@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +84 more potentially affected by CVE-2022-22984 +1 more via snyk (>=1.1.1, <=1.954.0)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =1.6.0, =1.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory: SNYK:JS-SNYK-3038622...

@adobe/git-server (>=1.0.1, <=1.0.5), @adobe/helix-cli (>=5.7.7, <=6.1.0) +34 more potentially affected by CVE-2022-22984 +1 more via snyk-gradle-plugin (>=3.1.0, <=3.24.2)

snyk-gradle-plugin NPM version =3.1.0, =1.0.1, =5.7.7, =2.16.1, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =0.2.0-a1, =1.20.0-alpha.11736.3, =1.24.0-alpha.1 and more Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory: SNYK:JS-SNYKGRADLEPLUGIN-3038624...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +56 more potentially affected by CVE-2022-22984 +1 more via snyk-sbt-plugin (>=2.0.0, <=2.15.0)

snyk-sbt-plugin NPM version =2.0.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 - @ericblade/quagga2-redux-middleware 1.0.1 and more Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +56 more potentially affected by CVE-2022-22984 +1 more via snyk-mvn-plugin (>=2.0.0, <=2.31.2)

snyk-mvn-plugin NPM version =2.0.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 - @ericblade/quagga2-redux-middleware 1.0.1 and more Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2022-39252 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2022-39252 Source advisory: OSV:RUSTSEC-2022-0085...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019073743), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.1-20221008145236) +191 more potentially affected by CVE-2022-36067 via vm2 (>=3.0.0, <=3.9.10)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

@koj/strapi (>=0.0.0, <=1.4.3), @psworld/backend_project (0.0.1) +11 more potentially affected by CVE-2022-31367 via strapi (>=3.0.0, <=3.6.8)

strapi NPM version =3.0.0, =0.0.0, =0.0.1, =0.0.34, =1.1.0, =0.1.3, =0.0.1-alpha.1, =0.3.0, =0.3.1 Source cves: CVE-2022-31367 Source advisory: OSV:GHSA-4PHG-HPQM-C3J4...

1-topshiriq (1.0.0), 3nit-utils (>=0.11.1, <=0.23.0) +5297 more potentially affected by CVE-2020-36604 via hoek (>=6.0.2, <=6.1.3)

hoek NPM version =6.0.2, =0.11.1, =0.0.1, =2.0.0, =0.1.2, =1.0.0, =2.0.0-alpha10, =0.0.1, =1.0.0, =1.2.1, =0.0.1, =1.3.1, =1.3.5 - @absolunet/bamboo-connector 0.1.0 and more Source cves: CVE-2020-36604 Source advisory: OSV:GHSA-C429-5P7V-VGJP...

@makeomatic/confidence (5.0.0), @makeomatic/deploy (>=10.0.1, <=10.2.1) +6 more potentially affected by CVE-2020-36604 via @hapi/hoek (9.0.2)

@hapi/hoek NPM version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/hoek and may be impacted: - @makeomatic/confidence 5.0.0 - @makeomatic/deploy =10.0.1, =6.0.0, =15.0.0, =10.0.0, =8.0.0, =14.0.0, =6.1.2, =6.8.3 Source cves:...

@condiments/chow-chow (>=3.0.0, <=3.0.1), @condiments/relish (>=4.0.0, <=4.0.1) +22 more potentially affected by CVE-2020-36604 via @hapi/hoek (>=8.1.0, <=8.5.0)

@hapi/hoek NPM version =8.1.0, =3.0.0, =4.0.0, =8.4.4, =1.5.2, =3.0.0, =3.0.0, =1.8.2, =1.8.2, =1.1.1, =2.2.0, =3.0.0, =1.8.2, =1.5.0, =1.5.1 and more Source cves: CVE-2020-36604 Source advisory: OSV:GHSA-C429-5P7V-VGJP...

@chumager/itdfw-site-base (>=1.2.0, <=2.4.5), @citruslime/ui (>=1.0.0, <=1.1.4-beta.1) +9 more potentially affected by CVE-2022-23461 via jodit (>=3.4.14, <=3.23.3)

jodit NPM version =3.4.14, =1.2.0, =1.0.0, =28.0.0-staging-2b964a, =1.0.9, =2.2.3, =1.0.15, =1.0.0, =1.5.1, =1.4.58, =1.6.90 Source cves: CVE-2022-23461 Source advisory: OSV:GHSA-42HX-VRXX-5R6V...

@adobe/helix-deploy (>=7.0.0, <=7.0.8) potentially affected by CVE-2022-39218 via @fastly/js-compute (>=0.4.0, <=0.5.2)

@fastly/js-compute NPM version =0.4.0, =7.0.0, =7.0.8 Source cves: CVE-2022-39218 Source advisory: OSV:GHSA-CMR8-5W4C-44V8...

d8s-archives (0.1.0), d8s-grammars (0.1.0) +5 more potentially affected by unknown CVE via democritus-strings (2021.1.28901)

democritus-strings PYPI version 2021.1.28901 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-strings and may be impacted: - d8s-archives 0.1.0 - d8s-grammars 0.1.0 - d8s-json 0.1.0 - d8s-math 0.1.0 - d8s-netstrings 0.1.0 - d8s-urls 0.1.0 -...

d8s-timer (0.1.0) potentially affected by unknown CVE via democritus-dates (2021.2.1101)

democritus-dates PYPI version 2021.2.1101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-dates and may be impacted: - d8s-timer 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSDATES-8400836...

d8s-asns (0.1.0), d8s-domains (0.1.0) +6 more potentially affected by unknown CVE via democritus-networking (2023.1.22)

democritus-networking PYPI version 2023.1.22 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-networking and may be impacted: - d8s-asns 0.1.0 - d8s-domains 0.1.0 - d8s-html 0.1.0 - d8s-ip-addresses 0.1.0 - d8s-mpeg 0.1.0 - d8s-pdfs 0.1.0 -...

d8s-stats (0.1.0) potentially affected by unknown CVE via democritus-math (2021.1.2801)

democritus-math PYPI version 2021.1.2801 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-math and may be impacted: - d8s-stats 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSMATH-8400834...

d8s-dates (0.1.0) potentially affected by unknown CVE via democritus-timezones (2021.1.201)

democritus-timezones PYPI version 2021.1.201 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-timezones and may be impacted: - d8s-dates 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSTIMEZONES-8400832...

d8s-asns (0.1.0), d8s-domains (0.1.0) +8 more potentially affected by unknown CVE via democritus-json (2021.1.2501)

democritus-json PYPI version 2021.1.2501 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-json and may be impacted: - d8s-asns 0.1.0 - d8s-domains 0.1.0 - d8s-html 0.1.0 - d8s-ip-addresses 0.1.0 - d8s-mpeg 0.1.0 - d8s-networking 0.1.0 -...

d8s-strings (0.1.0), d8s-timer (0.1.0) potentially affected by unknown CVE via democritus-uuids (2021.1.2101)

democritus-uuids PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-uuids and may be impacted: - d8s-strings 0.1.0 - d8s-timer 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSUUIDS-8400829...

d8s-dates (0.1.0), d8s-dicts (0.1.0) +5 more potentially affected by unknown CVE via democritus-hypothesis (2021.1.2101)

democritus-hypothesis PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-hypothesis and may be impacted: - d8s-dates 0.1.0 - d8s-dicts 0.1.0 - d8s-domains 0.1.0 - d8s-ip-addresses 0.1.0 - d8s-strings 0.1.0 - d8s-urls...