nautobot-chatops (>=1.6.0 <=1.7.1), nautobot-chatops-arista-cloudvision (>=1.0.1 <=1.3.0) +7 more potentially affected by CVE-2025-49143 via nautobot (>=1.0.3 <=1.5.16)

nautobot PYPI version =1.0.3, =1.6.0, =1.0.1, =1.1.0, =0.9.2, =1.5.0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2025-49143 Source advisory: SNYK:PYTHON-NAUTOBOT-10337820...

nautobot-device-resources (=1.0.0), nautobot-fsus (>=2.0.0 <=2.0.2) +2 more potentially affected by CVE-2025-49143 via nautobot (>=2.0.0 <=2.3.4)

nautobot PYPI version =2.0.0, =2.0.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi =1.0.2 Source cves: CVE-2025-49143 Source advisory: SNYK:PYTHON-NAUTOBOT-10337820...

nautobot-chatops (>=1.6.0 <=1.7.1), nautobot-chatops-arista-cloudvision (>=1.0.1 <=1.3.0) +7 more potentially affected by CVE-2025-49142 via nautobot (>=1.0.3 <=1.5.16)

nautobot PYPI version =1.0.3, =1.6.0, =1.0.1, =1.1.0, =0.9.2, =1.5.0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2025-49142 Source advisory: SNYK:PYTHON-NAUTOBOT-10337821...

nautobot-device-resources (=1.0.0), nautobot-fsus (>=2.0.0 <=2.0.2) +2 more potentially affected by CVE-2025-49142 via nautobot (>=2.0.0 <=2.3.4)

nautobot PYPI version =2.0.0, =2.0.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi =1.0.2 Source cves: CVE-2025-49142 Source advisory: SNYK:PYTHON-NAUTOBOT-10337821...

nautobot-chatops (>=1.6.0 <=1.7.1), nautobot-chatops-arista-cloudvision (>=1.0.1 <=1.3.0) +7 more potentially affected by CVE-2025-49142 via nautobot (>=1.0.3 <=1.5.16)

nautobot PYPI version =1.0.3, =1.6.0, =1.0.1, =1.1.0, =0.9.2, =1.5.0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2025-49142 Source advisory: OSV:PYSEC-2025-79...

nautobot-device-resources (=1.0.0), nautobot-fsus (>=2.0.0 <=2.0.2) +2 more potentially affected by CVE-2025-49142 via nautobot (>=2.0.0 <=2.3.4)

nautobot PYPI version =2.0.0, =2.0.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi =1.0.2 Source cves: CVE-2025-49142 Source advisory: OSV:PYSEC-2025-79...

cn.herodotus.engine:message-spring-boot-starter (>=2.7.3.4 <=3.0.0-M2), com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0 <=4.1.1) +232 more potentially affected by CVE-2025-27818 via org.apache.kafka:kafka_2.13 (>=2.4.0 <=3.9.0)

org.apache.kafka:kafka2.13 MAVEN version =2.4.0, =2.7.3.4, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.7.4-SNAPSHOT-35e64fa - com.bisnode.kafka.authorizat...

ai.tripl:arc-kafka-pipeline-plugin_2.11 (>=1.3.0 <=1.4.0), com.consol.citrus:citrus-kafka (=3.0.0-M1) +138 more potentially affected by CVE-2025-27818 via org.apache.kafka:kafka_2.11 (>=2.3.0 <=2.4.1)

org.apache.kafka:kafka2.11 MAVEN version =2.3.0, =1.3.0, =0.1.0, =0.1.0, =2.1.0-1, =0.275, =0.275, =0.275, =0.275, =0.275, =0.275, =0.2.16, =1.0.19 and more Source cves: CVE-2025-27818 Source advisory: OSV:GHSA-76QP-H5MR-FRR4...

ai.intelliswarm:swarmai-eval (>=1.0.6 <=1.0.28), ai.intelliswarm:swarmai-rag (=1.0.28) +3069 more potentially affected by CVE-2025-27817 via org.apache.kafka:kafka-clients (>=3.1.0 <=3.9.0)

org.apache.kafka:kafka-clients MAVEN version =3.1.0, =1.0.6, =1.0.6, =0.1, =3.0.1, =2.8.4-alpha2, =1.0.0, =1.0.0-beta, =0.0.1-alpha1, =0.0.1, =0.0.4, =0.1.0, =1.0.0.RELEASE, =1.0.2.RELEASE and more Source cves: CVE-2025-27817 Source advisory: OSV:GHSA-VGQ5-3255-V292...

ai.intelliswarm:swarmai-eval (>=1.0.6 <=1.0.28), ai.intelliswarm:swarmai-rag (=1.0.28) +3069 more potentially affected by CVE-2025-27817 via org.apache.kafka:kafka-clients (>=3.1.0 <=3.9.0)

org.apache.kafka:kafka-clients MAVEN version =3.1.0, =1.0.6, =1.0.6, =0.1, =3.0.1, =2.8.4-alpha2, =1.0.0, =1.0.0-beta, =0.0.1-alpha1, =0.0.1, =0.0.4, =0.1.0, =1.0.0.RELEASE, =1.0.2.RELEASE and more Source cves: CVE-2025-27817 Source advisory: SNYK:JAVA-ORGAPACHEKAFKA-10336719...

ai.tripl:arc-kafka-pipeline-plugin_2.12 (>=1.3.0 <=1.15.1), cn.buli-home:MustardTools (>=0.0.1 <=0.2.8) +221 more potentially affected by CVE-2025-27818 via org.apache.kafka:kafka_2.12 (>=2.3.0 <=3.9.0)

org.apache.kafka:kafka2.12 MAVEN version =2.3.0, =1.3.0, =0.0.1, =0.3.0, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =5.9.3, =5.5.7, =5.6.0, =0.4.1, =2.3, =2.3, =1.3.2, =1.4.5 and more Source cves: CVE-2025-27818 Source advisory: OSV:GHSA-76QP-H5MR-FRR4...

org.apache.kafka:kafka-perf_2.9.1 (>=0.8.0 <=0.8.0-beta1), org.apache.nifi:nifi-kafka-nar (>=0.4.0 <=0.4.1) +5 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.9.1 (>=0.8.0-beta1 <=0.8.2.2)

org.apache.kafka:kafka2.9.1 MAVEN version =0.8.0-beta1, =0.8.0, =0.4.0, =0.4.0, =2.0-0-RC1, =2.0-0-RC1, =4.1.0, =4.1.1, =5.0.1 Source cves: CVE-2025-27819 Source advisory: OSV:GHSA-MCWH-C9PG-XW43...

com.viadeo.axonframework:axon-kafka-terminal (>=0.1 <=0.1.1), org.apache.kafka:kafka-examples (>=0.8.1 <=0.8.1.1) +3 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.8.0 (>=0.8.0-beta1 <=0.8.1.1)

org.apache.kafka:kafka2.8.0 MAVEN version =0.8.0-beta1, =0.1, =0.8.1, =0.8.1, =0.8.1, =0.8.0, =0.8.1.1 Source cves: CVE-2025-27819 Source advisory: OSV:GHSA-MCWH-C9PG-XW43...

org.apache.kafka:kafka-perf_2.8.2 (>=0.8.0 <=0.8.0-beta1), org.apache.nifi:nifi-kafka-nar (>=0.0.1-incubating <=0.3.0) +1 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.8.2 (>=0.8.0-beta1 <=0.8.1)

org.apache.kafka:kafka2.8.2 MAVEN version =0.8.0-beta1, =0.8.0, =0.0.1-incubating, =0.0.1-incubating, =0.3.0 Source cves: CVE-2025-27819 Source advisory: OSV:GHSA-MCWH-C9PG-XW43...

cn.herodotus.engine:message-spring-boot-starter (>=2.7.3.4 <=3.0.0-M2), com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0 <=4.1.1) +179 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.13 (>=2.4.0 <=3.3.2)

org.apache.kafka:kafka2.13 MAVEN version =2.4.0, =2.7.3.4, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =1.0.0, =1.2.0 - com.cerner.c...

ai.tripl:arc-jupyter_2.11 (>=0.0.13 <=0.0.14), ai.tripl:arc-kafka-pipeline-plugin_2.11 (>=1.0.0 <=1.4.0) +224 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.11 (>=2.0.0 <=2.4.1)

org.apache.kafka:kafka2.11 MAVEN version =2.0.0, =0.0.13, =1.0.0, =1.14.0, =2.8.0, =3.0.0-M1 - com.daasyyds.presto:daasyyds-hive-connector-patch =0.276.1-202209.1 and more Source cves: CVE-2025-27819 Source advisory: OSV:GHSA-MCWH-C9PG-XW43...

ai.tripl:arc-kafka-pipeline-plugin_2.12 (>=1.0.0 <=1.15.1), cn.antcore:AntKafka (>=0.0.1-RELEASE <=0.0.2-RELEASE) +419 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.12 (>=0.10.1.1 <=3.3.2)

org.apache.kafka:kafka2.12 MAVEN version =0.10.1.1, =1.0.0, =0.0.1-RELEASE, =0.0.1-RELEASE, =0.0.1-RELEASE, =1.2.0-RELEASE, =0.0.1, =0.3.0, =1.1.1, =1.0.8-netty, =1.0.8-netty, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =6.2.3 and more Source cves: CVE-2025-27819 Source advisory: OSV:GHSA-MCWH-C9PG-X...

com.github.sakserv:hadoop-mini-clusters-kafka (>=0.1.1 <=0.1.3), com.n3twork.druid:druid-kafka-eight (=0.6.105-hadoop2.4.0) +22 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.9.2 (>=0.8.0-beta1 <=0.8.2.2)

org.apache.kafka:kafka2.9.2 MAVEN version =0.8.0-beta1, =0.1.1, =2.0.0-DP1, =2.0.0-rc.1, =1.4.0, =0.9.1, =1.0.0, =0.1, =1.0, =2.6.3.1, =0.0.1, =2.3.2, =0.8.0, =2.5.0, =2.11.0 and more Source cves: CVE-2025-27819 Source advisory: OSV:GHSA-MCWH-C9PG-XW43...

com.alibaba.otter:canal.deployer (>=1.1.1 <=1.1.4), com.alibaba.otter:canal.kafka (=1.1.0) +105 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.11 (>=1.0.0 <=1.1.1)

org.apache.kafka:kafka2.11 MAVEN version =1.0.0, =1.1.1, =1.1.1, =1.1.1, =1.1.5, =0.1.0, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =6.0.21 and more Source cves: CVE-2025-27819 Source advisory: OSV:GHSA-MCWH-C9PG-XW43...

ai.chronon:flink_2.12 (>=0.0.62 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:online_2.11 (>=0.0.25 <=revert-391-thread-0.0.24) +5770 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka-clients (>=2.0.0 <=3.9.0)

org.apache.kafka:kafka-clients MAVEN version =2.0.0, =0.0.62, =0.0.25, =0.0.25, =0.0.25, =0.0.86, =0.0.86, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =0.0.6, =1.0.6, =1.0.6, =0.0.2, =0.3.0 and more Source cves: CVE-2025-27819 Source advisory: SNYK:JAVA-ORGAPACHEKAFKA-10350513...

ai.chronon:flink_2.12 (>=0.0.62 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:online_2.12 (>=0.0.25 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +5215 more potentially affected by CVE-2025-27818 via org.apache.kafka:kafka-clients (>=2.3.0 <=3.9.0)

org.apache.kafka:kafka-clients MAVEN version =2.3.0, =0.0.62, =0.0.25, =0.0.25, =0.0.86, =0.0.86, =thread-pool-0.0.24-dev, =0.0.6, =1.0.6, =1.0.6, =0.0.2, =0.1, =0.2.7, =0.2.7, =0.2.10 and more Source cves: CVE-2025-27818 Source advisory: SNYK:JAVA-ORGAPACHEKAFKA-10350567...

@agreejs/cli (>=0.0.1 <=3.2.43), @agreejs/rn-runner (>=3.2.1 <=3.2.15) +98 more potentially affected by CVE-2025-5896 via taro-css-to-react-native (>=1.3.0-beta.1 <=4.1.2-alpha.2)

taro-css-to-react-native NPM version =1.3.0-beta.1, =0.0.1, =3.2.1, =3.2.1, =1.0.0, =1.0.0, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0, =1.1.5, =1.0.0, =1.3.2 - @c-art/convert-cli =1.1.0 - @d-bigfish/cli =1.0.14 - @d1m-atom/taro-vue-cli =1.0.5 and more Source cves: CVE-2025-5896 Source advisory:...

@axeridev/flux-ui (>=0.0.7 <=0.4.3), @bpui/build-cli (=0.0.1) +21 more potentially affected by CVE-2025-5897 via @vue/cli-plugin-pwa (>=3.12.1 <=5.0.8)

@vue/cli-plugin-pwa NPM version =3.12.1, =0.0.7, =0.0.6, =0.0.14, =7.0.0-beta.3, =0.12.0-alpha.0, =0.1.2, =0.1.5, =0.1.5, =0.1.2, =7.0.0-beta.3, =2.0.0, =2.3.8 and more Source cves: CVE-2025-5897 Source advisory: OSV:GHSA-79VF-HF9F-J9Q8...

985-manager (>=1.1.9 <=1.8.9), @2bit/pm2m (=0.0.1) +1104 more potentially affected by CVE-2025-5891 via pm2 (>=0.5.7 <=6.0.8)

pm2 NPM version =0.5.7, =1.1.9, =0.1.0, =0.0.1, =1.16.13, =1.16.6, =1.4.1, =1.6.23, =1.16.6, =0.2.2, =0.2.2, =1.16.6, =1.16.6, =1.16.28-next-5a717317 and more Source cves: CVE-2025-5891 Source advisory: OSV:GHSA-X5GF-QVW8-R2RM...

@algolia/coquille (>=0.0.2 <=0.0.13), @candlelabs/sdk (>=1.0.1 <=1.0.2) +20 more potentially affected by CVE-2025-5889 via brace-expansion (>=1.1.0 <=1.1.11)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =1.1.1, =1.0.3-dev.20180316T104657Z.4a84a30, =1.1.0 and more Source cves: CVE-2025-5889 Source advisory: OSV:GHSA-V6H2-P8H4-QCJW...

@alfresco/adf-testing (=6.0.0-A.2-8258), @genexus/ngx-aws-deploy (=5.2.1) +6 more potentially affected by CVE-2025-5889 via brace-expansion (>=2.0.0 <=2.0.1)

brace-expansion NPM version =2.0.0, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver =1.1.2 - nx-cargo =1.0.0-alpha.2 Source cves: CVE-2025-5889 Source advisory: OSV:GHSA-V6H2-P8H4-QCJW...

jo-cli (=1.0.2) potentially affected by CVE-2025-5889 via brace-expansion (=3.0.0)

brace-expansion NPM version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli =1.0.2 Source cves: CVE-2025-5889 Source advisory: OSV:GHSA-V6H2-P8H4-QCJW...

kydra (>=1.0.10 <=1.0.11) potentially affected by CVE-2025-5889 via brace-expansion (=4.0.0)

brace-expansion NPM version =4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - kydra =1.0.10, =1.0.11 Source cves: CVE-2025-5889 Source advisory: OSV:GHSA-V6H2-P8H4-QCJW...

@haxtheweb/create (>=0.1.3 <=25.0.0), @haxtheweb/open-apis (>=11.0.2 <=11.0.3) potentially affected by CVE-2025-49141 via @haxtheweb/haxcms-nodejs (>=0.0.13 <=11.0.15)

@haxtheweb/haxcms-nodejs NPM version =0.0.13, =0.1.3, =11.0.2, =11.0.3 Source cves: CVE-2025-49141 Source advisory: OSV:GHSA-G4CF-PP4X-HQGW...

@actions-for-rust/core (>=0.1.6 <=0.1.8), @actions-rs-plus/core (>=0.0.0 <=0.7.5) +128 more potentially affected by CVE-2025-5890 via @actions/glob (>=0.1.2 <=0.7.0)

@actions/glob NPM version =0.1.2, =0.1.6, =0.0.0, =0.1.0, =1.0.1-2a6268e89ea5fbc66dadd1d897cac75b3f0a63e4.0, =0.1.0, =1.0.0, =4.0.0, =3.2.5, =1.1.0, =3.2.2, =2.0.0, =2.0.3 and more Source cves: CVE-2025-5890 Source advisory: SNYK:JS-ACTIONSGLOB-11484208...

@haxtheweb/create (>=0.1.3 <=11.0.2), @haxtheweb/open-apis (=11.0.2) potentially affected by CVE-2025-49139 via @haxtheweb/haxcms-nodejs (>=0.0.13 <=10.0.6)

@haxtheweb/haxcms-nodejs NPM version =0.0.13, =0.1.3, =11.0.2 - @haxtheweb/open-apis =11.0.2 Source cves: CVE-2025-49139 Source advisory: OSV:GHSA-V3PH-2Q5Q-CG88...

0lever-utils (>=0.0.2 <=0.0.7), 128autograder (>=5.0.1 <=6.0.0rc4) +12372 more potentially affected by CVE-2024-47081 via requests (>=0.13.7 <=2.32.3)

requests PYPI version =0.13.7, =0.0.2, =5.0.1, =0.0.1a0, =0.1.1001, =0.1.0, =0.0.2, =0.0.5, =0.1.0, =0.1.0, =0.1.8 and more Source cves: CVE-2024-47081 Source advisory: OSV:GHSA-9HJG-9R4M-MVJ7...

com.erudika:para-jar (>=1.30.0 <=1.50.7), com.erudika:para-war (>=1.24.4 <=1.49.5) potentially affected by CVE-2025-49009 via com.erudika:para-server (>=1.24.4 <=1.50.7)

com.erudika:para-server MAVEN version =1.24.4, =1.30.0, =1.24.4, =1.49.5 Source cves: CVE-2025-49009 Source advisory: OSV:GHSA-QX7G-FX8Q-545G...

org.apache.inlong:manager-client (>=1.3.0 <=2.0.0), org.apache.inlong:manager-client-examples (>=1.3.0 <=2.0.0) +2 more potentially affected by CVE-2025-27531 via org.apache.inlong:manager-pojo (>=1.13.0 <=2.0.0)

org.apache.inlong:manager-pojo MAVEN version =1.13.0, =1.3.0, =1.3.0, =1.3.0, =1.13.0, =2.0.0 Source cves: CVE-2025-27531 Source advisory: SNYK:JAVA-ORGAPACHEINLONG-10350439...

com.erudika:para-jar (>=1.30.0 <=1.50.7), com.erudika:para-war (>=1.24.4 <=1.49.5) potentially affected by CVE-2025-49009 via com.erudika:para-server (>=1.24.4 <=1.50.7)

com.erudika:para-server MAVEN version =1.24.4, =1.30.0, =1.24.4, =1.49.5 Source cves: CVE-2025-49009 Source advisory: SNYK:JAVA-COMERUDIKA-10304840...

aider-chat (=0.43.0), aimon-llamaindex (>=0.0.6 <=0.0.8) +685 more potentially affected by CVE-2025-1793 via llama-index-core (>=0.10.0 <=0.12.28)

llama-index-core PYPI version =0.10.0, =0.0.6, =1.1.0, =3.0.0, =1.7.0, =1.0.0, =0.0.3, =0.2.1, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.0, =0.3.0, =0.1.0, =0.4.0.dev2 and more Source cves: CVE-2025-1793 Source advisory: SNYK:PYTHON-LLAMAINDEXCORE-10332647...

llama-index-packs-deeplake-deepmemory-retriever (>=0.1.0 <=0.1.4), llama-index-packs-deeplake-multimodal-retrieval (>=0.1.0 <=0.1.4) potentially affected by CVE-2025-1793 via llama-index-vector-stores-deeplake (>=0.1.0 <=0.1.6)

llama-index-vector-stores-deeplake PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.4 Source cves: CVE-2025-1793 Source advisory: SNYK:PYTHON-LLAMAINDEXVECTORSTORESDEEPLAKE-10332650...

a3m (=0.1.0), aa-charlink (>=0.1.1 <=1.0.0) +2521 more potentially affected by CVE-2025-48432 via django (>=1.10.0 <=4.2.21)

django PYPI version =1.10.0, =0.1.1, =1.0.0, =1.0.0, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =1.4.0, =1.4.2 - adede =4.1.0 and more Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1447 more potentially affected by CVE-2025-48432 via django (>=5.2.0 <=5.2.15)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...

11x-wagtail-blog (>=0.0.0 <=0.2.0), aldryn-django (>=5.0.2.0 <=5.0.11.0) +253 more potentially affected by CVE-2025-48432 via django (>=5.0.0 <=5.1.1)

django PYPI version =5.0.0, =0.0.0, =5.0.2.0, =0.0.15, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.2.5 and more Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...

aldryn-django (>=4.2.10.0 <=4.2.18.0), alertwise (=1.0.0) +111 more potentially affected by CVE-2025-48432 via django (>=4.2.0 <=4.2.21)

django PYPI version =4.2.0, =4.2.10.0, =65.10.0, =7.5.1, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.8.0, =0.0.4.dev0, =8.0.0, =8.5.1 and more Source cves: CVE-2025-48432 Source advisory: OSV:PYSEC-2025-47...

chromatrace (>=0.1.6 <=0.1.7), ddos-blocker (>=0.0.3 <=0.0.13) +19 more potentially affected by CVE-2025-48432 via django (>=5.1.0 <=5.1.1)

django PYPI version =5.1.0, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =1.0.3, =0.6.2, =5.1.0, =0.2.30, =2.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2025-48432 Source advisory: OSV:PYSEC-2025-47...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1447 more potentially affected by CVE-2025-48432 via django (>=5.2.0 <=5.2.15)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-48432 Source advisory: OSV:PYSEC-2025-47...

11x-wagtail-blog (>=0.0.0 <=0.2.0), aldryn-django (>=5.0.2.0 <=5.0.11.0) +253 more potentially affected by CVE-2025-48432 via django (>=5.0.0 <=5.1.1)

django PYPI version =5.0.0, =0.0.0, =5.0.2.0, =0.0.15, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.2.5 and more Source cves: CVE-2025-48432 Source advisory: SNYK:PYTHON-DJANGO-10302884...

aa-charlink (>=0.1.1 <=1.0.0), aa-drifters (=0.1.0a0) +508 more potentially affected by CVE-2025-48432 via django (>=4.0.0 <=4.2.21)

django PYPI version =4.0.0, =0.1.1, =1.0.0, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =65.10.0, =65.10.3 and more Source cves: CVE-2025-48432 Source advisory: SNYK:PYTHON-DJANGO-10302884...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1447 more potentially affected by CVE-2025-48432 via django (>=5.2.0 <=5.2.15)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-48432 Source advisory: SNYK:PYTHON-DJANGO-10302884...

deno_cli (>=0.18.0-preview4 <=0.23.0), deno_cli_snapshots (>=0.0.3 <=0.19.0) +2 more potentially affected by CVE-2024-21486 via deno (>=0.15.0 <=0.6.0)

deno CARGO version =0.15.0, =0.18.0-preview4, =0.0.3, =0.0.1, =0.23.0 Source cves: CVE-2024-21486 Source advisory: OSV:GHSA-JV4X-JV3H-QFF5...

02url-querystring-http (>=1.0.1 <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5 <=1.0.6) +10042 more potentially affected by CVE-2025-48997 via multer (>=1.4.4-lts.1 <=2.0.0)

multer NPM version =1.4.4-lts.1, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - 6e-alpha-backend-admin =1.0.0 - 7-segunda-preentrega =1.0.0 and more Source cves: CVE-2025-48997 Source advisory: OSV:GHSA-G5HG-P3PH-G8QG...

@haxtheweb/create (>=10.0.0 <=11.0.2), @haxtheweb/open-apis (=11.0.2) potentially affected by CVE-2025-48996 via @haxtheweb/open-apis (=10.0.1)

@haxtheweb/open-apis NPM version =10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @haxtheweb/open-apis and may be impacted: - @haxtheweb/create =10.0.0, =11.0.2 - @haxtheweb/open-apis =11.0.2 Source cves: CVE-2025-48996 Source advisory:...

alertwise (=1.0.0), aos-signer (>=0.0.6 <=1.8.0b9) +15 more potentially affected by CVE-2025-48994 via signxml (>=2.10.1 <=4.0.2)

signxml PYPI version =2.10.1, =0.0.6, =0.5.1, =1.0.0, =0.5.1, =1.1.0, =0.1.0, =1.4.0, =2.0.0, =1.0.0, =0.5.3, =0.5.27, =1.5.3, =1.6.3 and more Source cves: CVE-2025-48994 Source advisory: OSV:GHSA-6VX8-PCWV-XHF4...