@makeomatic/confidence (5.0.0), @makeomatic/deploy (>=10.0.1, <=10.2.1) +6 more potentially affected by CVE-2020-36604 via @hapi/hoek (9.0.2)

@hapi/hoek NPM version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/hoek and may be impacted: - @makeomatic/confidence 5.0.0 - @makeomatic/deploy =10.0.1, =6.0.0, =15.0.0, =10.0.0, =8.0.0, =14.0.0, =6.1.2, =6.8.3 Source cves:...

@condiments/chow-chow (>=3.0.0, <=3.0.1), @condiments/relish (>=4.0.0, <=4.0.1) +22 more potentially affected by CVE-2020-36604 via @hapi/hoek (>=8.1.0, <=8.5.0)

@hapi/hoek NPM version =8.1.0, =3.0.0, =4.0.0, =8.4.4, =1.5.2, =3.0.0, =3.0.0, =1.8.2, =1.8.2, =1.1.1, =2.2.0, =3.0.0, =1.8.2, =1.5.0, =1.5.1 and more Source cves: CVE-2020-36604 Source advisory: OSV:GHSA-C429-5P7V-VGJP...

@chumager/itdfw-site-base (>=1.2.0, <=2.4.5), @citruslime/ui (>=1.0.0, <=1.1.4-beta.1) +9 more potentially affected by CVE-2022-23461 via jodit (>=3.4.14, <=3.23.3)

jodit NPM version =3.4.14, =1.2.0, =1.0.0, =28.0.0-staging-2b964a, =1.0.9, =2.2.3, =1.0.15, =1.0.0, =1.5.1, =1.4.58, =1.6.90 Source cves: CVE-2022-23461 Source advisory: OSV:GHSA-42HX-VRXX-5R6V...

@adobe/helix-deploy (>=7.0.0, <=7.0.8) potentially affected by CVE-2022-39218 via @fastly/js-compute (>=0.4.0, <=0.5.2)

@fastly/js-compute NPM version =0.4.0, =7.0.0, =7.0.8 Source cves: CVE-2022-39218 Source advisory: OSV:GHSA-CMR8-5W4C-44V8...

d8s-archives (0.1.0), d8s-grammars (0.1.0) +5 more potentially affected by unknown CVE via democritus-strings (2021.1.28901)

democritus-strings PYPI version 2021.1.28901 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-strings and may be impacted: - d8s-archives 0.1.0 - d8s-grammars 0.1.0 - d8s-json 0.1.0 - d8s-math 0.1.0 - d8s-netstrings 0.1.0 - d8s-urls 0.1.0 -...

d8s-stats (0.1.0) potentially affected by unknown CVE via democritus-math (2021.1.2801)

democritus-math PYPI version 2021.1.2801 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-math and may be impacted: - d8s-stats 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSMATH-8400834...

d8s-timer (0.1.0) potentially affected by unknown CVE via democritus-dates (2021.2.1101)

democritus-dates PYPI version 2021.2.1101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-dates and may be impacted: - d8s-timer 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSDATES-8400836...

d8s-asns (0.1.0), d8s-domains (0.1.0) +6 more potentially affected by unknown CVE via democritus-networking (2023.1.22)

democritus-networking PYPI version 2023.1.22 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-networking and may be impacted: - d8s-asns 0.1.0 - d8s-domains 0.1.0 - d8s-html 0.1.0 - d8s-ip-addresses 0.1.0 - d8s-mpeg 0.1.0 - d8s-pdfs 0.1.0 -...

d8s-asns (0.1.0), d8s-domains (0.1.0) +8 more potentially affected by unknown CVE via democritus-json (2021.1.2501)

democritus-json PYPI version 2021.1.2501 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-json and may be impacted: - d8s-asns 0.1.0 - d8s-domains 0.1.0 - d8s-html 0.1.0 - d8s-ip-addresses 0.1.0 - d8s-mpeg 0.1.0 - d8s-networking 0.1.0 -...

d8s-dates (0.1.0) potentially affected by unknown CVE via democritus-timezones (2021.1.201)

democritus-timezones PYPI version 2021.1.201 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-timezones and may be impacted: - d8s-dates 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSTIMEZONES-8400832...

d8s-strings (0.1.0), d8s-timer (0.1.0) potentially affected by unknown CVE via democritus-uuids (2021.1.2101)

democritus-uuids PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-uuids and may be impacted: - d8s-strings 0.1.0 - d8s-timer 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSUUIDS-8400829...

d8s-dates (0.1.0), d8s-dicts (0.1.0) +5 more potentially affected by unknown CVE via democritus-hypothesis (2021.1.2101)

democritus-hypothesis PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-hypothesis and may be impacted: - d8s-dates 0.1.0 - d8s-dicts 0.1.0 - d8s-domains 0.1.0 - d8s-ip-addresses 0.1.0 - d8s-strings 0.1.0 - d8s-urls...

d8s-asns (0.1.0), d8s-domains (0.1.0) +8 more potentially affected by unknown CVE via democritus-user-agents (2021.1.2101)

democritus-user-agents PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-user-agents and may be impacted: - d8s-asns 0.1.0 - d8s-domains 0.1.0 - d8s-html 0.1.0 - d8s-ip-addresses 0.1.0 - d8s-mpeg 0.1.0 - d8s-networking...

d8s-urls (0.1.0) potentially affected by unknown CVE via democritus-domains (2021.1.2101)

democritus-domains PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-domains and may be impacted: - d8s-urls 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSDOMAINS-8400830...

@appsocially/timepassport (>=0.1.2-0.1, <=0.1.29), @becompliancebr/shared-components (>=1.0.0, <=1.10.0) +80 more potentially affected by CVE-2022-25873 via vuetify (>=2.0.0, <=2.6.9)

vuetify NPM version =2.0.0, =0.1.2-0.1, =1.0.0, =1.2.5-1, =5.0.1-beta.0, =0.0.128-beta.33, =0.0.101-beta.22, =0.0.132-alpha.448, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.132-alpha.448, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.132-beta.446 and more Source cves:...

@budibase/client (>=1.1.32-alpha.0, <=1.3.19-alpha.7), @budibase/frontend-core (>=1.1.32-alpha.0, <=1.3.19-alpha.7) +1 more potentially affected by CVE-2022-3225 via @budibase/bbui (>=1.1.32-alpha.0, <=1.3.19-alpha.7)

@budibase/bbui NPM version =1.1.32-alpha.0, =1.1.32-alpha.0, =1.1.32-alpha.0, =1.1.32-alpha.0, =1.3.19-alpha.7 Source cves: CVE-2022-3225 Source advisory: OSV:GHSA-X92G-49GH-63QM...

@adobe/helix-google-support (>=1.3.4, <=2.0.3), @adobe/helix-html-pipeline (>=3.0.0, <=3.1.8) +64 more potentially affected by CVE-2022-36083 via jose (>=4.0.3, <=4.9.1)

jose NPM version =4.0.3, =1.3.4, =3.0.0, =1.11.39, =8.0.0, =0.0.1, =0.0.2-alpha.15, =2.2.2, =2022.2.6, =1.0.1, =2.7.3, =1.0.4-alpha.0, =2.2.9, =1.1.5, =1.1.9 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@decentralized-identity/ion-sdk (>=0.1.0, <=0.4.1), @tadashi/jwt (>=6.0.0, <=7.0.0) +21 more potentially affected by CVE-2022-36083 via jose (>=2.0.1, <=2.0.5)

jose NPM version =2.0.1, =0.1.0, =6.0.0, =3.0.4, =3.0.4, =3.0.5, =3.0.4, =3.0.5, =3.0.4, =3.0.6, =3.0.3, =3.0.5, =3.1.0, =2.3.2, =0.1.0, =1.2.4 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@cdoor/core (>=0.0.1, <=0.0.3), @dci-lint/cmd-api-server (>=0.5.0, <=0.6.1) +39 more potentially affected by CVE-2022-36083 via jose (>=3.7.0, <=3.20.3)

jose NPM version =3.7.0, =0.0.1, =0.5.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.0.3-3.12.3, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =8.1....

@teachbase/utils (1.0.1) potentially affected by CVE-2022-36083 via jose-browser-runtime (3.16.1)

jose-browser-runtime NPM version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on jose-browser-runtime and may be impacted: - @teachbase/utils 1.0.1 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...