sentry-conduit (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-39294 via conduit-hyper (0.3.0)

conduit-hyper CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on conduit-hyper and may be impacted: - sentry-conduit =0.1.0, =0.3.0 Source cves: CVE-2022-39294 Source advisory: OSV:GHSA-9398-5GHF-7PR6...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25885 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25885 Source advisory: SNYK:JS-HUMMUS-3091139...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25885 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25885 Source advisory: SNYK:JS-MUHAMMARA-3091137...

nfprobe (0.0.1), terminus (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via elf_rs (>=0.1.1, <=0.1.3)

elfrs CARGO version =0.1.1, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0079...

sentry-conduit (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-39294 via conduit-hyper (0.3.0)

conduit-hyper CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on conduit-hyper and may be impacted: - sentry-conduit =0.1.0, =0.3.0 Source cves: CVE-2022-39294 Source advisory: OSV:RUSTSEC-2022-0066...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37621 via browserify-shim (>=3.1.5, <=3.8.14)

browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37621 Source advisory: OSV:GHSA-R737-347M-WQC7...

@asigna/stx-core-sdk (0.0.1), @casper124578/use-socket.io (>=2.1.0, <=4.1.0) +133 more potentially affected by CVE-2022-2421 via socket.io-parser (4.1.2)

socket.io-parser NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @asigna/stx-core-sdk 0.0.1 - @casper124578/use-socket.io =2.1.0, =31.0.0, =34.0.0, =34.0.0, =1.0.0-theia1.27.0, =1.0.0, =1.0.1,...

@abcpros/bitcore-build (>=8.25.29, <=8.25.30), @acanto/october-scripts (3.2.2) +1122 more potentially affected by CVE-2022-2421 via socket.io-parser (>=3.1.1, <=3.3.0)

socket.io-parser NPM version =3.1.1, =8.25.29, =1.0.0, =2018.7.11-0, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =0.2.0, =1.0.10, =3.3.91, =3.3.114 and more Source cves: CVE-2022-2421 Source advisory: OSV:GHSA-QM95-PGCG-QQFQ...

@xrengine/analytics (>=0.4.11, <=5.0.0-beta3), @xrengine/server-core (>=0.4.11, <=5.0.0-beta3) potentially affected by CVE-2022-2422 via feathers-sequelize (6.3.2)

feathers-sequelize NPM version 6.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on feathers-sequelize and may be impacted: - @xrengine/analytics =0.4.11, =0.4.11, =5.0.0-beta3 Source cves: CVE-2022-2422 Source advisory: OSV:GHSA-QPV8-4PJQ-QQH7...

@xrengine/analytics (>=0.4.11, <=5.0.0-beta3), @xrengine/server-core (>=0.4.11, <=5.0.0-beta3) potentially affected by CVE-2022-29822 via feathers-sequelize (6.3.2)

feathers-sequelize NPM version 6.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on feathers-sequelize and may be impacted: - @xrengine/analytics =0.4.11, =0.4.11, =5.0.0-beta3 Source cves: CVE-2022-29822 Source advisory: OSV:GHSA-5HQ7-J5WQ-P227...

socket.io (>=3.0.0-rc1, <=3.0.0-rc4), socket.io-client (>=3.0.0-rc1, <=3.0.0-rc4) potentially affected by CVE-2022-2421 via socket.io-parser (>=4.0.1-rc1, <=4.0.1-rc3)

socket.io-parser NPM version =4.0.1-rc1, =3.0.0-rc1, =3.0.0-rc1, =3.0.0-rc4 Source cves: CVE-2022-2421 Source advisory: OSV:GHSA-QM95-PGCG-QQFQ...

SUSE SLED15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2022:3727-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3727-1 advisory. Updated to version 4.16.2 bsc1027519: - CVE-2022-33746: Fixed DoS due to excessively long P2M po...

etclient (0.3.0), eth-utils (>=0.1.1, <=0.2.0) +32 more potentially affected by CVE-2022-39354 via evm (>=0.7.1, <=0.33.1)

evm CARGO version =0.7.1, =0.1.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2022-39354 Source advisory: OSV:GHSA-HHC4-47RH-CR34...

etclient (0.3.0), eth-utils (>=0.1.1, <=0.2.0) +32 more potentially affected by CVE-2022-39354 via evm (>=0.7.1, <=0.33.1)

evm CARGO version =0.7.1, =0.1.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2022-39354 Source advisory: OSV:RUSTSEC-2022-0083...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25892 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25892 Source advisory: SNYK:JS-HUMMUS-3091138...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25892 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25892 Source advisory: SNYK:JS-MUHAMMARA-3060320...

@agoric/access-token (>=0.4.16-dev-23c942c.0, <=0.4.16-dev.0), @agoric/assert (>=0.1.0, <=0.3.15-dev.2) +100 more potentially affected by unknown CVE via ses (>=0.0.1, <=0.15.24)

ses NPM version =0.0.1, =0.4.16-dev-23c942c.0, =0.1.0, =1.2.0, =1.3.0, =0.1.0, =0.10.8-dev.0, =0.2.0, =1.5.1, =0.5.6-dev-f662032.0, =0.0.1, =0.1.1, =0.0.9, =0.1.1, =0.2.0, =0.5.30-dev-fe997f2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WHPX-Q3RQ-W8JC...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02.aula (1.0.0) +31629 more potentially affected by CVE-2022-3517 via minimatch (>=3.0.0, <=3.0.4)

minimatch NPM version =3.0.0, =1.0.1, =1.1.0 - 02.aula 1.0.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14939 more potentially affected by CVE-2022-37603 via loader-utils (>=1.0.0, <=1.4.1)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37603 Source advisory: OSV:GHSA-3RFM-JHWJ-7488...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8770 more potentially affected by CVE-2022-37603 via loader-utils (>=2.0.0, <=2.0.3)

loader-utils NPM version =2.0.0, =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...