askai (0.1.0), doh-client (3.1.2) +25 more potentially affected by CVE-2023-22466 via tokio (>=1.19.2, <=1.20.1)

tokio CARGO version =1.19.2, =2.3.0, =4.1.2, =1.4.0, =1.18.1, =0.2.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.1 and more Source cves: CVE-2023-22466 Source advisory: OSV:GHSA-7RRJ-XR53-82P7...

deno_bench_util (>=0.73.0, <=0.77.0), deno_broadcast_channel (>=0.73.0, <=0.77.0) +34 more potentially affected by CVE-2023-22466 via tokio (>=1.21.1, <=1.22.0)

tokio CARGO version =1.21.1, =0.73.0, =0.73.0, =0.11.0, =0.161.0, =0.93.0, =0.102.0, =0.66.0, =0.15.0, =0.73.0, =0.71.0, =0.87.0, =0.79.0, =0.110.0, =0.80.0, =0.84.0, =0.88.0 and more Source cves: CVE-2023-22466 Source advisory: OSV:GHSA-7RRJ-XR53-82P7...

deno_bench_util (>=0.73.0, <=0.77.0), deno_broadcast_channel (>=0.73.0, <=0.77.0) +34 more potentially affected by CVE-2023-22466 via tokio (>=1.21.1, <=1.22.0)

tokio CARGO version =1.21.1, =0.73.0, =0.73.0, =0.11.0, =0.161.0, =0.93.0, =0.102.0, =0.66.0, =0.15.0, =0.73.0, =0.71.0, =0.87.0, =0.79.0, =0.110.0, =0.80.0, =0.84.0, =0.88.0 and more Source cves: CVE-2023-22466 Source advisory: OSV:RUSTSEC-2023-0001...

askai (0.1.0), doh-client (3.1.2) +25 more potentially affected by CVE-2023-22466 via tokio (>=1.19.2, <=1.20.1)

tokio CARGO version =1.19.2, =2.3.0, =4.1.2, =1.4.0, =1.18.1, =0.2.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.1 and more Source cves: CVE-2023-22466 Source advisory: OSV:RUSTSEC-2023-0001...

@fley_real/notification-manager (1.0.0), @nbish11/test (>=1.0.2, <=1.2.0) +53 more potentially affected by CVE-2021-32821 via mootools (>=1.3.2, <=1.5.2)

mootools NPM version =1.3.2, =1.0.2, =0.1.2, =0.1.0, =0.8.3, =1.0.0, =0.9.3, =1.3.0, =0.0.2, =0.4.0, =0.2.0, =0.2.0, =1.0.5, =2.0.2 and more Source cves: CVE-2021-32821 Source advisory: OSV:GHSA-V63Q-HGQC-QVPG...

@0x4447/broccoli (>=1.0.0, <=1.0.16), @0x4447/potato (>=2.0.0, <=2.4.7) +426 more potentially affected by CVE-2021-4299 via string-kit (>=0.0.3, <=0.11.10)

string-kit NPM version =0.0.3, =1.0.0, =2.0.0, =1.0.0, =1.18.0, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =1.0.5-master.20190403074739, =1.0.0-M.5a, =0.1.0-master.20191109234452, =0.1.0-ipcrm-custom-event.20191122150318, =1.0.0-M.3, =1.2.2-master.20191206162119 - @atomist/sdm-pack-k8s...

GHSA-Q2FJ-6H62-59M2 Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue

Impact If you are using the Apiman Vert.x Gateway prior to Apiman 3.0.0.Final, a connection caching issue in Hazelcast could allow an unauthenticated, remote attacker to access and manipulate data in the cluster with another authenticated connection's identity. Hazelcast is a transitive dependenc...

agnes (>=0.3.0, <=0.3.2), agpm_interactions (0.0.1) +407 more potentially affected by unknown CVE via prettytable-rs (>=0.5.2, <=0.9.0)

prettytable-rs CARGO version =0.5.2, =0.3.0, =0.1.0, =0.2.3, =1.0.0, =0.1.0, =0.1.1, =3.1.3, =0.2.0, =0.2.0, =0.5.1, =0.1.0, =0.2.0, =0.3.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GFGM-CHR3-X6PX...

37sy-build (>=1.0.0, <=1.3.3), @emintayfur/hub (>=0.0.1, <=0.1.2) +117 more potentially affected by CVE-2023-26135 via flatnest (>=0.2.2, <=1.0.1)

flatnest NPM version =0.2.2, =1.0.0, =0.0.1, =0.5.10, =0.1.2, =1.0.71, =1.0.23, =1.0.1-alpha.0, =1.2.1, =0.0.1-1, =1.0.1, =1.0.10, =1.0.0, =0.0.1, =1.0.6 and more Source cves: CVE-2023-26135 Source advisory: SNYK:JS-FLATNEST-3185149...

@pzlr/build-core (>=2.14.0, <=2.15.1), @v4fire/cli (>=1.3.0, <=2.1.0) +3 more potentially affected by CVE-2023-26113 via collection.js (6.7.11)

collection.js NPM version 6.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on collection.js and may be impacted: - @pzlr/build-core =2.14.0, =1.3.0, =2.0.0-beta.1, =2.0.0-beta.1, =3.75.0 Source cves: CVE-2023-26113 Source advisory:...

46c-sector (>=1.0.0, <=1.2.1), @abtasty-innovation/cb-tag (>=0.0.1, <=0.1.3) +176 more potentially affected by CVE-2022-46175 via json5 (1.0.1)

json5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on json5 and may be impacted: - 46c-sector =1.0.0, =0.0.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =2.2.0, =0.0.1, =2.1.0, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - @brocan/inp...

6ix (0.0.0-canary.0), 9ight (>=0.0.0-canary.0, <=0.0.0-canary.6) +803 more potentially affected by CVE-2022-46175 via json5 (>=2.0.0, <=2.2.1)

json5 NPM version =2.0.0, =0.0.0-canary.0, =0.4.0, =0.0.1, =0.0.1, =0.0.1, =1.2.0, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.0.2, =0.0.2, =1.1.0, =1.2.1 and more Source cves: CVE-2022-46175 Source advisory: OSV:GHSA-9C47-M6QQ-7P4H...

@sweco/sweco-digital-platforms (>=5.0.26, <=5.1.2), @sweetui/sweet-mobile-sdk (>=1.6.3, <=1.6.7) +3 more potentially affected by CVE-2023-26133 via progressbar.js (>=1.0.1, <=1.1.0)

progressbar.js NPM version =1.0.1, =5.0.26, =1.6.3, =2.16.0, =1.0.33, =1.0.13, =1.0.14 Source cves: CVE-2023-26133 Source advisory: SNYK:JS-PROGRESSBARJS-3184152...

@essex/powerbi-visual-scripts (1.1.0), @essex/visual-settings (>=1.0.0, <=3.0.0) +13 more potentially affected by CVE-2018-25049 via email-existence (>=0.1.2, <=0.1.6)

email-existence NPM version =0.1.2, =1.0.0, =1.0.0, =0.1.5, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.1, =1.0.0, =1.1.6, =1.2.4 Source cves: CVE-2018-25049 Source advisory: OSV:GHSA-P27H-4CPF-FW48...

@amitport/koangular-users (0.0.0), @antimatter-studios/dredd (>=14.1.0, <=16.1.0) +205 more potentially affected by CVE-2022-4742 via json-pointer (>=0.0.4, <=0.6.1)

json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =9.0.0, =2.0.0, =0.0.1, =0.1.0 and more Source cves: CVE-2022-4742 Source advisory: OSV:GHSA-6XRF-Q977-5VGC...

@arve.knudsen/bankai (>=9.6.0, <=9.10.14), @citation-js/browserify-disc (1.3.4) +63 more potentially affected by CVE-2020-36632 via flat (>=1.0.0, <=1.6.0)

flat NPM version =1.0.0, =9.6.0, =2.6.0, =1.0.0, =1.0.0-1, =0.0.1, =0.0.1, =0.0.10, =1.0.0, =7.3.0, =9.10.4, =0.0.1, =0.0.3, =0.0.4 and more Source cves: CVE-2020-36632 Source advisory: OSV:GHSA-2J2X-2GPW-G8FM...

@accelbyte/codegen (>=1.0.0-alpha.1, <=1.0.0-alpha.8), @algotech-ce/angular (>=2.0.0, <=2.0.17) +39 more potentially affected by CVE-2021-4279 via fast-json-patch (>=3.0.0-1, <=3.1.0)

fast-json-patch NPM version =3.0.0-1, =1.0.0-alpha.1, =2.0.0, =1.0.0, =0.1.1, =0.0.2, =0.0.65-alpha-1d45292d9.0, =0.17.0-alpha-041ca5b89.0, =1.9.61, =0.0.0-2021106134559, =0.0.0-2021106134559, =0.3.2, =2.4.4, =2.5.2, =2.4.1, =2.4.1, =2.15.0 and more Source cves: CVE-2021-4279 Source advisory:...

@albalyu/npm-scripts (>=2.0.1, <=2.0.40), @opuscapita/eslint-config-opuscapita-bnapp (>=1.0.1-next.0, <=1.0.6) +7 more potentially affected by CVE-2020-36632 via flat (3.0.0)

flat NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flat and may be impacted: - @albalyu/npm-scripts =2.0.1, =1.0.1-next.0, =2.2.1, =2.0.0-beta.3, =0.0.1-beta.2, =4.0.1, =0.3.0-beta.16, =0.3.0-beta.83 Source cves: CVE-2020-36632 Sour...

@emartech/angular-translate (>=2.0.0, <=2.3.0), @fjandin/config-man (>=1.2.0, <=1.2.4) +45 more potentially affected by CVE-2020-36632 via flat (5.0.0)

flat NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flat and may be impacted: - @emartech/angular-translate =2.0.0, =1.2.0, =0.0.2, =0.5.2, =3.34.3, =2.3.0, =2.7.0, =0.1.2, =1.0.0, =0.2.2, =0.0.5, =0.17.0, =0.5.0, =1.3.2 - good-confi...

@biesbjerg/ng2-translate-extract (>=0.5.0, <=0.6.0), @biesbjerg/ngx-translate-extract (>=1.0.0, <=2.3.4) +67 more potentially affected by CVE-2020-36632 via flat (>=2.0.0, <=2.0.1)

flat NPM version =2.0.0, =0.5.0, =1.0.0, =9.16.1-rc.0, =0.0.1, =0.0.2-beta1, =1.2.7, =2.1.27, =2.0.7, =1.1.9, =2.3.4-atknatk.1, =0.0.1, =1.0.0, =1.0.0, =2.3.4, =2.3.5, =2.3.6 and more Source cves: CVE-2020-36632 Source advisory: OSV:GHSA-2J2X-2GPW-G8FM...