aristote-malo (1.9.5), biobridge (>=0.1.0, <=0.2.5) +28 more potentially affected by CVE-2022-25304 via opcua (>=0.98.3, <=0.98.13)

opcua PYPI version =0.98.3, =0.1.0, =5.1.0, =1.4.1b1, =0.7.0b1, =0.3.3, =1.0.1, =0.1.0, =0.1.2.post1 and more Source cves: CVE-2022-25304 Source advisory: SNYK:PYTHON-OPCUA-2988730...

@frangoteam/fuxa (>=1.1.7, <=1.1.8), @hive-command/discovery-server (>=1.3.2-alpha.86, <=1.3.3-alpha.35) +19 more potentially affected by CVE-2022-24375 via node-opcua (>=2.1.9, <=2.73.1)

node-opcua NPM version =2.1.9, =1.1.7, =1.3.2-alpha.86, =1.3.6-alpha.36, =1.3.5, =0.0.3, =0.0.3, =0.0.2, =1.3.0-alpha.0, =0.8.0, =2.10.0, =2.10.0, =4.0.0, =1.0.0, =0.2.93, =0.2.286 and more Source cves: CVE-2022-24375 Source advisory: SNYK:JS-NODEOPCUA-2988725...

@frangoteam/fuxa (>=1.1.7, <=1.1.8), @hive-command/discovery-server (>=1.3.2-alpha.86, <=1.3.3-alpha.35) +19 more potentially affected by CVE-2022-25231 via node-opcua (>=2.1.9, <=2.73.1)

node-opcua NPM version =2.1.9, =1.1.7, =1.3.2-alpha.86, =1.3.6-alpha.36, =1.3.5, =0.0.3, =0.0.3, =0.0.2, =1.3.0-alpha.0, =0.8.0, =2.10.0, =2.10.0, =4.0.0, =1.0.0, =0.2.93, =0.2.286 and more Source cves: CVE-2022-25231 Source advisory: SNYK:JS-NODEOPCUA-2988724...

@frangoteam/fuxa (>=1.1.7, <=1.1.8), @hive-command/discovery-server (>=1.3.2-alpha.86, <=1.3.3-alpha.35) +19 more potentially affected by CVE-2022-21208 via node-opcua (>=2.1.9, <=2.73.1)

node-opcua NPM version =2.1.9, =1.1.7, =1.3.2-alpha.86, =1.3.6-alpha.36, =1.3.5, =0.0.3, =0.0.3, =0.0.2, =1.3.0-alpha.0, =0.8.0, =2.10.0, =2.10.0, =4.0.0, =1.0.0, =0.2.93, =0.2.286 and more Source cves: CVE-2022-21208 Source advisory: SNYK:JS-NODEOPCUA-2988723...

safe-transitive-test (0.0.3) potentially affected by unknown CVE via webb3 (0.0.1-security)

webb3 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webb3 and may be impacted: - safe-transitive-test 0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2022-7089...

@sandw/segoro (1.1.7) potentially affected by unknown CVE via suer (0.0.1-security)

suer NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on suer and may be impacted: - @sandw/segoro 1.1.7 Source cves: unknown CVE Source advisory: OSV:MAL-2022-6346...

2-package-manager (1.0.0), @mspguarenteed/common (1.0.4) +3 more potentially affected by unknown CVE via mongoos (0.0.1-security)

mongoos NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mongoos and may be impacted: - 2-package-manager 1.0.0 - @mspguarenteed/common 1.0.4 - @shopappshree/common =1.0.1, =1.0.4 - calvin-2024 1.0.0 - liana-2024 1.0.0 Source...

umair-calc (>=1.0.0, <=1.3.0), umair-calculatorapp (>=1.0.0, <=1.3.0) potentially affected by unknown CVE via isntall (0.0.1-security)

isntall NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on isntall and may be impacted: - umair-calc =1.0.0, =1.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-3964...

@teachoco-dev/cli (>=0.0.6, <=0.0.10), currency_converter_misbah193 (1.0.0) +6 more potentially affected by unknown CVE via chal (0.0.1-security.0)

chal NPM version 0.0.1-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on chal and may be impacted: - @teachoco-dev/cli =0.0.6, =1.0.0, =1.0.3 - rk-quiz-system-project-09 1.0.0 - sakinakhan-todo-items 1.0.0 Source cves: unknown CVE Source...

mg-start-node (>=1.0.1, <=1.0.5) potentially affected by unknown CVE via mongobd (0.0.1-security.0)

mongobd NPM version 0.0.1-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on mongobd and may be impacted: - mg-start-node =1.0.1, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4685...

@aem-vite/import-rewriter (5.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=1.0.0) +191 more potentially affected by CVE-2022-35204 via vite (>=2.0.0-beta.4, <=2.9.12)

vite NPM version =2.0.0-beta.4, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =1.0.16, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.16 and more Source cves: CVE-2022-35204 Source advisory:...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +443 more potentially affected by CVE-2022-35948 via undici (>=5.0.0, <=5.8.1)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-35948 Source advisory: OSV:GHSA-F772-66G8-Q5H3...

@atlantis-lab/actl (>=0.4.0, <=0.4.37), @atlantis-lab/actl-check (>=0.1.0, <=0.4.37) +62 more potentially affected by CVE-2022-35954 via @actions/core (>=1.0.0, <=1.9.0)

@actions/core NPM version =1.0.0, =0.4.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =2.3.0, =0.1.0, =0.0.0-canary.6527017, =0.0.0-d99f4ac.0, =0.0.5, =2.0.0, =3.5.2, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2022-35954 Source advisory: OSV:GHSA-7R3H-M5J6-3Q42...

@abacus-network/helloworld (>=0.2.1-alpha, <=0.2.1-beta2), @alt-research/orbit-sdk-avail (>=0.9.1, <=0.9.11) +108 more potentially affected by CVE-2022-35961 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.2.1-alpha, =0.9.1, =0.19.0-beta.0, =0.1.0-alpha, =0.24.2, =1.0.0-beta.1, =0.6.0-beta.0, =1.1.4-migration-beta.0, =1.0.0-beta.0, =1.0.0-upstream-0.19.0, =1.4.0, =1.5.0-beta.0 and more Source cves: CVE-2022-35961 Source advisory:...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +443 more potentially affected by CVE-2022-35949 via undici (>=5.0.0, <=5.8.1)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-35949 Source advisory: OSV:GHSA-8QR4-XGW6-WMR3...

@a11ywatch/a11ywatch (>=0.0.1, <=0.1.65), @a11ywatch/core (>=0.1.1, <=0.5.12) +32 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.10.0)

apollo-server-core NPM version =3.0.0-html.2, =0.0.1, =0.1.1, =1.0.1, =1.1.22, =1.1.19, =10.0.1, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =0.0.27, =0.0.11, =2.0.4, =4.9.0-beta.2, =9.0.0, =9.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2FVV-QXRQ-7JQ6...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1254 more potentially affected by CVE-2022-31198 via @openzeppelin/contracts (>=4.3.0, <=4.7.1)

@openzeppelin/contracts NPM version =4.3.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =1.0.0, =0.2.0, =4.14.3, =1.0.2, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =3.1.0 and more Source cves: CVE-2022-31198 Source advisory: OSV:GHSA-XRC4-737V-9Q75...

yfmw-utils (1.0.0) potentially affected by unknown CVE via lodash-utils (0.0.1-security)

lodash-utils NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash-utils and may be impacted: - yfmw-utils 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4358...

@aragon/core-contracts (>=0.3.0-alpha, <=3.0.0-alpha), @benddao/bend-downpayment (1.0.0) +21 more potentially affected by CVE-2022-35916 via @openzeppelin/contracts-upgradeable (>=4.6.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =4.6.0, =0.3.0-alpha, =1.2.0, =0.0.2, =0.1.0-rc-1, =0.1.6, =0.1.0, =0.2.0 and more Source cves: CVE-2022-35916 Source advisory: OSV:GHSA-9J3M-G383-29QR...

@centrifuge/ethereum-contracts (>=0.5.0, <=1.0.3-canary.4) potentially affected by CVE-2022-35915 via openzeppelin-eth (2.1.3)

openzeppelin-eth NPM version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on openzeppelin-eth and may be impacted: - @centrifuge/ethereum-contracts =0.5.0, =1.0.3-canary.4 Source cves: CVE-2022-35915 Source advisory: OSV:GHSA-7GRF-83VW-6F5X...