9939 matches found
@ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9), @ekyc_qoobiss/qbs-ect-cmp (>=1.2.0, <=4.8.0) +60 more potentially affected by CVE-2023-26487 via vega (>=5.0.0, <=5.22.1)
vega NPM version =5.0.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.0, =1.0.7, =0.6.2, =0.1.0, =1.0.1, =0.11.4, =0.11.8 and more Source cves: CVE-2023-26487 Source advisory: OSV:GHSA-W5M3-XH75-MP55...
@broadcom/endevor-for-zowe-cli (>=4.1.0, <=4.2.1), @broadcom/file-master-plus-for-zowe-cli (>=4.0.2, <=4.1.0) +9 more potentially affected by CVE-2021-4326 via @zowe/imperative (>=4.3.1, <=4.18.9)
@zowe/imperative NPM version =4.3.1, =4.1.0, =4.0.2, =3.1.0, =5.15.0-alpha.201908262133, =1.0.0, =1.18.1, =1.22.2 Source cves: CVE-2021-4326 Source advisory: OSV:GHSA-6Q8M-42QQ-64R7...
abrute (>=0.1.7, <=0.1.9), alass-cli (>=1.0.0, <=2.0.0) +159 more potentially affected by unknown CVE via ascii (>=0.7.1, <=0.8.7)
ascii CARGO version =0.7.1, =0.1.7, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.0.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MRRW-GRHQ-86GF...
10.13zy1 (1.0.0), @luminati-io/jake (>=8.0.10-lum.0, <=8.0.10-lum.2) +43 more potentially affected by CVE-2023-26105 via utilities (>=1.0.4, <=1.0.6)
utilities NPM version =1.0.4, =8.0.10-lum.0, =8.0.19-sync, =2.1.0, =0.0.1-preview.3, =1.0.0, =0.0.1, =1.0.70, =0.0.1, =1.0.0, =1.0.39 and more Source cves: CVE-2023-26105 Source advisory: OSV:GHSA-WXFJ-84XF-7GXV...
@wmfs/addressbase-plus-blueprint (>=1.1.0, <=1.182.0), @wmfs/addressbase-premium-blueprint (>=1.0.0, <=1.185.0) +50 more potentially affected by CVE-2023-26132 via dottie (>=2.0.0, <=2.0.3)
dottie NPM version =2.0.0, =1.1.0, =1.0.0, =1.0.0, =1.11.0, =1.10.0, =1.0.0, =1.0.0, =1.0.0, =1.27.0, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.8.0 and more Source cves: CVE-2023-26132 Source advisory: SNYK:JS-DOTTIE-3332763...
abrute (>=0.1.7, <=0.1.9), alass-cli (>=1.0.0, <=2.0.0) +159 more potentially affected by unknown CVE via ascii (>=0.7.1, <=0.8.7)
ascii CARGO version =0.7.1, =0.1.7, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.0.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0015...
simple-ec (>=1.0.0, <=2.1.0), sudp (>=0.0.0, <=0.1.0) potentially affected by CVE-2022-44310 via ecdh (>=0.0.0, <=0.1.1)
ecdh NPM version =0.0.0, =1.0.0, =0.0.0, =0.1.0 Source cves: CVE-2022-44310 Source advisory: OSV:GHSA-P2HP-3WV3-4W74...
@24hr/content-next (>=1.0.0, <=2.1.17-alpha), @24hr/natswrapper (>=1.0.0, <=1.0.20) +276 more potentially affected by CVE-2023-22578 via sequelize (>=6.0.0-beta.4, <=6.28.2)
sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =1.0.0, =1.0.43, =0.13.0, =5.0.0-alpha.3, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =0.1.3-alpha.0, =0.1.3-alpha.0, =0.3.2 and more Source cves: CVE-2023-22578 Source advisory: OSV:GHSA-F598-MFPV-GMFX...
abd-clam (>=0.22.2, <=0.30.0), abrute (>=0.1.2, <=0.1.9) +2471 more potentially affected by unknown CVE via remove_dir_all (>=0.3.0, <=0.7.0)
removedirall CARGO version =0.3.0, =0.22.2, =0.1.2, =0.1.1, =0.1.0, =0.2.0, =2.1.0, =0.1.0-rc1, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MC8H-8Q98-G5HR...
abd-clam (>=0.22.2, <=0.30.0), abrute (>=0.1.2, <=0.1.9) +2471 more potentially affected by unknown CVE via remove_dir_all (>=0.3.0, <=0.7.0)
removedirall CARGO version =0.3.0, =0.22.2, =0.1.2, =0.1.1, =0.1.0, =0.2.0, =2.1.0, =0.1.0-rc1, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0018...
rk-editor (2.2.11) potentially affected by CVE-2023-26102 via rangy (1.3.1)
rangy NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on rangy and may be impacted: - rk-editor 2.2.11 Source cves: CVE-2023-26102 Source advisory: OSV:GHSA-65RP-MHQF-8GJ3...
@apa512/stream-chat-react (>=0.0.0-development, <=0.0.5), @brail/web (>=0.2.0-alpha.10, <=0.3.1-canary.1) +38 more potentially affected by CVE-2022-48345 via @braintree/sanitize-url (6.0.0)
@braintree/sanitize-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @braintree/sanitize-url and may be impacted: - @apa512/stream-chat-react =0.0.0-development, =0.2.0-alpha.10, =1.0.0, =0.3.0, =8.4.7, =0.1.10, =8.4.7, =8.4.7,...
@24hr/content-next (>=1.0.0, <=2.1.17-alpha), @24hr/natswrapper (>=1.0.0, <=1.0.20) +274 more potentially affected by CVE-2023-22579 via sequelize (>=6.0.0-beta.4, <=6.28.0)
sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =1.0.0, =1.0.43, =0.13.0, =5.0.0-alpha.3, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =0.1.3-alpha.0, =0.1.3-alpha.0, =0.3.2 and more Source cves: CVE-2023-22579 Source advisory: OSV:GHSA-VQFX-GJ96-3W95...
vue2-baremetrics-calendar (>=0.1.0, <=1.6.1) potentially affected by CVE-2021-32859 via baremetrics-calendar (1.0.14)
baremetrics-calendar NPM version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on baremetrics-calendar and may be impacted: - vue2-baremetrics-calendar =0.1.0, =1.6.1 Source cves: CVE-2021-32859 Source advisory: OSV:GHSA-465F-MXXH-GRC4...
@yeepay/lowcode-engine (>=1.0.0-beta.1, <=2.3.12), @yeepay/lowcode-markdown (>=2.2.0-beta.0, <=2.6.4) potentially affected by CVE-2021-32855 via vditor (3.3.9)
vditor NPM version 3.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on vditor and may be impacted: - @yeepay/lowcode-engine =1.0.0-beta.1, =2.2.0-beta.0, =2.6.4 Source cves: CVE-2021-32855 Source advisory: OSV:GHSA-VFMP-9999-6WQJ...
azureml_widgets (>=1.0.0, <=1.0.6) potentially affected by CVE-2021-32860 via izimodal (1.5.1)
izimodal NPM version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on izimodal and may be impacted: - azuremlwidgets =1.0.0, =1.0.6 Source cves: CVE-2021-32860 Source advisory: OSV:GHSA-H685-83W4-3PH3...
@roots/bud-imagemin (2023.0.30) potentially affected by unknown CVE via @roots/bud (2023.0.30)
@roots/bud NPM version 2023.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on @roots/bud and may be impacted: - @roots/bud-imagemin 2023.0.30 Source cves: unknown CVE Source advisory: SNYK:JS-ROOTSBUD-3326363...
@roots/bud-imagemin (2023.2.13) potentially affected by unknown CVE via @roots/bud (2023.2.13)
@roots/bud NPM version 2023.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on @roots/bud and may be impacted: - @roots/bud-imagemin 2023.2.13 Source cves: unknown CVE Source advisory: SNYK:JS-ROOTSBUD-3326363...
@roots/bud-imagemin (2023.1.31) potentially affected by unknown CVE via @roots/bud (2023.1.31)
@roots/bud NPM version 2023.1.31 is affected by a known vulnerability. The following packages have a transitive dependency on @roots/bud and may be impacted: - @roots/bud-imagemin 2023.1.31 Source cves: unknown CVE Source advisory: SNYK:JS-ROOTSBUD-3326363...
suc_keditor (0.1.5) potentially affected by CVE-2021-32851 via mind-elixir (0.9.6)
mind-elixir NPM version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on mind-elixir and may be impacted: - suckeditor 0.1.5 Source cves: CVE-2021-32851 Source advisory: OSV:GHSA-M22Q-97P5-79V2...