7ghost (>=4.11.0, <=4.11.46), 7ghost-cli (>=1.17.6-next.0, <=1.18.4) +284 more potentially affected by CVE-2023-26136 via tough-cookie (>=4.0.0, <=4.1.2)

tough-cookie NPM version =4.0.0, =4.11.0, =1.17.6-next.0, =2.0.0, =1.0.0, =3.11.1, =1.1.3, =1.0.51, =1.0.1, =1.0.4, =1.2.95, =1.0.0, =1.0.1, =1.0.57, =1.0.210 and more Source cves: CVE-2023-26136 Source advisory: SNYK:JS-TOUGHCOOKIE-5672873...

@aws-amplify/geo (>=2.0.13-push-notification-dryrun.43, <=2.0.35-unstable.3e5e6f9.1), @aws-amplify/interactions (>=5.0.13-push-notification-dryrun.43, <=5.1.1-unstable.3e5e6f9.1) +98 more potentially affected by CVE-2023-34104 via fast-xml-parser (>=4.1.3, <=4.2.3)

fast-xml-parser NPM version =4.1.3, =2.0.13-push-notification-dryrun.43, =5.0.13-push-notification-dryrun.43, =1.0.13-push-notification-dryrun.43, =5.0.13-push-notification-dryrun.43, =5.1.3-push-notification-dryrun.43, =1.1.6-exodus.1, =6.2.44, =9.1.0, =9.1.0, =9.53.0 and more Source cves:...

@aem-vite/import-rewriter (>=5.0.1, <=6.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=2.3.1) +210 more potentially affected by CVE-2023-34092 via vite (>=2.0.0-beta.4, <=2.9.15)

vite NPM version =2.0.0-beta.4, =5.0.1, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =0.9.1, =1.0.16, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.16 and more Source cves: CVE-2023-34092 Source advisory...

@akrc/vidocs (>=0.0.0, <=0.0.2), @alexzzz/npms (>=0.0.5, <=0.2.0) +114 more potentially affected by CVE-2023-34092 via vite (>=3.0.2, <=3.2.5)

vite NPM version =3.0.2, =0.0.0, =0.0.5, =1.0.1, =1.0.1, =3.2.0, =0.0.37, =0.0.35, =0.2.3, =0.0.0-canary-20220914153453, =0.0.6, =0.1.0, =0.0.3, =6.24.0, =0.1.1, =0.1.23 and more Source cves: CVE-2023-34092 Source advisory: OSV:GHSA-353F-5XF4-QW67...

@alexaegis/setup-editorconfig (>=0.0.3, <=0.0.5), @alexaegis/setup-vite (>=0.0.3, <=0.0.5) +55 more potentially affected by CVE-2023-34092 via vite (>=4.2.0, <=4.2.2)

vite NPM version =4.2.0, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =16.0.0-next.7, =1.0.0-beta.0, =0.0.0-canary-20230317112045, =22.0.0 - @emhamzahazeen/config-vite 1.0.0 and more Source cves: CVE-2023-34092 Source advisory: OSV:GHSA-353F-5XF4-QW67...

@brewer/beerui (>=1.1.9, <=1.1.16), @catalysisdev/build (0.8.0) +33 more potentially affected by CVE-2023-34092 via vite (>=4.0.0, <=4.0.4)

vite NPM version =4.0.0, =1.1.9, =0.0.0-canary-20221223101943, =5.3.4, =0.5.6, =0.7.2-alpha.0 and more Source cves: CVE-2023-34092 Source advisory: OSV:GHSA-353F-5XF4-QW67...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +46 more potentially affected by CVE-2023-34092 via vite (>=4.1.0, <=4.1.4)

vite NPM version =4.1.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.0-canary-20230215113341, =4.6.2, =11.6.5, =5.3.8, =5.0.0, =5.0.1 and more Source cves: CVE-2023-34092 Source advisory: OSV:GHSA-353F-5XF4-QW67...

@alioth_91/alita (>=3.3.9-patch.1, <=3.3.9-patch.2), @alitajs/vue-i18n (>=0.0.7, <=0.0.8) +98 more potentially affected by CVE-2023-34092 via vite (>=4.3.0, <=4.3.8)

vite NPM version =4.3.0, =3.3.9-patch.1, =0.0.7, =0.0.7, =0.0.7, =0.0.7, =0.0.7, =0.0.1-canary.0, =0.0.1-canary.0, =16.0.0-rc.2, =2.0.0-bate-1, =12.0.0, =0.0.0-canary-20230426131112, =0.0.1, =0.0.12 - @deconz-community/directus-extension-ddf-store 0.1.0 and more Source cves: CVE-2023-34092 Source...

sequoia-openpgp (1.8.1) potentially affected by CVE-2023-53161 via buffered-reader (1.1.3)

buffered-reader CARGO version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on buffered-reader and may be impacted: - sequoia-openpgp 1.8.1 Source cves: CVE-2023-53161 Source advisory: OSV:GHSA-29MF-62XX-28JQ...

btctax-store (>=0.1.0, <=0.18.0), did-webkey (0.1.1) +4 more potentially affected by CVE-2023-53160 via sequoia-openpgp (1.14.0)

sequoia-openpgp CARGO version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on sequoia-openpgp and may be impacted: - btctax-store =0.1.0, =0.3.0, =0.4.0-rc.1, =5.0.4 Source cves: CVE-2023-53160 Source advisory: OSV:GHSA-25MX-8F3V-8WH7...

aardvark-dns (>=1.0.3, <=1.1.0), acme-dns-rust (>=1.0.0, <=1.1.6) +13 more potentially affected by unknown CVE via trust-dns-server (>=0.13.0, <=0.22.0)

trust-dns-server CARGO version =0.13.0, =1.0.3, =1.0.0, =1.4.0, =1.7.0, =1.12.2, =0.18.0-alpha.1, =0.1.0, =0.1.0, =0.5.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0041...

@0x-jerry/x-release (>=0.0.2, <=0.3.6), @_igetter/yxtvant (>=1.0.1, <=1.0.2) +453 more potentially affected by CVE-2023-2972 via @antfu/utils (>=0.1.7, <=0.7.2)

@antfu/utils NPM version =0.1.7, =0.0.2, =1.0.1, =1.1.10, =0.0.2, =1.0.0-rc2, =0.0.0, =1.15.0, =0.3.0-beta.2, =0.5.3, =1.6.24, =1.0.2, =0.1.1, =0.1.1, =0.1.9 and more Source cves: CVE-2023-2972 Source advisory: OSV:GHSA-P2FH-2H23-6GRG...

conkie (0.0.1) potentially affected by CVE-2023-26129 via bwm-ng (0.1.1)

bwm-ng NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on bwm-ng and may be impacted: - conkie 0.0.1 Source cves: CVE-2023-26129 Source advisory: OSV:GHSA-8VW3-VXMJ-H43W...

@berrywallet/core (>=0.1.0, <=0.2.1), @counterplay/simpleflake (>=2.0.0, <=2.0.1) +55 more potentially affected by unknown CVE via bignum (>=0.12.5, <=0.13.0)

bignum NPM version =0.12.5, =0.1.0, =2.0.0, =1.0.0, =1.0.0, =0.14.6, =0.1.0, =1.1.0, =0.0.2, =0.0.17, =0.5.0, =1.0.0, =1.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7CGC-FJV4-52X6...

@abcpros/bitcore-build (>=8.25.29, <=8.25.30), @acanto/october-scripts (3.2.2) +1121 more potentially affected by CVE-2023-32695 via socket.io-parser (>=3.1.1, <=3.3.0)

socket.io-parser NPM version =3.1.1, =8.25.29, =1.0.0, =2018.7.11-0, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =0.2.0, =1.0.10, =3.3.91, =3.3.114 and more Source cves: CVE-2023-32695 Source advisory: OSV:GHSA-CQMJ-92XF-R6R9...

0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +1917 more potentially affected by CVE-2023-32695 via socket.io-parser (>=4.0.5, <=4.2.2)

socket.io-parser NPM version =4.0.5, =1.0.49, =1.0.0, =0.0.28, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =0.0.9 and more Source cves: CVE-2023-32695 Source advisory: OSV:GHSA-CQMJ-92XF-R6R9...

@devlego/builder (>=1.1.29-alpha.1, <=1.1.34), @metro-fs/analytics-plugin-posthog (>=1.0.0, <=1.6.0) +6 more potentially affected by CVE-2023-32325 via posthog-js (>=1.4.5, <=1.53.2)

posthog-js NPM version =1.4.5, =1.1.29-alpha.1, =1.0.0, =2.1.0, =2.0.5, =1.3.39, =3.28.0-rc.1, =1.16.0, =1.16.1 Source cves: CVE-2023-32325 Source advisory: OSV:GHSA-8775-5HWV-WR6V...

@0xagnish/circom2-create-project (1.0.412), @0xagnish/create-circom2-project (>=1.0.0, <=1.0.418) +329 more potentially affected by CVE-2023-33252 via snarkjs (>=0.1.7, <=0.6.11)

snarkjs NPM version =0.1.7, =1.0.0, =1.0.0, =1.0.0-beta.0, =1.0.0, =1.1.1, =2.0.0-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1, =0.0.1, =0.1.0, =0.2.2 and more Source cves: CVE-2023-33252 Source advisory: OSV:GHSA-XP5G-JHG3-3RG2...

btctax-store (>=0.1.0, <=0.18.0), did-webkey (0.1.1) +4 more potentially affected by CVE-2023-53160 via sequoia-openpgp (1.14.0)

sequoia-openpgp CARGO version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on sequoia-openpgp and may be impacted: - btctax-store =0.1.0, =0.3.0, =0.4.0-rc.1, =5.0.4 Source cves: CVE-2023-53160 Source advisory: OSV:RUSTSEC-2023-0038...

aries-askar (>=0.1.2, <=0.2.7), arkworks-r1cs-gadgets (>=0.5.0, <=1.2.0) +108 more potentially affected by unknown CVE via xsalsa20poly1305 (>=0.4.2, <=0.9.1)

xsalsa20poly1305 CARGO version =0.4.2, =0.1.2, =0.5.0, =0.5.0, =0.2.0-pre.1, =0.1.0, =0.1.0, =0.1.1 - bramble-handshake 0.1.0 - bramble-qr 0.1.0 - bramble-rendezvous 0.1.0 - bramble-sync 0.1.0 - bramble-transport 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0037...