@frontify/frontify-cli (5.0.1), @my-healthcare/kankan-services (1.0.0) +8 more potentially affected by CVE-2022-39386 via @fastify/websocket (6.0.1)

@fastify/websocket NPM version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/websocket and may be impacted: - @frontify/frontify-cli 5.0.1 - @my-healthcare/kankan-services 1.0.0 - @ts4/hc =1.0.19, =1.0.2, =1.0.66, =0.0.1, =0.6.0,...

webappfind (0.1.1) potentially affected by unknown CVE via addon-kit (0.0.1-security)

addon-kit NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on addon-kit and may be impacted: - webappfind 0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-852...

@dstanesc/shared-property-map (>=0.0.9, <=0.0.11), @fluid-experimental/partial-checkout (>=0.51.0-43124, <=2.0.0-internal.2.0.4) +10 more potentially affected by CVE-2022-41714 via fastest-json-copy (1.0.1)

fastest-json-copy NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastest-json-copy and may be impacted: - @dstanesc/shared-property-map =0.0.9, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124,...

@backland/accounts (>=0.1.3-alpha.2022.11.25.20.14.44.0, <=0.1.3-alpha.20221123222206.0), @backland/entity (>=0.1.3-alpha.2022.11.25.20.14.44.0, <=0.1.3-alpha.20221101T193006-0300.54) +29 more potentially affected by CVE-2022-41713 via deep-object-diff (1.1.7)

deep-object-diff NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on deep-object-diff and may be impacted: - @backland/accounts =0.1.3-alpha.2022.11.25.20.14.44.0, =0.1.3-alpha.2022.11.25.20.14.44.0, =0.1.3-alpha.2022.11.25.20.14.44.0,...

@companydotcom/company-skynet-core (>=1.0.2, <=2.0.17), @companydotcom/micro-application-core (>=2.0.7, <=2.0.18-alpha.0) +10 more potentially affected by CVE-2022-42743 via deep-parse-json (>=1.0.1, <=1.0.2)

deep-parse-json NPM version =1.0.1, =1.0.2, =2.0.7, =0.0.1, =0.0.1, =0.0.19, =6.5.7-0, =5.3.0, =1.0.0, =0.0.6, =0.0.1, =0.0.13 - redux-persist-nedb-storage 0.1.0 Source cves: CVE-2022-42743 Source advisory: OSV:GHSA-FF9J-PWXG-Q5P2...

@a11ywatch/a11ywatch (>=0.0.1, <=0.1.65), @a11ywatch/core (>=0.1.1, <=0.5.158) +39 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.10.4)

apollo-server-core NPM version =3.0.0-html.2, =0.0.1, =0.1.1, =1.0.1, =1.1.22, =1.1.19, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =10.0.1, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =0.0.27, =0.0.64 and more Source cves: unknown CVE Source advisory:...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-39381 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-39381 Source advisory: OSV:GHSA-RCRX-FPJP-MFRW...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3602 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3602 Source advisory: OSV:GHSA-8RWR-X37P-MX23...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3786 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3786 Source advisory: OSV:GHSA-H8JM-2X53-XHP5...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11361 more potentially affected by CVE-2022-39353 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

@apexdevtools/apex-ls (>=3.1.0, <=3.2.0), @appium/fake-driver (>=3.2.3, <=3.2.4) +47 more potentially affected by CVE-2022-39353 via @xmldom/xmldom (>=0.7.0, <=0.7.6)

@xmldom/xmldom NPM version =0.7.0, =3.1.0, =3.2.3, =1.0.0-beta1, =15.1.0, =15.1.0, =15.1.0, =15.1.0, =0.1.0-beta.57, =0.1.5-beta.1, =1.0.0, =1.0.0, =1.0.0, =1.0.11 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

@appium/fake-driver (>=3.2.5, <=4.2.2), @barchart/marketdata-api-js (>=5.16.2, <=5.27.0) +76 more potentially affected by CVE-2022-39353 via @xmldom/xmldom (>=0.8.0, <=0.8.3)

@xmldom/xmldom NPM version =0.8.0, =3.2.5, =5.16.2, =1.0.0, =0.2.1-beta.36, =10.1.1, =1.0.0-alpha1, =0.0.101-beta.22, =1.0.0, =10.1.1, =4.0.0-beta.0, =4.0.0-beta.0, =1.0.2, =0.0.1, =1.0.0, =1.0.1, =2.2.0 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

node-red-contrib-ale-rainbow (>=1.82.0, <=1.82.6) potentially affected by CVE-2022-3783 via node-red-dashboard (3.1.7)

node-red-dashboard NPM version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-red-dashboard and may be impacted: - node-red-contrib-ale-rainbow =1.82.0, =1.82.6 Source cves: CVE-2022-3783 Source advisory: OSV:GHSA-VRV9-3X3W-FFXW...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25892 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25892 Source advisory: OSV:GHSA-9CV5-4WQV-9W94...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25892 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25892 Source advisory: OSV:GHSA-9CV5-4WQV-9W94...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25885 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25885 Source advisory: OSV:GHSA-FRP9-2V6R-GJ97...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25885 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25885 Source advisory: OSV:GHSA-FRP9-2V6R-GJ97...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3602 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3602 Source advisory: OSV:RUSTSEC-2022-0064...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3786 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3786 Source advisory: OSV:RUSTSEC-2022-0065...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37623 via browserify-shim (>=3.1.5, <=3.8.14)

browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37623 Source advisory: OSV:GHSA-CFGR-75JX-H88G...