@csn_chile/fuelgauge (1.0.1), @csn_chile/ol_ws (1.0.0) +8 more potentially affected by CVE-2020-7678 via node-import (>=0.1.9, <=0.9.2)

node-import NPM version =0.1.9, =1.0.0, =1.0.0, =0.0.2, =0.1.2, =1.1.2, =1.1.1, =1.4.2 Source cves: CVE-2020-7678 Source advisory: OSV:GHSA-PC62-CQ5X-3J5G...

@alloyify/anvil (>=1.1.2, <=1.1.4), @alloyify/devkit (>=1.1.2, <=1.1.4) +12 more potentially affected by CVE-2022-25907 via ts-deepmerge (2.0.1)

ts-deepmerge NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ts-deepmerge and may be impacted: - @alloyify/anvil =1.1.2, =1.1.2, =1.1.2, =1.1.2, =0.0.0-canary-20220330074435, =0.0.0-canary-20220330074435, =5.0.24, =11.1.27, =4.0.22,...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +42 more potentially affected by CVE-2022-25759 via convert-svg-core (>=0.3.3, <=0.5.0)

convert-svg-core NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =0.3.0, =0.3.0, =1.0.3, =1.2.1 and more Source cves: CVE-2022-25759 Source advisory: OSV:GHSA-5GXC-FXCR-9326...

slack-morphism-hyper (>=0.5.0, <=0.40.0), slack-paste (0.1.0) potentially affected by CVE-2022-31162 via slack-morphism (>=0.2.8, <=0.40.0)

slack-morphism CARGO version =0.2.8, =0.5.0, =0.40.0 - slack-paste 0.1.0 Source cves: CVE-2022-31162 Source advisory: OSV:RUSTSEC-2022-0086...

dfx-core (0.0.1), ehsm (>=0.1.0, <=0.1.1) +5 more potentially affected by unknown CVE via pkcs11 (0.5.0)

pkcs11 CARGO version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pkcs11 and may be impacted: - dfx-core 0.0.1 - ehsm =0.1.0, =0.2.0, =0.1.0-alpha.0, =0.1.0, =0.0.1, =0.2.1 - tpm-change-pin 0.1.0 Source cves: unknown CVE Source advisory:...

@compas/store (>=0.0.178, <=0.0.210), @flyacts/backend-media-management (2.1.1) +12 more potentially affected by CVE-2022-36313 via file-type (>=17.0.0, <=17.1.2)

file-type NPM version =17.0.0, =0.0.178, =0.6.14, =0.1.0, =0.2.15, =0.2.8, =0.0.207, =0.0.0-alpha.11, =4.5.3, =7.2.0, =7.2.2 Source cves: CVE-2022-36313 Source advisory: OSV:GHSA-MHXJ-85R3-2X55...

123yun-share (1.0.0), 1k-tasks (>=2.3.0, <=3.6.1) +813 more potentially affected by CVE-2022-36313 via file-type (>=13.0.3, <=16.5.3)

file-type NPM version =13.0.3, =2.3.0, =1.0.0, =0.0.2, =1.0.0, =1.0.6, =1.0.0-alpha.0, =1.0.0-alpha.1, =0.17.17, =0.1.41, =1.1.0, =0.1.3, =1.10.0 and more Source cves: CVE-2022-36313 Source advisory: OSV:GHSA-MHXJ-85R3-2X55...

abstraps (0.1.8), aivm (>=0.2.0, <=0.3.0) +287 more potentially affected by CVE-2022-23636 +1 more via cranelift-codegen (>=0.14.0, <=0.84.0)

cranelift-codegen CARGO version =0.14.0, =0.2.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.2.9, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.26.1, =0.30.1 and more Source cves: CVE-2022-23636, CVE-2022-31169 Source advisory: OSV:GHSA-7F6X-JWH5-M9R4...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1281 more potentially affected by CVE-2022-31170 via @openzeppelin/contracts (>=4.0.0, <=4.7.0)

@openzeppelin/contracts NPM version =4.0.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =1.0.0, =0.2.0, =4.14.3, =1.0.2, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =3.1.0 and more Source cves: CVE-2022-31170 Source advisory: OSV:GHSA-QH9X-GCFH-PCRW...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +441 more potentially affected by CVE-2022-31151 +1 more via undici (>=5.0.0, <=5.7.0)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-31151, CVE-2023-45143 Source advisory: OSV:GHSA-Q768-X9M6-M9QP...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +441 more potentially affected by CVE-2022-31150 via undici (>=5.0.0, <=5.7.0)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-31150 Source advisory: OSV:GHSA-3CVR-822R-RQCC...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +260 more potentially affected by CVE-2022-25887 via sanitize-html (>=2.1.0, <=2.7.0)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =1.3.0, =2.0.0-alpha.2, =1.2.152, =1.0.85, =1.0.140, =1.1.81, =1.0.36, =1.0.104, =1.0.43, =1.0.5, =1.1.3-u1, =1.1.3-u1, =1.1.3-u2 and more Source cves: CVE-2022-25887 Source advisory: SNYK:JS-SANITIZEHTML-2957526...

deterministic-wasi-ctx (0.1.3), enarx (>=0.5.0, <=0.5.1) +9 more potentially affected by CVE-2022-31146 via wasmtime (0.37.0)

wasmtime CARGO version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - deterministic-wasi-ctx 0.1.3 - enarx =0.5.0, =0.11.0, =0.12.14 - wasi-tokio 0.37.0 - wasmtime-cli-flags 0.37.0 - wasmtime-wasi 0.37.0 -...

slack-morphism-hyper (>=0.5.0, <=0.40.0), slack-paste (0.1.0) potentially affected by CVE-2022-31162 via slack-morphism (>=0.2.8, <=0.40.0)

slack-morphism CARGO version =0.2.8, =0.5.0, =0.40.0 - slack-paste 0.1.0 Source cves: CVE-2022-31162 Source advisory: OSV:GHSA-99J7-MHFH-W84P...

@jamen/mdc (>=0.0.0, <=0.0.1), @namgoe/gcmsgen (>=0.0.3, <=0.0.11) +25 more potentially affected by CVE-2020-28459 via markdown-it-decorate (>=1.0.0, <=1.2.2)

markdown-it-decorate NPM version =1.0.0, =0.0.0, =0.0.3, =0.0.1, =0.0.0, =2.3.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =1.1.0, =0.1.0, =0.2.0, =1.0.1, =1.0.1, =1.0.17 and more Source cves: CVE-2020-28459 Source advisory: OSV:GHSA-RHF5-2378-3W3W...

@intlgadmin/skywalking-nodejs-prisma-plugin (1.0.0), logtube (>=2.3.0, <=2.4.0) +3 more potentially affected by CVE-2022-36127 via skywalking-backend-js (>=0.3.0, <=0.4.1)

skywalking-backend-js NPM version =0.3.0, =2.3.0, =1.2.144-2, =1.0.0, =1.0.4 Source cves: CVE-2022-36127 Source advisory: OSV:GHSA-8GPG-466C-5CPJ...

@accordproject/cicero-cli (>=0.2.48, <=0.8.0), @accordproject/cicero-common (>=0.2.50, <=0.3.17) +102 more potentially affected by CVE-2020-7677 via thenify (>=3.0.0, <=3.3.0)

thenify NPM version =3.0.0, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.0.37, =0.0.36, =0.0.37, =0.1.0, =0.1.0, =2.1.1, =0.1.0, =0.2.2 and more Source cves: CVE-2020-7677 Source advisory: OSV:GHSA-29XR-V42J-R956...

@atlassian/aui (>=8.2.4, <=9.5.1), @chinchilla-software/ng-date-time-picker (>=1.0.0, <=1.0.1) +135 more potentially affected by CVE-2022-31160 via jquery-ui (>=1.10.4, <=1.13.1)

jquery-ui NPM version =1.10.4, =8.2.4, =1.0.0, =1.0.0, =0.1.0, =2.3.2, =6.4.0, =1.1.42, =5.0.0-110, =0.0.0, =2.1.1, =4.0.0, =1.0.0-alpha.0, =11.0.0, =17.0.0-dev.3 and more Source cves: CVE-2022-31160 Source advisory: OSV:GHSA-H6GJ-6JJQ-H8G9...

@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)

glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory:...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3309 more potentially affected by CVE-2022-25869 via angular (>=1.0.8, <=1.8.3)

angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25869 Source advisory: OSV:GHSA-PRC3-VJFX-VHM9...