@dci-lint/cmd-api-server (>=0.3.0, <=0.4.0), @dci-lint/test-api-client (>=0.3.0, <=0.4.0) +46 more potentially affected by CVE-2022-36083 via jose (>=1.18.1, <=1.28.1)

jose NPM version =1.18.1, =0.3.0, =0.3.0, =0.3.0, =0.10.0-unstable.0042dcd, =0.6.1, =0.6.3, =0.6.3, =0.6.4, =0.6.3, =0.6.9, =0.6.1, =0.6.3, =0.6.3, =0.6.3, =0.6.5, =0.9.4 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@adobe/helix-google-support (>=1.3.4, <=2.0.3), @adobe/helix-html-pipeline (>=3.0.0, <=3.1.8) +64 more potentially affected by CVE-2022-36083 via jose (>=4.0.3, <=4.9.1)

jose NPM version =4.0.3, =1.3.4, =3.0.0, =1.11.39, =8.0.0, =0.0.1, =0.0.2-alpha.15, =2.2.2, =2022.2.6, =1.0.1, =2.7.3, =1.0.4-alpha.0, =2.2.9, =1.1.5, =1.1.9 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@netceterapx/click-to-pay-embedded-sdk (>=0.0.1, <=1.0.5) potentially affected by CVE-2022-36083 via jose-browser-runtime (4.1.2)

jose-browser-runtime NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on jose-browser-runtime and may be impacted: - @netceterapx/click-to-pay-embedded-sdk =0.0.1, =1.0.5 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ...

cortex-cli (2.0.7) potentially affected by CVE-2022-36083 via jose-node-cjs-runtime (3.18.0)

jose-node-cjs-runtime NPM version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on jose-node-cjs-runtime and may be impacted: - cortex-cli 2.0.7 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

alloc-cortex-m (>=0.1.0, <=0.4.2), bottleos (0.2.0) +24 more potentially affected by CVE-2022-36086 via linked_list_allocator (>=0.2.7, <=0.9.1)

linkedlistallocator CARGO version =0.2.7, =0.1.0, =0.1.0, =0.3.0, =0.4.0-pre, =0.4.0-pre, =0.1.0, =0.0.1, =0.3.2, =0.11.0, =0.1.0, =0.1.3 and more Source cves: CVE-2022-36086 Source advisory: OSV:GHSA-XG8P-34W2-J49J...

accrete (>=0.1.7, <=0.2.0), adana-script-wasm (>=0.16.5-rc.1, <=0.17.10) +320 more potentially affected by unknown CVE via wee_alloc (>=0.1.0, <=0.4.5)

weealloc CARGO version =0.1.0, =0.1.7, =0.16.5-rc.1, =0.1.0, =0.4.0, =0.1.1, =0.1.2, =1.4.0, =0.1.0, =0.2.8 - biscuit-wasm 0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RC23-XXGQ-X27G...

acari-lib (>=0.1.1, <=0.1.8), accepted (>=0.2.0, <=0.3.2) +1862 more potentially affected by unknown CVE via traitobject (>=0.0.1, <=0.1.1)

traitobject CARGO version =0.0.1, =0.1.1, =0.2.0, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.2 - aigcapi 5.1.2 - aigcchain 5.1.2 - aigcconfig 5.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PP8R-VV2J-9J5V...

cargo-c (0.9.14+cargo-0.66), cargo-clone-core (0.2.0) +7 more potentially affected by CVE-2022-36113 via cargo (0.66.0)

cargo CARGO version 0.66.0 is affected by a known vulnerability. The following packages have a transitive dependency on cargo and may be impacted: - cargo-c 0.9.14+cargo-0.66 - cargo-clone-core 0.2.0 - cargo-instruments 0.4.8 - cargo-patch 0.2.9 - cargo-udeps 0.1.35 - publish-action =0.2.0, =0.1....

armory_cli (>=0.3.3, <=0.3.28), armory_lib (>=0.1.0, <=0.3.28) +131 more potentially affected by CVE-2022-36114 via cargo (>=0.4.0, <=0.64.0)

cargo CARGO version =0.4.0, =0.3.3, =0.1.0, =0.10.0, =0.10.0, =0.1.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.6.0, =0.1.0, =0.1.2 and more Source cves: CVE-2022-36114 Source advisory: OSV:GHSA-2HVR-H6GW-QRXP...

cargo-c (0.9.14+cargo-0.66), cargo-clone-core (0.2.0) +7 more potentially affected by CVE-2022-36114 via cargo (0.66.0)

cargo CARGO version 0.66.0 is affected by a known vulnerability. The following packages have a transitive dependency on cargo and may be impacted: - cargo-c 0.9.14+cargo-0.66 - cargo-clone-core 0.2.0 - cargo-instruments 0.4.8 - cargo-patch 0.2.9 - cargo-udeps 0.1.35 - publish-action =0.2.0, =0.1....

pasbeaucoupmoinsrave (0.2.0) potentially affected by CVE-2022-3224 via parse-url (8.0.0)

parse-url NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - pasbeaucoupmoinsrave 0.2.0 Source cves: CVE-2022-3224 Source advisory: OSV:GHSA-PQW5-JMP5-PX4V...

ahecha (>=0.0.5, <=0.0.9), ahecha_html (>=0.0.2, <=0.0.8) +82 more potentially affected by CVE-2022-3212 via axum-core (0.1.2)

axum-core CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on axum-core and may be impacted: - ahecha =0.0.5, =0.0.2, =0.0.2, =0.1.0, =3.0.14, =0.14.0, =0.33.0, =0.4.0, =0.1.0, =0.1.1 - axum-client-ip 0.1.0 - axum-core 0.2.0 and more...

@appsocially/timepassport (>=0.1.2-0.1, <=0.1.29), @becompliancebr/shared-components (>=1.0.0, <=1.10.0) +80 more potentially affected by CVE-2022-25873 via vuetify (>=2.0.0, <=2.6.9)

vuetify NPM version =2.0.0, =0.1.2-0.1, =1.0.0, =1.2.5-1, =5.0.1-beta.0, =0.0.128-beta.33, =0.0.101-beta.22, =0.0.132-alpha.448, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.132-alpha.448, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.132-beta.446 and more Source cves:...

@guild-docs/client (>=2.0.0-alpha-84d7330.0, <=4.0.0-alpha-b500768.0) potentially affected by CVE-2022-36036 via mdx-mermaid (1.2.2)

mdx-mermaid NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on mdx-mermaid and may be impacted: - @guild-docs/client =2.0.0-alpha-84d7330.0, =4.0.0-alpha-b500768.0 Source cves: CVE-2022-36036 Source advisory: OSV:GHSA-RVGM-35JW-Q628...

ahecha (>=0.0.5, <=0.0.9), ahecha_html (>=0.0.2, <=0.0.8) +82 more potentially affected by CVE-2022-3212 via axum-core (0.1.2)

axum-core CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on axum-core and may be impacted: - ahecha =0.0.5, =0.0.2, =0.0.2, =0.1.0, =3.0.14, =0.14.0, =0.33.0, =0.4.0, =0.1.0, =0.1.1 - axum-client-ip 0.1.0 - axum-core 0.2.0 and more...

cargo-travis (>=0.0.10, <=0.0.11), cargo-travis-fork (>=0.0.11, <=0.0.12) potentially affected by unknown CVE via badge (>=0.2.0, <=0.3.0)

badge CARGO version =0.2.0, =0.0.10, =0.0.11, =0.0.12 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0057...

@aqsc/form-making (>=0.0.22, <=0.0.39), @ariesate/are-components (1.0.1) +86 more potentially affected by CVE-2022-25646 via x-data-spreadsheet (>=1.1.4, <=1.1.9)

x-data-spreadsheet NPM version =1.1.4, =0.0.22, =1.1.0, =1.1.5, =0.0.1-alpha.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1, =1.0.4 and more Source cves: CVE-2022-25646 Source advisory: OSV:GHSA-X5CW-843F-R366...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +260 more potentially affected by CVE-2022-25887 via sanitize-html (>=2.1.0, <=2.7.0)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =1.3.0, =2.0.0-alpha.2, =1.2.152, =1.0.85, =1.0.140, =1.1.81, =1.0.36, =1.0.104, =1.0.43, =1.0.5, =1.1.3-u1, =1.1.3-u1, =1.1.3-u2 and more Source cves: CVE-2022-25887 Source advisory: OSV:GHSA-CGFM-XWP7-2CVR...

@beer-code-industry/common-frontend (>=0.5.0, <=0.7.6), @birthdayresearch/contented (1.0.1) +29 more potentially affected by CVE-2022-36046 via next (12.2.3-canary.2)

next NPM version 12.2.3-canary.2 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @beer-code-industry/common-frontend =0.5.0, =1.0.1, =1.0.0, =1.89.0-next.89, =0.0.19, =0.0.19, =0.0.20, =0.0.44, =0.0.15, =0.0.31 -...

6brain (>=0.0.1, <=0.0.2), 6sense (>=0.0.1, <=1.1.5) +1882 more potentially affected by unknown CVE via moment-timezone (>=0.1.0, <=0.5.34)

moment-timezone NPM version =0.1.0, =0.0.1, =0.0.1, =4.11.0, =4.13.7-rc4, =1.70.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-56X4-J7P9-FCF9...