@candlelabs/sdk (>=1.0.1, <=1.0.2), @infobiotech/js-error (>=0.1.0, <=0.1.6) +12 more potentially affected by CVE-2022-38900 via decode-uri-component (0.2.0)

decode-uri-component NPM version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on decode-uri-component and may be impacted: - @candlelabs/sdk =1.0.1, =0.1.0, =0.22.0-alpha.20, =0.22.0-alpha.0, =0.32.1, =0.32.3, =2.3.5, =1.0.0, =0.3.0,...

192.168.0.172 (4.6.1), 3nit-utils (>=0.13.0, <=1.0.2) +3318 more potentially affected by CVE-2022-25901 via cookiejar (>=2.0.1, <=2.1.2)

cookiejar NPM version =2.0.1, =0.13.0, =0.2.2, =1.3.1, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.16.0, =0.1.1, =1.0.0, =1.0.0, =1.1.2 and more Source cves: CVE-2022-25901 Source advisory: SNYK:JS-COOKIEJAR-3149984...

@alexktzk/cz-customizable (>=1.0.0, <=1.1.0), @algolia/coquille (>=0.0.2, <=0.0.13) +377 more potentially affected by CVE-2023-26115 via word-wrap (>=1.0.3, <=1.2.3)

word-wrap NPM version =1.0.3, =1.0.0, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.4.2, =0.0.0, =1.0.0, =0.1.0-preview, =0.1.0-preview, =6.0.0-alpha.16.20220105.1, =0.1.3, =0.1.17 and more Source cves: CVE-2023-26115 Source advisory: SNYK:JS-WORDWRAP-3149973...

277snippet-cli (>=1.0.0, <=1.0.2), 40au-isteven-angular-multiselect (4.0.0) +741 more potentially affected by CVE-2023-26111 via node-static (>=0.5.6, <=0.7.11)

node-static NPM version =0.5.6, =1.0.0, =1.0.5, =0.0.5, =0.0.1, =0.0.1, =17.0.6 and more Source cves: CVE-2023-26111 Source advisory: SNYK:JS-NODESTATIC-3149928...

@airyrooms/nerve (0.1.1), @akeating-redhat/fh-mbaas-api (7.0.1) +868 more potentially affected by CVE-2022-24999 via qs (6.4.0)

qs NPM version 6.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on qs and may be impacted: - @airyrooms/nerve 0.1.1 - @akeating-redhat/fh-mbaas-api 7.0.1 - @allenbrowntech/lemon =1.0.0, =1.0.1, =1.0.0, =0.0.1, =0.17.5, =0.0.3, =1.10.0, =1.10.1,...

20190403-utils (1.0.0), 4cs-cli (>=0.0.28, <=0.0.36) +3311 more potentially affected by CVE-2022-24999 via qs (>=6.7.0, <=6.7.2)

qs NPM version =6.7.0, =0.0.28, =1.0.8, =4.11.0, =2.0.1, =0.0.1, =3.10.1, =1.0.0, =1.0.0, =1.0.1, =3.3.4, =1.0.1, =1.0.39 - @abdulameen962/react-snap 1.23.0 - @aconex/styleguide 2.2.1 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...

@1023-ventures/serra-common (>=0.3.31, <=0.3.33), @2bad/bitrix (2.3.1) +719 more potentially affected by CVE-2022-24999 via qs (>=6.9.0, <=6.9.6)

qs NPM version =6.9.0, =0.3.31, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =14.4.6, =5.0.4, =1.3.1, =0.4.0-next.8, =0.1.7-alpha.1, =0.2.4-alpha.1, =0.1.9-alpha.3, =0.3.0-alpha.1, =0.4.7-alpha.4 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...

01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +3847 more potentially affected by CVE-2022-24999 via qs (>=6.5.0, <=6.5.2)

qs NPM version =6.5.0, =1.0.0, =0.2.0, =0.1.0, =1.0.0, =1.0.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.0, =12.1.0, =6.0.0, =1.0.0, =2.2.5 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...

@211la/search-client (>=0.1.0, <=0.5.0), @2bad/bitrix (>=2.0.0, <=2.3.0) +15 more potentially affected by CVE-2022-24999 via qs (6.8.0)

qs NPM version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on qs and may be impacted: - @211la/search-client =0.1.0, =2.0.0, =0.0.0-GO-1036-new-endpoint-to-download-bulk-details.3, =9.1.23-alpha2.60, =0.6.4, =2.1.1, =0.1.0, =3.4.5, =1.0.0, =0.1....

@aothechbcn/frontend-idealbar--lib-idealbar (>=1.0.0, <=1.0.10), @brigad/redux-rest-easy (>=3.0.0, <=3.0.3) +55 more potentially affected by CVE-2022-24999 via qs (6.6.0)

qs NPM version 6.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on qs and may be impacted: - @aothechbcn/frontend-idealbar--lib-idealbar =1.0.0, =3.0.0, =0.92.0, =1.0.1, =1.0.0, =5.1.0, =13.1.1-5e9b77d, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 -...

@bouzuya/mr-jums (>=0.2.0, <=0.9.1), @deansel/latte (0.1.2-beta.1) +77 more potentially affected by CVE-2022-24999 via qs (>=6.3.0, <=6.3.1)

qs NPM version =6.3.0, =0.2.0, =1.0.0-alpha.7, =0.0.1-alpha.1, =0.0.1-dev.0, =4.0.0-beta.6, =3.0.0, =0.20.5, =0.20.5, =0.20.8, =0.1.5, =0.6.5, =0.13.0, =0.15.0 - app-decorators 0.8.206 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...

@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +624 more potentially affected by unknown CVE via sweetalert2 (>=8.19.1, <=11.22.3)

sweetalert2 NPM version =8.19.1, =0.0.0, =0.0.0, =0.1.0, =2.31.0, =0.0.1-beta.1, =0.1.1, =1.0.1, =1.0.0, =1.0.0, =0.0.9, =0.0.1, =0.3.73, =0.3.198 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8JH9-WQPF-Q52C...

@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +326 more potentially affected by unknown CVE via sweetalert2 (>=9.17.4, <=11.22.3)

sweetalert2 NPM version =9.17.4, =0.0.0, =0.0.0, =2.31.0, =0.0.1-beta.1, =0.1.1, =1.0.1, =1.0.0, =0.0.9, =0.0.1, =0.3.73, =0.0.4, =0.0.4, =1.0.0, =1.0.17, =1.2.33 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PG98-6V7F-2XFV...

@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +194 more potentially affected by unknown CVE via sweetalert2 (>=10.16.11, <=11.22.3)

sweetalert2 NPM version =10.16.11, =0.0.0, =0.0.0, =2.31.0, =1.0.0, =0.0.1, =0.3.73, =0.0.4, =0.0.4, =1.0.0, =1.0.17, =0.0.0-20240903040200, =1.3.0, =1.10.0, =1.0.1, =1.1.333 and more Source cves: unknown CVE Source advisory: OSV:GHSA-457R-CQC8-9VJ9...

@bcwdev/quickvue (1.0.15), @bnsights-test/test-admin-portal (>=0.0.4, <=0.0.147) +41 more potentially affected by unknown CVE via sweetalert2 (>=11.4.14, <=11.22.3)

sweetalert2 NPM version =11.4.14, =0.0.4, =0.0.4, =1.0.0, =1.0.110, =0.0.0-20240903040200, =1.10.0, =15.2.16, =1.2.29, =1.8.94, =3.0.0, =3.0.30, =1.0.1, =1.0.1, =1.1.16, =1.6.22 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QQ6H-5G6J-Q3CM...

difftastic (>=0.29.1, <=0.52.0), difftastic-lib (>=0.0.1, <=0.0.2) +4 more potentially affected by unknown CVE via mimalloc (>=0.1.28, <=0.1.37)

mimalloc CARGO version =0.1.28, =0.29.1, =0.0.1, =0.1.6, =0.17.0-alpha.4, =0.15.0, =0.16.0-alpha.3, =0.18.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0094...

0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +1530 more potentially affected by CVE-2022-41940 via engine.io (>=4.0.6, <=6.1.3)

engine.io NPM version =4.0.6, =1.0.49, =1.0.0, =0.0.28, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =1.2.1, =1.0.1, =1.0.2 - @aaronconway7/create-gatsby-app 1.0.0 - @accio-cms/gatsby-starter-accio 0.0.1 - @achilleskal/awesome-blog 1.0.0 and more Source cves: CVE-2022-41940 Source advisory:...

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1266 more potentially affected by CVE-2022-41940 via engine.io (>=3.1.0, <=3.5.0)

engine.io NPM version =3.1.0, =4.11.25, =8.25.29, =0.1.53, =5.1.0, =5.1.0, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2022-41940 Source advisory: OSV:GHSA-R7QP-CFHV-P84W...

@aeppic/install-build-server (>=1.2.0, <=1.9.8), @aeppic/install-repository-server (>=1.2.2, <=2.0.2) +145 more potentially affected by CVE-2022-41919 via fastify (>=3.0.0, <=3.29.3)

fastify NPM version =3.0.0, =1.2.0, =1.2.2, =0.0.46, =0.0.5, =1.0.0, =2.0.0, =1.1.1, =1.0.0, =1.0.0, =1.0.0, =4.23.1, =2.7.0, =1.0.0, =1.3.0 - @bronosorg/graph-indexer-service 1.0.0 and more Source cves: CVE-2022-41919 Source advisory: OSV:GHSA-3FJJ-P79J-C9HH...

@aicore/cocodb (>=1.0.1, <=1.0.6), @athenna/artisan (>=1.6.0, <=1.6.4) +92 more potentially affected by CVE-2022-41919 via fastify (>=4.0.2, <=4.10.0)

fastify NPM version =4.0.2, =1.0.1, =1.6.0, =1.3.1, =1.0.2, =1.2.1, =2.0.6, =1.4.6, =1.7.1, =1.3.0, =1.3.8, =1.0.1, =1.3.9, =4.33.5, =0.0.65, =1.1.1, =1.1.3 and more Source cves: CVE-2022-41919 Source advisory: OSV:GHSA-3FJJ-P79J-C9HH...