blockbuster (0.0.2) potentially affected by unknown CVE via mpl-bubblegum (0.1.1)

mpl-bubblegum CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mpl-bubblegum and may be impacted: - blockbuster 0.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8R76-FR72-J32W...

avrisp (0.3.0), brood (0.1.0) +23 more potentially affected by unknown CVE via claim (>=0.3.1, <=0.5.0)

claim CARGO version =0.3.1, =0.1.0, =0.2.0, =0.1.1, =0.1.0, =0.0.1, =0.0.2, =0.9.0, =0.8.0, =0.2.0, =0.4.0, =1.0.2, =1.2.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0077...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +55 more potentially affected by CVE-2022-22984 via snyk-sbt-plugin (>=2.0.0, <=2.15.0)

snyk-sbt-plugin NPM version =2.0.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =0.0.2, =0.0.7, =0.2.0-a1, =0.2.8 and more Source cves: CVE-2022-22984 Source advisory: OSV:GHSA-4X6G-3CMX-W76R...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.0), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=5.7.6) +64 more potentially affected by CVE-2022-22984 via snyk-python-plugin (>=1.0.0, <=1.24.0)

snyk-python-plugin NPM version =1.0.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =0.0.2, =0.0.11, =1.0.1 - @ericblade/quagga2-redux-middleware 1.0.1 and more Source cves: CVE-2022-22984 Source advisory:...

abci-storage (0.0.3), bench-trie (>=0.12.0, <=0.12.2) +224 more potentially affected by unknown CVE via parity-util-mem (>=0.1.0, <=0.12.0)

parity-util-mem CARGO version =0.1.0, =0.12.0, =0.8.8, =1.0.0, =2.0.0, =0.1.0, =0.1.0, =0.2.2 - evan-test-pallet 3.0.0 - fc-db 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0080...

@appium/fake-driver (>=3.2.5, <=4.2.2), @barchart/marketdata-api-js (>=5.16.2, <=5.27.0) +77 more potentially affected by CVE-2022-39353 via @xmldom/xmldom (>=0.8.0, <=0.8.3)

@xmldom/xmldom NPM version =0.8.0, =3.2.5, =5.16.2, =1.3.2, =0.2.1-beta.36, =10.1.1, =1.0.0-alpha1, =0.0.101-beta.22, =1.0.0, =10.1.1, =4.0.0-beta.0, =4.0.0-beta.0, =1.0.2, =0.0.1, =1.0.0, =1.0.1, =2.2.0 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

OSV-2022-1074 Invalid-free in _dealloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52587 Crash type: Invalid-free Crash state: dealloc PyDECREF framedealloc...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8747 more potentially affected by CVE-2022-37603 via loader-utils (>=2.0.0, <=2.0.3)

loader-utils NPM version =2.0.0, =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

@aicore/cocodb (>=1.0.1, <=1.0.6), @chainlink/external-adapter-framework (>=0.0.65, <=0.12.0) +77 more potentially affected by CVE-2022-39288 via fastify (>=4.0.2, <=4.7.0)

fastify NPM version =4.0.2, =1.0.1, =0.0.65, =1.1.1, =5.0.1, =1.0.0, =2.0.0, =9.0.0-next.2, =3.7.4, =2.2.1-canary.98, =3.0.0, =3.0.0, =0.0.1, =0.0.5, =6.0.0-6-next.35, =6.0.0-6-next.49 and more Source cves: CVE-2022-39288 Source advisory: OSV:GHSA-455W-C45V-86RG...

@dci-lint/cmd-api-server (>=0.3.0, <=0.4.0), @dci-lint/test-api-client (>=0.3.0, <=0.4.0) +46 more potentially affected by CVE-2022-36083 via jose (>=1.18.1, <=1.28.1)

jose NPM version =1.18.1, =0.3.0, =0.3.0, =0.3.0, =0.10.0-unstable.0042dcd, =0.6.1, =0.6.3, =0.6.3, =0.6.4, =0.6.3, =0.6.9, =0.6.1, =0.6.3, =0.6.3, =0.6.3, =0.6.5, =0.9.4 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@netceterapx/click-to-pay-embedded-sdk (>=0.0.1, <=1.0.5) potentially affected by CVE-2022-36083 via jose-browser-runtime (4.1.2)

jose-browser-runtime NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on jose-browser-runtime and may be impacted: - @netceterapx/click-to-pay-embedded-sdk =0.0.1, =1.0.5 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ...

2-package-manager (1.0.0), @mspguarenteed/common (1.0.4) +3 more potentially affected by unknown CVE via mongoos (0.0.1-security)

mongoos NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mongoos and may be impacted: - 2-package-manager 1.0.0 - @mspguarenteed/common 1.0.4 - @shopappshree/common =1.0.1, =1.0.4 - calvin-2024 1.0.0 - liana-2024 1.0.0 Source...

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2022-31147 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2022-31147 Source advisory: OSV:GHSA-FFMH-X56J-9RC3...

abstraps (0.1.8), aivm (>=0.2.0, <=0.3.0) +229 more potentially affected by CVE-2022-31104 via cranelift-codegen (>=0.14.0, <=0.84.0)

cranelift-codegen CARGO version =0.14.0, =0.2.0, =0.1.0, =0.1.0, =0.5.0, =0.26.1, =0.1.0, =0.1.0, =0.1.0, =1.1.0-rc.1, =0.13.2, =0.8.0-alpha1, =1.3.4 and more Source cves: CVE-2022-31104 Source advisory: OSV:GHSA-JQWC-C49R-4W2X...

amethyst-console (0.1.0), amethyst-imgui (>=0.5.0, <=0.6.0) +153 more potentially affected by unknown CVE via clipboard (>=0.1.2, <=0.5.0)

clipboard CARGO version =0.1.2, =0.5.0, =0.1.0, =0.8.0, =0.8.0, =0.4.0, =0.6.0, =1.4.0, =0.1.0, =0.5.4, =0.2.0, =0.2.0, =0.7.7, =0.2.0, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0056...

be-iq_shared-styled-components (0.0.26) potentially affected by unknown CVE via plugin-transform-react-jsx (0.0.1-security)

plugin-transform-react-jsx NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-transform-react-jsx and may be impacted: - be-iqshared-styled-components 0.0.26 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5373...

@eqproject/eqp-dashboard (>=2.0.3, <=2.5.2), @eqproject/eqp-datetimerangepicker (>=0.0.1, <=3.0.12) +7 more potentially affected by unknown CVE via ngx-translate (0.0.1-security)

ngx-translate NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ngx-translate and may be impacted: - @eqproject/eqp-dashboard =2.0.3, =0.0.1, =2.0.10, =0.0.1, =18.0.0-beta.2 - kms-ngx-ui 16.12.30 - mat-table-ext 0.0.0 -...

magnirepudiandae (>=1.0.0, <=1.2.0), temporibusbeatae (>=1.0.0, <=1.3.1) +2 more potentially affected by unknown CVE via metamask (0.0.1-security)

metamask NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on metamask and may be impacted: - magnirepudiandae =1.0.0, =1.0.0, =1.1.2, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4571...

glog (0.1.0), simconnect (0.1.4) +3 more potentially affected by unknown CVE via thread_local (1.0.1)

threadlocal CARGO version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on threadlocal and may be impacted: - glog 0.1.0 - simconnect 0.1.4 - skia-bindings =0.37.0, =0.37.0, =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory:...

acidalia (>=0.1.0, <=0.1.3), acl-rs (0.1.0) +863 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.1.0, =0.1.0, =0.0.2, =0.0.9, =0.1.0, =0.5.0, =0.10.0, =0.4.4, =0.3.0, =0.3.1 - annotate-output 0.1.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-WGRG-5H56-JG27...