136 matches found
accepted (>=0.2.0, <=0.3.2), aigc_api (5.1.2) +505 more potentially affected by unknown CVE via typemap (0.3.3)
typemap CARGO version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VFV3-9W6V-23JP...
npos-cli (>=0.0.5, <=0.0.6) potentially affected by CVE-2020-28453 via npos-tesseract (0.0.3)
npos-tesseract NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on npos-tesseract and may be impacted: - npos-cli =0.0.5, =0.0.6 Source cves: CVE-2020-28453 Source advisory: OSV:GHSA-MPWP-PF96-9G4R...
grunt-git-describe (>=2.3.1, <=2.4.4), grunt-git-describe-plus (2.3.3-0) +3 more potentially affected by CVE-2020-7641 via grunt-util-property (0.0.2)
grunt-util-property NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on grunt-util-property and may be impacted: - grunt-git-describe =2.3.1, =0.1.5, =0.0.1, =0.0.4 Source cves: CVE-2020-7641 Source advisory: OSV:GHSA-4HQ8-JGR8-MW9J...
@sobotics/caching (1.1.1) potentially affected by CVE-2020-11610 via xdlocalstorage (2.0.5)
xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2020-11610 Source advisory: OSV:GHSA-MR5M-2385-2VCP...
@fluentui/bundle-size (>=1.1.3, <=1.1.6), @georgs/beachball (2.22.0) +18 more potentially affected by CVE-2022-25865 via workspace-tools (>=0.3.3, <=0.16.2)
workspace-tools NPM version =0.3.3, =1.1.3, =0.0.2, =0.0.2, =1.3.0, =0.1.1, =1.2.0, =1.0.3, =0.1.2, =5.0.0-alpha.0, =5.0.0-alpha.0, =1.48.2, =0.3.0, =1.0.0, =1.0.21 and more Source cves: CVE-2022-25865 Source advisory: OSV:GHSA-5875-M6JQ-VF78...
@backstage/plugin-techdocs (>=0.0.0-nightly-20220504024625, <=1.1.1-next.2), @eui/deps-base (>=13.1.5-snapshot-1652433005121, <=14.0.4) potentially affected by unknown CVE via event-source-polyfill (1.0.26)
event-source-polyfill NPM version 1.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on event-source-polyfill and may be impacted: - @backstage/plugin-techdocs =0.0.0-nightly-20220504024625, =13.1.5-snapshot-1652433005121, =14.0.4 Source cves: unknown...
@douglara/n8n-nodes-discord (>=0.5.4, <=0.5.5), @dxos/gravity-agent (>=0.1.19, <=0.3.5-next.5910692) +42 more potentially affected by unknown CVE via node-ipc (11.1.0)
node-ipc NPM version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-ipc and may be impacted: - @douglara/n8n-nodes-discord =0.5.4, =0.1.19, =1.0.2, =0.5.2, =0.5.4-1, =0.5.0, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =0.5.0, =0.1.0, =0.1.2 -...
@agoric/cosmic-swingset (>=0.10.8-dev.0, <=0.18.0), @agoric/ertp (>=0.1.4, <=0.4.1) +18 more potentially affected by CVE-2021-23543 via realms-shim (1.2.2)
realms-shim NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on realms-shim and may be impacted: - @agoric/cosmic-swingset =0.10.8-dev.0, =0.1.4, =0.0.1, =0.1.1, =0.0.1, =0.0.20, =0.1.0, =2.0.1, =1.0.0, =0.0.1, =0.4.1, =0.0.6,...
a-bot (0.0.1), a-gpt (>=0.1.0, <=0.4.0) +13704 more potentially affected by unknown CVE via ansi_term (>=0.5.2, <=0.12.1)
ansiterm CARGO version =0.5.2, =0.1.0, =0.2.0, =0.0.2, =0.4.1, =0.9.0, =0.2.1, =0.1.0, =0.1.0, =0.7.0, =0.2.4, =0.8.0 - ablescriptcli 0.2.0 - ableton-link 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0139...
@ioup/mia-bot (0.0.1) potentially affected by CVE-2021-23378 via picotts (0.1.1)
picotts NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on picotts and may be impacted: - @ioup/mia-bot 0.0.1 Source cves: CVE-2021-23378 Source advisory: OSV:GHSA-WQ7Q-5V6J-XFV6...
@frostoven/alkalurops (>=1.28.2, <=1.28.5), @h5web/app (>=0.1.0-beta.1, <=4.2.0-beta.1) +14 more potentially affected by unknown CVE via d3-color (3.0.1)
d3-color NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on d3-color and may be impacted: - @frostoven/alkalurops =1.28.2, =0.1.0-beta.1, =0.1.0-beta.0, =0.1.1, =1.0.1, =0.2.0, =0.1.6, =0.1.1, =0.2.0, =0.2.0, =0.0.2, =0.3.0, =0.1.0, =0.3...
df-excel (>=0.1.0, <=0.1.8) potentially affected by unknown CVE via office (0.8.1)
office CARGO version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on office and may be impacted: - df-excel =0.1.0, =0.1.8 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0034...
37fis (>=1.0.0, <=1.0.2), 3loc (>=0.2.0, <=0.4.0) +1851 more potentially affected by CVE-2020-7788 via ini (>=1.0.0, <=1.3.5)
ini NPM version =1.0.0, =1.0.0, =0.2.0, =0.13.31, =0.0.17, =1.0.0, =1.0.0, =6.1.3, =1.0.99, =0.0.1-beta.2, =0.0.1-beta.2, =0.0.1-beta.2, =6.2.9, =1.0.3, =0.2.333, =0.2.346 and more Source cves: CVE-2020-7788 Source advisory: OSV:GHSA-QQGX-2P2H-9C37...
@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)
swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q9-HQM5-MHMC...
@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)
swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VP93-GCX5-4W52...
@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by unknown CVE via lodash.merge (>=4.0.1, <=4.6.1)
lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H726-X36V-RX45...
@clue/webpack-polyfills-plugin (0.0.9), @helpdotcom/help-gen (1.0.0) +39 more potentially affected by unknown CVE via marky-markdown (>=4.0.0, <=12.0.0)
marky-markdown NPM version =4.0.0, =0.0.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.7.3-alpha, =0.1.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.34, =1.0.0, =1.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PXMP-FWJC-4X7Q...
@fanswoo/core (>=1.0.0, <=1.3.8), brws-upload (>=1.0.2, <=1.0.3) +4 more potentially affected by unknown CVE via jquery-mobile (>=1.4.1, <=1.5.0-alpha.1)
jquery-mobile NPM version =1.4.1, =1.0.0, =1.0.2, =1.0.0, =1.0.2, =2.0.0, =0.0.1, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-FJ93-7WM4-8X2G...
@colmena/api (0.1.0), @sp-temp/composer-rest-server (>=0.20.8, <=0.20.14) +9 more potentially affected by unknown CVE via loopback (>=3.0.0-alpha.2, <=3.18.2)
loopback NPM version =3.0.0-alpha.2, =0.20.8, =0.20.8, =0.13.0-beta.1, =0.13.2-20171004211143, =0.13.2-20171004211143, =0.0.1, =0.13.2-20171004211143, =1.0.0, =0.0.5, =0.0.39 Source cves: unknown CVE Source advisory: OSV:GHSA-8WGC-JJVV-CV6V...
@550w-tools/cli (>=0.0.14, <=0.0.16), @550w-tools/core (>=0.0.14, <=0.0.16) +540 more potentially affected by CVE-2020-7710 via safe-eval (>=0.2.0, <=0.4.1)
safe-eval NPM version =0.2.0, =0.0.14, =0.0.14, =0.0.13, =0.0.14, =0.0.15, =1.0.1, =1.0.2, =1.0.3, =1.1.2, =0.1.16-beta.1, =1.0.0-beta.4, =0.3.0-alpha.1, =0.20.0, =2.0.295, =2.0.315 and more Source cves: CVE-2020-7710 Source advisory: OSV:GHSA-HRPQ-R399-WHGW...