03_class (>=1.0.0, <=1.0.1), @2bad/bitrix (>=2.4.0, <=2.5.1) +700 more potentially affected by CVE-2022-33987 via got (>=11.0.0, <=11.8.3)

got NPM version =11.0.0, =1.0.0, =2.4.0, =0.0.14-canary.0, =4.1.0, =2.3.0, =0.0.0-development, =1.10.1, =0.4.1, =0.10.48, =0.10.0, =0.10.4 and more Source cves: CVE-2022-33987 Source advisory: OSV:GHSA-PFRX-2Q88-QQ97...

@alma-oss/vite-plugin-spirit-icons (>=1.1.0, <=2.1.0), @camptocamp/closure-util (>=1.23.0, <=1.27.0) +132 more potentially affected by CVE-2022-21213 via mout (>=1.0.0, <=1.2.3)

mout NPM version =1.0.0, =1.1.0, =1.23.0, =0.12.2, =1.36.0, =0.0.1, =1.0.0, =0.1.1, =0.1.0, =2.94.2, =0.3.0, =0.3.6 and more Source cves: CVE-2022-21213 Source advisory: OSV:GHSA-VVV8-XW5F-3F88...

pg-native (>=1.0.0, <=1.7.2) potentially affected by CVE-2022-25852 via libpq (>=1.0.0, <=1.4.1)

libpq NPM version =1.0.0, =1.0.0, =1.7.2 Source cves: CVE-2022-25852 Source advisory: OSV:GHSA-J32J-2HXV-RQF7...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +126 more potentially affected by CVE-2022-25345 via @discordjs/opus (>=0.1.0, <=0.7.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =4.0.0-dev.1637284165.37d3883 - @dishost/music 0.0.0 and more Source cves: CVE-2022-25345 Source advisory: OSV:GHSA-RVGF-69J7-XH78...

@abeai/job-consumer (>=3.5.0, <=3.7.0), @abeai/node-logging (>=7.5.0, <=7.10.0) +15 more potentially affected by CVE-2022-25852 via pg-native (3.0.0)

pg-native NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pg-native and may be impacted: - @abeai/job-consumer =3.5.0, =7.5.0, =6.3.0, =1.1.1, =0.0.1, =10.0.0, =10.0.0, =1.0.0, =1.0.0, =1.3.1, =1.0.0-alpha, =2.0.4, =3.0.5 and more...

@mohamed.abdelall/omni-backend (>=1.0.0, <=1.1.53), generator-rest (0.2.0) +7 more potentially affected by CVE-2022-25871 via querymen (2.1.4)

querymen NPM version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on querymen and may be impacted: - @mohamed.abdelall/omni-backend =1.0.0, =0.0.1, =1.0.0, =1.0.0, =0.1.0, =1.0.14, =1.0.6, =1.4.10 - vulnogram 0.1.0-rc1 Source cves: CVE-2022-25871...

@alexanderniebuhr/eslint-config (>=1.3.0, <=1.4.0), @alexanderniebuhr/style (>=1.1.0, <=1.3.0) +119 more potentially affected by CVE-2022-25875 via svelte (>=3.1.0, <=3.48.0)

svelte NPM version =3.1.0, =1.3.0, =1.1.0, =1.3.0, =0.7.7, =10.0.0, =7.1.4, =21.0.4, =8.0.4, =2.0.4, =1.0.1, =6.0.4, =5.0.2, =4.0.2, =1.0.1, =5.0.8, =12.0.48 and more Source cves: CVE-2022-25875 Source advisory: SNYK:JS-SVELTE-2931080...

@backstage/plugin-techdocs-backend (>=0.0.0-nightly-2021111822616, <=0.14.1), @backstage/techdocs-common (>=0.11.13, <=0.11.15) +1 more potentially affected by unknown CVE via @backstage/plugin-techdocs-node (>=1.0.0, <=1.1.1-next.1)

@backstage/plugin-techdocs-node NPM version =1.0.0, =0.0.0-nightly-2021111822616, =0.11.13, =0.0.0-nightly-2021111822616, =0.8.16 Source cves: unknown CVE Source advisory: OSV:GHSA-4JQC-JVH2-PXG9...

@backstage/plugin-catalog (>=0.0.0-nightly-202011242419, <=0.2.9), @backstage/plugin-techdocs (>=0.0.0-nightly-202011132190, <=0.7.0) +2 more potentially affected by unknown CVE via @backstage/techdocs-common (>=0.0.0-nightly-20220923026, <=0.11.15)

@backstage/techdocs-common NPM version =0.0.0-nightly-20220923026, =0.0.0-nightly-202011242419, =0.0.0-nightly-202011132190, =0.0.0-nightly-202011132190, =0.0.0-nightly-2021102622333, =0.8.16 Source cves: unknown CVE Source advisory: OSV:GHSA-4JQC-JVH2-PXG9...

@3xanax/youtube-stream-status (>=1.0.0, <=1.0.3), @about7sharks/get-articles (>=0.0.24, <=0.0.39) +682 more potentially affected by CVE-2022-32210 via undici (>=4.9.3, <=5.4.0)

undici NPM version =4.9.3, =1.0.0, =0.0.24, =0.0.0, =0.7.1, =1.0.0, =1.0.0-beta.15, =1.0.0, =1.0.0, =0.0.1, =0.0.2, =2.9.7, =0.1.1, =1.0.0, =1.4.0 and more Source cves: CVE-2022-32210 Source advisory: OSV:GHSA-PGW7-WX7W-2W33...

files (>=1.0.0, <=2.2.3), portal (>=2.0.0, <=3.0.1) potentially affected by CVE-2022-31053 via biscuit-auth (1.2.0)

biscuit-auth CARGO version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on biscuit-auth and may be impacted: - files =1.0.0, =2.0.0, =3.0.1 Source cves: CVE-2022-31053 Source advisory: OSV:GHSA-75RW-34Q6-72CR...

tremor-language-server (>=0.7.3, <=0.7.4) potentially affected by CVE-2021-45701 +1 more via tremor-script (0.7.2)

tremor-script CARGO version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on tremor-script and may be impacted: - tremor-language-server =0.7.3, =0.7.4 Source cves: CVE-2021-45701, CVE-2021-45702 Source advisory: OSV:GHSA-3PP4-64MP-9CG9...

buster (0.1.0), glog (0.1.0) +4 more potentially affected by unknown CVE via thread_local (1.0.1)

threadlocal CARGO version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on threadlocal and may be impacted: - buster 0.1.0 - glog 0.1.0 - simconnect 0.1.4 - skia-bindings =0.37.0, =0.37.0, =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory:...

bencode (>=0.1.1, <=0.1.8), bincode (>=0.0.3, <=0.0.9) +49 more potentially affected by unknown CVE via rustc-serialize (>=0.1.5, <=0.3.22)

rustc-serialize CARGO version =0.1.5, =0.1.1, =0.0.3, =0.1.12, =0.1.2, =0.5.3, =0.5.2, =0.5.1, =0.1.4, =0.1.8, =0.6.41, =0.6.42 - docoptmacros 0.6.42 - email 0.0.9 - envelope 0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2226-4V3C-CFF8...

abstract-boot (>=0.2.0-beta.4, <=0.2.0-beta.7), ace-test-lib (0.1.0) +711 more potentially affected by unknown CVE via rust-crypto (0.2.36)

rust-crypto CARGO version 0.2.36 is affected by a known vulnerability. The following packages have a transitive dependency on rust-crypto and may be impacted: - abstract-boot =0.2.0-beta.4, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0, =0.8.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more...

alexcrichton-cranelift-native (>=0.52.0, <=0.53.0), alexcrichton-cranelift-simplejit (0.53.0) +153 more potentially affected by CVE-2021-45687 via raw-cpuid (>=3.1.0, <=8.1.2)

raw-cpuid CARGO version =3.1.0, =0.52.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.26.1, =0.6.2, =0.5.0, =0.2.0, =0.5.1 and more Source cves: CVE-2021-45687 Source advisory: OSV:GHSA-JF5H-CF95-W759...

acid-store (>=0.8.0, <=0.11.2), alsa (0.5.1) +13 more potentially affected by CVE-2021-45707 via nix (0.21.0)

nix CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on nix and may be impacted: - acid-store =0.8.0, =0.1.4, =0.1.4, =0.1.4, =4.0.0, =0.1.0-alpha.1, =0.1.2, =0.10.0, =1.4.10, =0.13.0-alpha.1, =0.0.8, =0.0.13 Source cves: CVE-2021-4570...

acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1252 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-WGRG-5H56-JG27...

aspiesolutions_core (>=0.0.1-alpha+3, <=0.0.1-alpha.11), directory-tree (0.0.1) +33 more potentially affected by unknown CVE via neon (>=0.8.3, <=0.9.1)

neon CARGO version =0.8.3, =0.0.1-alpha+3, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.9.0, =0.9.1, =0.1.0, =0.1.0, =0.1.0, =0.10.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8MJ7-WXMC-F424...

boringdb (>=0.2.0, <=0.3.10), bp7 (>=0.7.0, <=0.8.1) +19 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)

nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - boringdb =0.2.0, =0.7.0, =0.13.0, =0.4.0, =0.10.0, =0.3.0, =0.3.14, =0.4.2, =0.4.1, =0.6.1, =0.1.0, =0.1.7, =0.2.1 and more Source cves:...