@aem-vite/import-rewriter (5.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=1.0.0) +191 more potentially affected by CVE-2022-35204 via vite (>=2.0.0-beta.4, <=2.9.12)

vite NPM version =2.0.0-beta.4, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =1.0.16, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.16 and more Source cves: CVE-2022-35204 Source advisory:...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +443 more potentially affected by CVE-2022-35948 via undici (>=5.0.0, <=5.8.1)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-35948 Source advisory: OSV:GHSA-F772-66G8-Q5H3...

@atlantis-lab/actl (>=0.4.0, <=0.4.37), @atlantis-lab/actl-check (>=0.1.0, <=0.4.37) +62 more potentially affected by CVE-2022-35954 via @actions/core (>=1.0.0, <=1.9.0)

@actions/core NPM version =1.0.0, =0.4.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =2.3.0, =0.1.0, =0.0.0-canary.6527017, =0.0.0-d99f4ac.0, =0.0.5, =2.0.0, =3.5.2, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2022-35954 Source advisory: OSV:GHSA-7R3H-M5J6-3Q42...

@abacus-network/helloworld (>=0.2.1-alpha, <=0.2.1-beta2), @alt-research/orbit-sdk-avail (>=0.9.1, <=0.9.11) +108 more potentially affected by CVE-2022-35961 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.2.1-alpha, =0.9.1, =0.19.0-beta.0, =0.1.0-alpha, =0.24.2, =1.0.0-beta.1, =0.6.0-beta.0, =1.1.4-migration-beta.0, =1.0.0-beta.0, =1.0.0-upstream-0.19.0, =1.4.0, =1.5.0-beta.0 and more Source cves: CVE-2022-35961 Source advisory:...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +443 more potentially affected by CVE-2022-35949 via undici (>=5.0.0, <=5.8.1)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-35949 Source advisory: OSV:GHSA-8QR4-XGW6-WMR3...

@a11ywatch/a11ywatch (>=0.0.1, <=0.1.65), @a11ywatch/core (>=0.1.1, <=0.5.12) +32 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.10.0)

apollo-server-core NPM version =3.0.0-html.2, =0.0.1, =0.1.1, =1.0.1, =1.1.22, =1.1.19, =10.0.1, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =0.0.27, =0.0.11, =2.0.4, =4.9.0-beta.2, =9.0.0, =9.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2FVV-QXRQ-7JQ6...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1253 more potentially affected by CVE-2022-31198 via @openzeppelin/contracts (>=4.3.0, <=4.7.1)

@openzeppelin/contracts NPM version =4.3.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =1.0.0, =0.2.0, =4.14.3, =1.0.2, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =3.1.0 and more Source cves: CVE-2022-31198 Source advisory: OSV:GHSA-XRC4-737V-9Q75...

yfmw-utils (1.0.0) potentially affected by unknown CVE via lodash-utils (0.0.1-security)

lodash-utils NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash-utils and may be impacted: - yfmw-utils 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4358...

@aragon/core-contracts (>=0.3.0-alpha, <=3.0.0-alpha), @benddao/bend-downpayment (1.0.0) +21 more potentially affected by CVE-2022-35916 via @openzeppelin/contracts-upgradeable (>=4.6.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =4.6.0, =0.3.0-alpha, =1.2.0, =0.0.2, =0.1.0-rc-1, =0.1.6, =0.1.0, =0.2.0 and more Source cves: CVE-2022-35916 Source advisory: OSV:GHSA-9J3M-G383-29QR...

@centrifuge/ethereum-contracts (>=0.5.0, <=1.0.3-canary.4) potentially affected by CVE-2022-35915 via openzeppelin-eth (2.1.3)

openzeppelin-eth NPM version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on openzeppelin-eth and may be impacted: - @centrifuge/ethereum-contracts =0.5.0, =1.0.3-canary.4 Source cves: CVE-2022-35915 Source advisory: OSV:GHSA-7GRF-83VW-6F5X...

0x-hunter-core (>=1.0.0-33, <=1.0.0-38), 1155-to-20 (>=1.0.0, <=1.0.2) +3169 more potentially affected by CVE-2022-35915 via @openzeppelin/contracts (>=2.3.0, <=4.7.1)

@openzeppelin/contracts NPM version =2.3.0, =1.0.0-33, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.9.1, =3.24.7, =1.7.2, =3.10.3, =0.0.2, =1.4.1, =1.0.0, =1.0.0-alpha.0, =1.1.0-alpha.0 and more Source cves: CVE-2022-35915 Source advisory: OSV:GHSA-7GRF-83VW-6F5X...

abci-storage (0.0.3), arcon_backend (>=0.1.0, <=0.1.1) +138 more potentially affected by unknown CVE via rocksdb (>=0.1.1, <=0.18.0)

rocksdb CARGO version =0.1.1, =0.1.0, =0.2.0, =0.2.0, =0.1.1, =1.2.0-alpha-1, =0.6.0, =6.0.0, =0.1.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XPP3-XRFF-W6RH...

sqlite (>=0.19.7, <=0.21.1), sqlite3-sys (>=0.6.7, <=0.9.2) +3 more potentially affected by unknown CVE via temporary (0.5.1)

temporary CARGO version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on temporary and may be impacted: - sqlite =0.19.7, =0.6.7, =0.11.0, =0.2.6, =0.2.7 Source cves: unknown CVE Source advisory: OSV:GHSA-2JQ9-6XX7-3H29...

a2 (>=0.3.6, <=0.5.0-alpha.1), abci-storage (0.0.3) +1467 more potentially affected by unknown CVE via owning_ref (>=0.1.4, <=0.4.1)

owningref CARGO version =0.1.4, =0.3.6, =0.1.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9QXH-258V-666C...

@alloyify/anvil (>=1.1.2, <=1.1.4), @alloyify/devkit (>=1.1.2, <=1.1.4) +12 more potentially affected by CVE-2022-25907 via ts-deepmerge (2.0.1)

ts-deepmerge NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ts-deepmerge and may be impacted: - @alloyify/anvil =1.1.2, =1.1.2, =1.1.2, =1.1.2, =0.0.0-canary-20220330074435, =0.0.0-canary-20220330074435, =5.0.24, =11.1.27, =4.0.22,...

@amirmarmul/waba-common (>=2.2.51, <=2.9.8), @aptana/multichannel-common (>=2.9.12, <=2.10.3) +14 more potentially affected by CVE-2022-25921 via morgan-json (1.1.0)

morgan-json NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on morgan-json and may be impacted: - @amirmarmul/waba-common =2.2.51, =2.9.12, =1.0.0, =1.1.3, =1.0.0, =1.0.3, =0.11.0, =2.0.0, =0.0.5, =1.0.0, =0.1.0, =1.1.0, =2.0.0, =2.1.5 a...

solana-base-app (0.1.5), solanapaydemo-cookies (>=1.0.0, <=1.2.0) potentially affected by CVE-2022-35917 via @solana/pay (0.1.3)

@solana/pay NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/pay and may be impacted: - solana-base-app 0.1.5 - solanapaydemo-cookies =1.0.0, =1.2.0 Source cves: CVE-2022-35917 Source advisory: OSV:GHSA-J47C-J42C-MWQQ...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2022-31186 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2022-31186 Source advisory: OSV:GHSA-P6MM-27GQ-9V3P...

@chirpy-dev/main-app (>=0.1.0, <=0.3.0), @elastic/docsmobile (>=1.9.9, <=1.12.0) +7 more potentially affected by CVE-2022-31186 via next-auth (>=4.0.0-beta.6, <=4.9.0)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.9, =4.0.0-alpha.11, =4.0.0-alpha.1, =4.0.0-alpha.6, =0.31.1, =1.42.1, =0.50.4, =0.78.15-alpha.2 - chirpy-dev 0.1.0 Source cves: CVE-2022-31186 Source advisory: OSV:GHSA-P6MM-27GQ-9V3P...

adsbx_browser (0.1.0), adsbx_screenshot (>=0.1.0, <=1.4.1) +92 more potentially affected by CVE-2022-35922 via websocket (>=0.9.5, <=0.24.0)

websocket CARGO version =0.9.5, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.0.6, =1.0.0, =0.1.0, =0.0.0, =0.1.0, =0.1.2, =0.3.3, =0.6.25, =0.0.3, =0.1.0, =0.1.1 and more Source cves: CVE-2022-35922 Source advisory: OSV:GHSA-QRJV-RF5Q-QPXC...