@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +305 more potentially affected by CVE-2023-3696 via mongoose (>=6.0.1, <=6.11.2)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.0.1, =0.1.9 and more Source cves: CVE-2023-3696 Source advisory: OSV:GHSA-9M93-W8W6-76HH...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +83 more potentially affected by CVE-2022-24441 via snyk (>=1.1.1, <=1.954.0)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =1.6.0, =1.1.0, =1.0.1, =1.0.2, =1.0.16 and more Source cves: CVE-2022-24441 Source advisory: OSV:GHSA-4VRV-93C7-M92J...

@alexktzk/cz-customizable (>=1.0.0, <=1.1.0), @algolia/coquille (>=0.0.2, <=0.0.13) +376 more potentially affected by CVE-2023-26115 via word-wrap (>=1.0.3, <=1.2.3)

word-wrap NPM version =1.0.3, =1.0.0, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.4.2, =0.0.0, =1.0.0, =0.1.0-preview, =0.1.0-preview, =6.0.0-alpha.16.20220105.1, =0.1.3, =0.1.17 and more Source cves: CVE-2023-26115 Source advisory: OSV:GHSA-J8XG-FQG3-53R7...

@activepieces/piece-amazon-s3 (0.0.2), @adobe/helix-admin-support (>=2.1.22, <=2.1.23) +473 more potentially affected by unknown CVE via fast-xml-parser (4.2.4)

fast-xml-parser NPM version 4.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-xml-parser and may be impacted: - @activepieces/piece-amazon-s3 0.0.2 - @adobe/helix-admin-support =2.1.22, =9.0.39, =2.1.1, =2.1.15, =1.11.158, =1.0.4-0, =1.2.39-0,...

GUAC 0.1 Beta: Google's Breakthrough Framework for Secure Software Supply Chains

Google on Wednesday announced the 0.1 Beta version of GUAC short for Graph for Understanding Artifact Composition for organizations to secure their software supply chains. To that end, the search giant is making available the open source framework as an API for developers to integrate their own...

11-builder (0.1.0), 2muchcoffee-react-scripts (0.1.0) +3092 more potentially affected by unknown CVE via fsevents (>=1.0.14, <=1.2.9)

fsevents NPM version =1.0.14, =0.1.0, =1.0.3, =0.1.4, =1.0.0-beta.1, =0.0.1, =0.7.1, =1.1.0-1, =1.0.0, =1.1.2, =1.1.9 - @abelmuro/food-dasher-app 1.0.0 - @accumineapps/hourlyactual 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2023-462...

acme-v2 (>=0.9.2, <=0.9.3), alipay-rs (>=0.2.0, <=0.4.6) +68 more potentially affected by unknown CVE via multipart (>=0.3.1, <=0.18.0)

multipart CARGO version =0.3.1, =0.9.2, =0.2.0, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0, =0.5.0, =0.1.0, =0.1.1, =0.1.7-99afa97, =0.1.8-1eada16 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0050...

about-filter (>=0.1.0, <=0.1.1), askama (0.12.0) +58 more potentially affected by unknown CVE via comrak (>=0.1.9, <=0.16.0)

comrak CARGO version =0.1.9, =0.1.0, =0.12.1, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.18 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XXMQ-4VPH-956W...

@web-desktop-environment/development-edition-server (>=2.0.0-2, <=2.0.0-alpha.11), @web-desktop-environment/pack-dev (>=2.0.0-1, <=2.0.0-alpha.11) potentially affected by CVE-2023-26114 via code-server (>=4.4.0, <=4.5.1)

code-server NPM version =4.4.0, =2.0.0-2, =2.0.0-1, =2.0.0-alpha.11 Source cves: CVE-2023-26114 Source advisory: OSV:GHSA-FRJG-G767-7363...

cargo-generate (>=0.13.1, <=0.16.0), cargo-temp (>=0.2.11, <=0.2.13) +31 more potentially affected by unknown CVE via git-hash (>=0.1.2, <=0.10.3)

git-hash CARGO version =0.1.2, =0.13.1, =0.2.11, =11.0.0, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0, =0.7.0, =0.3.0, =0.22.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...

7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +265 more potentially affected by CVE-2022-43441 via sqlite3 (>=5.0.0, <=5.1.4)

sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =0.0.15, =0.0.15, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =6.1.4, =6.1.4, =7.0.1, =6.1.4, =0.1.3-alpha.0, =0.3.0 and more Source cves: CVE-2022-43441 Source advisory: OSV:GHSA-JQV5-7XPX-QJ74...

aoer-plotty-rs (>=0.2.1, <=0.4.1), artano (>=0.3.6, <=0.3.9) +75 more potentially affected by unknown CVE via const-cstr (>=0.1.0, <=0.3.0)

const-cstr CARGO version =0.1.0, =0.2.1, =0.3.6, =0.11.0+8.3.2, =0.0.1, =1.0.0, =6.4.6, =0.1.0, =1.0.0, =0.4.2, =1.0.0, =0.8.16-pre, =0.2.4, =0.1.0, =0.3.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0020...

streaming-libdeflate-rs (>=0.2.4, <=0.3.0), v_frame (0.3.2) potentially affected by unknown CVE via maligned (0.2.1)

maligned CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on maligned and may be impacted: - streaming-libdeflate-rs =0.2.4, =0.3.0 - vframe 0.3.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0017...

abrute (>=0.1.7, <=0.1.9), alass-cli (>=1.0.0, <=2.0.0) +108 more potentially affected by unknown CVE via ascii (>=0.7.1, <=0.8.7)

ascii CARGO version =0.7.1, =0.1.7, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.2.0, =0.0.1, =0.0.0, =0.0.1, =0.0.1, =0.15.7, =2.0.0-beta3, =3.0.0-alpha.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MRRW-GRHQ-86GF...

bibe (>=0.1.0, <=0.1.4), bookmarkt (>=0.0.1, <=0.0.3) +41 more potentially affected by unknown CVE via kuchiki (>=0.3.4, <=0.8.1)

kuchiki CARGO version =0.3.4, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.4, =0.1.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0019...

acid-rs (>=1.1.0, <=1.1.1), agpm_pm (>=0.0.1, <=0.0.2) +783 more potentially affected by CVE-2023-22742 via git2 (>=0.1.21, <=0.16.0)

git2 CARGO version =0.1.21, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2023-22742 Source advisory: OSV:GHSA-M4CH-RFV5-X5G3...

nfprobe (0.0.1), terminus (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via elf_rs (>=0.1.1, <=0.1.3)

elfrs CARGO version =0.1.1, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-G6PW-999W-J75M...

@arve.knudsen/bankai (>=9.6.0, <=9.10.14), @citation-js/browserify-disc (1.3.4) +63 more potentially affected by CVE-2020-36632 via flat (>=1.0.0, <=1.6.0)

flat NPM version =1.0.0, =9.6.0, =2.6.0, =1.0.0, =1.0.0-1, =0.0.1, =0.0.1, =0.0.10, =1.0.0, =7.3.0, =9.10.4, =0.0.1, =0.0.3, =0.0.4 and more Source cves: CVE-2020-36632 Source advisory: OSV:GHSA-2J2X-2GPW-G8FM...

can2040 (>=0.1.2, <=0.1.5), card10-alloc (>=0.1.0, <=0.1.1) +13 more potentially affected by unknown CVE via alloc-cortex-m (>=0.2.2, <=0.4.4)

alloc-cortex-m CARGO version =0.2.2, =0.1.2, =0.1.0, =0.1.0, =0.0.4, =0.3.2, =0.1.0, =0.1.0, =0.5.6, =0.1.0, =0.1.1, =0.0.2, =0.0.11 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0073...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...