@a11ywatch/a11ywatch (>=0.0.1, <=0.3.82), @a11ywatch/core (>=0.1.1, <=0.8.17) +49 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.12.0)

apollo-server-core NPM version =3.0.0-html.2, =0.0.1, =0.1.1, =4.9.2, =1.0.1, =1.1.22, =1.1.19, =1.0.0, =1.1.0, =1.0.0, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =10.0.1, =11.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

feembox (>=0.1.0, <=0.1.1), mail (>=0.6.0, <=0.7.0) +5 more potentially affected by unknown CVE via mail-internals (0.2.3)

mail-internals CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mail-internals and may be impacted: - feembox =0.1.0, =0.6.0, =0.6.0, =0.6.0-wip, =0.2.0, =0.6.0, =0.1.0, =0.1.2 Source cves: unknown CVE Source advisory:...

@angular-architects/build-angular (16.2.0-next.2), @angular-devkit/build-angular (>=16.1.0-next.2, <=16.2.0-rc.0) +9 more potentially affected by CVE-2023-3481 via critters (>=0.0.17, <=0.0.19)

critters NPM version =0.0.17, =16.1.0-next.2, =16.0.1-snapshot-1686757302683, =16.0.1-snapshot-1686757302683, =16.1.0-rc.0, =16.1.0-rc.0, =16.1.0-rc.0, =1.1.40, =3.0.0-next.18, =0.14.29, =0.14.47 Source cves: CVE-2023-3481 Source advisory: OSV:GHSA-CX3J-QQXJ-9597...

kinvey-angular-sdk (>=3.4.0, <=3.5.3), kinvey-angular2-sdk (>=3.4.1, <=3.5.2) +6 more potentially affected by CVE-2021-26505 via hellojs (>=1.13.1, <=1.14.1)

hellojs NPM version =1.13.1, =3.4.0, =3.4.1, =3.4.1, =3.4.0, =3.4.1, =3.4.0, =3.4.0, =3.4.1, =3.5.2 Source cves: CVE-2021-26505 Source advisory: OSV:GHSA-G3VF-47FV-8F3C...

ahtx0 (>=0.1.0, <=0.1.4), algostru (>=0.1.0, <=0.4.0) +415 more potentially affected by unknown CVE via tui (>=0.1.3, <=0.19.0)

tui CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.2, =0.1.6, =0.1.0, =0.1.0, =0.0.9, =0.0.1, =0.0.7 - ashiba 0.1.0 - atlas-tui 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0049...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/linux-arm64 (>=8.0.0, <=8.6.7)

@pnpm/linux-arm64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

anchor-client (0.26.0), basejmp (0.1.0) +226 more potentially affected by unknown CVE via dlopen_derive (0.1.4)

dlopenderive CARGO version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dlopenderive and may be impacted: - anchor-client 0.26.0 - basejmp 0.1.0 - bonfida-test-utils 0.1.0 - bonfida-utils =0.2.3, =0.2.0, =0.14.0, =0.1.0, =0.1.0, =0.29.0, =0.1....

ostree-ext (>=0.1.0, <=0.9.1) potentially affected by CVE-2022-47085 via ostree (>=0.11.0, <=0.15.0)

ostree CARGO version =0.11.0, =0.1.0, =0.9.1 Source cves: CVE-2022-47085 Source advisory: OSV:GHSA-X96G-95FQ-4XV4...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +305 more potentially affected by CVE-2023-3696 via mongoose (>=6.0.1, <=6.11.2)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.0.1, =0.1.9 and more Source cves: CVE-2023-3696 Source advisory: OSV:GHSA-9M93-W8W6-76HH...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +84 more potentially affected by CVE-2022-24441 via snyk (>=1.1.1, <=1.954.0)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =1.6.0, =1.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2022-24441 Source advisory: OSV:GHSA-4VRV-93C7-M92J...

cyfs-cip (>=0.5.0, <=0.6.4) potentially affected by unknown CVE via cyfs-base (>=0.5.5, <=0.6.12)

cyfs-base CARGO version =0.5.5, =0.5.0, =0.6.4 Source cves: unknown CVE Source advisory: OSV:GHSA-G753-GHR7-Q33W...

@alexktzk/cz-customizable (>=1.0.0, <=1.1.0), @algolia/coquille (>=0.0.2, <=0.0.13) +378 more potentially affected by CVE-2023-26115 via word-wrap (>=1.0.3, <=1.2.3)

word-wrap NPM version =1.0.3, =1.0.0, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.4.2, =0.0.0, =1.0.0, =0.1.0-preview, =0.1.0-preview, =6.0.0-alpha.16.20220105.1, =0.1.3, =0.1.17 and more Source cves: CVE-2023-26115 Source advisory: OSV:GHSA-J8XG-FQG3-53R7...

@activepieces/piece-amazon-s3 (0.0.2), @adobe/helix-admin-support (>=2.1.22, <=2.1.23) +471 more potentially affected by unknown CVE via fast-xml-parser (4.2.4)

fast-xml-parser NPM version 4.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-xml-parser and may be impacted: - @activepieces/piece-amazon-s3 0.0.2 - @adobe/helix-admin-support =2.1.22, =9.0.39, =2.1.1, =2.1.15, =1.11.158, =1.0.4-0, =1.2.39-0,...

GUAC 0.1 Beta: Google's Breakthrough Framework for Secure Software Supply Chains

Google on Wednesday announced the 0.1 Beta version of GUAC short for Graph for Understanding Artifact Composition for organizations to secure their software supply chains. To that end, the search giant is making available the open source framework as an API for developers to integrate their own...

11-builder (0.1.0), 2muchcoffee-react-scripts (0.1.0) +3097 more potentially affected by unknown CVE via fsevents (>=1.0.14, <=1.2.9)

fsevents NPM version =1.0.14, =0.1.0, =1.0.3, =0.1.4, =1.0.0-beta.1, =0.0.1, =0.7.1, =1.1.0-1, =1.0.0, =1.1.2, =1.1.9 - @abelmuro/food-dasher-app 1.0.0 - @accumineapps/hourlyactual 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2023-462...

aware (>=0.0.1, <=0.0.6), aws-config (>=0.0.22-alpha, <=0.0.26-alpha) +288 more potentially affected by CVE-2023-30610 via aws-sigv4 (>=0.0.22-alpha, <=0.0.26-alpha)

aws-sigv4 CARGO version =0.0.22-alpha, =0.0.1, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.26-alpha and more Source cves:...

acari-lib (>=0.1.11, <=0.1.12), acme-rs (>=0.1.0, <=0.2.0) +304 more potentially affected by unknown CVE via multipart (>=0.3.1, <=0.18.0)

multipart CARGO version =0.3.1, =0.1.11, =0.1.0, =0.9.2, =0.2.0, =0.1.0, =0.0.1, =0.1.5, =0.0.1, =0.1.0, =1.0.0, =0.26.1, =0.4.4, =0.26.1 - authenticator 0.3.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0050...

matrix-react-sdk (>=3.48.0-rc.1, <=3.52.0) potentially affected by CVE-2022-36059 via matrix-js-sdk (>=19.0.0, <=19.3.0-rc.2)

matrix-js-sdk NPM version =19.0.0, =3.48.0-rc.1, =3.52.0 Source cves: CVE-2022-36059 Source advisory: OSV:GHSA-RFV9-X7HH-XC32...

about-filter (>=0.1.0, <=0.1.1), askama (0.12.0) +96 more potentially affected by unknown CVE via comrak (>=0.1.9, <=0.16.0)

comrak CARGO version =0.1.9, =0.1.0, =0.12.1, =0.10.0, =1.0.0, =0.6.0, =0.1.0, =1.0.0, =0.1.0, =0.1.5, =0.1.0, =0.0.1, =0.3.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XXMQ-4VPH-956W...

@web-desktop-environment/development-edition-server (>=2.0.0-2, <=2.0.0-alpha.11), @web-desktop-environment/pack-dev (>=2.0.0-1, <=2.0.0-alpha.11) potentially affected by CVE-2023-26114 via code-server (>=4.4.0, <=4.5.1)

code-server NPM version =4.4.0, =2.0.0-2, =2.0.0-1, =2.0.0-alpha.11 Source cves: CVE-2023-26114 Source advisory: OSV:GHSA-FRJG-G767-7363...