10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +17228 more potentially affected by unknown CVE via lodash (>=4.0.0, <=4.17.16)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =0.0.1, =0.0.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-LODASH-6139239...

@codefresh-io/cubejs-backend-server-core (>=0.30.77, <=0.30.83), @cubejs-backend-json-clone/server (1.0.0) +17 more potentially affected by CVE-2023-50709 via @cubejs-backend/api-gateway (>=0.0.2, <=0.33.65)

@cubejs-backend/api-gateway NPM version =0.0.2, =0.30.77, =0.0.8, =0.0.7, =0.0.24, =0.8.0, =0.8.0, =0.32.28, =0.29.4, =1.0.0, =0.27.30, =0.30.61, =0.32.0, =0.33.8 and more Source cves: CVE-2023-50709 Source advisory: OSV:GHSA-9759-3276-G2PM...

@amitojsingh366/pioneer-react (>=0.0.3, <=0.0.4), @angular-devkit/build-angular (>=17.0.0-rc.0, <=17.0.5) +51 more potentially affected by CVE-2023-49293 via vite (4.5.0)

vite NPM version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on vite and may be impacted: - @amitojsingh366/pioneer-react =0.0.3, =17.0.0-rc.0, =0.20.0, =1.0.0-rc.5, =0.5.4, =0.1.0, =17.0.0-next.11, =17.0.0-next.11, =0.0.0, =0.2.0,...

@finsemble/finsemble-core (>=8.8.0-beta.1, <=8.9.9), @finsemble/finsemble-electron-adapter (>=8.8.0-beta.1, <=8.9.9) +6 more potentially affected by CVE-2023-44402 via electron (>=24.0.0, <=24.4.1)

electron NPM version =24.0.0, =8.8.0-beta.1, =8.8.0-beta.1, =4.1.5, =2.0.99, =0.0.31, =0.0.33 - reduxtron 0.0.1-alpha Source cves: CVE-2023-44402 Source advisory: OSV:GHSA-7M48-WC93-9G85...

@carlsonp/kort (>=0.9.1, <=1.0.1), @concretecms/bedrock (0.9.3) +26 more potentially affected by CVE-2023-46998 via bootbox (>=4.4.0, <=5.5.3)

bootbox NPM version =4.4.0, =0.9.1, =1.0.9, =2.0.3, =0.2.2, =0.0.6-01badfa5-e3a7-42b4-b57b-a742eb65fee6, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0, =1.1.1 - botkit-socket-client 0.0.1 and more Source cves: CVE-2023-46998 Source advisory: OSV:GHSA-M4CH-4M5F-2GP6...

@10yun/cv-mobile-ui (0.3.20), @ant-hospital/drantsdk-module (1.0.0) +160 more potentially affected by unknown CVE via aaptjs (1.3.2)

aaptjs NPM version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on aaptjs and may be impacted: - @10yun/cv-mobile-ui 0.3.20 - @ant-hospital/drantsdk-module 1.0.0 - @chinapnr/dg-bill-plugin 1.1.0 - @dcloudio/uni-quickapp =2.0.0-26820200330001,...

reef (>=0.0.46, <=0.0.82) potentially affected by CVE-2024-21530 via cocoon (>=0.2.5, <=0.3.3)

cocoon CARGO version =0.2.5, =0.0.46, =0.0.82 Source cves: CVE-2024-21530 Source advisory: OSV:GHSA-6878-6WC2-PF5H...

amadeus (>=0.3.5, <=0.4.3), amadeus-parquet (>=0.3.5, <=0.4.3) +102 more potentially affected by unknown CVE via fehler (1.0.0)

fehler CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fehler and may be impacted: - amadeus =0.3.5, =0.3.5, =0.9.0, =0.9.0, =1.0.0, =0.0.2, =0.7.0, =0.5.0, =0.1.0, =0.1.0, =0.2.0, =0.3.2 and more Source cves: unknown CVE Source...

@cubesoft/nx-electron (>=0.49.0, <=0.65.0), @grandlinex/e-kernel (>=0.30.0, <=0.32.0) +4 more potentially affected by CVE-2023-39956 via electron (>=23.0.0, <=23.2.1)

electron NPM version =23.0.0, =0.49.0, =0.30.0, =1.0.0, =0.0.90, =0.0.1, =0.0.15 Source cves: CVE-2023-39956 Source advisory: OSV:GHSA-7X97-J373-85X5...

3gtel-frontend-platform (1.0.0), @achieve-all/v-element (1.0.0) +296 more potentially affected by CVE-2025-3197 via expand-object (>=0.2.3, <=0.4.2)

expand-object NPM version =0.2.3, =0.1.1, =1.0.0, =1.0.0, =2.0.0, =2.0.7, =0.1.0, =1.0.0, =1.0.8, =0.1.2, =1.0.3, =6.0.0-rc1, =1.0.0, =1.0.8 and more Source cves: CVE-2025-3197 Source advisory: SNYK:JS-EXPANDOBJECT-5821390...

@ansdomain/react-ans-address (>=0.0.31, <=0.0.32), @ansdomain/ui (>=3.8.0, <=3.8.771) +94 more potentially affected by CVE-2023-38698 via @ensdomains/ens-contracts (>=0.0.2, <=0.0.21)

@ensdomains/ens-contracts NPM version =0.0.2, =0.0.31, =3.8.0, =0.3.0-alpha, =1.2.0, =0.0.1, =0.0.1, =2.1.7, =3.4.2, =0.0.1, =3.4.5, =3.0.0-alpha.3, =2.2.2, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2023-38698 Source advisory: OSV:GHSA-RRXV-Q8M4-WCH3...

ynpm-tool (>=4.0.5-pnpm.15, <=5.5.11) potentially affected by CVE-2023-37478 via pnpm (>=7.2.1, <=7.5.1)

pnpm NPM version =7.2.1, =4.0.5-pnpm.15, =5.5.11 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +100 more potentially affected by CVE-2023-34093 via @strapi/utils (>=4.0.0, <=4.10.7)

@strapi/utils NPM version =4.0.0, =1.0.0, =1.3.0, =1.4.1 - @codeparticle/strapi-plugin-graphql 4.9.2 and more Source cves: CVE-2023-34093 Source advisory: OSV:GHSA-CHMR-RG2F-9JMF...

bridge_lmdb (0.1.0), ithos (0.0.0) +3 more potentially affected by unknown CVE via lmdb-rs (0.7.6)

lmdb-rs CARGO version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on lmdb-rs and may be impacted: - bridgelmdb 0.1.0 - ithos 0.0.0 - sanakirja =1.0.0, =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-F9G6-FP84-FV92...

a4 (>=0.0.1, <=0.0.4), a4-core (>=0.0.3, <=0.0.4) +979 more potentially affected by unknown CVE via atomic-polyfill (1.0.3)

atomic-polyfill CARGO version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on atomic-polyfill and may be impacted: - a4 =0.0.1, =0.0.3, =0.23.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.1, =0.5.2 and more Source cves: unknown...

@fendy3002/string-tools (>=0.1.0, <=0.1.2), @mediafly/js-ui (>=26.0.1, <=46.3.1-beta.0) +177 more potentially affected by CVE-2020-26302 via is_js (>=0.2.1, <=0.8.0)

isjs NPM version =0.2.1, =0.1.0, =26.0.1, =0.0.1, =1.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.4, =0.1.1, =0.1.0, =0.1.0, =0.1.4 and more Source cves: CVE-2020-26302 Source advisory: OSV:GHSA-PVRW-G6FX-MCX2...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @codefresh-io/docker-compose-environment (>=0.0.4, <=0.0.8) +110 more potentially affected by CVE-2024-21532 via ggit (>=0.0.4, <=2.4.12)

ggit NPM version =0.0.4, =2.4.0-alpha.0, =0.0.4, =0.0.12, =1.0.1, =0.1.5, =0.0.190, =1.1.2, =0.7.2, =0.1.0, =4.1.6, =0.1.0, =0.0.2, =0.1.0, =0.2.2 and more Source cves: CVE-2024-21532 Source advisory: SNYK:JS-GGIT-5731320...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0.8.18-p11 (0.8.18-p12) +54006 more potentially affected by CVE-2022-25883 via semver (>=2.0.8, <=5.7.1)

semver NPM version =2.0.8, =1.0.1, =0.0.2, =1.0.4, =1.0.0, =1.0.3, =1.0.9, =0.1.0, =0.3.0 and more Source cves: CVE-2022-25883 Source advisory: OSV:GHSA-C2QF-RXJJ-QQGW...

cranko (>=0.0.21, <=0.16.0), diener (>=0.1.0, <=0.4.2) +9 more potentially affected by CVE-2023-33290 via git-url-parse (>=0.2.0, <=0.3.1)

git-url-parse CARGO version =0.2.0, =0.0.21, =0.1.0, =0.0.1, =0.0.1, =2.3.0, =0.1.0, =0.3.1, =0.1.1, =0.1.0, =0.2.1 Source cves: CVE-2023-33290 Source advisory: OSV:GHSA-QFH9-8P57-MJJJ...

@alexaegis/setup-editorconfig (>=0.0.3, <=0.0.5), @alexaegis/setup-vite (>=0.0.3, <=0.0.5) +55 more potentially affected by CVE-2023-34092 via vite (>=4.2.0, <=4.2.2)

vite NPM version =4.2.0, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =16.0.0-next.7, =1.0.0-beta.0, =0.0.0-canary-20230317112045, =22.0.0 - @emhamzahazeen/config-vite 1.0.0 and more Source cves: CVE-2023-34092 Source advisory: OSV:GHSA-353F-5XF4-QW67...