cyfs-cip (>=0.5.0, <=0.6.4) potentially affected by unknown CVE via cyfs-base (>=0.5.5, <=0.6.12)

cyfs-base CARGO version =0.5.5, =0.5.0, =0.6.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0046...

ink (4.0.0-alpha.3) potentially affected by CVE-2023-34449 via ink_env (4.0.0-alpha.3)

inkenv CARGO version 4.0.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on inkenv and may be impacted: - ink 4.0.0-alpha.3 Source cves: CVE-2023-34449 Source advisory: OSV:GHSA-853P-5678-HV8F...

@neutron.co.id/pemasaran-modules (>=1.1.1-beta.3, <=1.4.0), nuxt-hydration (>=0.0.1, <=0.1.0) potentially affected by CVE-2023-3224 via nuxt (3.4.2)

nuxt NPM version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nuxt and may be impacted: - @neutron.co.id/pemasaran-modules =1.1.1-beta.3, =0.0.1, =0.1.0 Source cves: CVE-2023-3224 Source advisory: OSV:GHSA-GC34-5V43-H7V8...

@actvalue/av-aws-sdk (>=0.5.0, <=0.9.2), @adiza/sfpowerscripts (>=23.0.0, <=25.0.7) +617 more potentially affected by CVE-2021-26920 +1 more via fast-xml-parser (>=4.0.0, <=4.1.1)

fast-xml-parser NPM version =4.0.0, =0.5.0, =23.0.0, =35.0.0, =1.6.3, =7.1.3, =2.0.17, =1.2.11, =1.11.83, =8.3.11, =3.10.0, =3.0.0, =0.0.1-beta.1, =0.0.1-beta.1, =2.0.0, =10.8.0-RC.0, =10.12.0-RC.1 and more Source cves: CVE-2021-26920, CVE-2023-26920 Source advisory: OSV:GHSA-X3CC-X39P-42QX...

abel (>=0.1.0, <=0.1.1), abel-core (>=0.1.0, <=0.1.1) +331 more potentially affected by unknown CVE via ouroboros (>=0.5.1, <=0.15.6)

ouroboros CARGO version =0.5.1, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.2.0, =0.4.0, =0.6.0, =0.1.0, =1.1.0, =0.6.0, =0.1.0+dev0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-87MF-9WG6-PPF8...

@story-telling-reporter/draft-editor (>=2.1.0-beta.0, <=2.1.2) potentially affected by unknown CVE via @keystone-6/core (5.2.0)

@keystone-6/core NPM version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @story-telling-reporter/draft-editor =2.1.0-beta.0, =2.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-5FP6-4XW3-XQQ3...

cranko (>=0.0.21, <=0.16.0), diener (>=0.1.0, <=0.4.2) +9 more potentially affected by CVE-2023-33290 via git-url-parse (>=0.2.0, <=0.3.1)

git-url-parse CARGO version =0.2.0, =0.0.21, =0.1.0, =0.0.1, =0.0.1, =2.3.0, =0.1.0, =0.3.1, =0.1.1, =0.1.0, =0.2.1 Source cves: CVE-2023-33290 Source advisory: OSV:GHSA-QFH9-8P57-MJJJ...

@sweco/sweco-digital-platforms (>=5.0.26, <=5.1.2), @sweetui/sweet-mobile-sdk (>=1.6.3, <=1.6.7) +3 more potentially affected by CVE-2023-26133 via progressbar.js (>=1.0.1, <=1.1.0)

progressbar.js NPM version =1.0.1, =5.0.26, =1.6.3, =2.16.0, =1.0.33, =1.0.13, =1.0.14 Source cves: CVE-2023-26133 Source advisory: OSV:GHSA-89QM-HM2X-MXM3...

@cityofzion/neon-core (>=4.7.2, <=4.8.0), balanceofsatoshis (5.19.0) potentially affected by CVE-2020-36732 via crypto-js (3.2.0)

crypto-js NPM version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on crypto-js and may be impacted: - @cityofzion/neon-core =4.7.2, =4.8.0 - balanceofsatoshis 5.19.0 Source cves: CVE-2020-36732 Source advisory: OSV:GHSA-3W3W-PXMM-2W2J...

abel (>=0.1.0, <=0.1.1), abel-core (>=0.1.0, <=0.1.1) +331 more potentially affected by unknown CVE via ouroboros (>=0.5.1, <=0.15.6)

ouroboros CARGO version =0.5.1, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.2.0, =0.4.0, =0.6.0, =0.1.0, =1.1.0, =0.6.0, =0.1.0+dev0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0042...

@wmfs/addressbase-plus-blueprint (>=1.1.0, <=1.182.0), @wmfs/addressbase-premium-blueprint (>=1.0.0, <=1.185.0) +50 more potentially affected by CVE-2023-26132 +1 more via dottie (>=2.0.0, <=2.0.3)

dottie NPM version =2.0.0, =1.1.0, =1.0.0, =1.0.0, =1.11.0, =1.10.0, =1.0.0, =1.0.0, =1.0.0, =1.27.0, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.8.0 and more Source cves: CVE-2023-26132, CVE-2026-27837 Source advisory: OSV:GHSA-4GXF-G5GF-22H4...

@evidence-dev/components (>=3.0.0-usql.26, <=3.0.0-usql.30), @evidence-dev/db-orchestrator (>=0.1.9, <=3.0.0-usql.11) +11 more potentially affected by CVE-2023-34232 via snowflake-sdk (>=1.1.4, <=1.6.13)

snowflake-sdk NPM version =1.1.4, =3.0.0-usql.26, =0.1.9, =0.0.0-24593668, =0.1.15, =1.1.10, =3.0.1, =0.0.1, =0.2.12, =0.1.9, =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2023-34232 Source advisory: OSV:GHSA-H53W-7QW7-VH5C...

@adobe/gatsby-theme-commerce (>=0.0.1, <=0.0.2), @basic-ui/gatsby-theme-docs (>=0.0.13, <=1.0.24-alpha.1) +16 more potentially affected by CVE-2023-34238 via gatsby (>=4.1.0, <=4.24.4)

gatsby NPM version =4.1.0, =0.0.1, =0.0.13, =0.0.0-6208810082.commit-c4ea709, =1.0.0, =1.7.1, =1.0.0, =1.0.2, =0.0.0-development, =1.1.0, =0.3.22, =5.76.0, =1.0.0, =1.0.12 - fullstack-gatsby-theme-bch-wallet-v1 1.0.12 - gatsby-starter-netlify-tailwind 1.1.0 and more Source cves: CVE-2023-34238...

gatsby-starter-thepuzzlers-boxenstop (>=1.1.0, <=1.1.1), gatsby-starter-thepuzzlers-core (>=1.1.0, <=1.1.1) +1 more potentially affected by CVE-2023-34238 via gatsby (5.8.1)

gatsby NPM version 5.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby and may be impacted: - gatsby-starter-thepuzzlers-boxenstop =1.1.0, =1.1.0, =1.1.0, =1.1.1 Source cves: CVE-2023-34238 Source advisory: OSV:GHSA-C6F8-8R25-C4GC...

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +376 more potentially affected by CVE-2023-34234 via @openzeppelin/contracts-upgradeable (>=4.3.0, <=4.8.3)

@openzeppelin/contracts-upgradeable NPM version =4.3.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =0.2.1-alpha, =0.2.1-beta2 and more Source cves: CVE-2023-34234 Source advisory:...

7ghost (>=4.11.0, <=4.11.46), 7ghost-cli (>=1.17.6-next.0, <=1.18.4) +284 more potentially affected by CVE-2023-26136 via tough-cookie (>=4.0.0, <=4.1.2)

tough-cookie NPM version =4.0.0, =4.11.0, =1.17.6-next.0, =2.0.0, =1.0.0, =3.11.1, =1.1.3, =1.0.51, =1.0.1, =1.0.4, =1.2.95, =1.0.0, =1.0.1, =1.0.57, =1.0.210 and more Source cves: CVE-2023-26136 Source advisory: SNYK:JS-TOUGHCOOKIE-5672873...

@aws-amplify/geo (>=2.0.13-push-notification-dryrun.43, <=2.0.35-unstable.3e5e6f9.1), @aws-amplify/interactions (>=5.0.13-push-notification-dryrun.43, <=5.1.1-unstable.3e5e6f9.1) +98 more potentially affected by CVE-2023-34104 via fast-xml-parser (>=4.1.3, <=4.2.3)

fast-xml-parser NPM version =4.1.3, =2.0.13-push-notification-dryrun.43, =5.0.13-push-notification-dryrun.43, =1.0.13-push-notification-dryrun.43, =5.0.13-push-notification-dryrun.43, =5.1.3-push-notification-dryrun.43, =1.1.6-exodus.1, =6.2.44, =9.1.0, =9.1.0, =9.53.0 and more Source cves:...

aardvark-dns (>=1.0.3, <=1.1.0), acme-dns-rust (>=1.0.0, <=1.1.6) +13 more potentially affected by unknown CVE via trust-dns-server (>=0.13.0, <=0.22.0)

trust-dns-server CARGO version =0.13.0, =1.0.3, =1.0.0, =1.4.0, =1.7.0, =1.12.2, =0.18.0-alpha.1, =0.1.0, =0.1.0, =0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-5FM9-H728-FWPJ...

@aem-vite/import-rewriter (>=5.0.1, <=6.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=2.3.1) +210 more potentially affected by CVE-2023-34092 via vite (>=2.0.0-beta.4, <=2.9.15)

vite NPM version =2.0.0-beta.4, =5.0.1, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =0.9.1, =1.0.16, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.16 and more Source cves: CVE-2023-34092 Source advisory...

@alexaegis/setup-editorconfig (>=0.0.3, <=0.0.5), @alexaegis/setup-vite (>=0.0.3, <=0.0.5) +55 more potentially affected by CVE-2023-34092 via vite (>=4.2.0, <=4.2.2)

vite NPM version =4.2.0, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =16.0.0-next.7, =1.0.0-beta.0, =0.0.0-canary-20230317112045, =22.0.0 - @emhamzahazeen/config-vite 1.0.0 and more Source cves: CVE-2023-34092 Source advisory: OSV:GHSA-353F-5XF4-QW67...