@550w-tools/cli (>=0.0.14, <=0.0.16), @550w-tools/core (>=0.0.14, <=0.0.16) +539 more potentially affected by CVE-2022-25904 via safe-eval (>=0.2.0, <=0.4.1)

safe-eval NPM version =0.2.0, =0.0.14, =0.0.14, =0.0.13, =0.0.14, =0.0.15, =1.0.1, =1.0.2, =1.0.3, =1.1.2, =0.1.16-beta.1, =1.0.0-beta.4, =0.3.0-alpha.1, =0.20.0, =2.0.295, =2.0.315 and more Source cves: CVE-2022-25904 Source advisory: SNYK:JS-SAFEEVAL-3175701...

@braira/changelog (>=1.0.0, <=1.0.4), grunt-ivantage-svn-changelog (>=0.3.0, <=0.4.1) potentially affected by CVE-2022-25853 via semver-tags (>=0.1.5, <=0.4.10)

semver-tags NPM version =0.1.5, =1.0.0, =0.3.0, =0.4.1 Source cves: CVE-2022-25853 Source advisory: SNYK:JS-SEMVERTAGS-3175612...

@athenna/database (>=1.2.2, <=1.4.6), @aws-amplify/amplify-appsync-simulator (2.9.4-rdsv2preview.0) +141 more potentially affected by CVE-2016-20018 via knex (>=2.0.0, <=2.3.0)

knex NPM version =2.0.0, =1.2.2, =4.2.0-rds-v2.3, =10.5.3-rds-v2.0, =11.1.2-sync-fix.0 - @aws-amplify/graphql-auth-transformer 1.2.6-rdsv2preview.0 - @aws-amplify/graphql-default-value-transformer 0.7.8-rdsv2preview.0 - @aws-amplify/graphql-function-transformer 0.7.36-rdsv2preview.0 and more Sour...

ibc (>=0.0.6, <=0.10.0), ibc-relayer (>=0.1.0, <=0.19.0) +6 more potentially affected by CVE-2022-23507 via tendermint-light-client (>=0.16.0, <=0.23.9)

tendermint-light-client CARGO version =0.16.0, =0.0.6, =0.1.0, =0.1.0, =0.7.0, =0.8.0-pre.1, =0.15.0, =0.19.0, =0.16.0, =0.19.0 Source cves: CVE-2022-23507 Source advisory: OSV:GHSA-XQQC-C5GW-C5R5...

ibc (>=0.11.0, <=0.19.0), ibc-relayer (>=0.11.0, <=0.19.0) +6 more potentially affected by CVE-2022-23507 via tendermint-light-client-verifier (>=0.23.5, <=0.27.0)

tendermint-light-client-verifier CARGO version =0.23.5, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.15.0, =0.23.5, =0.23.0, =0.27.0 Source cves: CVE-2022-23507 Source advisory: OSV:GHSA-XQQC-C5GW-C5R5...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3996 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3996 Source advisory: OSV:GHSA-VR8J-HGMM-JH9R...

blockbuster (0.0.2) potentially affected by unknown CVE via mpl-bubblegum (0.1.1)

mpl-bubblegum CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mpl-bubblegum and may be impacted: - blockbuster 0.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8R76-FR72-J32W...

@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +131 more potentially affected by CVE-2022-23494 via tinymce (>=5.0.6, <=5.10.5)

tinymce NPM version =5.0.6, =0.1.2, =0.3.7, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =0.5.2, =10.3.1-snapshot-1616513687673, =1.68.82, =0.65.0, =0.18.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-23494 Source advisory: OSV:GHSA-GG8R-XJWQ-4W92...

@weedx/components (0.0.1-beta), acmcoder-ui (>=1.0.2, <=1.0.11) +8 more potentially affected by CVE-2022-23494 via tinymce (>=6.0.0, <=6.2.0)

tinymce NPM version =6.0.0, =1.0.2, =1.0.96, =0.0.19, =1.0.0, =0.70.4, =1.0.6, =0.0.2, =0.0.5 Source cves: CVE-2022-23494 Source advisory: OSV:GHSA-GG8R-XJWQ-4W92...

abstract-boot (>=0.2.0-beta.4, <=0.2.0-beta.7), agora (>=0.0.5, <=0.1.2) +438 more potentially affected by unknown CVE via secp256k1 (>=0.15.3, <=0.21.3)

secp256k1 CARGO version =0.15.3, =0.2.0-beta.4, =0.0.5, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.0.1, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-969W-Q74Q-9J8V...

3id-test-helper (>=1.0.0, <=1.0.4), @0xvaibhav/--core (>=1.0.0, <=1.0.4) +226 more potentially affected by CVE-2022-23487 via libp2p (>=0.27.4, <=0.37.3)

libp2p NPM version =0.27.4, =1.0.0, =1.0.0, =0.0.1, =0.9.139, =0.0.2, =0.0.1-alpha.0, =1.0.0, =1.9.40, =1.0.0-rc.3, =0.1.2-beta.2, =0.1.2-beta.2, =0.1.2-beta.2, =0.3.2, =0.5.2-alpha.0, =0.5.3 and more Source cves: CVE-2022-23487 Source advisory: OSV:GHSA-F44Q-634C-JVWV...

artillery-core (>=0.1.2-alpha.3, <=0.1.2), bastion (>=0.3.5, <=0.4.5) +71 more potentially affected by CVE-2022-23486 via libp2p (>=0.18.1, <=0.42.2)

libp2p CARGO version =0.18.1, =0.1.2-alpha.3, =0.3.5, =0.1.0, =0.7.0, =0.1.5, =2.0.0-alpha.3, =0.4.0, =0.2.0, =0.20.0, =0.8.0, =0.8.0, =0.10.0 and more Source cves: CVE-2022-23486 Source advisory: OSV:GHSA-JVGW-GCCV-Q5P8...

@abstraktor/actordemo (>=0.0.0-ad-beta.1, <=0.0.0-ad-beta.2), @abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.6) +175 more potentially affected by CVE-2022-25912 via simple-git (>=3.0.3, <=3.14.1)

simple-git NPM version =3.0.3, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =1.4.0, =5.15.0, =10.0.0-version-usage.0, =1.0.1, =2.0.0, =1.1.0, =1.1.0, =0.0.0-semantic-release, =1.1.12, =0.0.1, =0.0.63 - @custis/file-adapter-front 1.1.1 and more Source cves: CVE-2022-25912 Source advisory:...

bioyino-metric (>=0.1.0, <=0.2.0), cafs (0.0.1) +29 more potentially affected by CVE-2022-46149 via capnp (>=0.0.1, <=0.12.4)

capnp CARGO version =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.5.0, =0.1.6, =0.2.8, =0.2.0, =0.17.0, =0.2.2, =0.6.0, =0.7.0 and more Source cves: CVE-2022-46149 Source advisory: OSV:GHSA-QQFF-4VW4-F6HX...

yio-cli (1.0.0) potentially affected by CVE-2023-26128 via keep-module-latest (1.0.1)

keep-module-latest NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keep-module-latest and may be impacted: - yio-cli 1.0.0 Source cves: CVE-2023-26128 Source advisory: SNYK:JS-KEEPMODULELATEST-3157165...

grunt-yellowlabtools (>=0.0.1, <=1.2.1), install-is (>=1.4.0, <=1.4.2) +3 more potentially affected by CVE-2022-25906 via is-http2 (>=1.0.4, <=1.2.0)

is-http2 NPM version =1.0.4, =0.0.1, =1.4.0, =1.0.0, =1.10.0, =1.13.4 Source cves: CVE-2022-25906 Source advisory: SNYK:JS-ISHTTP2-3153878...

node-sass-with-bindings (>=4.5.5, <=4.5.6) potentially affected by CVE-2022-25895 via lite-dev-server (3.2.7)

lite-dev-server NPM version 3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on lite-dev-server and may be impacted: - node-sass-with-bindings =4.5.5, =4.5.6 Source cves: CVE-2022-25895 Source advisory: SNYK:JS-LITEDEVSERVER-3153718...

2cs (1.0.0), @abhishekgaps1/ts-2 (>=1.0.0, <=1.0.1) +75 more potentially affected by CVE-2022-25940 via lite-server (>=1.3.4, <=2.6.1)

lite-server NPM version =1.3.4, =1.0.0, =2.21.0, =0.0.8, =1.2.3, =1.0.48, =1.2.0, =0.1.0, =0.0.2, =1.0.0, =0.2.0, =0.2.3 - angular-two 1.0.0 - angular2-flash-message 0.0.4 and more Source cves: CVE-2022-25940 Source advisory: SNYK:JS-LITESERVER-3153540...

nadesiko3php (0.0.10) potentially affected by CVE-2022-41777 via nadesiko3 (3.2.52)

nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-41777 Source advisory: OSV:GHSA-X2JX-W3WM-9P3P...

nadesiko3php (0.0.10) potentially affected by CVE-2022-42496 via nadesiko3 (3.2.52)

nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-42496 Source advisory: OSV:GHSA-7249-8X22-4RG4...