@actvalue/av-aws-sdk (>=0.5.0, <=0.9.2), @adiza/sfpowerscripts (>=23.0.0, <=25.0.7) +617 more potentially affected by CVE-2023-26920 via fast-xml-parser (>=4.0.0, <=4.1.1)

fast-xml-parser NPM version =4.0.0, =0.5.0, =23.0.0, =35.0.0, =1.6.3, =7.1.3, =2.0.17, =1.2.11, =1.11.83, =8.3.11, =3.10.0, =3.0.0, =0.0.1-beta.1, =0.0.1-beta.1, =2.0.0, =10.8.0-RC.0, =10.12.0-RC.1 and more Source cves: CVE-2023-26920 Source advisory: SNYK:JS-FASTXMLPARSER-3325616...

@3xanax/youtube-stream-status (>=1.0.0, <=1.0.3), @about7sharks/get-articles (>=0.0.24, <=0.0.39) +1092 more potentially affected by CVE-2023-23936 via undici (>=2.0.5, <=5.18.0)

undici NPM version =2.0.5, =1.0.0, =0.0.24, =0.0.0, =0.7.1, =1.0.0, =1.0.0-beta.15, =1.0.0, =1.0.0, =0.1.1-alpha.1, =0.0.1, =0.0.2, =2.9.7, =0.1.1, =1.0.0, =1.4.0 and more Source cves: CVE-2023-23936 Source advisory: OSV:GHSA-5R9G-QH6M-JXFF...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +522 more potentially affected by CVE-2023-24807 via undici (>=5.0.0, <=5.18.0)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =4.0.0-alpha.4, =2.0.0, =1.6.0, =1.0.0, =0.0.4, =0.2.0-beta.0, =0.2.0-beta.20 and more Source cves: CVE-2023-24807 Source advisory: OSV:GHSA-R6CH-MQF9-QC9W...

7ghost (>=4.11.0, <=4.11.46), @credify/credify-js (>=1.8.0, <=1.16.7) +33 more potentially affected by CVE-2023-25653 via node-jose (>=2.0.0, <=2.1.1)

node-jose NPM version =2.0.0, =4.11.0, =1.8.0, =1.4.6, =0.6.1, =0.1.11, =2.0.0, =0.0.0-experimental-1bf6ab9, =0.1.4, =3.41.6, =1.1.68, =1.0.0, =0.4.0, =0.7.7 and more Source cves: CVE-2023-25653 Source advisory: OSV:GHSA-5H4J-QRVG-9XHW...

@accounter-toolkit/green-invoice-graphql (>=0.0.2-alpha-20220914223128-d706aab, <=0.2.0-alpha-20230313141007-4bdbab6), @accounter-toolkit/hashavshevet-mesh (>=0.0.2-alpha-20220915073207-1bb0680, <=0.0.4-alpha-20230313141007-4bdbab6) +11 more potentially affected by CVE-2025-27098 via @graphql-mesh/http (>=0.1.0, <=0.3.18-alpha-20230215130920-0b4a8cec6)

@graphql-mesh/http NPM version =0.1.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =0.2.0-alpha.24, =5.1.0-canary.3, =6.0.0-canary.20, =6.0.0-canary.20, =6.0.0-canary.20, =2.2.6-alpha-20220906004558-09c8599,...

@accounter-toolkit/green-invoice-graphql (>=0.0.2-alpha-20220914223128-d706aab, <=0.2.0-alpha-20230313141007-4bdbab6), @accounter-toolkit/hashavshevet-mesh (>=0.0.2-alpha-20220915073207-1bb0680, <=0.0.4-alpha-20230313141007-4bdbab6) +10 more potentially affected by CVE-2025-27098 via @graphql-mesh/cli (>=0.78.0, <=0.82.21)

@graphql-mesh/cli NPM version =0.78.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =0.2.0-alpha.24, =5.1.0-canary.3, =6.0.0-canary.20, =6.0.0-canary.20, =6.0.0-canary.20, =2.2.6-alpha-20220906004558-09c8599,...

@24hr/content-next (>=1.0.0, <=2.1.17-alpha), @24hr/natswrapper (>=1.0.0, <=1.0.20) +274 more potentially affected by CVE-2023-22580 via sequelize (>=6.0.0-beta.4, <=6.28.0)

sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =1.0.0, =1.0.43, =0.13.0, =5.0.0-alpha.3, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =0.1.3-alpha.0, =0.1.3-alpha.0, =0.3.2 and more Source cves: CVE-2023-22580 Source advisory: OSV:GHSA-8C25-F3MJ-V6H8...

SUSE CVE-2013-1964

Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service host crash, obtain sensitive information, or possibly have other impacts via unspecified vectors...

SUSE CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

SUSE CVE-2017-1000396

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. This library is widely used as a transitive dependency in Jenkins...

SUSE CVE-2022-33748

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be...

@adelosrios/plugin-dependencytrack (>=0.2.8, <=0.2.9), @anshulgarg.cse/plugin-backstage-code-star-prerelease (0.0.2) +245 more potentially affected by CVE-2023-25571 via @backstage/core-components (>=0.0.0-nightly-20220310022859, <=0.11.2)

@backstage/core-components NPM version =0.0.0-nightly-20220310022859, =0.2.8, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-2021101222132, =0.0.0-nightly-202010102951, =0.0.0-nightly-20220310022859, =0.1.1-alpha.7, =0.0.0-nightly-202010102951, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20240929023448...

@janus-idp/backstage-plugin-keycloak-backend (1.0.0) potentially affected by CVE-2023-25571 via @backstage/plugin-catalog-backend (1.5.1)

@backstage/plugin-catalog-backend NPM version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-catalog-backend and may be impacted: - @janus-idp/backstage-plugin-keycloak-backend 1.0.0 Source cves: CVE-2023-25571 Source advisory:...

a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.8.16, <=0.10.15) +2924 more potentially affected by unknown CVE via safemem (>=0.1.1, <=0.3.3)

safemem CARGO version =0.1.1, =0.1.0, =0.8.16, =0.2.0, =0.1.1, =0.1.13, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.9.2, =0.1.0, =0.1.0, =0.0.2, =0.7.4, =0.7.19 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0081...

@savvycodes/openstad-react-admin (>=0.31.1, <=0.40.1-alpha.3), muffin-admin (>=1.21.1, <=1.29.0) +4 more potentially affected by CVE-2023-25572 via react-admin (>=3.9.5, <=3.19.11)

react-admin NPM version =3.9.5, =0.31.1, =1.21.1, =0.1.0, =1.0.0, =1.0.3 Source cves: CVE-2023-25572 Source advisory: OSV:GHSA-5JCR-82FH-339V...

openstad-react-admin (0.1.29) potentially affected by CVE-2023-25572 via ra-ui-materialui (3.9.5)

ra-ui-materialui NPM version 3.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on ra-ui-materialui and may be impacted: - openstad-react-admin 0.1.29 Source cves: CVE-2023-25572 Source advisory: OSV:GHSA-5JCR-82FH-339V...

@api-platform/admin (3.0.0-rc.0) potentially affected by CVE-2023-25572 via react-admin (4.0.0-rc.0)

react-admin NPM version 4.0.0-rc.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-admin and may be impacted: - @api-platform/admin 3.0.0-rc.0 Source cves: CVE-2023-25572 Source advisory: OSV:GHSA-5JCR-82FH-339V...

@540deg/react-native-simple-markdown (>=1.1.1, <=1.1.2), @anzeblabla/react-native-markdown-editor (>=1.0.3, <=2.1.1) +29 more potentially affected by CVE-2019-25102 via simple-markdown (>=0.0.9, <=0.5.3)

simple-markdown NPM version =0.0.9, =1.1.1, =1.0.3, =1.3.0, =1.0.1, =1.1.1, =1.1.74, =1.0.8, =1.0.4, =2.3.0, =3.0.0, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2019-25102 Source advisory: OSV:GHSA-J533-2G8V-PMPG...

@540deg/react-native-simple-markdown (>=1.1.1, <=1.1.2), @anzeblabla/react-native-markdown-editor (>=1.0.3, <=2.1.1) +29 more potentially affected by CVE-2019-25103 via simple-markdown (>=0.0.9, <=0.4.4)

simple-markdown NPM version =0.0.9, =1.1.1, =1.0.3, =1.3.0, =1.0.1, =1.1.1, =1.1.74, =1.0.8, =1.0.4, =2.3.0, =3.0.0, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2019-25103 Source advisory: OSV:GHSA-GPVJ-GP8C-C7P2...

@arcblock/gatsby-theme-docs (>=5.7.0, <=7.34.5), @changeinc/components (>=1.0.4, <=1.0.20) +87 more potentially affected by CVE-2021-23433 +1 more via algoliasearch-helper (>=2.1.2, <=2.28.1)

algoliasearch-helper NPM version =2.1.2, =5.7.0, =1.0.4, =1.0.4, =1.0.0, =2.2.1-custom, =0.0.7, =0.1.2, =0.1.4, =0.2.3, =0.2.1, =0.0.1, =2.0.0, =0.0.0, =1.9.0, =1.0.0, =1.4.2 and more Source cves: CVE-2021-23433, CVE-2025-3193 Source advisory: SNYK:JS-ALGOLIASEARCHHELPER-3318396...