acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +869 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.57)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0072...

ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.6.2), br.com.simpli:simpli-ws (>=1.2.1, <=2.2.0) +972 more potentially affected by CVE-2023-46673 via org.elasticsearch:elasticsearch (>=7.0.0, <=7.17.13)

org.elasticsearch:elasticsearch MAVEN version =7.0.0, =j8.2.2.0, =1.2.1, =0.0.1-alpha, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =6.2.0, =6.8.0, =6.4.0, =5.3.0, =5.3.0, =5.3.0, =5.4.0 and more Source cves: CVE-2023-46673 Source advisory: GHSA-285M-VHFQ-XX4H...

abacuz (0.1.1), acmer (>=0.0.1, <=0.0.4) +371 more potentially affected by CVE-2023-49092 via rsa (>=0.1.2, <=0.8.2)

rsa CARGO version =0.1.2, =0.0.1, =0.12.0, =0.5.0, =0.2.0, =0.1.0, =1.0.1, =0.1.0, =0.3.11, =0.2.0, =0.1.0, =0.2.0, =0.11.0, =0.16.0 and more Source cves: CVE-2023-49092 Source advisory: OSV:RUSTSEC-2023-0071...

@chirpy-dev/analytics (0.0.1), @chirpy-dev/main-app (>=0.1.0, <=0.3.0) +34 more potentially affected by CVE-2023-48309 via next-auth (>=4.0.0-beta.6, <=4.24.4)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.9, =0.1.0-0, =1.0.0, =1.0.0, =4.0.0-alpha.11, =4.0.0-alpha.1, =4.0.0-alpha.6, =0.6.1, =0.0.0-350929255, =1.11.1-ee257e05.17 and more Source cves: CVE-2023-48309 Source advisory: OSV:GHSA-V64W-49XW-QQ89...

@fibus-digital/sluby (>=0.3.0-beta.17, <=0.4.0) potentially affected by CVE-2023-48223 via fast-jwt (3.0.0)

fast-jwt NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @fibus-digital/sluby =0.3.0-beta.17, =0.4.0 Source cves: CVE-2023-48223 Source advisory: OSV:GHSA-C2FF-88X2-X9PG...

@semic/admin-ui-vendure (1.0.3), @semic/common (>=2.0.0, <=2.1.3) +37 more potentially affected by unknown CVE via @vendure/core (>=2.0.3, <=2.1.2)

@vendure/core NPM version =2.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WM63-7627-CH33...

connector-db-tools (0.0.1), pdf2dataset (>=0.1.0, <=0.4.0a1) +1 more potentially affected by CVE-2023-6021 via ray (0.8.6)

ray PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - connector-db-tools 0.0.1 - pdf2dataset =0.1.0, =0.4.10, =0.4.11 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

modin (>=0.1.0, <=0.1.1) potentially affected by CVE-2023-6021 via ray (0.5.0)

ray PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - modin =0.1.0, =0.1.1 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

smarts (>=0.4.2, <=0.4.6.post0), ultra-rl (>=0.1.0, <=0.1.1) potentially affected by CVE-2023-6021 via ray (0.8.3)

ray PYPI version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - smarts =0.4.2, =0.1.0, =0.1.1 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

modin (0.6.0) potentially affected by CVE-2023-6021 via ray (0.7.3)

ray PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - modin 0.6.0 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

10secondsofcode-custom (1.0.0), 10up-toolkit (>=4.2.0-next.2, <=5.0.0) +5514 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.32.5)

sharp NPM version =0.4.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.0, =0.4.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.1, =4.11.0, =1.0.0, =1.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-54XQ-CGQR-RPM3...

@arkxio/ark-ui (>=0.1.0, <=0.1.23), @arkxio/ark-ui-src (0.1.0) +34 more potentially affected by CVE-2023-48219 via tinymce (>=6.0.0, <=6.6.2)

tinymce NPM version =6.0.0, =0.1.0, =0.1.19, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2023-48219 Source advisory: OSV:GHSA-V626-R774-J7F8...

@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +135 more potentially affected by CVE-2023-48219 via tinymce (>=5.0.6, <=5.10.8)

tinymce NPM version =5.0.6, =0.1.2, =0.3.7, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =0.5.2, =10.3.1-snapshot-1616513687673, =0.1.0, =1.68.82, =0.65.0, =0.18.0, =3.4.0 and more Source cves: CVE-2023-48219 Source advisory: OSV:GHSA-V626-R774-J7F8...

opentrons (>=3.7.0, <=3.11.4) potentially affected by CVE-2023-47627 via aiohttp (2.3.8)

aiohttp PYPI version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - opentrons =3.7.0, =3.11.4 Source cves: CVE-2023-47627 Source advisory: OSV:GHSA-GFW2-4JVH-WGFG...

@ampproject/worker-dom (>=0.1.0, <=0.9.0), @atom-ide-community/nuclide-adb (>=0.7.3-dev, <=0.7.8) +39 more potentially affected by CVE-2019-25155 via dompurify (>=1.0.3, <=1.0.10)

dompurify NPM version =1.0.3, =0.1.0, =0.7.3-dev, =0.7.3-dev, =0.7.3-dev, =0.7.3-dev, =0.7.3-dev, =0.15.0, =0.7.3-dev, =0.7.3-dev, =1.0.1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.12 and more Source cves: CVE-2019-25155 Source advisory: OSV:GHSA-8HGG-XXM5-3873...

aiobotocore (0.2.3), aiobotocore-botorange (>=0.1.0, <=0.2.3a0) +9 more potentially affected by CVE-2023-47627 via aiohttp (1.3.5)

aiohttp PYPI version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiobotocore 0.2.3 - aiobotocore-botorange =0.1.0, =0.0.3a0, =1.2.0, =1.0.0, =3.0.2, =3.0.5 Source cves: CVE-2023-47627 Source advisory:...

botstory (0.0.63) potentially affected by CVE-2023-47627 via aiohttp (2.0.1)

aiohttp PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - botstory 0.0.63 Source cves: CVE-2023-47627 Source advisory: OSV:PYSEC-2023-246...

hassmart-homeassistant (>=0.59.2, <=0.59.2.1), homeassistant (>=0.59.0, <=0.59.2) potentially affected by CVE-2023-47641 via aiohttp (2.3.5)

aiohttp PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hassmart-homeassistant =0.59.2, =0.59.0, =0.59.2 Source cves: CVE-2023-47641 Source advisory: OSV:PYSEC-2023-247...

aioboto3 (2.2.0), aiobotocore (>=0.5.0, <=0.5.3) +56 more potentially affected by CVE-2023-47641 via aiohttp (2.3.10)

aiohttp PYPI version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aioboto3 2.2.0 - aiobotocore =0.5.0, =0.8.4, =0.1.0a1, =1.0.0, =3.0.0b4, =2.0.0, =1.1.1, =1.2.1, =2.1.0, =0.8.22, =2.0.0, =2.0.13 and more Source...

homeassistant (0.42.1) potentially affected by CVE-2023-47627 via aiohttp (2.0.6)

aiohttp PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - homeassistant 0.42.1 Source cves: CVE-2023-47627 Source advisory: OSV:PYSEC-2023-246...