org.webjars.npm:nestjs__platform-express (>=8.4.7 <=9.0.0-next.2) potentially affected by CVE-2025-47944 via org.webjars.npm:multer (=1.4.4-lts.1)

org.webjars.npm:multer MAVEN version =1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2025-47944 Source advisory:...

02url-querystring-http (>=1.0.1 <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5 <=1.0.6) +10037 more potentially affected by CVE-2025-47944 via multer (>=1.4.4-lts.1 <=2.0.0-alpha.6)

multer NPM version =1.4.4-lts.1, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - 6e-alpha-backend-admin =1.0.0 - 7-segunda-preentrega =1.0.0 and more Source cves: CVE-2025-47944 Source advisory: OSV:GHSA-4PG4-QVPC-4Q3H...

org.webjars.npm:nestjs__platform-express (>=8.4.7 <=9.0.0-next.2) potentially affected by CVE-2025-47935 via org.webjars.npm:multer (=1.4.4-lts.1)

org.webjars.npm:multer MAVEN version =1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2025-47935 Source advisory:...

02url-querystring-http (>=1.0.1 <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5 <=1.0.6) +11583 more potentially affected by CVE-2025-47935 via multer (>=0.0.5 <=2.0.0-alpha.6)

multer NPM version =0.0.5, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - 6e-alpha-backend-admin =1.0.0 - 7-segunda-preentrega =1.0.0 and more Source cves: CVE-2025-47935 Source advisory: OSV:GHSA-44FP-W29J-9VJ5...

@jamietanna/patch-testing (>=0.1.0 <=0.2.28), @jamietanna/renovate-graph (>=0.24.0 <=0.30.0) +5 more potentially affected by CVE-2025-47934 via openpgp (>=6.0.0 <=6.1.0)

openpgp NPM version =6.0.0, =0.1.0, =0.24.0, =0.5.2, =7.2.5, =0.40.0, =2.0.0, =39.15.1, =41.0.0-next.22 Source cves: CVE-2025-47934 Source advisory: OSV:GHSA-8QFF-QR5Q-5PR8...

@adebaraayomide/synchro_sdk (>=0.0.3 <=0.1.0-synchro-sdk), @bitgo-beta/abstract-cosmos (>=1.0.0-alpha.24 <=1.0.1-beta.867) +215 more potentially affected by CVE-2025-47934 via openpgp (>=5.0.1 <=5.11.2)

openpgp NPM version =5.0.1, =0.0.3, =1.0.0-alpha.24, =1.0.2-beta.339, =1.0.0, =1.0.0, =1.1.1-beta.343, =2.20.1-beta.335, =14.2.1-beta.335, =0.0.1-beta.219, =1.6.1-alpha.75, =2.2.3-alpha.75, =1.3.3-alpha.75, =1.0.0, =1.0.0, =1.1.2-alpha.55, =3.1.2-beta.883 and more Source cves: CVE-2025-47934 Sour...

aaiopay (>=0.2.1 <=0.2.2), abc-xml-converter (>=1.0.0 <=1.0.1) +4007 more potentially affected by CVE-2025-47273 via setuptools (>=15.2.0 <=78.1.0)

setuptools PYPI version =15.2.0, =0.2.1, =1.0.0, =0.0.1, =0.1.18, =0.0.1, =0.1.0, =0.1.0, =0.2.6, =0.0.1, =1.6.0, =3.0.1 and more Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1595 more potentially affected by CVE-2025-2099 via transformers (>=4.0.0 <=4.4.2)

transformers PYPI version =4.0.0, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.0, =0.1.1 and more Source cves: CVE-2025-2099 Source advisory: SNYK:PYTHON-TRANSFORMERS-10185677...

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1691 more potentially affected by CVE-2025-2099 via transformers (>=2.10.0 <=4.4.2)

transformers PYPI version =2.10.0, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.1, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.2 and more Source cves: CVE-2025-2099 Source advisory: OSV:GHSA-QQ3J-4F4F-9583...

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1623 more potentially affected by CVE-2025-2099 via transformers (>=2.10.0 <=4.48.3)

transformers PYPI version =2.10.0, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.1, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.2 and more Source cves: CVE-2025-2099 Source advisory: OSV:PYSEC-2025-40...

app.valuationcontrol:library (>=0.5.8 <=0.5.9), at.aimon.ops:aimon-ops-api (>=0.0.1 <=0.0.2) +2667 more potentially affected by CVE-2025-41232 via org.springframework.security:spring-security-core (>=6.4.0 <=6.4.5)

org.springframework.security:spring-security-core MAVEN version =6.4.0, =0.5.8, =0.0.1, =55.v51410e712e0c, =1.5.4.RELEASE, =1.0.1, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =1.10.0, =1.10.0, =1.10.0, =1.15.1 and more Source cves: CVE-2025-41232 Source advisory:...

aaiopay (>=0.2.1 <=0.2.2), abc-xml-converter (>=1.0.0 <=1.0.1) +4007 more potentially affected by CVE-2025-47273 via setuptools (>=15.2.0 <=78.1.0)

setuptools PYPI version =15.2.0, =0.2.1, =1.0.0, =0.0.1, =0.1.18, =0.0.1, =0.1.0, =0.1.0, =0.2.6, =0.0.1, =1.6.0, =3.0.1 and more Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

adx (>=4.0.0 <=4.1.0), aicommits-rs (>=0.1.0 <=0.2.0) +301 more potentially affected by unknown CVE via surf (>=1.0.1 <=2.3.2)

surf CARGO version =1.0.1, =4.0.0, =0.1.0, =1.0.0, =0.3.0, =0.10.0, =0.3.0, =0.5.0, =0.1.0, =0.6.0, =0.3.0, =0.1.0, =0.0.1, =0.2.4 - async-bybit =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0036...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (=0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (=0.28.0) +11703 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (>=6.1.0 <=6.1.2)

org.springframework:spring-context MAVEN version =6.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.12.1 - ai.djl.spring:djl-spring-boot-starter-autoconfigure =0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto =0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-linux-x8664...

ai.optfor:spring-openai-api (>=0.1.3 <=0.3.25), ai.timefold.solver:timefold-solver-spring-boot-autoconfigure (>=1.0.0 <=1.4.0) +7541 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (>=6.0.0 <=6.0.23)

org.springframework:spring-context MAVEN version =6.0.0, =0.1.3, =1.0.0, =1.0.0, =0.1.6, =0.0.2, =0.0.6, =0.0.6, =1.3.0, =4.6.18, =4.0.0, =1.0.0, =2.1.0.RELEASE, =2.1.2.RELEASE and more Source cves: CVE-2025-22233 Source advisory: OSV:GHSA-4WP7-92PW-Q264...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +15959 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (>=6.2.0 <=6.2.6)

org.springframework:spring-context MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =0.9.0 - ai.astraform:remote-domain-author-kit-java =0.1.0 and more Source cves: CVE-2025-22233 Source advisory: OSV:GHSA-4WP7-92PW-Q264...

abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +250 more potentially affected by CVE-2025-32962 via flask-appbuilder (>=1.10.0 <=4.5.4)

flask-appbuilder PYPI version =1.10.0, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =2022.9.19, =0.2.1, =0.2.9b1, =1.0.7, =0.4.0, =0.1.0a1, =0.1.0a7 and more Source cves: CVE-2025-32962 Source advisory: OSV:GHSA-99PM-CH96-CCP2...

abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +133 more potentially affected by CVE-2025-32962 via flask-appbuilder (>=4.1.2 <=4.5.4)

flask-appbuilder PYPI version =4.1.2, =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.2.1, =0.4.0, =0.1.0a1, =0.8.2, =0.1.1, =0.1.1, =1.10.6 - airflow-cyberark-secrets-backend =0.1.0 and more Source cves: CVE-2025-32962 Source advisory: SNYK:PYTHON-FLASKAPPBUILDER-10182215...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-47774 via vyper (>=0.1.0b12 <=0.4.1)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.21.0 and more Source cves: CVE-2025-47774 Source advisory: OSV:GHSA-3VCG-J39X-CWFM...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-47774 via vyper (>=0.1.0b12 <=0.4.1)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.21.0 and more Source cves: CVE-2025-47774 Source advisory: SNYK:PYTHON-VYPER-10183409...

abracadabra (>=0.0.0 <=0.0.7), ac-solver (=0.1.0) +847 more potentially affected by CVE-2025-47287 via tornado (>=3.0.0 <=6.4.2)

tornado PYPI version =3.0.0, =0.0.0, =0.0.3, =0.0.5, =1.0.0, =1.0.0, =0.31.0, =1.0.0, =1.3.0, =3.3.3, =0.1.23, =0.0.9.1, =0.20.0, =0.9.5, =6.0.2, =6.4.25 and more Source cves: CVE-2025-47287 Source advisory: OSV:GHSA-7CX3-6M66-7C5M...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-47285 via vyper (>=0.1.0b12 <=0.4.1)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.21.0 and more Source cves: CVE-2025-47285 Source advisory: OSV:GHSA-QHR6-MGQR-MCHM...

ape-dasy (=0.1.0), avotes-parser-cli (>=0.5.5.post5 <=0.5.6) +7 more potentially affected by CVE-2025-47285 via vyper (>=0.3.9 <=0.4.1)

vyper PYPI version =0.3.9, =0.5.5.post5, =0.5.5.post4, =1.20.7, =0.0.1, =0.3.4, =0.8.31, =0.0.9, =3.4.7, =4.6.1 Source cves: CVE-2025-47285 Source advisory: SNYK:PYTHON-VYPER-10183408...

@adpt/testutils (>=0.1.0-next.1 <=0.4.0-next.6), @lavamoat/git-safe-dependencies (>=0.1.1 <=0.2.1) +6 more potentially affected by CVE-2025-4759 via lockfile-lint-api (>=1.0.7 <=5.9.1)

lockfile-lint-api NPM version =1.0.7, =0.1.0-next.1, =0.1.1, =1.0.0, =4.3.1-test1, =1.3.0, =1.0.1, =4.2.2, =4.3.1, =4.7.0 Source cves: CVE-2025-4759 Source advisory: OSV:GHSA-7CFR-5CJF-32P4...

abracadabra (>=0.0.0 <=0.0.7), ac-solver (=0.1.0) +616 more potentially affected by CVE-2025-47287 via tornado (>=6.0.0 <=6.4.2)

tornado PYPI version =6.0.0, =0.0.0, =0.7.3, =0.0.5, =1.0.0, =1.0.0, =0.31.0, =1.3.0, =0.1.23, =0.0.9.1, =0.20.0, =0.9.5, =22.5.13, =0.0.2, =0.0.5 and more Source cves: CVE-2025-47287 Source advisory: SNYK:PYTHON-TORNADO-10176059...

01.webpack-study (=1.0.0), 0226 (=1.0.0) +3004 more potentially affected by CVE-2025-1647 via bootstrap (=3.4.1)

bootstrap NPM version =3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap and may be impacted: - 01.webpack-study =1.0.0 - 0226 =1.0.0 - 03-npm =1.0.0 - 2cs-basecode =0.1.0, =4.13.7-rc4, =3.0.1, =3.0.4, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9,...

cn.jbone:jbone-ui (=1.0.0), io.springlets:springlets-boot-starter-web (>=1.2.0.RC2 <=1.2.0.RELEASE) +56 more potentially affected by CVE-2025-1647 via org.webjars.bower:bootstrap (>=3.4.1 <=4.0.0-beta.3)

org.webjars.bower:bootstrap MAVEN version =3.4.1, =1.2.0.RC2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1 and more Source cves: CVE-2025-1647 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-10176070...

org.activecomponents.jadex:jadex-distribution-standard (>=4.0.244 <=4.0.267), org.activecomponents.jadex:jadex-tools-runtimetools-web (>=4.0.244 <=4.0.267) +11 more potentially affected by CVE-2025-1647 via org.webjars.bowergithub.twbs:bootstrap (>=3.4.1 <=4.0.0-beta.3)

org.webjars.bowergithub.twbs:bootstrap MAVEN version =3.4.1, =4.0.244, =4.0.244, =2.4.0, =1.3.0, =1.3.1 Source cves: CVE-2025-1647 Source advisory: SNYK:JAVA-ORGWEBJARSBOWERGITHUBTWBS-10176069...

de.digitalcollections:iiif-bookshelf-webapp (>=3.1.1 <=4.0.0), net.aequologica.neo:dagr-vebchar (=0.5.2-alpha) +43 more potentially affected by CVE-2025-1647 via org.webjars.npm:bootstrap (>=3.4.1 <=4.0.0-beta.3)

org.webjars.npm:bootstrap MAVEN version =3.4.1, =3.1.1, =1.0.5, =1.0.4, =0.1.0, =0.5.0 - org.webjars.npm:bootstrap-print =3.1.2 - org.webjars.npm:bootstrap-social =5.1.1 - org.webjars.npm:bootstrap-sweetalert =1.0.1 - org.webjars.npm:bootstrap-tour =0.12.0 -...

com.adrianhurt:play-bootstrap_2.10 (>=1.0-P24-B4 <=1.1.1-P24-B4), com.adrianhurt:play-bootstrap_2.11 (>=1.0-P24-B4 <=1.1.1-P25-B4) +44 more potentially affected by CVE-2025-1647 via org.webjars:bootstrap (>=3.4.1 <=4.0.0-2)

org.webjars:bootstrap MAVEN version =3.4.1, =1.0-P24-B4, =1.0-P24-B4, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.8.RELEASE, =4.2.11, =2.5.0, =2.5.4 and more Source cves: CVE-2025-1647 Source advisory: SNYK:JAVA-ORGWEBJARS-10176068...

acolor (>=0.0.2 <=0.0.10), appl (>=0.1.0 <=0.2.2) +59 more potentially affected by unknown CVE via macroquad (>=0.2.9 <=0.4.1)

macroquad CARGO version =0.2.9, =0.0.2, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GG76-HG3V-5Q6C...

rm-gallery (>=0.1.0 <=0.1.2) potentially affected by CVE-2025-47783 via label-studio (=1.17.0)

label-studio PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - rm-gallery =0.1.0, =0.1.2 Source cves: CVE-2025-47783 Source advisory: SNYK:PYTHON-LABELSTUDIO-10182217...

rm-gallery (>=0.1.0 <=0.1.2) potentially affected by CVE-2025-47783 via label-studio (=1.17.0)

label-studio PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - rm-gallery =0.1.0, =0.1.2 Source cves: CVE-2025-47783 Source advisory: OSV:GHSA-8JHR-WPCM-HH4H...

reflex-ai (>=0.1.0a1 <=0.1.0a18), reflex-firebase (>=0.0.1 <=0.0.11) +3 more potentially affected by CVE-2025-47425 via reflex (>=0.6.0a4 <=0.6.2)

reflex PYPI version =0.6.0a4, =0.1.0a1, =0.0.1, =0.0.9, =10.0.11, =10.0.28 Source cves: CVE-2025-47425 Source advisory: SNYK:PYTHON-REFLEX-10442544...

pycodium (>=0.1.0 <=0.2.1), reflex-icon-library (=1.4.2) potentially affected by CVE-2025-47425 via reflex (>=0.7.12 <=0.7.14)

reflex PYPI version =0.7.12, =0.1.0, =0.2.1 - reflex-icon-library =1.4.2 Source cves: CVE-2025-47425 Source advisory: SNYK:PYTHON-REFLEX-10442544...

llm-strategy (>=2.0.0 <=2.2.0), llmtracer (>=1.1.0 <=1.2.1) potentially affected by CVE-2025-47425 via reflex (=0.3.10)

reflex PYPI version =0.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on reflex and may be impacted: - llm-strategy =2.0.0, =1.1.0, =1.2.1 Source cves: CVE-2025-47425 Source advisory: SNYK:PYTHON-REFLEX-10442544...

org.webjars.npm:firebase (=10.13.0), org.webjars.npm:firebase__auth (=1.7.7) +7 more potentially affected by CVE-2025-47279 via org.webjars.npm:undici (=5.28.4)

org.webjars.npm:undici MAVEN version =5.28.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:undici and may be impacted: - org.webjars.npm:firebase =10.13.0 - org.webjars.npm:firebaseauth =1.7.7 - org.webjars.npm:firebaseauth-compat...

0utmailauth (=1.0.0), @1023-ventures/ursa-core (>=0.5.2 <=0.5.3) +1878 more potentially affected by CVE-2025-47279 via undici (>=6.0.0 <=6.21.1)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =0.5.21, =0.5.21, =0.1.0, =0.1.5 - @aivue/chatbot-storage =1.0.1 and more Source cves: CVE-2025-47279 Source advisory: OSV:GHSA-CXRH-J4JR-QWG3...

2002-app-demo (>=1.0.0 <=1.2.1), 3.21lianxi (=1.0.0) +2015 more potentially affected by CVE-2025-47279 via undici (>=0.3.3 <=5.28.5)

undici NPM version =0.3.3, =1.0.0, =0.2.1, =0.5.0, =1.0.0, =0.1.23, =0.0.24, =0.0.0, =0.7.1, =3.2.4, =3.2.6 - @adb-storage-m/mem0ai =2.3.2 and more Source cves: CVE-2025-47279 Source advisory: OSV:GHSA-CXRH-J4JR-QWG3...

002-globals (=1.0.0), 007putra-my-bot (=1.1.1) +36350 more potentially affected by CVE-2025-47279 via undici (>=7.0.0 <=7.4.0)

undici NPM version =7.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =1.0.0, =0.3.96, =0.0.1, =0.0.9 - 2017-1535 =1.0.0 and more Source cves: CVE-2025-47279 Source advisory: OSV:GHSA-CXRH-J4JR-QWG3...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +15959 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.2.0 <=6.2.6)

org.springframework:spring-context MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =0.9.0 - ai.astraform:remote-domain-author-kit-java =0.1.0 and more Source cves: CVE-2024-38820, CVE-2025-22233 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-10176071...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (=0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (=0.28.0) +11703 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.1.0 <=6.1.2)

org.springframework:spring-context MAVEN version =6.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.12.1 - ai.djl.spring:djl-spring-boot-starter-autoconfigure =0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto =0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-linux-x8664...

rm-gallery (>=0.1.0 <=0.1.2) potentially affected by CVE-2025-47783 via label-studio (=1.17.0)

label-studio PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - rm-gallery =0.1.0, =0.1.2 Source cves: CVE-2025-47783 Source advisory: OSV:PYSEC-2025-124...

ai.dev-tools:ai-devtools (>=0.1.12 <=0.1.20), ai.dev-tools:ai-devtools-selenium (>=0.1.2 <=0.1.11) +599 more potentially affected by CVE-2025-4641 via io.github.bonigarcia:webdrivermanager (>=1.0.0 <=6.0.1)

io.github.bonigarcia:webdrivermanager MAVEN version =1.0.0, =0.1.12, =0.1.2, =0.1.1, =0.0.3, =0.2.6, =0.2.48 and more Source cves: CVE-2025-4641 Source advisory: OSV:GHSA-PWM3-776C-8Q7Q...

com.nordstrom.ui-tools:selenium-foundation (>=28.5.1-s3 <=29.8.0-s3), com.sdl.lt:Testy (>=20.08.466.0_eb932e0 <=20.08.487.0_526db13) +7 more potentially affected by CVE-2025-4641 via io.github.bonigarcia:webdrivermanager (>=6.0.0 <=6.0.1)

io.github.bonigarcia:webdrivermanager MAVEN version =6.0.0, =28.5.1-s3, =20.08.466.0eb932e0, =1.0.0-Alpha1, =0.8.1.2, =1.1.6, =0.2.16.16appium, =0.2.23appium Source cves: CVE-2025-4641 Source advisory: SNYK:JAVA-IOGITHUBBONIGARCIA-10380065...

com.ibeetl:iotdb (>=3.1.3-RELEASE <=3.1.4-RELEASE), io.edurt.datacap.plugin.jdbc:datacap-plugin-jdbc-iotdb (>=1.3.0 <=1.5.0) +22 more potentially affected by CVE-2025-26795 via org.apache.iotdb:iotdb-jdbc (>=0.10.0 <=1.3.4-1)

org.apache.iotdb:iotdb-jdbc MAVEN version =0.10.0, =3.1.3-RELEASE, =1.3.0, =1.6.0, =2024.4.0, =8.6.5-20231023, =0.13.0, =0.14.0-preview2, =0.10.0, =0.8.0, =0.12.0, =0.8.0, =0.8.0, =0.13.0, =0.9.0, =0.8.0, =1.3.2 and more Source cves: CVE-2025-26795 Source advisory: OSV:GHSA-GP98-HFVM-2R4X...

org.apache.iotdb:customize-mqtt-example (>=0.13.0 <=1.3.3), org.apache.iotdb:influxdb-protocol (>=0.14.0-preview1 <=1.1.2) +15 more potentially affected by CVE-2025-26795 via org.apache.iotdb:iotdb-server (>=0.10.0 <=1.3.3)

org.apache.iotdb:iotdb-server MAVEN version =0.10.0, =0.13.0, =0.14.0-preview1, =0.14.0-preview3, =0.13.0, =0.14.0-preview2, =0.14.0-preview2, =0.12.0, =0.14.0-preview1, =0.8.0, =0.14.0-preview1, =1.3.0, =0.14.0-preview2, =0.12.6, =0.14.0-preview1, =1.0.0, =1.1.2 and more Source cves:...

org.apache.iotdb:integration-test (=2.0.1-beta), org.apache.iotdb:iotdb-cli (=2.0.1-beta) +2 more potentially affected by CVE-2025-26795 via org.apache.iotdb:iotdb-jdbc (>=2.0.1-beta <=2.0.2-1)

org.apache.iotdb:iotdb-jdbc MAVEN version =2.0.1-beta, =2.0.1-beta, =2.0.2-1 Source cves: CVE-2025-26795 Source advisory: OSV:GHSA-GP98-HFVM-2R4X...

org.apache.iotdb:integration-test (=2.0.1-beta), org.apache.iotdb:iotdb-cli (=2.0.1-beta) +2 more potentially affected by CVE-2025-26795 via org.apache.iotdb:iotdb-jdbc (>=2.0.1-beta <=2.0.2-1)

org.apache.iotdb:iotdb-jdbc MAVEN version =2.0.1-beta, =2.0.1-beta, =2.0.2-1 Source cves: CVE-2025-26795 Source advisory: SNYK:JAVA-ORGAPACHEIOTDB-10176117...

com.ibeetl:iotdb (>=3.1.3-RELEASE <=3.1.4-RELEASE), io.edurt.datacap.plugin.jdbc:datacap-plugin-jdbc-iotdb (>=1.3.0 <=1.5.0) +22 more potentially affected by CVE-2025-26795 via org.apache.iotdb:iotdb-jdbc (>=0.10.0 <=1.3.4-1)

org.apache.iotdb:iotdb-jdbc MAVEN version =0.10.0, =3.1.3-RELEASE, =1.3.0, =1.6.0, =2024.4.0, =8.6.5-20231023, =0.13.0, =0.14.0-preview2, =0.10.0, =0.8.0, =0.12.0, =0.8.0, =0.8.0, =0.13.0, =0.9.0, =0.8.0, =1.3.2 and more Source cves: CVE-2025-26795 Source advisory: SNYK:JAVA-ORGAPACHEIOTDB-101761...