@0xgg/echomd (>=1.0.0, <=1.0.4), @agoose77/jupyterlab-markup (>=0.1.0, <=1.0.1) +452 more potentially affected by CVE-2022-31108 via mermaid (>=8.4.0, <=9.1.1)

mermaid NPM version =8.4.0, =1.0.0, =0.1.0, =0.0.18, =6.8.0, =0.5.0, =0.1.0-integrate-flowzone-f2df00320763c10337790c7657713f782ca7a948, =0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, =0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, =1.0.1, =0.0.1, =1.0.0, =1.0.4 ...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +82 more potentially affected by CVE-2022-23636 +1 more via wasmtime (>=0.7.0, <=0.37.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0-pre, =0.4.0-pre, =0.0.0, =0.40.1, =0.45.0, =0.10.0, =0.1.0, =0.1.0, =0.3.0 - inkpad-executor 0.1.0 and more Source cves: CVE-2022-23636, CVE-2022-31169 Source advisory: OSV:RUSTSEC-2022-0101...

roaring-landmask (0.4.0) potentially affected by CVE-2022-2097 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-2097 Source advisory: OSV:RUSTSEC-2022-0032...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 08cms (1.0.0) +17625 more potentially affected by CVE-2022-25758 via scss-tokenizer (>=0.1.2, <=0.4.2)

scss-tokenizer NPM version =0.1.2, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages 0.2.0 and more Source cves: CVE-2022-25758 Source advisory: OSV:GHSA-7MWH-4PQV-WMR8...

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +13402 more potentially affected by CVE-2022-25900 via git-clone (>=0.0.2, <=0.2.0)

git-clone NPM version =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.11 and more Source cves: CVE-2022-25900 Source advisory: GHSA-8JMW-WJR8-2X66...

1batch (1.0.0), 30-lines-telegram-bot (>=1.0.0, <=1.0.1) +4713 more potentially affected by CVE-2022-25896 via passport (>=0.1.3, <=0.5.3)

passport NPM version =0.1.3, =1.0.0, =1.1.0, =4.11.0, =0.1.0, =0.0.1, =1.0.3, =1.0.0-alpha, =1.0.0-beta, =1.0.0, =0.0.1, =1.1.18 and more Source cves: CVE-2022-25896 Source advisory: OSV:GHSA-V923-W3X8-WH69...

abstraps (0.1.8), aivm (>=0.2.0, <=0.3.0) +285 more potentially affected by CVE-2022-31104 via cranelift-codegen (>=0.14.0, <=0.84.0)

cranelift-codegen CARGO version =0.14.0, =0.2.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.2.9, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.26.1, =0.30.1 and more Source cves: CVE-2022-31104 Source advisory: OSV:GHSA-JQWC-C49R-4W2X...

@candlelabs/sdk (>=1.0.1, <=1.0.2), candlelabssdk (1.0.0) potentially affected by CVE-2022-2216 via parse-url (6.0.0)

parse-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - @candlelabs/sdk =1.0.1, =1.0.2 - candlelabssdk 1.0.0 Source cves: CVE-2022-2216 Source advisory: OSV:GHSA-7F3X-X4PR-WQHJ...

@candlelabs/sdk (>=1.0.1, <=1.0.2), candlelabssdk (1.0.0) potentially affected by CVE-2022-2217 via parse-url (6.0.0)

parse-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - @candlelabs/sdk =1.0.1, =1.0.2 - candlelabssdk 1.0.0 Source cves: CVE-2022-2217 Source advisory: OSV:GHSA-Q6WQ-5P59-983W...

@candlelabs/sdk (>=1.0.1, <=1.0.2), candlelabssdk (1.0.0) potentially affected by CVE-2022-2218 via parse-url (6.0.0)

parse-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - @candlelabs/sdk =1.0.1, =1.0.2 - candlelabssdk 1.0.0 Source cves: CVE-2022-2218 Source advisory: OSV:GHSA-JPP7-7CHH-CF67...

@candlelabs/sdk (>=1.0.1, <=1.0.2), candlelabssdk (1.0.0) potentially affected by CVE-2022-0722 via parse-url (6.0.0)

parse-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - @candlelabs/sdk =1.0.1, =1.0.2 - candlelabssdk 1.0.0 Source cves: CVE-2022-0722 Source advisory: OSV:GHSA-4P35-CFCX-8653...

@candlelabs/sdk (>=1.0.1, <=1.0.2), candlelabssdk (1.0.0) potentially affected by CVE-2022-0722 via parse-url (6.0.0)

parse-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - @candlelabs/sdk =1.0.1, =1.0.2 - candlelabssdk 1.0.0 Source cves: CVE-2022-0722 Source advisory: GHSA-4P35-CFCX-8653...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +82 more potentially affected by CVE-2022-31104 via wasmtime (>=0.7.0, <=0.37.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0-pre, =0.4.0-pre, =0.0.0, =0.40.1, =0.45.0, =0.10.0, =0.1.0, =0.1.0, =0.3.0 - inkpad-executor 0.1.0 and more Source cves: CVE-2022-31104 Source advisory: OSV:RUSTSEC-2022-0095...

amethyst (>=0.11.0, <=0.15.3), amethyst-console (0.1.0) +200 more potentially affected by unknown CVE via clipboard (>=0.1.2, <=0.5.0)

clipboard CARGO version =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.8.0, =0.6.0, =0.4.0, =0.8.0, =0.2.0, =0.6.0, =0.1.0, =1.4.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0056...

elita (>=0.60.0, <=0.64.1) potentially affected by CVE-2022-22967 via salt (2014.1.10)

salt PYPI version 2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2022-22967 Source advisory: OSV:GHSA-FPXM-FPRW-6HXJ...

@0x5e/react-native-alipay (>=0.2.2, <=0.2.7-beta.2), @10yun/cv-mobile-ui (0.3.20) +1224 more potentially affected by CVE-2022-25898 via jsrsasign (>=4.8.2, <=10.5.24)

jsrsasign NPM version =4.8.2, =0.2.2, =0.7.6, =0.7.6, =0.0.83, =0.7.6, =0.7.6, =0.9.0, =0.7.6, =0.7.6, =0.7.6, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.8.0 and more Source cves: CVE-2022-25898 Source advisory: OSV:GHSA-3FVG-4V2M-98JF...

moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2022-21231 via deep-get-set (1.1.1)

deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2022-21231 Source advisory: OSV:GHSA-MJJJ-6P43-VHHV...

com.github.hazendaz.tomcat:tomcat10-config (>=10.0.0-m1, <=10.0.0), org.apache.tomee.patch:tomee-patch-core (>=0.1, <=0.10) +9 more potentially affected by CVE-2022-34305 via org.apache.tomcat:tomcat (>=10.0.0-m1, <=10.0.21)

org.apache.tomcat:tomcat MAVEN version =10.0.0-m1, =10.0.0-m1, =0.1, =0.1, =9.0.0-m7, =0.8, =0.12 Source cves: CVE-2022-34305 Source advisory: GHSA-6J88-6WHG-X687...

org.jenkins-ci.plugins:parallel-test-executor (>=1.10, <=1.12) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.22)

org.jenkins-ci.plugins:junit MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:parallel-test-executor =1.10, =1.12 Source cves: CVE-2022-34176 Source advisory:...

com.mentor.questa.vrm.jenkins:mentor-questa-vrm (>=1.4, <=1.15), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24) +21 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.19)

org.jenkins-ci.plugins:junit MAVEN version 1.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - com.mentor.questa.vrm.jenkins:mentor-questa-vrm =1.4, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...