01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +3849 more potentially affected by CVE-2022-24999 via qs (>=6.5.0, <=6.5.2)

qs NPM version =6.5.0, =1.0.0, =0.2.0, =0.1.0, =1.0.0, =1.0.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.0, =12.1.0, =6.0.0, =7.12.0 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...

@bouzuya/mr-jums (>=0.2.0, <=0.9.1), @deansel/latte (0.1.2-beta.1) +77 more potentially affected by CVE-2022-24999 via qs (>=6.3.0, <=6.3.1)

qs NPM version =6.3.0, =0.2.0, =1.0.0-alpha.7, =0.0.1-alpha.1, =0.0.1-dev.0, =4.0.0-beta.6, =3.0.0, =0.20.5, =0.20.5, =0.20.8, =0.1.5, =0.6.5, =0.13.0, =0.15.0 - app-decorators 0.8.206 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...

@aothechbcn/frontend-idealbar--lib-idealbar (>=1.0.0, <=1.0.10), @brigad/redux-rest-easy (>=3.0.0, <=3.0.3) +55 more potentially affected by CVE-2022-24999 via qs (6.6.0)

qs NPM version 6.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on qs and may be impacted: - @aothechbcn/frontend-idealbar--lib-idealbar =1.0.0, =3.0.0, =0.92.0, =1.0.1, =1.0.0, =5.1.0, =13.1.1-5e9b77d, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 -...

@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +624 more potentially affected by unknown CVE via sweetalert2 (>=8.19.1, <=11.22.3)

sweetalert2 NPM version =8.19.1, =0.0.0, =0.0.0, =0.1.0, =2.31.0, =0.0.1-beta.1, =0.1.1, =1.0.1, =1.0.0, =1.0.0, =0.0.9, =0.0.1, =0.3.73, =0.3.198 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8JH9-WQPF-Q52C...

@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +326 more potentially affected by unknown CVE via sweetalert2 (>=9.17.4, <=11.22.3)

sweetalert2 NPM version =9.17.4, =0.0.0, =0.0.0, =2.31.0, =0.0.1-beta.1, =0.1.1, =1.0.1, =1.0.0, =0.0.9, =0.0.1, =0.3.73, =0.0.4, =0.0.4, =1.0.0, =1.0.17, =1.2.33 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PG98-6V7F-2XFV...

@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +194 more potentially affected by unknown CVE via sweetalert2 (>=10.16.11, <=11.22.3)

sweetalert2 NPM version =10.16.11, =0.0.0, =0.0.0, =2.31.0, =1.0.0, =0.0.1, =0.3.73, =0.0.4, =0.0.4, =1.0.0, =1.0.17, =0.0.0-20240903040200, =1.3.0, =1.10.0, =1.0.1, =1.1.333 and more Source cves: unknown CVE Source advisory: OSV:GHSA-457R-CQC8-9VJ9...

@bcwdev/quickvue (1.0.15), @bnsights-test/test-admin-portal (>=0.0.4, <=0.0.147) +41 more potentially affected by unknown CVE via sweetalert2 (>=11.4.14, <=11.22.3)

sweetalert2 NPM version =11.4.14, =0.0.4, =0.0.4, =1.0.0, =1.0.110, =0.0.0-20240903040200, =1.10.0, =15.2.16, =1.2.29, =1.8.94, =3.0.0, =3.0.30, =1.0.1, =1.0.1, =1.1.16, =1.6.22 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QQ6H-5G6J-Q3CM...

difftastic (>=0.29.1, <=0.52.0), difftastic-lib (>=0.0.1, <=0.0.2) +4 more potentially affected by unknown CVE via mimalloc (>=0.1.28, <=0.1.37)

mimalloc CARGO version =0.1.28, =0.29.1, =0.0.1, =0.1.6, =0.17.0-alpha.4, =0.15.0, =0.16.0-alpha.3, =0.18.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0094...

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1267 more potentially affected by CVE-2022-41940 via engine.io (>=3.1.0, <=3.5.0)

engine.io NPM version =3.1.0, =4.11.25, =8.25.29, =0.1.53, =5.1.0, =5.1.0, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2022-41940 Source advisory: OSV:GHSA-R7QP-CFHV-P84W...

0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +1530 more potentially affected by CVE-2022-41940 via engine.io (>=4.0.6, <=6.1.3)

engine.io NPM version =4.0.6, =1.0.49, =1.0.0, =0.0.28, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =1.2.1, =1.0.1, =1.0.2 - @aaronconway7/create-gatsby-app 1.0.0 - @accio-cms/gatsby-starter-accio 0.0.1 - @achilleskal/awesome-blog 1.0.0 and more Source cves: CVE-2022-41940 Source advisory:...

@aeppic/install-build-server (>=1.2.0, <=1.9.8), @aeppic/install-repository-server (>=1.2.2, <=2.0.2) +145 more potentially affected by CVE-2022-41919 via fastify (>=3.0.0, <=3.29.3)

fastify NPM version =3.0.0, =1.2.0, =1.2.2, =0.0.46, =0.0.5, =1.0.0, =2.0.0, =1.1.1, =1.0.0, =1.0.0, =1.0.0, =4.23.1, =2.7.0, =1.0.0, =1.3.0 - @bronosorg/graph-indexer-service 1.0.0 and more Source cves: CVE-2022-41919 Source advisory: OSV:GHSA-3FJJ-P79J-C9HH...

@aicore/cocodb (>=1.0.1, <=1.0.6), @athenna/artisan (>=1.6.0, <=1.6.4) +92 more potentially affected by CVE-2022-41919 via fastify (>=4.0.2, <=4.10.0)

fastify NPM version =4.0.2, =1.0.1, =1.6.0, =1.3.1, =1.0.2, =1.2.1, =2.0.6, =1.4.6, =1.7.1, =1.3.0, =1.3.8, =1.0.1, =1.3.9, =4.33.5, =0.0.65, =1.1.1, =1.1.3 and more Source cves: CVE-2022-41919 Source advisory: OSV:GHSA-3FJJ-P79J-C9HH...

@redwoodjs/auth-dbauth-setup (0.0.2), @redwoodjs/auth-providers-setup (0.0.1) +12 more potentially affected by unknown CVE via @redwoodjs/api (>=3.0.0, <=3.3.0)

@redwoodjs/api NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3QMC-2R76-4RQP...

@flightpkg/create-redwood-app (1.0.0), @layer0/redwood (>=4.7.1-next-1639602777-e3c518e56.0, <=4.7.1-next-1639605987-6c7a0e965.0) +10 more potentially affected by unknown CVE via @redwoodjs/api (>=0.38.0, <=2.2.4)

@redwoodjs/api NPM version =0.38.0, =4.7.1-next-1639602777-e3c518e56.0, =0.38.0-rc.69, =0.38.0-rc.69, =0.39.0-rc.83, =0.38.0-rc.69, =0.38.0-rc.69, =0.38.0-rc.69, =0.38.0-rc.69, =0.0.1, =0.38.0-rc.69, =0.38.0-rc.69, =2.2.4 Source cves: unknown CVE Source advisory: OSV:GHSA-3QMC-2R76-4RQP...

@abstraktor/actordemo (>=0.0.0-ad-beta.1, <=0.0.0-ad-beta.2), @abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.6) +175 more potentially affected by CVE-2022-24066 +1 more via simple-git (>=3.0.3, <=3.14.1)

simple-git NPM version =3.0.3, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =1.4.0, =5.15.0, =10.0.0-version-usage.0, =1.0.1, =2.0.0, =1.1.0, =1.1.0, =0.0.0-semantic-release, =1.1.12, =0.0.1, =0.0.63 - @custis/file-adapter-front 1.1.1 and more Source cves: CVE-2022-24066, CVE-2022-25912 Source advisory:...

@ultra-node/electron-engine (>=0.1.1, <=0.1.14) potentially affected by CVE-2022-36077 via electron (20.0.0)

electron NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - @ultra-node/electron-engine =0.1.1, =0.1.14 Source cves: CVE-2022-36077 Source advisory: OSV:GHSA-P2JH-44QJ-PF2V...

@ascua/electron (0.0.228), @jessezzhang/motion-core (>=0.0.1, <=0.0.5) +9 more potentially affected by CVE-2022-36077 via electron (>=18.0.0, <=18.3.2)

electron NPM version =18.0.0, =0.0.1, =0.0.21, =1.2.1, =2.0.72, =3.15.3, =0.0.0, =18.0.0, =1.0.0, =1.0.1 Source cves: CVE-2022-36077 Source advisory: OSV:GHSA-P2JH-44QJ-PF2V...

GHSA-8G2P-5PQH-5JMC .NET Information Disclosure Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET, .NET Core and .NET Framework's System.Data.SqlClient and Microsoft.Data.SqlClient NuGet Packages. A vulnerability exists in System.Data.SqlClient and Microsoft.Data.SqlClient libraries where a...

@kyedoesdev/lente-cli (>=0.1.0, <=0.1.1), @kyedoesdev/lente-core (0.1.0) potentially affected by CVE-2022-39386 via @fastify/websocket (5.0.0)

@fastify/websocket NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/websocket and may be impacted: - @kyedoesdev/lente-cli =0.1.0, =0.1.1 - @kyedoesdev/lente-core 0.1.0 Source cves: CVE-2022-39386 Source advisory:...

@0x77/ccpack (>=0.0.0, <=0.1.5), @aio-server/core (>=0.0.1, <=0.0.1001) +27 more potentially affected by CVE-2022-39386 via fastify-websocket (>=4.0.0, <=4.2.2)

fastify-websocket NPM version =4.0.0, =0.0.0, =0.0.1, =0.0.1, =4.3.0-depup.0, =0.2.42, =2.0.3, =9.1.1, =1.8.0, =1.0.0-pre.3, =2.0.0-alpha, =1.0.0, =0.0.1, =1.0.1, =0.0.10, =0.0.40 and more Source cves: CVE-2022-39386 Source advisory: OSV:GHSA-4PCG-WR6C-H9CQ...