192.168.0.172 (4.6.1), 3nit-utils (>=0.13.0, <=1.0.2) +3318 more potentially affected by CVE-2022-25901 via cookiejar (>=2.0.1, <=2.1.2)

cookiejar NPM version =2.0.1, =0.13.0, =0.2.2, =1.3.1, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.16.0, =0.1.1, =1.0.0, =1.0.0, =1.1.2 and more Source cves: CVE-2022-25901 Source advisory: OSV:GHSA-H452-7996-H45H...

ablavema (0.4.2), acick (>=0.0.6, <=0.2.0) +258 more potentially affected by CVE-2022-45299 via webbrowser (>=0.1.3, <=0.7.1)

webbrowser CARGO version =0.1.3, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.1, =0.1.0, =0.1.0, =1.0.9, =0.1.0, =0.1.18, =0.1.21 and more Source cves: CVE-2022-45299 Source advisory: OSV:GHSA-M589-MV4Q-P7RJ...

Bump jackson-databind dependency to 2.13.4.2

Embedded Crowd library has transitive dependency to vulnerable library code:java com.fasterxml.jackson.core:jackson-databind:jar:2.12.1 - CVE-2020-36518code It is being included through Crowd dependency to com.microsoft.azure:msal4j:jar:1.11.0 The affected versions are before version 5.0.4...

@boomerang-io/gatsby-theme-boomerang (>=1.5.0-beta.0, <=1.6.1) potentially affected by CVE-2023-22491 via gatsby-transformer-remark (6.0.0)

gatsby-transformer-remark NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby-transformer-remark and may be impacted: - @boomerang-io/gatsby-theme-boomerang =1.5.0-beta.0, =1.6.1 Source cves: CVE-2023-22491 Source advisory:...

@boomerang-io/gatsby-theme-boomerang (>=0.3.0-beta.0, <=1.4.2), @dcl/docs-site (>=1.0.0-3010867520.commit-1740972, <=1.0.0-20220919140413.commit-6dee65c) +5 more potentially affected by CVE-2023-22491 via gatsby-transformer-remark (>=5.4.0, <=5.23.1)

gatsby-transformer-remark NPM version =5.4.0, =0.3.0-beta.0, =1.0.0-3010867520.commit-1740972, =1.1.1, =1.18.5, =0.0.1, =0.1.1 - gatsby-starter-netlify-tailwind 1.1.0 Source cves: CVE-2023-22491 Source advisory: OSV:GHSA-7CH4-RR99-CQCW...

autocode (>=1.0.0, <=1.3.1), autocode-cli (>=0.20.0, <=0.22.0) +5 more potentially affected by CVE-2018-25074 via skeemas (1.1.6)

skeemas NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on skeemas and may be impacted: - autocode =1.0.0, =0.20.0, =0.19.0, =0.3.2, =1.0.0, =0.1.0, =0.5.1 Source cves: CVE-2018-25074 Source advisory: OSV:GHSA-QV66-F876-VJVR...

a2 (>=0.5.0-alpha.1, <=0.5.3), aahc (0.1.0) +4870 more potentially affected by unknown CVE via tokio (>=0.2.0-alpha.1, <=1.18.2)

tokio CARGO version =0.2.0-alpha.1, =0.5.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.5.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0005...

deno_bench_util (>=0.73.0, <=0.79.0), deno_broadcast_channel (>=0.73.0, <=0.79.0) +37 more potentially affected by unknown CVE via tokio (>=1.21.1, <=1.24.0)

tokio CARGO version =1.21.1, =0.73.0, =0.73.0, =0.11.0, =0.161.0, =0.93.0, =0.102.0, =0.66.0, =0.15.0, =0.73.0, =0.71.0, =0.87.0, =0.79.0, =0.110.0, =0.80.0, =0.86.0 - denowebidl 0.85.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0005...

askai (0.1.0), doh-client (3.1.2) +25 more potentially affected by unknown CVE via tokio (>=1.19.2, <=1.20.1)

tokio CARGO version =1.19.2, =2.3.0, =4.1.2, =1.4.0, =1.18.1, =0.2.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0005...

a2s (>=0.1.0, <=0.5.1), abxml (>=0.5.0, <=0.6.2) +227 more potentially affected by CVE-2023-22895 via bzip2 (>=0.2.3, <=0.3.3)

bzip2 CARGO version =0.2.3, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0-alpha.6, =0.1.3, =0.1.0, =0.1.0, =0.3.0, =2020.5.26, =0.1.0, =0.2.0, =1.0.0 and more Source cves: CVE-2023-22895 Source advisory: OSV:GHSA-96JV-R488-C2RJ...

@didhubdev/core (>=0.0.11, <=0.0.39), @domedb/plugin-graphql (1.0.0) +14 more potentially affected by CVE-2023-22477 via mercurius (>=9.3.5, <=11.4.0)

mercurius NPM version =9.3.5, =0.0.11, =0.2.42, =2.37.0, =0.4.0, =0.6.0, =1.1.0, =0.0.24, =1.0.0, =1.0.1 and more Source cves: CVE-2023-22477 Source advisory: OSV:GHSA-CM8H-Q92V-XCFC...

@arcgis/core (>=4.21.0-next.20210722, <=4.25.0-next.20220711), @archimedes/arch (>=2.1.1-beta.1, <=2.2.0) +184 more potentially affected by CVE-2023-22467 via luxon (>=2.0.1, <=2.5.0)

luxon NPM version =2.0.1, =4.21.0-next.20210722, =2.1.1-beta.1, =1.6.1-beta.1, =2.1.0-beta.1, =1.5.15, =0.1.0, =0.1.0, =0.0.0-nightly-2021101222132, =0.10.592-alpha, =0.14.1021, =3.0.1, =3.2.7-alpha.6226622763, =1.4.48, =1.4.50 and more Source cves: CVE-2023-22467 Source advisory:...

8base-chat (2.2.1), @8base/boost (>=0.22.0, <=1.12.1) +261 more potentially affected by CVE-2023-22467 via luxon (>=1.0.0, <=1.28.0)

luxon NPM version =1.0.0, =0.22.0, =0.0.25, =1.0.0-alpha.6, =0.0.1-alpha.27, =0.0.1-alpha.27, =0.0.1-alpha.27, =0.3.0, =0.0.0-nightly-202111221544, =0.8.1, =0.12.4, =0.6.5, =0.12.0, =0.0.1, =0.0.46 and more Source cves: CVE-2023-22467 Source advisory: OSV:GHSA-3XQ5-WJFH-PPJC...

@allsource/ui.partials.navbar.navbar (>=0.0.15, <=0.0.53), @allsource/ui.partials.navbar.usericons (>=0.0.1, <=0.0.30) +223 more potentially affected by CVE-2023-22467 via luxon (>=3.0.0, <=3.2.0)

luxon NPM version =3.0.0, =0.0.15, =0.0.1, =5.17.1-login-manager.0, =1.0.0-0, =4.25.0-next.20220712, =0.13.47-alpha, =0.21.10-alpha, =2.0.0, =3.0.0, =3.0.0, =2.0.0, =0.3.2, =0.1.1-beta.0, =13.0.0, =13.3.7 and more Source cves: CVE-2023-22467 Source advisory: OSV:GHSA-3XQ5-WJFH-PPJC...

0.8.18-p11 (0.8.18-p12), 04_nodeblog (1.0.0) +25792 more potentially affected by CVE-2017-20165 via debug (>=2.0.0, <=2.6.8)

debug NPM version =2.0.0, =1.0.0, =0.0.15, =1.0.4, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =1.0.2, =1.0.1, =1.0.2 and more Source cves: CVE-2017-20165 Source advisory: OSV:GHSA-9VVW-CC9W-F27H...

@bahmutov/add-typescript-to-cypress (>=1.0.2, <=1.1.1), @betit/orion (>=1.0.0-beta.1, <=1.0.0-beta.6) +176 more potentially affected by CVE-2017-20165 via debug (>=3.0.0, <=3.0.1)

debug NPM version =3.0.0, =1.0.2, =1.0.0-beta.1, =1.0.0-beta.6, =2.0.1-SNAPSHOT.88, =0.0.4, =0.0.12, =1.0.1, =1.0.0, =1.0.0, =0.1.5, =2.8.0, =1.0.71, =1.0.10-14, =1.1.16 and more Source cves: CVE-2017-20165 Source advisory: OSV:GHSA-9VVW-CC9W-F27H...

a2s (>=0.1.0, <=0.5.1), abxml (>=0.5.0, <=0.6.2) +227 more potentially affected by CVE-2023-22895 via bzip2 (>=0.2.3, <=0.3.3)

bzip2 CARGO version =0.2.3, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0-alpha.6, =0.1.3, =0.1.0, =0.1.0, =0.3.0, =2020.5.26, =0.1.0, =0.2.0, =1.0.0 and more Source cves: CVE-2023-22895 Source advisory: OSV:RUSTSEC-2023-0004...

@egeria/egeria (>=0.20.1, <=0.23.10), deepsalter (>=0.7.0, <=2.6.4) +6 more potentially affected by CVE-2021-4307 via baobab (>=2.0.0-dev10, <=2.5.2)

baobab NPM version =2.0.0-dev10, =0.20.1, =0.7.0, =0.0.1, =0.0.58, =0.20.0, =0.0.8, =0.1.2 Source cves: CVE-2021-4307 Source advisory: OSV:GHSA-WVR2-Q86M-6WHP...

ulcap-cli (>=1.0.8, <=1.0.31), zyzx-cli (1.0.31) potentially affected by CVE-2021-4306 via terminal-kit (2.1.0)

terminal-kit NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on terminal-kit and may be impacted: - ulcap-cli =1.0.8, =1.0.31 - zyzx-cli 1.0.31 Source cves: CVE-2021-4306 Source advisory: OSV:GHSA-WXGH-8GMR-3QH3...

async-debug (>=0.1.0, <=0.1.3), async-http-proxy (>=1.2.1, <=1.2.4) +133 more potentially affected by CVE-2023-22466 via tokio (>=1.7.1, <=1.18.2)

tokio CARGO version =1.7.1, =0.1.0, =1.2.1, =0.2.1, =2.2.0, =0.4.0, =0.16.0, =0.1.0, =0.14.0, =0.33.2 - clashctl 0.2.2 and more Source cves: CVE-2023-22466 Source advisory: OSV:GHSA-7RRJ-XR53-82P7...