d8s-asns (0.1.0), d8s-domains (0.1.0) +8 more potentially affected by unknown CVE via democritus-user-agents (2021.1.2101)

democritus-user-agents PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-user-agents and may be impacted: - d8s-asns 0.1.0 - d8s-domains 0.1.0 - d8s-html 0.1.0 - d8s-ip-addresses 0.1.0 - d8s-mpeg 0.1.0 - d8s-networking...

d8s-urls (0.1.0) potentially affected by unknown CVE via democritus-domains (2021.1.2101)

democritus-domains PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-domains and may be impacted: - d8s-urls 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSDOMAINS-8400830...

@appsocially/timepassport (>=0.1.2-0.1, <=0.1.29), @becompliancebr/shared-components (>=1.0.0, <=1.10.0) +80 more potentially affected by CVE-2022-25873 via vuetify (>=2.0.0, <=2.6.9)

vuetify NPM version =2.0.0, =0.1.2-0.1, =1.0.0, =1.2.5-1, =5.0.1-beta.0, =0.0.128-beta.33, =0.0.101-beta.22, =0.0.132-alpha.448, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.132-alpha.448, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.128-beta.33, =0.0.132-beta.446 and more Source cves:...

@budibase/client (>=1.1.32-alpha.0, <=1.3.19-alpha.7), @budibase/frontend-core (>=1.1.32-alpha.0, <=1.3.19-alpha.7) +1 more potentially affected by CVE-2022-3225 via @budibase/bbui (>=1.1.32-alpha.0, <=1.3.19-alpha.7)

@budibase/bbui NPM version =1.1.32-alpha.0, =1.1.32-alpha.0, =1.1.32-alpha.0, =1.1.32-alpha.0, =1.3.19-alpha.7 Source cves: CVE-2022-3225 Source advisory: OSV:GHSA-X92G-49GH-63QM...

@cdoor/core (>=0.0.1, <=0.0.3), @dci-lint/cmd-api-server (>=0.5.0, <=0.6.1) +39 more potentially affected by CVE-2022-36083 via jose (>=3.7.0, <=3.20.3)

jose NPM version =3.7.0, =0.0.1, =0.5.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.0.3-3.12.3, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =8.1....

@adobe/helix-google-support (>=1.3.4, <=2.0.3), @adobe/helix-html-pipeline (>=3.0.0, <=3.1.8) +64 more potentially affected by CVE-2022-36083 via jose (>=4.0.3, <=4.9.1)

jose NPM version =4.0.3, =1.3.4, =3.0.0, =1.11.39, =8.0.0, =0.0.1, =0.0.2-alpha.15, =2.2.2, =2022.2.6, =1.0.1, =2.7.3, =1.0.4-alpha.0, =2.2.9, =1.1.5, =1.1.9 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@decentralized-identity/ion-sdk (>=0.1.0, <=0.4.1), @tadashi/jwt (>=6.0.0, <=7.0.0) +21 more potentially affected by CVE-2022-36083 via jose (>=2.0.1, <=2.0.5)

jose NPM version =2.0.1, =0.1.0, =6.0.0, =3.0.4, =3.0.4, =3.0.5, =3.0.4, =3.0.5, =3.0.4, =3.0.6, =3.0.3, =3.0.5, =3.1.0, =2.3.2, =0.1.0, =1.2.4 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@teachbase/utils (1.0.1) potentially affected by CVE-2022-36083 via jose-browser-runtime (3.16.1)

jose-browser-runtime NPM version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on jose-browser-runtime and may be impacted: - @teachbase/utils 1.0.1 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

cortex-cli (>=2.0.8, <=2.1.0) potentially affected by CVE-2022-36083 via jose-node-cjs-runtime (>=4.6.0, <=4.8.1)

jose-node-cjs-runtime NPM version =4.6.0, =2.0.8, =2.1.0 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@dci-lint/cmd-api-server (>=0.3.0, <=0.4.0), @dci-lint/test-api-client (>=0.3.0, <=0.4.0) +46 more potentially affected by CVE-2022-36083 via jose (>=1.18.1, <=1.28.1)

jose NPM version =1.18.1, =0.3.0, =0.3.0, =0.3.0, =0.10.0-unstable.0042dcd, =0.6.1, =0.6.3, =0.6.3, =0.6.4, =0.6.3, =0.6.9, =0.6.1, =0.6.3, =0.6.3, =0.6.3, =0.6.5, =0.9.4 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

cortex-cli (2.0.7) potentially affected by CVE-2022-36083 via jose-node-cjs-runtime (3.18.0)

jose-node-cjs-runtime NPM version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on jose-node-cjs-runtime and may be impacted: - cortex-cli 2.0.7 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@netceterapx/click-to-pay-embedded-sdk (>=0.0.1, <=1.0.5) potentially affected by CVE-2022-36083 via jose-browser-runtime (4.1.2)

jose-browser-runtime NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on jose-browser-runtime and may be impacted: - @netceterapx/click-to-pay-embedded-sdk =0.0.1, =1.0.5 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ...

alloc-cortex-m (>=0.1.0, <=0.4.2), bottleos (0.2.0) +24 more potentially affected by CVE-2022-36086 via linked_list_allocator (>=0.2.7, <=0.9.1)

linkedlistallocator CARGO version =0.2.7, =0.1.0, =0.1.0, =0.3.0, =0.4.0-pre, =0.4.0-pre, =0.1.0, =0.0.1, =0.3.2, =0.11.0, =0.1.0, =0.1.3 and more Source cves: CVE-2022-36086 Source advisory: OSV:GHSA-XG8P-34W2-J49J...

accrete (>=0.1.7, <=0.2.0), adana-script-wasm (>=0.16.5-rc.1, <=0.17.10) +320 more potentially affected by unknown CVE via wee_alloc (>=0.1.0, <=0.4.5)

weealloc CARGO version =0.1.0, =0.1.7, =0.16.5-rc.1, =0.1.0, =0.4.0, =0.1.1, =0.1.2, =1.4.0, =0.1.0, =0.2.8 - biscuit-wasm 0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RC23-XXGQ-X27G...

accepted (>=0.2.0, <=0.3.2), aigc_api (5.1.2) +505 more potentially affected by unknown CVE via typemap (0.3.3)

typemap CARGO version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VFV3-9W6V-23JP...

acari-lib (>=0.1.1, <=0.1.8), accepted (>=0.2.0, <=0.3.2) +1861 more potentially affected by unknown CVE via traitobject (>=0.0.1, <=0.1.1)

traitobject CARGO version =0.0.1, =0.1.1, =0.2.0, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.2 - aigcapi 5.1.2 - aigcchain 5.1.2 - aigcconfig 5.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PP8R-VV2J-9J5V...

cargo-c (0.9.14+cargo-0.66), cargo-clone-core (0.2.0) +7 more potentially affected by CVE-2022-36113 via cargo (0.66.0)

cargo CARGO version 0.66.0 is affected by a known vulnerability. The following packages have a transitive dependency on cargo and may be impacted: - cargo-c 0.9.14+cargo-0.66 - cargo-clone-core 0.2.0 - cargo-instruments 0.4.8 - cargo-patch 0.2.9 - cargo-udeps 0.1.35 - publish-action =0.2.0, =0.1....

armory_cli (>=0.3.3, <=0.3.28), armory_lib (>=0.1.0, <=0.3.28) +131 more potentially affected by CVE-2022-36114 via cargo (>=0.4.0, <=0.64.0)

cargo CARGO version =0.4.0, =0.3.3, =0.1.0, =0.10.0, =0.10.0, =0.1.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.6.0, =0.1.0, =0.1.2 and more Source cves: CVE-2022-36114 Source advisory: OSV:GHSA-2HVR-H6GW-QRXP...

cargo-c (0.9.14+cargo-0.66), cargo-clone-core (0.2.0) +7 more potentially affected by CVE-2022-36114 via cargo (0.66.0)

cargo CARGO version 0.66.0 is affected by a known vulnerability. The following packages have a transitive dependency on cargo and may be impacted: - cargo-c 0.9.14+cargo-0.66 - cargo-clone-core 0.2.0 - cargo-instruments 0.4.8 - cargo-patch 0.2.9 - cargo-udeps 0.1.35 - publish-action =0.2.0, =0.1....

pasbeaucoupmoinsrave (0.2.0) potentially affected by CVE-2022-3224 via parse-url (8.0.0)

parse-url NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - pasbeaucoupmoinsrave 0.2.0 Source cves: CVE-2022-3224 Source advisory: OSV:GHSA-PQW5-JMP5-PX4V...