@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +84 more potentially affected by CVE-2022-24441 via snyk (>=1.1.1, <=1.954.0)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =1.6.0, =1.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2022-24441 Source advisory: OSV:GHSA-4VRV-93C7-M92J...

@00ssh/erdnest (>=0.2.19, <=0.2.23), @0cfg/rpc-common (>=0.0.1, <=0.1.3) +2639 more potentially affected by CVE-2023-36665 via protobufjs (>=6.10.0, <=6.11.3)

protobufjs NPM version =6.10.0, =0.2.19, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =0.0.8-alpha.0, =0.1.0, =0.0.2, =0.0.1, =0.0.5, =1.9.4, =1.9.15 and more Source cves: CVE-2023-36665 Source advisory: OSV:GHSA-H755-8QP9-CQ85...

10minions-engine (>=0.0.1, <=0.0.4), @1amageek/document-propagator (>=0.10.1, <=1.0.0) +1993 more potentially affected by CVE-2023-36665 via protobufjs (>=7.0.0, <=7.2.4)

protobufjs NPM version =7.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0-alpha.2, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2023-36665 Source advisory: OSV:GHSA-H755-8QP9-CQ85...

7ghost (>=4.11.0, <=4.11.46), 7ghost-cli (>=1.17.6-next.0, <=1.18.4) +284 more potentially affected by CVE-2023-26136 via tough-cookie (>=4.0.0, <=4.1.2)

tough-cookie NPM version =4.0.0, =4.11.0, =1.17.6-next.0, =2.0.0, =1.0.0, =3.11.1, =1.1.3, =1.0.51, =1.0.1, =1.0.4, =1.2.95, =1.0.0, =1.0.1, =1.0.57, =1.0.210 and more Source cves: CVE-2023-26136 Source advisory: OSV:GHSA-72XF-G2V4-QVF3...

a-bot (0.0.1), a-gpt (>=0.1.0, <=0.4.0) +24298 more potentially affected by unknown CVE via atty (>=0.1.2, <=0.2.14)

atty CARGO version =0.1.2, =0.1.0, =0.0.5, =0.2.0, =0.0.1, =0.0.2, =0.4.1, =0.9.0, =0.1.0, =0.2.1, =1.0.3, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G98V-HV3F-HCFR...

@copyleaks/plagiarism-report (>=1.0.0, <=1.0.13), bzz-ui (>=1.0.1, <=1.11.14) +8 more potentially affected by CVE-2023-34840 via angular-ui-notification (>=0.1.0, <=0.3.6)

angular-ui-notification NPM version =0.1.0, =1.0.0, =1.0.1, =2.8.46, =2.8.16, =1.0.0, =1.1.1, =1.0.0, =0.0.1, =0.0.6 - wservice-web 1.0.0 Source cves: CVE-2023-34840 Source advisory: OSV:GHSA-MRCJ-5QXR-VHP2...

fileopsx (>=1.0.1, <=1.0.2), xml2pdf (>=1.0.0, <=1.1.0) potentially affected by CVE-2023-26155 via node-qpdf (1.0.3)

node-qpdf NPM version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on node-qpdf and may be impacted: - fileopsx =1.0.1, =1.0.0, =1.1.0 Source cves: CVE-2023-26155 Source advisory: SNYK:JS-NODEQPDF-5747918...

manifest-confusion-check (>=0.1.0, <=0.1.8), manifest-confusion-dependency-package (1.0.0) +1 more potentially affected by unknown CVE via darcyclarke-manifest-pkg (2.1.15)

darcyclarke-manifest-pkg NPM version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on darcyclarke-manifest-pkg and may be impacted: - manifest-confusion-check =0.1.0, =0.1.8 - manifest-confusion-dependency-package 1.0.0 -...

@adobe/git-server (>=1.0.1, <=1.0.5), @adobe/helix-cli (>=5.7.7, <=6.1.0) +21 more potentially affected by CVE-2023-35931 via shescape (>=1.6.1, <=1.6.6)

shescape NPM version =1.6.1, =1.0.1, =5.7.7, =2.16.1, =0.1.3, =0.0.7, =0.1.0, =2.3.2, =2.3.2, =2.3.2, =2.3.3 and more Source cves: CVE-2023-35931 Source advisory: OSV:GHSA-3G7P-8QHX-MC8R...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @codefresh-io/docker-compose-environment (>=0.0.4, <=0.0.8) +110 more potentially affected by CVE-2024-21532 via ggit (>=0.0.4, <=2.4.12)

ggit NPM version =0.0.4, =2.4.0-alpha.0, =0.0.4, =0.0.12, =1.0.1, =0.1.5, =0.0.190, =1.1.2, =0.7.2, =0.1.0, =4.1.6, =0.1.0, =0.0.2, =0.1.0, =0.2.2 and more Source cves: CVE-2024-21532 Source advisory: SNYK:JS-GGIT-5731320...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @codefresh-io/docker-compose-environment (>=0.0.4, <=0.0.8) +110 more potentially affected by CVE-2024-21533 via ggit (>=0.0.4, <=2.4.12)

ggit NPM version =0.0.4, =2.4.0-alpha.0, =0.0.4, =0.0.12, =1.0.1, =0.1.5, =0.0.190, =1.1.2, =0.7.2, =0.1.0, =4.1.6, =0.1.0, =0.0.2, =0.1.0, =0.2.2 and more Source cves: CVE-2024-21533 Source advisory: SNYK:JS-GGIT-5731319...

@alexktzk/cz-customizable (>=1.0.0, <=1.1.0), @algolia/coquille (>=0.0.2, <=0.0.13) +377 more potentially affected by CVE-2023-26115 via word-wrap (>=1.0.3, <=1.2.3)

word-wrap NPM version =1.0.3, =1.0.0, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.4.2, =0.0.0, =1.0.0, =0.1.0-preview, =0.1.0-preview, =6.0.0-alpha.16.20220105.1, =0.1.3, =0.1.17 and more Source cves: CVE-2023-26115 Source advisory: OSV:GHSA-J8XG-FQG3-53R7...

bitcoin-harness (0.1.0), bitcoin_rpc_client (>=0.5.0, <=0.6.1) +78 more potentially affected by CVE-2023-53159 via openssl (>=0.10.7, <=0.10.52)

openssl CARGO version =0.10.7, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.0.3, =0.1.24, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2023-53159 Source advisory: OSV:GHSA-XCF7-RVMH-G6Q4...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +4044 more potentially affected by unknown CVE via memoffset (>=0.1.0, <=0.5.6)

memoffset CARGO version =0.1.0, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.7.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WFG4-322G-9VQV...

@frontside/backstage-plugin-humanitec-backend (>=0.1.0, <=0.2.1-changeset-release-main.1) potentially affected by CVE-2023-35926 via @backstage/plugin-scaffolder-backend (1.1.0)

@backstage/plugin-scaffolder-backend NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-scaffolder-backend and may be impacted: - @frontside/backstage-plugin-humanitec-backend =0.1.0, =0.2.1-changeset-release-main.1...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +4044 more potentially affected by unknown CVE via memoffset (>=0.1.0, <=0.5.6)

memoffset CARGO version =0.1.0, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.7.10 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0045...

007putra-my-bot (1.1.1), 03-asenkronsdasdsadavehttprequest (1.0.0) +17756 more potentially affected by CVE-2022-25883 via semver (>=7.0.0, <=7.5.1)

semver NPM version =7.0.0, =7.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on semver and may be impacted: - 007putra-my-bot 1.1.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 -...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0.8.18-p11 (0.8.18-p12) +53993 more potentially affected by CVE-2022-25883 via semver (>=2.0.8, <=5.7.1)

semver NPM version =2.0.8, =1.0.1, =0.0.2, =1.0.4, =1.0.0, =1.0.3, =1.0.9, =0.1.0, =0.3.0 and more Source cves: CVE-2022-25883 Source advisory: OSV:GHSA-C2QF-RXJJ-QQGW...

@harmony.ac/runner (>=0.0.0, <=2.1.0) potentially affected by CVE-2023-35167 via remult (0.18.1)

remult NPM version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on remult and may be impacted: - @harmony.ac/runner =0.0.0, =2.1.0 Source cves: CVE-2023-35167 Source advisory: OSV:GHSA-7HH3-3X64-V2G9...

@anfo/difftool (>=0.0.1, <=0.0.11), @bdefore/nivo-patterned-radial-arc (0.79.1) +134 more potentially affected by CVE-2023-26152 via static-server (>=2.0.0, <=3.0.0)

static-server NPM version =2.0.0, =0.0.1, =0.0.1, =2.0.0-beta.1, =0.1.21, =0.5.0, =0.0.1, =2.59.1-alpha.1, =1.1.0, =3.0.3, =0.1.10, =1.0.0, =1.0.2 and more Source cves: CVE-2023-26152 Source advisory: SNYK:JS-STATICSERVER-5722341...