bridge_lmdb (0.1.0), ithos (0.0.0) +3 more potentially affected by unknown CVE via lmdb-rs (0.7.6)

lmdb-rs CARGO version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on lmdb-rs and may be impacted: - bridgelmdb 0.1.0 - ithos 0.0.0 - sanakirja =1.0.0, =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0047...

cyfs-cip (>=0.5.0, <=0.6.4) potentially affected by unknown CVE via cyfs-base (>=0.5.5, <=0.6.12)

cyfs-base CARGO version =0.5.5, =0.5.0, =0.6.4 Source cves: unknown CVE Source advisory: OSV:GHSA-G753-GHR7-Q33W...

@adobe/git-server (>=1.0.1, <=1.0.5), @adobe/helix-cli (>=5.7.7, <=6.1.0) +21 more potentially affected by CVE-2023-35931 via shescape (>=1.6.1, <=1.6.6)

shescape NPM version =1.6.1, =1.0.1, =5.7.7, =2.16.1, =0.1.3, =0.0.7, =0.1.0, =2.3.2, =2.3.2, =2.3.2, =2.3.3 and more Source cves: CVE-2023-35931 Source advisory: OSV:GHSA-3G7P-8QHX-MC8R...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @codefresh-io/docker-compose-environment (>=0.0.4, <=0.0.8) +110 more potentially affected by CVE-2024-21532 via ggit (>=0.0.4, <=2.4.12)

ggit NPM version =0.0.4, =2.4.0-alpha.0, =0.0.4, =0.0.12, =1.0.1, =0.1.5, =0.0.190, =1.1.2, =0.7.2, =0.1.0, =4.1.6, =0.1.0, =0.0.2, =0.1.0, =0.2.2 and more Source cves: CVE-2024-21532 Source advisory: SNYK:JS-GGIT-5731320...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @codefresh-io/docker-compose-environment (>=0.0.4, <=0.0.8) +110 more potentially affected by CVE-2024-21533 via ggit (>=0.0.4, <=2.4.12)

ggit NPM version =0.0.4, =2.4.0-alpha.0, =0.0.4, =0.0.12, =1.0.1, =0.1.5, =0.0.190, =1.1.2, =0.7.2, =0.1.0, =4.1.6, =0.1.0, =0.0.2, =0.1.0, =0.2.2 and more Source cves: CVE-2024-21533 Source advisory: SNYK:JS-GGIT-5731319...

@alexktzk/cz-customizable (>=1.0.0, <=1.1.0), @algolia/coquille (>=0.0.2, <=0.0.13) +377 more potentially affected by CVE-2023-26115 via word-wrap (>=1.0.3, <=1.2.3)

word-wrap NPM version =1.0.3, =1.0.0, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.4.2, =0.0.0, =1.0.0, =0.1.0-preview, =0.1.0-preview, =6.0.0-alpha.16.20220105.1, =0.1.3, =0.1.17 and more Source cves: CVE-2023-26115 Source advisory: OSV:GHSA-J8XG-FQG3-53R7...

bitcoin-harness (0.1.0), bitcoin_rpc_client (>=0.5.0, <=0.6.1) +78 more potentially affected by CVE-2023-53159 via openssl (>=0.10.7, <=0.10.52)

openssl CARGO version =0.10.7, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.0.3, =0.1.24, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2023-53159 Source advisory: OSV:GHSA-XCF7-RVMH-G6Q4...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +4040 more potentially affected by unknown CVE via memoffset (>=0.1.0, <=0.5.6)

memoffset CARGO version =0.1.0, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.7.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WFG4-322G-9VQV...

@frontside/backstage-plugin-humanitec-backend (>=0.1.0, <=0.2.1-changeset-release-main.1) potentially affected by CVE-2023-35926 via @backstage/plugin-scaffolder-backend (1.1.0)

@backstage/plugin-scaffolder-backend NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-scaffolder-backend and may be impacted: - @frontside/backstage-plugin-humanitec-backend =0.1.0, =0.2.1-changeset-release-main.1...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +4040 more potentially affected by unknown CVE via memoffset (>=0.1.0, <=0.5.6)

memoffset CARGO version =0.1.0, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.7.10 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0045...

007putra-my-bot (1.1.1), 03-asenkronsdasdsadavehttprequest (1.0.0) +17760 more potentially affected by CVE-2022-25883 via semver (>=7.0.0, <=7.5.1)

semver NPM version =7.0.0, =7.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on semver and may be impacted: - 007putra-my-bot 1.1.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 -...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0.8.18-p11 (0.8.18-p12) +54006 more potentially affected by CVE-2022-25883 via semver (>=2.0.8, <=5.7.1)

semver NPM version =2.0.8, =1.0.1, =0.0.2, =1.0.4, =1.0.0, =1.0.3, =1.0.9, =0.1.0, =0.3.0 and more Source cves: CVE-2022-25883 Source advisory: OSV:GHSA-C2QF-RXJJ-QQGW...

@harmony.ac/runner (>=0.0.0, <=2.1.0) potentially affected by CVE-2023-35167 via remult (0.18.1)

remult NPM version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on remult and may be impacted: - @harmony.ac/runner =0.0.0, =2.1.0 Source cves: CVE-2023-35167 Source advisory: OSV:GHSA-7HH3-3X64-V2G9...

@anfo/difftool (>=0.0.1, <=0.0.11), @bdefore/nivo-patterned-radial-arc (0.79.1) +134 more potentially affected by CVE-2023-26152 via static-server (>=2.0.0, <=3.0.0)

static-server NPM version =2.0.0, =0.0.1, =0.0.1, =2.0.0-beta.1, =0.1.21, =0.5.0, =0.0.1, =2.59.1-alpha.1, =1.1.0, =3.0.3, =0.1.10, =1.0.0, =1.0.2 and more Source cves: CVE-2023-26152 Source advisory: SNYK:JS-STATICSERVER-5722341...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +866 more potentially affected by CVE-2023-53159 via openssl (>=0.2.18, <=0.10.52)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: CVE-2023-53159 Source advisory: OSV:RUSTSEC-2023-0044...

@alliander-opensource/aws-jwt-sts (0.2.6), @almaclaine/cdk (>=0.0.3, <=0.0.19) +201 more potentially affected by CVE-2023-35165 via aws-cdk-lib (>=2.0.0, <=2.79.1)

aws-cdk-lib NPM version =2.0.0, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =5.0.0-beta.0, =3.0.0-ampgenconfig.0, =3.5.0-beta.0, =5.0.0-beta.0, =2.24.0-beta.0, =5.0.0-beta.0, =4.0.0-cdkv2.0, =5.3.3 and...

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +337 more potentially affected by CVE-2023-34459 via @openzeppelin/contracts-upgradeable (>=4.7.0, <=4.8.3)

@openzeppelin/contracts-upgradeable NPM version =4.7.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =3.1.0 - @abheektripathy/nftpass 1.1.0 and more Source cves: CVE-2023-34459 Source...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1230 more potentially affected by CVE-2023-34459 via @openzeppelin/contracts (>=4.7.0, <=4.9.1)

@openzeppelin/contracts NPM version =4.7.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-34459 Source advisory: OSV:GHSA-WPRV-93R4-JJ2P...

@apollo/server-integration-testsuite (>=4.7.1, <=4.7.3), @athenajs/core (>=0.0.1, <=0.0.17) +4 more potentially affected by unknown CVE via @apollo/server (>=4.7.1, <=4.7.3)

@apollo/server NPM version =4.7.1, =4.7.1, =0.0.1, =0.5.0-rc.0, =0.0.1, =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-68JH-RF6X-836F...

@activepieces/piece-amazon-s3 (0.0.2), @adobe/helix-admin-support (>=2.1.22, <=2.1.23) +472 more potentially affected by unknown CVE via fast-xml-parser (4.2.4)

fast-xml-parser NPM version 4.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-xml-parser and may be impacted: - @activepieces/piece-amazon-s3 0.0.2 - @adobe/helix-admin-support =2.1.22, =9.0.39, =2.1.1, =2.1.15, =1.11.158, =1.0.4-0, =1.2.39-0,...