africa.absa:inception-application (>=1.0.0 <=1.2.0), app.fmgp:scala-did-docs_3 (>=0.1.0-M16 <=0.1.0-M33) +3479 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (>=1.0.0.Alpha1 <=2.2.37.Final)

io.undertow:undertow-core MAVEN version =1.0.0.Alpha1, =1.0.0, =0.1.0-M16, =1.0.0, =0.4.0, =2.0.0, =1.0.2, =1.0.0, =1.2.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-9784 Source advisory: OSV:GHSA-95H4-W6J8-2RP8...

ai.h2o:h2o-admissibleml (>=3.34.0.1 <=3.46.0.11), ai.h2o:h2o-algos (>=3.0.0.5 <=3.46.0.11) +44 more potentially affected by CVE-2025-5662 via ai.h2o:h2o-core (>=3.0.0.12 <=3.46.0.7)

ai.h2o:h2o-core MAVEN version =3.0.0.12, =3.34.0.1, =3.0.0.5, =3.0.0.5, =3.12.0.1, =3.10.0.1, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.11 and more Source cves: CVE-2025-5662 Source advisory: SNYK:JAVA-AIH2O-12485437...

aaz-dev (>=1.0.2 <=2.10.1), acdc-aws-etl-pipeline (>=0.1.7 <=0.5.9) +1164 more potentially affected by CVE-2025-9375 via xmltodict (>=0.10.1 <=0.14.2)

xmltodict PYPI version =0.10.1, =1.0.2, =0.1.7, =0.0.7, =0.2.5a4, =0.0.1, =0.1.0, =0.17.9, =0.0.0.dev0, =0.6.0, =0.7.2 and more Source cves: CVE-2025-9375 Source advisory: SNYK:PYTHON-XMLTODICT-12427118...

ai.h2o:h2o-admissibleml (>=3.34.0.1 <=3.46.0.11), ai.h2o:h2o-algos (>=0.1.9 <=3.46.0.11) +45 more potentially affected by CVE-2024-10553 +1 more via ai.h2o:h2o-core (>=0.1.10 <=3.46.0.7)

ai.h2o:h2o-core MAVEN version =0.1.10, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.10.0.1, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.11 and more Source cves: CVE-2024-10553, CVE-2025-6507 Source advisory:...

aalam-common (=0.1.78), agency (>=1.0.0 <=1.1.0) +160 more potentially affected by CVE-2025-58068 via eventlet (>=0.19.0 <=0.40.1)

eventlet PYPI version =0.19.0, =1.0.0, =0.5.5, =0.61.9, =0.4.0, =2.3.0, =1.0.5, =0.6.7.post3, =0.0.17, =1.0.12, =0.1.3, =0.45.15, =0.1.6, =0.1.6.7 and more Source cves: CVE-2025-58068 Source advisory: SNYK:PYTHON-EVENTLET-12260136...

AskAI (=0.1.0), Druid_task1 (=0.1.0) +3840 more potentially affected by CVE-2025-58160 via tracing-subscriber (>=0.1.6 <=0.3.19)

tracing-subscriber CARGO version =0.1.6, =0.1.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.1.5, =0.0.1-dev.10, =1.1.0, =0.0.7, =0.0.16 - acril =0.1.0 and more Source cves: CVE-2025-58160 Source advisory: OSV:GHSA-XWFJ-JGWM-7WP5...

amaryllis (=0.1.0), archivist (=0.0.1) +26 more potentially affected by unknown CVE via webp (>=0.1.3 <=0.2.6)

webp CARGO version =0.1.3, =0.1.0, =0.0.4-alpha, =0.24.6, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.21.0, =0.21.0, =0.21.0, =0.21.0, =0.22.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q78-27F3-2JMH...

aalam-common (=0.1.78), agency (>=1.0.0 <=1.1.0) +159 more potentially affected by CVE-2025-58068 via eventlet (>=0.20.0 <=0.40.1)

eventlet PYPI version =0.20.0, =1.0.0, =0.5.5, =0.61.9, =0.4.0, =2.3.0, =1.0.5, =0.6.7.post3, =0.0.17, =1.0.12, =0.1.3, =0.45.15, =0.1.6, =0.1.6.7 and more Source cves: CVE-2025-58068 Source advisory: OSV:GHSA-HW6F-RJFJ-J7J7...

org.webjars.npm:ckeditor5 (>=44.1.0 <=44.3.0), org.webjars.npm:ckeditor__ckeditor5-adapter-ckfinder (>=44.1.0 <=44.3.0) +59 more potentially affected by CVE-2025-9670 via org.webjars.npm:turndown (=7.2.0)

org.webjars.npm:turndown MAVEN version =7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:turndown and may be impacted: - org.webjars.npm:ckeditor5 =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0, =44.1.0,...

0xkobold (>=0.5.0 <=0.8.0), 1dr-cli (>=0.2.10 <=0.5.14) +4406 more potentially affected by CVE-2025-9670 via turndown (>=4.0.1 <=7.2.4)

turndown NPM version =4.0.1, =0.5.0, =0.2.10, =0.2.0, =0.0.1, =1.0.0, =1.0.0, =0.2.1, =0.1.0, =0.1.0, =0.1.1, =0.2.9, =0.5.0, =1.0.0, =1.0.8 and more Source cves: CVE-2025-9670 Source advisory: SNYK:JS-TURNDOWN-12304081...

@ainsleydev/payload-helper (>=0.0.1 <=0.0.32), @anjy7/navbar-cms (=0.0.5) +63 more potentially affected by CVE-2025-4643 +1 more via payload (>=0.12.3 <=3.35.1)

payload NPM version =0.12.3, =0.0.1, =1.0.1, =1.0.0, =1.0.6, =0.1.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.7, =1.0.0, =1.1.8 and more Source cves: CVE-2025-4643, CVE-2025-4644 Source advisory: OSV:GHSA-26RV-H2HF-3FW4...

@anjy7/navbar-cms (=0.0.5), @contentql/core (>=0.1.2 <=0.3.5) +17 more potentially affected by CVE-2025-4643 +1 more via @payloadcms/graphql (>=3.0.0-alpha.0 <=3.44.0-internal.6b79dc2)

@payloadcms/graphql NPM version =3.0.0-alpha.0, =0.1.2, =0.1.0, =3.0.0, =3.2.0, =0.2.0, =3.0.0-beta.10, =1.0.1, =0.1.0, =0.1.4, =1.0.0, =0.0.5, =0.0.1, =0.0.9-alpha.52, =0.0.5, =1.0.3 and more Source cves: CVE-2025-4643, CVE-2025-4644 Source advisory: OSV:GHSA-26RV-H2HF-3FW4...

@anjy7/navbar-cms (=0.0.5), @contentql/core (>=0.1.2 <=0.3.5) +14 more potentially affected by CVE-2025-4643 +1 more via @payloadcms/next (>=3.0.0-alpha.46 <=3.44.0-internal.6b79dc2)

@payloadcms/next NPM version =3.0.0-alpha.46, =0.1.2, =0.1.0, =3.2.0, =0.2.0, =0.1.0, =0.1.4, =1.0.0, =0.0.5, =0.0.1, =0.0.9-alpha.52, =0.0.5, =3.0.0-beta.3, =0.0.3, =1.0.0 and more Source cves: CVE-2025-4643, CVE-2025-4644 Source advisory: OSV:GHSA-26RV-H2HF-3FW4...

@anjy7/navbar-cms (=0.0.5), @contentql/core (>=0.1.2 <=0.3.5) +17 more potentially affected by CVE-2025-4643 via @payloadcms/graphql (>=3.0.0-alpha.0 <=3.44.0-internal.6b79dc2)

@payloadcms/graphql NPM version =3.0.0-alpha.0, =0.1.2, =0.1.0, =3.0.0, =3.2.0, =0.2.0, =3.0.0-beta.10, =1.0.1, =0.1.0, =0.1.4, =1.0.0, =0.0.5, =0.0.1, =0.0.9-alpha.52, =0.0.5, =1.0.3 and more Source cves: CVE-2025-4643 Source advisory: OSV:GHSA-5V66-M237-HWF7...

@anjy7/navbar-cms (=0.0.5), @contentql/core (>=0.1.2 <=0.3.5) +14 more potentially affected by CVE-2025-4643 via @payloadcms/next (>=3.0.0-alpha.46 <=3.44.0-internal.6b79dc2)

@payloadcms/next NPM version =3.0.0-alpha.46, =0.1.2, =0.1.0, =3.2.0, =0.2.0, =0.1.0, =0.1.4, =1.0.0, =0.0.5, =0.0.1, =0.0.9-alpha.52, =0.0.5, =3.0.0-beta.3, =0.0.3, =1.0.0 and more Source cves: CVE-2025-4643 Source advisory: OSV:GHSA-5V66-M237-HWF7...

@ainsleydev/payload-helper (>=0.0.1 <=0.0.32), @anjy7/navbar-cms (=0.0.5) +63 more potentially affected by CVE-2025-4643 via payload (>=0.12.3 <=3.35.1)

payload NPM version =0.12.3, =0.0.1, =1.0.1, =1.0.0, =1.0.6, =0.1.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.7, =1.0.0, =1.1.8 and more Source cves: CVE-2025-4643 Source advisory: OSV:GHSA-5V66-M237-HWF7...

AskAI (=0.1.0), Druid_task1 (=0.1.0) +3840 more potentially affected by CVE-2025-58160 via tracing-subscriber (>=0.1.6 <=0.3.19)

tracing-subscriber CARGO version =0.1.6, =0.1.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.1.5, =0.0.1-dev.10, =1.1.0, =0.0.7, =0.0.16 - acril =0.1.0 and more Source cves: CVE-2025-58160 Source advisory: OSV:RUSTSEC-2025-0055...

@ainsleydev/payload-helper (>=0.0.3 <=0.0.32), @anjy7/navbar-cms (=0.0.5) +19 more potentially affected by CVE-2025-4643 via payload (>=3.0.0-alpha.46 <=3.35.1)

payload NPM version =3.0.0-alpha.46, =0.0.3, =0.1.0, =1.0.0, =1.0.0, =0.2.0, =3.1.1, =0.1.4, =1.0.0, =0.0.5, =0.0.1, =0.0.9-alpha.52, =0.0.5, =1.0.3 and more Source cves: CVE-2025-4643 Source advisory: SNYK:JS-PAYLOAD-12239898...

@ainsleydev/payload-helper (>=0.0.3 <=0.0.32), @anjy7/navbar-cms (=0.0.5) +19 more potentially affected by CVE-2025-4643 +1 more via payload (>=3.0.0-alpha.46 <=3.35.1)

payload NPM version =3.0.0-alpha.46, =0.0.3, =0.1.0, =1.0.0, =1.0.0, =0.2.0, =3.1.1, =0.1.4, =1.0.0, =0.0.5, =0.0.1, =0.0.9-alpha.52, =0.0.5, =1.0.3 and more Source cves: CVE-2025-4643, CVE-2025-4644 Source advisory: SNYK:JS-PAYLOAD-12239899...

com.ritense.valtimo:besluit (>=10.0.0.RELEASE <=12.15.1.RELEASE), com.ritense.valtimo:besluiten-api (>=0.1.0-RC-2 <=12.15.1.RELEASE) +61 more potentially affected by CVE-2025-58059 via com.ritense.valtimo:core (>=0.1.0-RC-2 <=12.15.1.RELEASE)

com.ritense.valtimo:core MAVEN version =0.1.0-RC-2, =10.0.0.RELEASE, =0.1.0-RC-2, =0.1.0-RC-2, =10.0.0.RELEASE, =0.1.0-RC-2, =0.1.0-RC-2, =0.1.0-RC-2, =10.0.0.RELEASE, =0.1.0-RC-2, =10.0.0.RELEASE, =10.0.0.RELEASE, =0.1.0-RC-2, =10.0.0.RELEASE, =10.0.0.RELEASE, =12.15.1.RELEASE and more Source...

@anarchitects/nx-js (>=0.0.1 <=0.0.3), @asd14/eslint-config (>=11.0.0 <=14.4.0) +76 more potentially affected by CVE-2025-10894 via nx (>=21.5.1-beta.3 <=21.7.0-canary.20250930-e144408)

nx NPM version =21.5.1-beta.3, =0.0.1, =11.0.0, =0.52.0, =2.23.0, =1.4.0, =3.1.1, =1.0.0, =6.10.0, =0.1.0-next.717, =9.0.0, =1.0.0, =0.0.1-alpha.7, =2.1.0 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41443...

@caliobase/caliobase-nx (>=0.3.53 <=0.3.61), @nestledjs/all (>=0.0.1 <=0.1.22) +4 more potentially affected by CVE-2025-10894 via @nx/node (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/node NPM version =21.0.0-beta.0, =0.3.53, =0.0.1, =0.0.1, =0.0.1, =21.0.0, =21.0.0, =21.5.0-canary.20250904-ec1f1a4 Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NXNODE-12205640...

@10xsai/cloudflare-router-nx-plugin (=1.0.0), @akanjs/test (>=0.0.47 <=0.0.73) +115 more potentially affected by CVE-2025-10894 via @nx/workspace (>=20.0.0-beta.0 <=20.9.0-canary.20250415-bc685ce)

@nx/workspace NPM version =20.0.0-beta.0, =0.0.47, =0.0.2, =0.0.0, =1.0.0, =1.0.0, =0.5.0, =1.8.2, =3.1.0, =0.0.1, =0.0.4 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NXWORKSPACE-12205641...

@aws/nx-plugin (>=0.21.0 <=0.51.4), @caliobase/caliobase-nx (>=0.3.53 <=0.3.61) +49 more potentially affected by CVE-2025-10894 via @nx/workspace (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/workspace NPM version =21.0.0-beta.0, =0.21.0, =0.3.53, =1.1.1, =2.1.1, =2.1.1, =2.1.1, =2.1.1, =0.0.1, =0.0.3, =0.0.1, =0.0.3, =0.0.3, =0.3.3 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NXWORKSPACE-12205641...

@apj-pace/pace-nx-plugin (>=0.0.2 <=0.0.5), @aws/nx-plugin (>=0.0.0 <=0.1.5) +59 more potentially affected by CVE-2025-10894 via nx (>=20.0.0-beta.0 <=20.0.9)

nx NPM version =20.0.0-beta.0, =0.0.2, =0.0.0, =0.5.0, =0.0.1, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-canary.20240926-529ab94 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NX-12205542...

@abelfubu/schematics (=0.1.1), @anarchitects/nx-js (>=0.0.1 <=0.0.3) +118 more potentially affected by CVE-2025-10894 via nx (>=21.0.0-beta.0 <=21.7.0-canary.20250930-e144408)

nx NPM version =21.0.0-beta.0, =0.0.1, =11.0.0, =0.21.0, =0.0.1, =2.23.0, =0.3.53, =0.0.5, =0.0.4, =1.3.0, =0.0.1, =0.0.1-alpha.4 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NX-12205542...

@10xsai/cloudflare-router-nx-plugin (=1.0.0), @akanjs/test (>=0.0.47 <=0.0.73) +108 more potentially affected by CVE-2025-10894 via @nx/js (>=20.0.0-beta.0 <=20.9.0-canary.20250415-bc685ce)

@nx/js NPM version =20.0.0-beta.0, =0.0.47, =0.0.2, =0.0.0, =1.0.0, =1.0.0, =0.5.0, =1.8.2, =3.1.0, =0.0.1, =0.0.1, =0.0.2-10 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NXJS-12205638...

@10xsai/cloudflare-router-nx-plugin (=1.0.0), @akanjs/cli (>=0.0.38 <=0.0.73) +452 more potentially affected by CVE-2025-10894 via @nx/devkit (>=20.0.0-beta.0 <=20.9.0-canary.20250415-bc685ce)

@nx/devkit NPM version =20.0.0-beta.0, =0.0.38, =0.0.38, =0.0.47, =0.0.1, =0.1.0, =8.1.1, =0.0.2, =0.0.1, =0.0.0, =1.0.0, =0.0.12-beta.1, =0.0.1, =0.0.3 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NXDEVKIT-12205635...

@naxodev/nx-cloudflare (>=4.0.0 <=4.0.2), @nestjs-mod/schematics (>=2.12.0 <=2.13.2) +9 more potentially affected by CVE-2025-10894 via @nx/node (>=20.0.0-beta.0 <=20.9.0-canary.20250415-bc685ce)

@nx/node NPM version =20.0.0-beta.0, =4.0.0, =2.12.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0-beta.0, =20.0.0, =20.0.0, =0.2.0, =20.0.0, =20.2.1-dev.3 - @terrxo/nx-cloudflare =4.0.1 - @ziacik/azure-func =4.0.0 Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NXNODE-12205640...

@aws/nx-plugin (>=0.21.0 <=0.51.4), @caliobase/caliobase-nx (>=0.3.53 <=0.3.61) +47 more potentially affected by CVE-2025-10894 via @nx/js (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/js NPM version =21.0.0-beta.0, =0.21.0, =0.3.53, =1.1.1, =2.1.1, =2.1.1, =2.1.1, =2.1.1, =0.0.1, =0.0.3, =0.0.1, =0.0.3, =0.0.3, =0.3.3 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NXJS-12205638...

@abelfubu/schematics (>=0.0.3 <=0.1.1), @alfresco/aca-generators (>=1.0.2 <=1.0.4) +115 more potentially affected by CVE-2025-10894 via @nx/devkit (>=21.0.0-beta.0 <=21.5.0-canary.20250904-2c678a1)

@nx/devkit NPM version =21.0.0-beta.0, =0.0.3, =1.0.2, =1.0.0, =1.0.2, =0.0.11, =0.21.0, =0.0.1, =0.3.53, =0.0.5, =0.0.4, =9.0.2, =9.1.0 - @eumentis/nx-plugin =1.3.0 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NXDEVKIT-12205635...

3nit-utils (>=0.30.0 <=1.0.2), 6ix (=0.0.0-canary.0) +947 more potentially affected by CVE-2025-57820 via devalue (>=1.1.1 <=5.1.1)

devalue NPM version =1.1.1, =0.30.0, =0.0.0-canary.0, =0.1.0, =1.1.0, =1.1.0, =0.0.27, =1.0.0, =0.2.2, =0.2.2, =0.2.2, =0.3.0, =0.5.7, =1.0.0, =1.2.1 and more Source cves: CVE-2025-57820 Source advisory: OSV:GHSA-VJ54-72F3-P5JV...

@jill64/svelte-dark-theme (>=2.3.65 <=5.1.7), @jill64/svelte-i18n (>=1.1.27 <=2.2.1) +9 more potentially affected by CVE-2025-57820 via devalue (>=5.0.0 <=5.1.1)

devalue NPM version =5.0.0, =2.3.65, =1.1.27, =1.1.21, =1.2.263, =2.2.3, =0.0.2-dev.84, =1.0.23, =1.0.22, =1.0.0, =1.0.6, =2.1.10, =2.1.15 Source cves: CVE-2025-57820 Source advisory: SNYK:JS-DEVALUE-12205530...

@cedarjs/api-server (>=0.0.4 <=9.0.0-canary.1784), @cedarjs/cli (>=0.0.4 <=9.0.0-canary.1784) +49 more potentially affected by unknown CVE via @escape.tech/graphql-armor-max-depth (>=2.0.0 <=2.4.1)

@escape.tech/graphql-armor-max-depth NPM version =2.0.0, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =0.0.4, =0.0.4, =0.0.2, =2.0.0, =2.0.6, =2.2.2, =2.19.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-ESCAPETECHGRAPHQLARMORMAXDEPTH-12219956...

@cedarjs/api-server (>=0.0.4 <=9.0.0-canary.1784), @cedarjs/cli (>=0.0.4 <=9.0.0-canary.1784) +49 more potentially affected by unknown CVE via @escape.tech/graphql-armor-max-depth (>=2.0.0 <=2.4.1)

@escape.tech/graphql-armor-max-depth NPM version =2.0.0, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.9.1-next.19, =0.0.4, =0.0.4, =0.0.2, =2.0.0, =2.0.6, =2.2.2, =2.19.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-ESCAPETECHGRAPHQLARMORMAXDEPTH-12219686...

org.webjars.bower:jspdf-autotable (>=2.0.2 <=2.1.0) potentially affected by CVE-2025-57810 via org.webjars.bower:jspdf (>=1.0.272 <=1.4.1)

org.webjars.bower:jspdf MAVEN version =1.0.272, =2.0.2, =2.1.0 Source cves: CVE-2025-57810 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-12205534...

org.webjars.bowergithub.simonbengtsson:jspdf-autotable (=2.3.2) potentially affected by CVE-2025-57810 via org.webjars.bowergithub.mrrio:jspdf (=1.4.1)

org.webjars.bowergithub.mrrio:jspdf MAVEN version =1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.mrrio:jspdf and may be impacted: - org.webjars.bowergithub.simonbengtsson:jspdf-autotable =2.3.2 Source cves: CVE-2025-5781...

@copart/ops-tool-kit (>=1.10.20 <=1.13.0-beta.11), @firedesktop/react-portal-base (>=0.1.46 <=0.1.52) +13 more potentially affected by CVE-2025-57810 via jspdf (>=3.0.0 <=3.0.1)

jspdf NPM version =3.0.0, =1.10.20, =0.1.46, =0.54.4-nightly, =0.47.5-MYUN-38209, =1.1.63, =7.3.5, =1.0.1, =1.0.1, =1.0.301, =1.0.2, =1.1.0, =1.1.7 - winning-develop =0.1.0 - winning-schedule =0.1.0 Source cves: CVE-2025-57810 Source advisory: SNYK:JS-JSPDF-12205531...

org.webjars.bowergithub.hhurz:tableexport.jquery.plugin (=1.26.0) potentially affected by CVE-2025-57810 via org.webjars.bowergithub.parallax:jspdf (=2.4.0)

org.webjars.bowergithub.parallax:jspdf MAVEN version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.parallax:jspdf and may be impacted: - org.webjars.bowergithub.hhurz:tableexport.jquery.plugin =1.26.0 Source cves:...

nocodb (>=0.202.0 <=0.204.4), nocodb-daily (>=0.111.4-20231008-1802 <=0.204.4-pr-7795-20240305-0047) potentially affected by CVE-2025-57814 via request-filtering-agent (=1.1.2)

request-filtering-agent NPM version =1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on request-filtering-agent and may be impacted: - nocodb =0.202.0, =0.111.4-20231008-1802, =0.204.4-pr-7795-20240305-0047 Source cves: CVE-2025-57814 Source advisor...

ai-dynamo-vllm (>=0.8.4 <=0.8.4.post4), arbor-ai (>=0.2.2 <=0.2.4) +36 more potentially affected by CVE-2025-57809 via xgrammar (>=0.1.11 <=0.1.19)

xgrammar PYPI version =0.1.11, =0.8.4, =0.2.2, =0.0.2, =0.1.1, =0.1.1, =0.0.2, =1.1.4, =0.1.1, =0.2.0a1, =0.1.2, =0.2.2 - lightrft =0.1.0 - llama-index-postprocessor-rankllm-rerank =0.6.2 and more Source cves: CVE-2025-57809 Source advisory: SNYK:PYTHON-XGRAMMAR-12201487...

acelerai (=0.0.32), acelerai-staging (>=0.0.1 <=0.0.9) +102 more potentially affected by CVE-2025-57804 via h2 (>=4.0.0 <=4.2.0)

h2 PYPI version =4.0.0, =0.0.1, =0.0.1, =0.2.2, =1.0.0, =0.1.12, =0.0.1, =0.1.3, =0.1.19 - coif =0.0.1 and more Source cves: CVE-2025-57804 Source advisory: SNYK:PYTHON-H2-12201340...

chameli (>=0.1.12 <=0.1.16), clotho (=0.1.0) +22 more potentially affected by unknown CVE via mitmproxy (>=10.1.5 <=12.1.1)

mitmproxy PYPI version =10.1.5, =0.1.12, =0.1.0, =0.0.0, =4.0.0, =0.34.0, =0.14.1, =4.0.0, =0.11.0, =0.2.0, =1.0.0, =0.5.0, =0.0.2, =0.1.3, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

aapns (>=19.11.0 <=23.7.0), abq (>=0.1.0 <=0.1.4) +372 more potentially affected by CVE-2025-57804 via h2 (>=2.4.4 <=4.2.0)

h2 PYPI version =2.4.4, =19.11.0, =0.1.0, =0.0.1, =0.0.1, =0.4.0, =0.4.0, =2.1.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.2, =0.3.6, =0.3.8 and more Source cves: CVE-2025-57804 Source advisory: OSV:GHSA-847F-9342-265H...

ai-dynamo-vllm (>=0.8.4 <=0.8.4.post4), arbor-ai (>=0.2.2 <=0.2.4) +36 more potentially affected by CVE-2025-57809 via xgrammar (>=0.1.11 <=0.1.19)

xgrammar PYPI version =0.1.11, =0.8.4, =0.2.2, =0.0.2, =0.1.1, =0.1.1, =0.0.2, =1.1.4, =0.1.1, =0.2.0a1, =0.1.2, =0.2.2 - lightrft =0.1.0 - llama-index-postprocessor-rankllm-rerank =0.6.2 and more Source cves: CVE-2025-57809 Source advisory: OSV:GHSA-5CMR-4PX5-23PC...

aider-chat (=0.43.0), aimon-llamaindex (>=0.0.6 <=0.0.9) +686 more potentially affected by CVE-2025-5302 via llama-index-core (>=0.10.0 <=0.12.37)

llama-index-core PYPI version =0.10.0, =0.0.6, =1.1.0, =3.0.0, =1.7.0, =1.0.0, =0.0.3, =0.2.1, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.0, =0.3.0, =0.1.0, =0.4.0.dev2 and more Source cves: CVE-2025-5302 Source advisory: SNYK:PYTHON-LLAMAINDEXCORE-12304061...

a2 (>=0.5.0 <=0.5.0-alpha.7), a_chat (=0.1.0) +2561 more potentially affected by unknown CVE via async-std (>=0.99.12 <=1.9.0)

async-std CARGO version =0.99.12, =0.5.0, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...

com.liferay:com.liferay.exportimport.resources.importer (>=1.0.0 <=2.0.2), com.liferay:com.liferay.journal.content.asset.addon.entry.comments (>=1.0.0 <=1.0.9) +7 more potentially affected by CVE-2025-43765 via com.liferay:com.liferay.journal.service (>=1.0.0 <=3.10.0)

com.liferay:com.liferay.journal.service MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.30 Source cves: CVE-2025-43765 Source advisory: OSV:GHSA-H8GX-4HHM-W45V...

com.liferay:com.liferay.dynamic.data.lists.form.web (>=1.0.0 <=2.0.14), com.liferay:com.liferay.dynamic.data.mapping.form.renderer (>=2.0.0 <=2.1.15) +17 more potentially affected by CVE-2025-43762 via com.liferay:com.liferay.dynamic.data.mapping.form.field.type (=2.0.0)

com.liferay:com.liferay.dynamic.data.mapping.form.field.type MAVEN version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay:com.liferay.dynamic.data.mapping.form.field.type and may be impacted: -...

@liferay/dxp-7.4 (>=71.0.0 <=71.0.2), @liferay/portal-7.4 (=69.0.0) potentially affected by CVE-2025-43761 via liferay-ckeditor (=4.18.0-liferay.4)

liferay-ckeditor NPM version =4.18.0-liferay.4 is affected by a known vulnerability. The following packages have a transitive dependency on liferay-ckeditor and may be impacted: - @liferay/dxp-7.4 =71.0.0, =71.0.2 - @liferay/portal-7.4 =69.0.0 Source cves: CVE-2025-43761 Source advisory:...