conkie (0.0.1) potentially affected by CVE-2023-26129 via bwm-ng (0.1.1)

bwm-ng NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on bwm-ng and may be impacted: - conkie 0.0.1 Source cves: CVE-2023-26129 Source advisory: OSV:GHSA-8VW3-VXMJ-H43W...

2d6io-cryptobot (0.0.1), 2keys (0.5.1) +8042 more potentially affected by CVE-2023-32681 via requests (>=2.3.0, <=2.30.0)

requests PYPI version =2.3.0, =0.0.1a0, =0.1.0, =0.0.2, =0.0.5, =0.1.0, =0.1.0, =0.1.10, =0.0.3, =1.0.0, =0.0.1, =0.0.3 and more Source cves: CVE-2023-32681 Source advisory: MEND:CVE-2023-32681...

@berrywallet/core (>=0.1.0, <=0.2.1), @counterplay/simpleflake (>=2.0.0, <=2.0.1) +55 more potentially affected by unknown CVE via bignum (>=0.12.5, <=0.13.0)

bignum NPM version =0.12.5, =0.1.0, =2.0.0, =1.0.0, =1.0.0, =0.14.6, =0.1.0, =1.1.0, =0.0.2, =0.0.17, =0.5.0, =1.0.0, =1.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7CGC-FJV4-52X6...

@abcpros/bitcore-build (>=8.25.29, <=8.25.30), @acanto/october-scripts (3.2.2) +1121 more potentially affected by CVE-2023-32695 via socket.io-parser (>=3.1.1, <=3.3.0)

socket.io-parser NPM version =3.1.1, =8.25.29, =1.0.0, =2018.7.11-0, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =0.2.0, =1.0.10, =3.3.91, =3.3.114 and more Source cves: CVE-2023-32695 Source advisory: OSV:GHSA-CQMJ-92XF-R6R9...

0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +1908 more potentially affected by CVE-2023-32695 via socket.io-parser (>=4.0.5, <=4.2.2)

socket.io-parser NPM version =4.0.5, =1.0.49, =1.0.0, =0.0.28, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =0.0.9 and more Source cves: CVE-2023-32695 Source advisory: OSV:GHSA-CQMJ-92XF-R6R9...

2d6io-cryptobot (0.0.1), 2keys (0.5.1) +8042 more potentially affected by CVE-2023-32681 via requests (>=2.3.0, <=2.30.0)

requests PYPI version =2.3.0, =0.0.1a0, =0.1.0, =0.0.2, =0.0.5, =0.1.0, =0.1.0, =0.1.10, =0.0.3, =1.0.0, =0.0.1, =0.0.3 and more Source cves: CVE-2023-32681 Source advisory: GHSA-J8R2-6X86-Q33Q...

@devlego/builder (>=1.1.29-alpha.1, <=1.1.34), @metro-fs/analytics-plugin-posthog (>=1.0.0, <=1.6.0) +6 more potentially affected by CVE-2023-32325 via posthog-js (>=1.4.5, <=1.53.2)

posthog-js NPM version =1.4.5, =1.1.29-alpha.1, =1.0.0, =2.1.0, =2.0.5, =1.3.39, =3.28.0-rc.1, =1.16.0, =1.16.1 Source cves: CVE-2023-32325 Source advisory: OSV:GHSA-8775-5HWV-WR6V...

@0xagnish/circom2-create-project (1.0.412), @0xagnish/create-circom2-project (>=1.0.0, <=1.0.418) +332 more potentially affected by CVE-2023-33252 via snarkjs (>=0.1.7, <=0.6.11)

snarkjs NPM version =0.1.7, =1.0.0, =1.0.0, =1.0.0-beta.0, =1.0.0, =1.1.1, =2.0.0-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1, =0.0.1, =0.1.0, =0.2.2 and more Source cves: CVE-2023-33252 Source advisory: OSV:GHSA-XP5G-JHG3-3RG2...

io.jenkins.plugins:forensics-api (2.2.0), io.jenkins.plugins:warnings-ng (10.2.0) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (1292.v27d8cc3e2602)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 1292.v27d8cc3e2602 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - io.jenkins.plugins:forensics-api 2.2.0 -...

io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45), org.jenkins-ci.plugins:last-changes (>=1.0.7, <=1.1.1) +1 more potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (2.8)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =y, =1.0.7, =0.6, =0.7.1 Source...

com.paul8620.jenkins.plugins:pipeline-aggregator-view (>=1.5, <=1.15), com.testinium.jenkins:testinium (1.0) +23 more potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (2.9)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - com.paul8620.jenkins.plugins:pipeline-aggregator-view =1.5, =1.0.0-b22,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10-beta-1) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (1.10-beta-1)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 1.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.10-beta-1...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1), org.jenkins-ci.plugins.workflow:workflow-multibranch (1.15-beta-1) +1 more potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (1.15-beta-1)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.15-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.10-beta-1, <=2.12), org.jenkins-ci.plugins:backlog (>=2.0, <=2.6) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (2.7)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =2.10-beta-1, =2.0,...

com.btc.ep:btc-embeddedplatform (>=2.5.8, <=2.5.9), org.jenkins-ci.plugins:qmetry-for-jira-test-management (>=1.11, <=1.27) potentially affected by CVE-2023-32981 via org.jenkins-ci.plugins:pipeline-utility-steps (1.1.1)

org.jenkins-ci.plugins:pipeline-utility-steps MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:pipeline-utility-steps and may be impacted: - com.btc.ep:btc-embeddedplatform =2.5.8, =1.11, =1.27 Source cves:...

aries-askar (>=0.1.2, <=0.2.7), arkworks-r1cs-gadgets (>=0.5.0, <=1.2.0) +108 more potentially affected by unknown CVE via xsalsa20poly1305 (>=0.4.2, <=0.9.1)

xsalsa20poly1305 CARGO version =0.4.2, =0.1.2, =0.5.0, =0.5.0, =0.2.0-pre.1, =0.1.0, =0.1.0, =0.1.1 - bramble-handshake 0.1.0 - bramble-qr 0.1.0 - bramble-rendezvous 0.1.0 - bramble-sync 0.1.0 - bramble-transport 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0037...

sequoia-openpgp (1.8.1) potentially affected by CVE-2023-53161 via buffered-reader (1.1.3)

buffered-reader CARGO version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on buffered-reader and may be impacted: - sequoia-openpgp 1.8.1 Source cves: CVE-2023-53161 Source advisory: OSV:RUSTSEC-2023-0039...

btctax-store (>=0.1.0, <=0.18.0), did-webkey (0.1.1) +4 more potentially affected by CVE-2023-53160 via sequoia-openpgp (1.14.0)

sequoia-openpgp CARGO version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on sequoia-openpgp and may be impacted: - btctax-store =0.1.0, =0.3.0, =0.4.0-rc.1, =5.0.4 Source cves: CVE-2023-53160 Source advisory: OSV:RUSTSEC-2023-0038...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +230 more potentially affected by CVE-2023-32314 via vm2 (>=3.0.0, <=3.9.17)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

get-token-user10 (0.10.1) potentially affected by unknown CVE via http-resources (0.0.1-security)

http-resources NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on http-resources and may be impacted: - get-token-user10 0.10.1 Source cves: unknown CVE Source advisory: OSV:MAL-2023-509...