:keycloak-test-framework-db-mariadb (>=26.1.0 <=26.2.1) +12 more potentially affected by CVE-2025-11419 via org.keycloak:keycloak-quarkus-dist (>=26.1.0 <=26.2.1)

org.keycloak:keycloak-quarkus-dist MAVEN version =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.2.0, =26.2.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.2.1 Source cves: CVE-2025-11419 Source advisory: SNYK:JAVA-ORGKEYCLOAK-13517527https://vuln...

a2a-client-handler (=0.1.0), aa-rag (>=0.1.0 <=0.4.3) +1316 more potentially affected by CVE-2025-6985 via langchain-text-splitters (>=0.0.1 <=0.3.8)

langchain-text-splitters PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0, =0.1.0b0, =0.0.1, =4.8.2, =0.0.1a1, =0.1.0, =0.1.0, =1.0.0rc1, =3.2.0, =0.1.0, =0.1.3 and more Source cves: CVE-2025-6985 Source advisory: OSV:GHSA-M42M-M8CR-8M58...

abdelrahman-obfuscate (>=1.0.0 <=1.0.1), abdo (=2.0.0) +252 more potentially affected by CVE-2025-61765 via python-socketio (>=2.0.0 <=5.13.0)

python-socketio PYPI version =2.0.0, =1.0.0, =2.0.0, =2.1.0, =0.1.1, =0.1.2, =0.1.1, =1.0.0, =0.0.2, =4.0.4, =0.1.1, =4.1.0, =0.16.0, =0.20.2 and more Source cves: CVE-2025-61765 Source advisory: SNYK:PYTHON-PYTHONSOCKETIO-13450297...

litestar-htmx (>=0.1.0 <=0.3.0), niapi (>=0.2.0 <=0.5.0) +1 more potentially affected by CVE-2025-59152 via litestar (>=2.0.0b2 <=2.13.0)

litestar PYPI version =2.0.0b2, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2025-59152 Source advisory: SNYK:PYTHON-LITESTAR-13433195...

clearml-darknet-py (>=0.1.0 <=0.2.1), eml-scheduler (>=0.0.1 <=0.0.2) +10 more potentially affected by CVE-2025-8917 via clearml (>=0.17.4 <=1.8.0)

clearml PYPI version =0.17.4, =0.1.0, =0.0.1, =0.1.202405161324, =0.0.1, =0.6.0, =0.7.0, =0.0.0, =1.4.8 Source cves: CVE-2025-8917 Source advisory: OSV:GHSA-579P-QF78-FQM2...

fable3d (>=1.0.0 <=1.1.4), liblaf-melon (>=0.1.10 <=0.1.17) +4 more potentially affected by CVE-2025-11277 via pyassimp (=5.2.5)

pyassimp PYPI version =5.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyassimp and may be impacted: - fable3d =1.0.0, =0.1.10, =0.2.1, =0.2.14, =0.1.4, =0.2.0, =0.2.1 Source cves: CVE-2025-11277 Source advisory: OSV:PYSEC-2025-157...