@abcpros/xpicash (>=1.1.1, <=1.1.2), @alakipalaki/handshake (>=0.1.0-305766c0, <=3.1.0) +71 more potentially affected by CVE-2023-50475 via bsock (>=0.0.2, <=0.1.11)

bsock NPM version =0.0.2, =1.1.1, =0.1.0-305766c0, =0.1.0-305766c0, =0.0.12, =1.0.0, =1.0.0, =0.0.12, =0.0.1, =1.0.1, =1.3.0 - adeps 4.99.0 - aliasing 0.1.0 - atomicagent 0.1.0 and more Source cves: CVE-2023-50475 Source advisory: OSV:GHSA-JJ93-39PF-7MCF...

async-ssh2-tokio (>=0.2.0, <=0.8.4), dev-tunnels (0.1.0) +5 more potentially affected by CVE-2023-48795 via russh (>=0.34.0, <=0.39.0)

russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - tunnels 0.1.0 Source cves: CVE-2023-48795 Source advisory: OSV:GHSA-45X7-PX36-X8W8...

at51 (>=0.1.1, <=0.4.1), atrac3p-decoder (>=0.1.0, <=0.1.2) +51 more potentially affected by CVE-2023-53156 via transpose (0.1.0)

transpose CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transpose and may be impacted: - at51 =0.1.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =2.6.2, =0.6.0, =0.1.0, =0.1.0, =0.1.1 and more Source...

@octokit/app (14.0.0-beta.1) potentially affected by CVE-2023-50728 via @octokit/webhooks (11.0.0-beta.1)

@octokit/webhooks NPM version 11.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on @octokit/webhooks and may be impacted: - @octokit/app 14.0.0-beta.1 Source cves: CVE-2023-50728 Source advisory: OSV:GHSA-PWFR-8PQ7-X9QV...

@git-filesystem/github (>=0.0.0, <=0.0.1), git-filesystem (>=0.0.0, <=0.0.1) potentially affected by CVE-2023-50728 via @octokit/webhooks (10.1.3)

@octokit/webhooks NPM version 10.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @octokit/webhooks and may be impacted: - @git-filesystem/github =0.0.0, =0.0.0, =0.0.1 Source cves: CVE-2023-50728 Source advisory: OSV:GHSA-PWFR-8PQ7-X9QV...

@graphql-inspector/action (>=3.4.2, <=5.0.4), release-drafter-github-app (>=5.16.0, <=6.4.0) potentially affected by CVE-2023-50728 via probot (>=12.2.0, <=12.3.1)

probot NPM version =12.2.0, =3.4.2, =5.16.0, =6.4.0 Source cves: CVE-2023-50728 Source advisory: OSV:GHSA-PWFR-8PQ7-X9QV...

@fdm-monster/server (>=1.5.0-rc1, <=1.5.3), @inlang/paraglide-js (>=1.0.0-prerelease.23, <=1.0.0-prerelease.25) +21 more potentially affected by CVE-2023-50728 via octokit (>=3.1.0, <=3.1.1)

octokit NPM version =3.1.0, =1.5.0-rc1, =1.0.0-prerelease.23, =0.1.0, =1.1.3, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2023-50728 Source advisory: OSV:GHSA-PWFR-8PQ7-X9QV...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2023-54366 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2023-54366 Source advisory: OSV:GHSA-X5FR-7HHJ-34J3...

@arakoodev/edgechains.js (>=0.1.24, <=0.30.1), @hono/zod-validator (0.0.2) +20 more potentially affected by CVE-2023-50710 via hono (>=3.0.0-rc.7, <=3.10.1)

hono NPM version =3.0.0-rc.7, =0.1.24, =0.0.1-alpha.1, =0.0.1-alpha.10, =0.0.1-alpha.10, =0.0.1-alpha.10, =0.0.1-alpha.0, =0.0.1, =0.0.2-alpha.15, =0.0.1-alpha.4, =0.0.1-alpha.6, =0.0.2-alpha.20, =0.0.1-alpha.0, =0.0.1-alpha.4, =0.0.2-alpha.23 and more Source cves: CVE-2023-50710 Source advisory:...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +2 more potentially affected by CVE-2023-6193 via quiche (>=0.16.0, <=0.18.0)

quiche CARGO version =0.16.0, =0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on quiche and may be impacted: - masquerade-proxy 0.1.0 - monoio-quiche 0.0.1 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2023-6193 Source advisory:...

@offchainlabs/l1-l3-teleport-contracts (>=0.1.0-alpha.1, <=1.0.1) potentially affected by CVE-2023-49798 via @openzeppelin/contracts (4.9.4)

@openzeppelin/contracts NPM version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/contracts and may be impacted: - @offchainlabs/l1-l3-teleport-contracts =0.1.0-alpha.1, =1.0.1 Source cves: CVE-2023-49798 Source advisory:...

@bbtfe/core (1.0.5), @inceptiongt/yapi-vendor (1.9.3) +79 more potentially affected by CVE-2023-26158 via mockjs (>=1.0.0, <=1.0.1-beta3)

mockjs NPM version =1.0.0, =0.0.1, =1.0.0-alpha.0, =0.1.0, =1.0.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.5, =0.1.7, =1.5.2 and more Source cves: CVE-2023-26158 Source advisory: OSV:GHSA-MH8J-9JVH-GJF6...

@angular-devkit/build-angular (17.1.0-next.0), @beetpx/beetpx (>=0.22.0, <=0.36.0) +17 more potentially affected by CVE-2023-49293 via vite (>=5.0.0, <=5.0.4)

vite NPM version =5.0.0, =0.22.0, =1.0.0-dev.74fcb60, =1.0.274, =0.0.1, =11.12.0-beta.0, =7.0.0, =0.1.38, =2.0.0-alpha.35, =0.12.0, =1.1.0, =2.0.9, =0.0.7, =1.1.0-develop.0, =1.1.0 and more Source cves: CVE-2023-49293 Source advisory: OSV:GHSA-92R3-M2MG-PJ97...

@amitojsingh366/pioneer-react (>=0.0.3, <=0.0.4), @angular-devkit/build-angular (>=17.0.0-rc.0, <=17.0.5) +51 more potentially affected by CVE-2023-49293 via vite (4.5.0)

vite NPM version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on vite and may be impacted: - @amitojsingh366/pioneer-react =0.0.3, =17.0.0-rc.0, =0.20.0, =1.0.0-rc.5, =0.5.4, =0.1.0, =17.0.0-next.11, =17.0.0-next.11, =0.0.0, =0.2.0,...

@bbc/timeline-state-resolver-tools (>=9.4.0-nightly-release53-6a8a2347-20250820-110110.0, <=10.0.0-nightly-release53-982ec310-20251124-232913.0), @bitrefill/airfill-widget (>=4.2.2, <=4.8.3) +159 more potentially affected by CVE-2024-21528 via node-gettext (>=0.1.2, <=3.0.1)

node-gettext NPM version =0.1.2, =9.4.0-nightly-release53-6a8a2347-20250820-110110.0, =4.2.2, =2.2.0, =2.2.0, =0.9.1, =1.1.2, =4.1.0-alpha.1, =0.0.4, =5.2.0-alpha.13, =5.2.0-alpha.18, =1.0.6, =1.0.17, =1.0.3, =4.1.2, =4.1.4 and more Source cves: CVE-2024-21528 Source advisory:...

@ai-lighthouse/cli (>=1.0.1, <=1.0.3), @ccnoname/kk-log (>=1.0.0, <=1.0.2) +60 more potentially affected by CVE-2023-44402 via electron (>=23.0.0, <=23.3.13)

electron NPM version =23.0.0, =1.0.1, =1.0.0, =1.0.15, =0.49.0, =0.0.1, =0.0.5, =0.30.0, =1.0.0-beta.1, =2.4.1, =0.0.2, =0.0.0-next-1d0257ec5ae772888fbfb677bbacf8cd7dfb3127, =0.0.0-next-1d0257ec5ae772888fbfb677bbacf8cd7dfb3127, =8.12.0 - @mongodb-js/compass-settings 0.14.0 and more Source cves:...

@finsemble/finsemble-core (>=8.8.0-beta.1, <=8.9.9), @finsemble/finsemble-electron-adapter (>=8.8.0-beta.1, <=8.9.9) +6 more potentially affected by CVE-2023-44402 via electron (>=24.0.0, <=24.4.1)

electron NPM version =24.0.0, =8.8.0-beta.1, =8.8.0-beta.1, =4.1.5, =2.0.99, =0.0.31, =0.0.33 - reduxtron 0.0.1-alpha Source cves: CVE-2023-44402 Source advisory: OSV:GHSA-7M48-WC93-9G85...

@dweb-browser/desktop (0.1.2), @dweb-browser/js-process (0.1.2) +27 more potentially affected by CVE-2023-44402 via electron (>=25.0.0-beta.1, <=25.8.0)

electron NPM version =25.0.0-beta.1, =1.0.0, =1.0.0, =0.6.0, =0.0.22, =0.0.93, =0.0.95 - firedev 16.444.5 - firedev-class-helpers 16.444.4 - firedev-config 16.444.4 - firedev-core 16.444.5 - firedev-logger 16.444.4 - firedev-rest 16.444.3 - firedev-storage 16.444.4 and more Source cves:...

certificate_authority (0.1.0), citadel_crypt (>=0.3.0, <=0.7.0) +15 more potentially affected by unknown CVE via pqc_kyber (>=0.4.0, <=0.7.1)

pqckyber CARGO version =0.4.0, =0.3.0, =0.3.0, =0.1.0-alpha, =1.3.0, =0.1.0, =11.0.0, =0.1.0, =9.0.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0079...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.webapp.modules:cloud-altemistafwk-webapp-tiles (>=3.0.0.release, <=3.1.0.release) +157 more potentially affected by CVE-2023-49735 via org.apache.tiles:tiles-core (>=2.0.1, <=3.0.8)

org.apache.tiles:tiles-core MAVEN version =2.0.1, =3.0.0.release, =3.0.0.release, =2.1.0, =1.2.2, =1.0.0, =1.0.1, =0.0.1, =1.0.14-vaadin1, =0.0.3, =0.0.3, =0.0.10 and more Source cves: CVE-2023-49735 Source advisory: OSV:GHSA-QW4H-3XJJ-84CC...