@rigorous/google-translate (=1.0.13), breadbutter-js (=4.6.0) +2 more potentially affected by CVE-2023-48711 via google-translate-api-browser (>=1.1.521 <=3.0.1)

google-translate-api-browser NPM version =1.1.521, =1.6.0, =0.1.2, =0.1.5 Source cves: CVE-2023-48711 Source advisory: OSV:GHSA-4233-7Q5Q-M7P6...

01os (>=0.0.1 <=0.0.14), 0b1-protocol (>=0.1.0 <=0.1.3) +43009 more potentially affected by CVE-2023-49082 via aiohttp (>=0.13.1 <=3.8.6)

aiohttp PYPI version =0.13.1, =0.0.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1, =0.1.2, =0.1.3 - 1942pyc =7.0.1 and more Source cves: CVE-2023-49082 Source advisory: OSV:GHSA-QVRW-V9RV-5RJX...

@glarus-labs/vendure-social-auth (>=0.0.1 <=0.1.1), @mirahi/vendure-adyen-dropin-plugin (>=0.0.1 <=0.0.5) +40 more potentially affected by unknown CVE via @vendure/core (>=0.11.1 <=2.1.2)

@vendure/core NPM version =0.11.1, =0.0.1, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WM63-7627-CH33...

aana (>=0.2.1 <=0.2.4), abao-ai (=0.0.5) +1094 more potentially affected by CVE-2023-48022 +4 more via ray (>=0.5.0 <=2.8.0)

ray PYPI version =0.5.0, =0.2.1, =0.0.6, =0.0.1b1, =0.1.1, =0.2.0, =0.0.2, =0.1.1, =0.2.0, =0.0.1, =0.0.0, =0.2.11 and more Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019, CVE-2023-6020, CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

10secondsofcode-custom (=1.0.0), 10up-toolkit (>=4.2.0 <=5.0.0) +5505 more potentially affected by unknown CVE via sharp (>=0.10.1 <=0.32.5)

sharp NPM version =0.10.1, =4.2.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =0.1.2, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.1, =4.11.0, =1.0.0, =1.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-54XQ-CGQR-RPM3...

nautobot-device-resources (=1.0.0) potentially affected by CVE-2023-46128 via nautobot (=2.0.0)

nautobot PYPI version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-device-resources =1.0.0 Source cves: CVE-2023-46128 Source advisory: OSV:PYSEC-2023-220...

modoboa-automua (=1.0.0) potentially affected by CVE-2023-5690 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-5690 Source advisory: OSV:PYSEC-2023-217...

CVE-2023-5178

creationtimestamp| type| source ---|---|--- 2023-10-17 11:54:14+00:00| seen| https://t.me/apsecurity/194 2023-10-17 11:54:14+00:00| seen| https://t.me/apsecurity/136 2023-11-01 19:22:17+00:00| seen| https://t.me/cibsecurity/73352 2023-11-29 07:54:21+00:00| seen| https://t.me/arpsyndicate/696...

0xsodium (>=0.0.0 <=1.48.0), 3extensions (=1.0.1) +965 more potentially affected by CVE-2023-26144 via graphql (>=16.3.0 <=16.8.0)

graphql NPM version =16.3.0, =0.0.0, =0.0.1, =0.0.0, =0.0.0, =0.0.1, =1.16.13, =1.8.5, =1.1.12, =1.6.23, =1.16.6, =1.1.12, =1.8.5, =1.16.33, =1.0.0, =1.17.12-beta-20260420-075606-d7d7a9c7 and more Source cves: CVE-2023-26144 Source advisory: OSV:GHSA-9PV7-VFVM-6VR7...

HPGO (=0.9.2), algebraics (>=0.1.2 <=0.2.0) +243 more potentially affected by unknown CVE via inventory (>=0.1.10 <=0.1.11)

inventory CARGO version =0.1.10, =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.7.0, =0.6.0, =0.5.0, =0.6.0, =0.4.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-36XM-35QQ-795W...

0.app1 (=1.0.52), 0.edsql (>=1.0.49 <=1.0.50) +1616 more potentially affected by CVE-2023-29198 via electron (>=0.1.2 <=22.3.5)

electron NPM version =0.1.2, =1.0.49, =1.0.49, =1.0.49, =1.0.0, =1.0.0, =1.0.6, =4.0.23, =0.0.1, =0.0.7, =0.0.25 and more Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@gov.au/pancake (>=0.0.6 <=0.0.10), agile-alarm (>=0.0.1 <=0.0.2) +32 more potentially affected by CVE-2023-40582 via find-exec (>=0.0.3 <=1.0.2)

find-exec NPM version =0.0.3, =0.0.6, =0.0.1, =1.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0, =0.1.0, =0.1.0, =1.4.0, =1.4.9 and more Source cves: CVE-2023-40582 Source advisory: OSV:GHSA-95RP-6GQP-6622...

@goauthentik/web (>=0.0.1 <=0.0.10) potentially affected by CVE-2023-39522 via @goauthentik/api (=2022.8.2-1663409478)

@goauthentik/api NPM version =2022.8.2-1663409478 is affected by a known vulnerability. The following packages have a transitive dependency on @goauthentik/api and may be impacted: - @goauthentik/web =0.0.1, =0.0.10 Source cves: CVE-2023-39522 Source advisory: OSV:GHSA-VMF9-6PCV-XR87...

a2grunnerp (>=0.1.0 <=0.1.8), abuseipdb-wrapper (=0.1.7) +389 more potentially affected by CVE-2022-40896 via pygments (>=1.6.0 <=2.14.0)

pygments PYPI version =1.6.0, =0.1.0, =2.0.0.1, =0.0.1, =1.3.0, =0.3.2, =0.4.0, =1.0.0, =0.4.0, =4.2.0, =4.2.3 and more Source cves: CVE-2022-40896 Source advisory: OSV:GHSA-MRWQ-X4V8-FH7P...

a2grunnerp (>=0.1.0 <=0.1.8), dcicsnovault (>=2.0.0b4 <=2.0.0b7) +5 more potentially affected by CVE-2023-37271 via restrictedpython (>=6.0.0 <=6.0.0a1.dev0)

restrictedpython PYPI version =6.0.0, =0.1.0, =2.0.0b4, =0.0.42a3, =2.10.0, =2025.9.5, =4.8.4, =4.8.11 Source cves: CVE-2023-37271 Source advisory: OSV:GHSA-WQC8-X2PR-7JQH...

agent-actors (=0.1.0), agent-reader (>=0.2.1 <=0.2.2) +176 more potentially affected by CVE-2023-36189 via langchain (>=0.0.100 <=0.0.246)

langchain PYPI version =0.0.100, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.5, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.1.3, =0.1.5 and more Source cves: CVE-2023-36189 Source advisory: OSV:GHSA-7Q94-QPJR-XPGM...

ch.artaios:openchemlib-vaadin (>=1.0.0 <=3.0.0), ch.jubnl:vsecureflow (>=0.0.15 <=0.0.16) +671 more potentially affected by CVE-2023-25499 via com.vaadin:flow-server (>=1.1.0 <=2.8.1)

com.vaadin:flow-server MAVEN version =1.1.0, =1.0.0, =0.0.15, =2.1.1, =1.0.0, =1.0.0, =1.0.0, =0.1, =1.0.0, =1.4.0, =1.5.0 and more Source cves: CVE-2023-25499 Source advisory: OSV:GHSA-5F9V-MV5G-JH5Q...

@belym.a.2105/publish-please (>=2.4.0 <=2.4.1), @codefresh-io/docker-compose-environment (>=0.0.4 <=0.0.8) +112 more potentially affected by CVE-2024-21532 via ggit (>=0.0.4 <=2.4.9)

ggit NPM version =0.0.4, =2.4.0, =0.0.4, =0.0.12, =1.0.1, =0.1.5, =0.0.190, =1.1.2, =0.7.2, =0.1.0, =4.1.6, =0.1.0, =0.0.2, =0.7.3, =0.10.71 and more Source cves: CVE-2024-21532 Source advisory: SNYK:JS-GGIT-5731320...

@harmony.ac/runner (>=0.0.0 <=2.1.0) potentially affected by CVE-2023-35167 via remult (=0.18.1)

remult NPM version =0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on remult and may be impacted: - @harmony.ac/runner =0.0.0, =2.1.0 Source cves: CVE-2023-35167 Source advisory: OSV:GHSA-7HH3-3X64-V2G9...

0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +2475 more potentially affected by unknown CVE via cryptography (>=0.6.1 <=40.0.2)

cryptography PYPI version =0.6.1, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =1.0.0, =2.6.3, =2.3.36, =1.0.4, =2.0.0rc0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5CPQ-8WJ7-HF2V...