9937 matches found
moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2022-21231 via deep-get-set (1.1.1)
deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2022-21231 Source advisory: OSV:GHSA-MJJJ-6P43-VHHV...
dbaas (>=0.1.6, <=0.5.1) potentially affected by CVE-2022-23080 via directus (9.6.0)
directus NPM version 9.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on directus and may be impacted: - dbaas =0.1.6, =0.5.1 Source cves: CVE-2022-23080 Source advisory: OSV:GHSA-5H75-PVQ4-82C9...
rulex-bin (>=0.1.0, <=0.3.0), rulex-macro (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-31099 via rulex (>=0.1.0, <=0.3.0)
rulex CARGO version =0.1.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2022-31099 Source advisory: OSV:GHSA-V78M-2Q7V-FJQP...
react-native-url-preview (1.1.9), react-native-url-preview-tgp (1.1.9) +1 more potentially affected by CVE-2022-25876 via link-preview-js (>=2.0.4, <=2.1.13)
link-preview-js NPM version =2.0.4, =2.1.4, =2.2.0 Source cves: CVE-2022-25876 Source advisory: SNYK:JS-LINKPREVIEWJS-2933520...
rulex-bin (>=0.1.0, <=0.3.0), rulex-macro (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-31100 via rulex (>=0.1.0, <=0.3.0)
rulex CARGO version =0.1.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2022-31100 Source advisory: OSV:GHSA-8V9W-P43C-R885...
@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2022-31093 via next-auth (3.1.0)
next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2022-31093 Source advisory: OSV:GHSA-G5FM-JP9V-2432...
@chirpy-dev/main-app (>=0.1.0, <=0.3.0), @elastic/docsmobile (>=1.9.9, <=1.12.0) +7 more potentially affected by CVE-2022-31093 via next-auth (>=4.0.0-beta.6, <=4.3.4)
next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.9, =4.0.0-alpha.11, =4.0.0-alpha.1, =4.0.0-alpha.6, =0.31.1, =1.42.1, =0.50.4, =0.78.15-alpha.2 - chirpy-dev 0.1.0 Source cves: CVE-2022-31093 Source advisory: OSV:GHSA-G5FM-JP9V-2432...
@codingsh/harmony-crypto (>=0.1.57, <=0.1.58) potentially affected by unknown CVE via scrypt-shim (0.0.1-security)
scrypt-shim NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on scrypt-shim and may be impacted: - @codingsh/harmony-crypto =0.1.57, =0.1.58 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5972...
@soutech/ali-jssdk (>=0.1.0, <=0.1.3), kr-ui-temp (1.0.24) potentially affected by unknown CVE via vertx (0.0.1-security)
vertx NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on vertx and may be impacted: - @soutech/ali-jssdk =0.1.0, =0.1.3 - kr-ui-temp 1.0.24 Source cves: unknown CVE Source advisory: OSV:MAL-2022-6907...
@intoexpert/into-ui-library (>=0.1.465, <=0.1.763), @qubitronlabs/crypto-wallet (>=0.1.2, <=0.1.3) +15 more potentially affected by unknown CVE via fortawesome (0.0.1-security)
fortawesome NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fortawesome and may be impacted: - @intoexpert/into-ui-library =0.1.465, =0.1.2, =0.1.39, =0.1.0, =0.1.1, =1.0.0, =2025.16.1, =1.1.50, =0.0.1, =0.0.9 - stone-design...
@bizdoc/ping-one (>=0.0.1, <=0.1.2) potentially affected by unknown CVE via pingone-angular-sdk (0.0.1-security)
pingone-angular-sdk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on pingone-angular-sdk and may be impacted: - @bizdoc/ping-one =0.0.1, =0.1.2 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5339...
twitch-styles1 (1.23.3) potentially affected by unknown CVE via twitch-core-ui (0.0.1-security.0)
twitch-core-ui NPM version 0.0.1-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on twitch-core-ui and may be impacted: - twitch-styles1 1.23.3 Source cves: unknown CVE Source advisory: OSV:MAL-2022-6697...
@atlaskit/editor-plugin-media-editing (>=0.1.0, <=1.2.1) potentially affected by unknown CVE via react-intl-next (0.0.1-security)
react-intl-next NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-intl-next and may be impacted: - @atlaskit/editor-plugin-media-editing =0.1.0, =1.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5650...
cjs-forms (>=0.0.1, <=1.0.0), output-customization (1.0.0) potentially affected by unknown CVE via @ve-private/test-helpers (0.0.1-security.9)
@ve-private/test-helpers NPM version 0.0.1-security.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ve-private/test-helpers and may be impacted: - cjs-forms =0.0.1, =1.0.0 - output-customization 1.0.0 Source cves: unknown CVE Source advisory:...
@mpjovanovich/dotmark (>=0.0.1, <=1.0.2) potentially affected by unknown CVE via markedjs (0.0.1-security)
markedjs NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on markedjs and may be impacted: - @mpjovanovich/dotmark =0.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4484...
be-iq_shared-styled-components (0.0.26) potentially affected by unknown CVE via plugin-transform-react-jsx (0.0.1-security)
plugin-transform-react-jsx NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-transform-react-jsx and may be impacted: - be-iqshared-styled-components 0.0.26 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5373...
@bobliao/candle-view (>=0.1.4, <=0.3.8) potentially affected by unknown CVE via plugin-bugfix-v8-spread-parameters-in-optional-chaining (0.0.1-security)
plugin-bugfix-v8-spread-parameters-in-optional-chaining NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-bugfix-v8-spread-parameters-in-optional-chaining and may be impacted: - @bobliao/candle-view =0.1.4, =0.3.8 Source...
@eqproject/eqp-dashboard (>=2.0.3, <=2.5.2), @eqproject/eqp-datetimerangepicker (>=0.0.1, <=3.0.10) +7 more potentially affected by unknown CVE via ngx-translate (0.0.1-security)
ngx-translate NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ngx-translate and may be impacted: - @eqproject/eqp-dashboard =2.0.3, =0.0.1, =2.0.10, =0.0.1, =18.0.0-beta.2 - kms-ngx-ui 16.12.30 - mat-table-ext 0.0.0 -...
magnirepudiandae (>=1.0.0, <=1.2.0), temporibusbeatae (>=1.0.0, <=1.3.1) +2 more potentially affected by unknown CVE via metamask (0.0.1-security)
metamask NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on metamask and may be impacted: - magnirepudiandae =1.0.0, =1.0.0, =1.1.2, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4571...
@alauda/custom-webpack (>=4.0.0, <=4.4.0), @glow-app/glow-client (0.3.0) +43 more potentially affected by CVE-2022-33987 via got (>=12.0.0, <=12.0.4)
got NPM version =12.0.0, =4.0.0, =1.0.1, =6.0.0, =10.1.2, =9.1.3, =4.0.5, =2.0.0, =1.0.0, =1.7.0, =0.0.0, =2.1.0, =1.1.0, =1.10.0, =2.5.0, =2.5.1 and more Source cves: CVE-2022-33987 Source advisory: OSV:GHSA-PFRX-2Q88-QQ97...