@ckies/cli (>=0.0.2, <=0.0.4), @crawless/utils (>=1.0.0, <=1.0.24) +82 more potentially affected by CVE-2023-26139 via underscore-keypath (>=0.0.15, <=0.9.3)

underscore-keypath NPM version =0.0.15, =0.0.2, =1.0.0, =0.1.1, =0.0.1, =1.0.1, =1.2.0, =1.0.2, =1.0.0, =1.457.521, =0.0.1, =0.0.1, =1.0.0 and more Source cves: CVE-2023-26139 Source advisory: OSV:GHSA-GPVC-MX6G-CCHV...

anchor-client (0.26.0), basejmp (0.1.0) +226 more potentially affected by unknown CVE via dlopen_derive (0.1.4)

dlopenderive CARGO version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dlopenderive and may be impacted: - anchor-client 0.26.0 - basejmp 0.1.0 - bonfida-test-utils 0.1.0 - bonfida-utils =0.2.3, =0.2.0, =0.14.0, =0.1.0, =0.1.0, =0.29.0, =0.1....

kyc3-sdk (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via ethersjs (0.0.1-security)

ethersjs NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ethersjs and may be impacted: - kyc3-sdk =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2023-315...

@christianhugo/mobile-builder (0.7.3-beta.3), @saltcorn/mobile-builder (>=0.7.2-beta.6, <=0.7.3-beta.3) potentially affected by unknown CVE via @saltcorn/cli (>=0.7.2, <=0.7.3-beta.3)

@saltcorn/cli NPM version =0.7.2, =0.7.2-beta.6, =0.7.3-beta.3 Source cves: unknown CVE Source advisory: OSV:GHSA-WXF3-4FVJ-VQQX...

sails-hook-api-version-accept (0.1.0), sails-hook-route (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-38504 via sails (>=1.0.1, <=1.0.3-2)

sails NPM version =1.0.1, =0.0.1, =0.0.4 Source cves: CVE-2023-38504 Source advisory: OSV:GHSA-GPW9-FWM8-7RX7...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +100 more potentially affected by CVE-2023-34235 via @strapi/utils (>=4.0.0, <=4.10.7)

@strapi/utils NPM version =4.0.0, =1.0.0, =1.3.0, =1.4.1 - @codeparticle/strapi-plugin-graphql 4.9.2 and more Source cves: CVE-2023-34235 Source advisory: OSV:GHSA-9XG4-3QFM-9W8F...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +43 more potentially affected by CVE-2023-34235 via @strapi/database (>=4.0.0, <=4.10.7)

@strapi/database NPM version =4.0.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-34235 Source advisory: OSV:GHSA-9XG4-3QFM-9W8F...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +43 more potentially affected by CVE-2023-34093 via @strapi/database (>=4.0.0, <=4.10.7)

@strapi/database NPM version =4.0.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-34093 Source advisory: OSV:GHSA-CHMR-RG2F-9JMF...

@chargeover/strapi (0.0.1-rc1.1), @code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.5.1) +34 more potentially affected by CVE-2023-34093 via @strapi/strapi (>=4.0.0-beta.0, <=4.10.7)

@strapi/strapi NPM version =4.0.0-beta.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.9.2, =4.9.2, =1.0.5, =1.0.5, =1.0.0-alpha.0, =1.0.0-alpha.3 - @nexacarts/admin 2.0.9 and more Source cves: CVE-2023-34093 Source advisory: OSV:GHSA-CHMR-RG2F-9JMF...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +2 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (>=5.0.0-pre.9, <=5.0.5)

@feathersjs/transport-commons NPM version =5.0.0-pre.9, =0.4.11, =0.5.4, =0.5.8 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

@xr3ngine/client-core (>=0.2.15, <=0.2.18), @xr3ngine/client-ml (>=0.2.15, <=0.2.18) +1 more potentially affected by CVE-2023-37899 via @feathersjs/socketio (>=4.5.9, <=4.5.11)

@feathersjs/socketio NPM version =4.5.9, =0.2.15, =0.2.15, =0.2.18 - @xr3ngine/server-core 0.2.14 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

bridge_lmdb (0.1.0), ithos (0.0.0) +3 more potentially affected by unknown CVE via lmdb-rs (0.7.6)

lmdb-rs CARGO version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on lmdb-rs and may be impacted: - bridgelmdb 0.1.0 - ithos 0.0.0 - sanakirja =1.0.0, =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-F9G6-FP84-FV92...

ostree-ext (>=0.1.0, <=0.9.1) potentially affected by CVE-2022-47085 via ostree (>=0.11.0, <=0.15.0)

ostree CARGO version =0.11.0, =0.1.0, =0.9.1 Source cves: CVE-2022-47085 Source advisory: OSV:GHSA-X96G-95FQ-4XV4...

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (>=0.3.5, <=0.17.9) +741 more potentially affected by CVE-2023-3696 via mongoose (>=5.0.0, <=5.13.17)

mongoose NPM version =5.0.0, =0.24.0, =0.3.5, =0.2.0, =3.7.0, =0.1.17, =1.0.0, =2.8.0, =0.0.1, =0.0.2, =0.7.0, =1.0.33, =2.1.3 and more Source cves: CVE-2023-3696 Source advisory: OSV:GHSA-9M93-W8W6-76HH...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +46 more potentially affected by CVE-2023-3696 via mongoose (>=7.0.0, <=7.3.2)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =2.0.18, =0.3.0, =0.3.0, =0.3.0, =1.0.0, =0.1.33, =0.1.35 - @meniuapp/data 0.0.2 and more Source cves: CVE-2023-3696 Source advisory: OSV:GHSA-9M93-W8W6-76HH...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2023-37466 via vm2 (>=3.0.0, <=3.9.19)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2023-37903 +1 more via vm2 (>=3.0.0, <=3.9.19)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

a4 (>=0.0.1, <=0.0.4), a4-core (>=0.0.3, <=0.0.4) +984 more potentially affected by unknown CVE via atomic-polyfill (1.0.3)

atomic-polyfill CARGO version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on atomic-polyfill and may be impacted: - a4 =0.0.1, =0.0.3, =0.23.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.1, =0.5.2 and more Source cves: unknown...

@bnsights-test/test-admin-portal (>=0.0.4, <=0.0.147), @bnsights-test/test-controls (>=0.0.4, <=0.0.63) +27 more potentially affected by unknown CVE via sweetalert2 (>=11.6.15, <=11.22.3)

sweetalert2 NPM version =11.6.15, =0.0.4, =0.0.4, =1.0.0, =1.0.110, =0.0.0-20240903040200, =1.10.0, =15.2.16, =1.0.1, =1.1.16, =1.1.25, =1.0.25, =1.0.17, =1.0.0, =2.0.8, =2.1.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MRR8-V49W-3333...

@fendy3002/string-tools (>=0.1.0, <=0.1.2), @mediafly/js-ui (>=26.0.1, <=46.3.1-beta.0) +177 more potentially affected by CVE-2020-26302 via is_js (>=0.2.1, <=0.8.0)

isjs NPM version =0.2.1, =0.1.0, =26.0.1, =0.0.1, =1.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.4, =0.1.1, =0.1.0, =0.1.0, =0.1.4 and more Source cves: CVE-2020-26302 Source advisory: OSV:GHSA-PVRW-G6FX-MCX2...