9542 matches found
24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +126 more potentially affected by CVE-2022-25345 via @discordjs/opus (>=0.1.0, <=0.7.0)
@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =4.0.0-dev.1637284165.37d3883 - @dishost/music 0.0.0 and more Source cves: CVE-2022-25345 Source advisory: SNYK:JS-DISCORDJSOPUS-2403100...
@acanto/components (>=0.0.2, <=0.0.73), @acanto/components-header-subnav (>=0.0.2, <=0.0.37) +51 more potentially affected by CVE-2021-23702 via object-extend (0.5.0)
object-extend NPM version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on object-extend and may be impacted: - @acanto/components =0.0.2, =0.0.2, =0.0.2, =0.0.3, =0.0.2, =0.0.2, =0.0.17, =0.0.2, =0.0.2, =0.0.65, =0.0.2, =0.0.2, =0.0.2, =0.0.4,...
0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4610 more potentially affected by CVE-2022-0512 via url-parse (>=0.1.5, <=1.5.4)
url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2022-0512 Source advisory: OSV:GHSA-RQFF-837H-MM52...
@agoric/cosmic-swingset (>=0.15.0, <=0.20.1), @agoric/swing-store-lmdb (>=0.2.0, <=0.3.6-dev.2) +42 more potentially affected by CVE-2022-21164 via node-lmdb (>=0.3.0, <=0.9.6)
node-lmdb NPM version =0.3.0, =0.15.0, =0.2.0, =0.0.7, =0.0.1, =0.2.0, =1.3.0, =0.1.1, =0.1.4, =0.6.2, =0.0.1, =0.1.0, =0.82.0, =0.0.7, =0.0.2, =0.4.2 and more Source cves: CVE-2022-21164 Source advisory: SNYK:JS-NODELMDB-2400723...
4q (>=0.5.0, <=0.6.0), @aibulat/fs (>=0.0.2, <=0.0.10) +100 more potentially affected by CVE-2022-21211 via posix (>=0.0.7, <=4.2.0)
posix NPM version =0.0.7, =0.5.0, =0.0.2, =0.0.1, =1.0.11, =1.0.0, =1.0.0, =1.0.0-beta.1, =0.1.3-beta.0, =1.161.831, =0.0.0, =0.2.14, =1.13.0-0, =0.1.6, =1.1.7, =2.4.1 and more Source cves: CVE-2022-21211 Source advisory: SNYK:JS-POSIX-2400719...
@accordproject/cicero-cli (>=0.3.4, <=0.23.0-alpha.1), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.0-alpha.1) +151 more potentially affected by CVE-2021-23555 via vm2 (>=3.0.0, <=3.9.5)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2018.7.11-0, =2018.8.5-0, =2018.8.14-0 - @appium/execute-driver-plugin...
@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2021-23597 via fastify-multipart (>=5.2.1, <=5.3.0)
fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2021-23597 Source advisory: OSV:GHSA-QH73-QC3P-RJV2...
@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by CVE-2021-28860 +1 more via mixme (>=0.0.1, <=0.4.0)
mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: CVE-2021-28860, CVE-2021-29491 Source advisory: OSV:GHSA-R5CQ-9537-9RPF...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +2021 more potentially affected by CVE-2021-23383 via handlebars (>=4.0.0, <=4.7.6)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.2-alpha.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-23383 Source advisory: OSV:GHSA-765H-QJXV-5F44...
@foxnfork/auth-node (>=0.0.8, <=0.0.50), @foxnfork/node-utils (>=0.0.1, <=0.0.9) +11 more potentially affected by CVE-2021-26543 via git-parse (>=1.0.3, <=1.0.4)
git-parse NPM version =1.0.3, =0.0.8, =0.0.1, =0.0.1, =2.11.0-beta, =1.4.3, =2.6.0, =2.18.1, =0.2.11, =1.2.7, =1.0.0, =2.33.10, =0.2.1, =2.6.2, =2.6.3 Source cves: CVE-2021-26543 Source advisory: OSV:GHSA-M744-2JJ8-VPFV...
compare-eslint-config (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-7629 via install-package (0.1.0)
install-package NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on install-package and may be impacted: - compare-eslint-config =0.1.0, =0.1.1 Source cves: CVE-2020-7629 Source advisory: OSV:GHSA-6M4R-M3GC-H4R5...
@bionicmetrics/bionic (>=1.2.0, <=1.3.6), @emonxdefine/oindot (>=1.0.3, <=1.0.7) +9 more potentially affected by CVE-2020-7627 via node-key-sender (>=1.0.9, <=1.0.11)
node-key-sender NPM version =1.0.9, =1.2.0, =1.0.3, =1.0.9, =1.5.0, =0.0.1, =1.0.0, =1.0.5, =0.9.0, =1.2.1, =1.1.0, =2.2.0 Source cves: CVE-2020-7627 Source advisory: OSV:GHSA-4XRW-WVMQ-8JMH...
hiproxy (>=1.1.3, <=2.0.0-next.3) potentially affected by CVE-2020-7625 via op-browser (>=1.0.6, <=1.0.9)
op-browser NPM version =1.0.6, =1.1.3, =2.0.0-next.3 Source cves: CVE-2020-7625 Source advisory: OSV:GHSA-3HQ6-RMV7-39VH...
@dolittle/node-red (>=2.0.0, <=2.2.5), @dolittle/node-red-infor-m3 (>=2.0.1, <=2.1.5) +50 more potentially affected by CVE-2019-10062 via aurelia-framework (>=1.0.0, <=1.3.1)
aurelia-framework NPM version =1.0.0, =2.0.0, =2.0.1, =1.2.1, =1.0.0, =0.1.9, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11 and more Source cves: CVE-2019-10062 Source advisory: OSV:GHSA-M6J2-V3GQ-45R5...
specberus (>=4.4.4, <=5.6.2) potentially affected by CVE-2021-32820 via express-handlebars (>=5.1.0, <=5.3.0)
express-handlebars NPM version =5.1.0, =4.4.4, =5.6.2 Source cves: CVE-2021-32820 Source advisory: OSV:GHSA-FR76-2WP8-FP92...
421752593pro (5.6.0), @zkochan/pnpm (>=1.16.0, <=1.16.22) +7 more potentially affected by CVE-2017-18869 via chownr (1.0.1)
chownr NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on chownr and may be impacted: - 421752593pro 5.6.0 - @zkochan/pnpm =1.16.0, =5.4.2, =1.16.2, =1.23.2, =2.0.3, =2.15.0 - wedmaster 4.1.2 Source cves: CVE-2017-18869 Source advisory:...
@amis-adapter/amis-editor-react (0.0.1), @amis-adapter/amis-editor-webpack (0.1.0) +1039 more potentially affected by CVE-2019-19935 via froala-editor (>=3.0.0, <=3.2.2)
froala-editor NPM version =3.0.0, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =6.10.0, =6.10.1 and more Source cves: CVE-2019-19935 Source advisory: OSV:GHSA-H236-G5GH-VQ6C...
3d-crystal-model (0.1.0), 5ug-cli (>=1.0.23, <=1.0.70) +3148 more potentially affected by CVE-2020-15366 via ajv (>=6.0.0, <=6.12.2)
ajv NPM version =6.0.0, =1.0.23, =0.0.1, =1.0.0, =1.0.0, =6.0.0, =1.0.6, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.4, =3.0.0-beta.3, =0.0.1, =0.33.12 and more Source cves: CVE-2020-15366 Source advisory: OSV:GHSA-V88G-CGMW-V5XW...
02-sms-async (1.0.0), 1405-authtokens (>=1.0.1, <=1.0.5) +5962 more potentially affected by CVE-2019-2391 via bson (>=1.0.1, <=1.1.1)
bson NPM version =1.0.1, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.1.4, =0.1.0, =0.1.0, =0.0.1, =0.1.3 and more Source cves: CVE-2019-2391 Source advisory: OSV:GHSA-4JWP-VFVF-657P...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1559 more potentially affected by CVE-2019-20922 via handlebars (>=4.0.0, <=4.4.3)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: CVE-2019-20922 Source advisory: OSV:GHSA-62GR-4QP9-H98F...