9940 matches found
@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +8 more potentially affected by CVE-2023-29198 via electron (>=22.0.0, <=22.3.5)
electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...
@cubesoft/nx-electron (>=0.49.0, <=0.65.0), @grandlinex/e-kernel (>=0.30.0, <=0.32.0) +4 more potentially affected by CVE-2023-29198 via electron (>=23.0.0, <=23.2.1)
electron NPM version =23.0.0, =0.49.0, =0.30.0, =1.0.0, =0.0.90, =0.0.1, =0.0.15 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...
@finsemble/finsemble-core (>=1.0.0-beta-9, <=8.4.3), @finsemble/finsemble-electron-adapter (>=1.0.0-beta-9, <=8.4.3) +5 more potentially affected by CVE-2023-23623 via electron (22.0.0)
electron NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - @finsemble/finsemble-core =1.0.0-beta-9, =1.0.0-beta-9, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =2.0.92, =2.0.94 Source cves:...
@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), @peterpme/parse-server-mailgun (>=2.4.8, <=2.5.11) +19 more potentially affected by CVE-2023-41058 via parse-server (>=2.0.8, <=3.10.0)
parse-server NPM version =2.0.8, =1.0.5, =2.4.8, =1.0.0, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.0, =1.0.0, =1.0.0, =1.4.0 and more Source cves: CVE-2023-41058 Source advisory: OSV:GHSA-FCV6-FG5R-JM9Q...
decentraland-gatsby (>=5.76.0, <=5.77.1) potentially affected by CVE-2023-41049 via @dcl/single-sign-on-client (0.0.13)
@dcl/single-sign-on-client NPM version 0.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on @dcl/single-sign-on-client and may be impacted: - decentraland-gatsby =5.76.0, =5.77.1 Source cves: CVE-2023-41049 Source advisory: OSV:GHSA-VP4F-WXGW-7X8X...
dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +14 more potentially affected by CVE-2023-41051 via vm-memory (>=0.4.0, <=0.11.0)
vm-memory CARGO version =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-41051 Source advisory: OSV:RUSTSEC-2023-0056...
@aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3), @aerogear/apollo-voyager-server (>=0.1.0, <=0.2.7-rc3) +157 more potentially affected by unknown CVE via apollo-server-core (>=2.0.0, <=2.25.3)
apollo-server-core NPM version =2.0.0, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.5.0-rc1, =0.3.0-SNAPSHOT1, =0.5.2-dev1, =2018.8.28-0, =0.5.1-alpha.0, =2.11.0, =3.9.0, =2.2.0-alpha.1, =2.3.10, =0.12.0-alpha.3, =0.13.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...
@ancademy/platform-sdk-client (>=1.1.1, <=1.1.4), @apollo/server-integration-testsuite (>=4.1.0, <=4.9.2) +31 more potentially affected by unknown CVE via @apollo/server (>=4.1.0, <=4.9.2)
@apollo/server NPM version =4.1.0, =1.1.1, =4.1.0, =0.0.1, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.3.0-rc.0, =0.2.0, =0.1.0-alpha.6, =0.1.18, =0.1.17, =0.2.0, =0.1.17, =0.2.0, =0.2.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...
currentrequest (>=1.0.0, <=1.0.6), daichainai-moi (>=1.0.0, <=1.0.2) +5 more potentially affected by CVE-2023-40582 via find-exec (>=1.0.0, <=1.0.2)
find-exec NPM version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.15, =1.1.2, =1.1.5 Source cves: CVE-2023-40582 Source advisory: OSV:GHSA-95RP-6GQP-6622...
@bitfoot/theme-ngx-globular (>=0.1.1, <=0.1.15), @dashkite/genie-markdown (>=0.0.1, <=0.0.5) +43 more potentially affected by CVE-2023-26364 via @adobe/css-tools (>=4.2.0, <=4.3.0-rc.1)
@adobe/css-tools NPM version =4.2.0, =0.1.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.3, =0.1.26, =3.2.0, =3.1.0, =0.1.0-beta.3, =0.0.1, =0.0.3, =7.5.3, =7.5.5 and more Source cves: CVE-2023-26364 Source advisory: OSV:GHSA-HPX4-R86G-5JRG...
@4qwerty7/mathjax-node-page (>=3.2.0, <=3.2.1), @4qwerty7/syzoj-renderer (>=1.0.7, <=1.2.1) +140 more potentially affected by CVE-2023-39663 via mathjax (>=2.6.1, <=2.7.9)
mathjax NPM version =2.6.1, =3.2.0, =1.0.7, =1.0.0, =1.0.0-alpha.6, =2.0.0, =1.0.36, =1.0.0, =6.0.0-2020.8, =6.0.0-2020.12, =6.0.0-2020.8, =6.0.0-2020.8, =0.4.0, =0.1.1, =0.1.8 and more Source cves: CVE-2023-39663 Source advisory: OSV:GHSA-V638-Q856-GRG8...
@36node/template-service (>=0.17.6, <=0.17.9), @88bens/mongoose-multi (2.0.3) +568 more potentially affected by CVE-2021-32050 via mongodb (>=3.6.0, <=3.6.9)
mongodb NPM version =3.6.0, =0.17.6, =3.7.0, =1.0.0, =0.7.0, =2.1.0, =1.1.66, =2.9.8, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.2.0, =3.3.3 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...
@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +756 more potentially affected by CVE-2021-32050 via mongodb (>=4.0.0-beta.1, <=4.16.0)
mongodb NPM version =4.0.0-beta.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =0.1.66, =0.5.17, =3.0.0-beta.3, =0.0.1002, =0.0.7, =0.0.1000, =0.0.2, =0.0.1, =0.0.1000 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...
@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +174 more potentially affected by CVE-2021-32050 via mongodb (>=5.0.0, <=5.7.0)
mongodb NPM version =5.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =0.3.1, =0.8.2, =3.12.0, =1.0.0, =2.0.0-beta.7, =1.0.1, =0.0.0, =1.0.2, =1.3.4 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...
@aloe2/abstract-eth (1.0.20228282226), @aloe2/abstract-utxo (1.1.20228282226) +179 more potentially affected by CVE-2023-41037 via openpgp (>=5.0.0, <=5.9.0)
openpgp NPM version =5.0.0, =5.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on openpgp and may be impacted: - @aloe2/abstract-eth 1.0.20228282226 - @aloe2/abstract-utxo 1.1.20228282226 - @aloe2/account-lib 2.20.20228282226 - @aloe2/bitgo...
@blinkhealth/config-yourself (>=1.0.0, <=1.0.1), @donswayo/wildduckiu (>=1.30.3, <=1.30.6) +18 more potentially affected by CVE-2023-41037 via openpgp (>=4.5.1, <=4.10.10)
openpgp NPM version =4.5.1, =1.0.0, =1.30.3, =9.0.0-dev.5644f38, =0.0.1, =1.1.6, =0.0.1, =2.0.0, =0.3.4, =0.9.0, =1.25.0, =1.31.0 and more Source cves: CVE-2023-41037 Source advisory: OSV:GHSA-CH3C-V47X-4PGP...
a2 (>=0.2.0, <=0.6.2), abacuz (>=0.1.0, <=0.1.1) +2994 more potentially affected by unknown CVE via webpki (>=0.18.1, <=0.21.4)
webpki CARGO version =0.18.1, =0.2.0, =0.1.0, =0.2.0-beta.4, =0.1.1, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =1.0.0, =0.1.0, =0.8.0, =0.1.0, =0.2.2, =1.0.0, =1.0.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8QV2-5VQ6-G2G7...
feembox (>=0.1.0, <=0.1.1), mail (>=0.6.0, <=0.7.0) +5 more potentially affected by unknown CVE via mail-internals (0.2.3)
mail-internals CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mail-internals and may be impacted: - feembox =0.1.0, =0.6.0, =0.6.0, =0.6.0-wip, =0.2.0, =0.6.0, =0.1.0, =0.1.2 Source cves: unknown CVE Source advisory:...
@adobe/git-server (>=1.0.1, <=1.0.5), @adobe/helix-cli (>=5.7.7, <=6.1.0) +21 more potentially affected by CVE-2023-40185 via shescape (>=1.6.1, <=1.6.6)
shescape NPM version =1.6.1, =1.0.1, =5.7.7, =2.16.1, =0.1.3, =0.0.7, =0.1.0, =2.3.2, =2.3.2, =2.3.2, =2.3.3 and more Source cves: CVE-2023-40185 Source advisory: OSV:GHSA-J55R-787P-M549...
a2 (>=0.2.0, <=0.6.2), abacuz (>=0.1.0, <=0.1.1) +2994 more potentially affected by CVE-2018-16875 via webpki (>=0.18.1, <=0.21.4)
webpki CARGO version =0.18.1, =0.2.0, =0.1.0, =0.2.0-beta.4, =0.1.1, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =1.0.0, =0.1.0, =0.8.0, =0.1.0, =0.2.2, =1.0.0, =1.0.7 and more Source cves: CVE-2018-16875 Source advisory: OSV:RUSTSEC-2023-0052...