deno (>=0.35.0, <=1.3.0), diss (>=0.0.1, <=0.2.10) +8 more potentially affected by unknown CVE via pty (>=0.1.6, <=0.2.2)

pty CARGO version =0.1.6, =0.35.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.0, =0.1.0 - webterm-rs 0.1.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0015...

@phoenix-plugin-registry/hirse.ungit (0.8.3), hirse.ungit (>=0.4.1, <=0.8.3) potentially affected by CVE-2022-25766 via ungit (>=1.1.22, <=1.5.10)

ungit NPM version =1.1.22, =0.4.1, =0.8.3 Source cves: CVE-2022-25766 Source advisory: OSV:GHSA-HF8C-XR89-VFM5...

@aqsc/form-making (>=0.0.22, <=0.0.39), @ariesate/are-components (1.0.1) +86 more potentially affected by CVE-2022-25646 via x-data-spreadsheet (>=1.1.4, <=1.1.9)

x-data-spreadsheet NPM version =1.1.4, =0.0.22, =1.1.0, =1.1.5, =0.0.1-alpha.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1, =1.0.4 and more Source cves: CVE-2022-25646 Source advisory: SNYK:JS-XDATASPREADSHEET-2430381...

@arkecosystem/core (>=3.1.0, <=3.2.0), @arkecosystem/core-forger (>=3.1.0, <=3.2.0) +35 more potentially affected by CVE-2022-24773 via node-forge (>=1.0.0, <=1.2.1)

node-forge NPM version =1.0.0, =3.1.0, =3.1.0, =3.1.0, =1.1.26, =1.0.0-jwt-supply-chain.62c7e930.0, =1.0.0 - @hyperledger/cactus-example-carbon-accounting-backend 1.0.0 - @hyperledger/cactus-example-supply-chain-backend 1.0.0 - @hyperledger/cactus-plugin-htlc-coordinator-besu 1.0.0 -...

@arkecosystem/core (>=3.1.0, <=3.2.0), @arkecosystem/core-forger (>=3.1.0, <=3.2.0) +35 more potentially affected by CVE-2022-24772 via node-forge (>=1.0.0, <=1.2.1)

node-forge NPM version =1.0.0, =3.1.0, =3.1.0, =3.1.0, =1.1.26, =1.0.0-jwt-supply-chain.62c7e930.0, =1.0.0 - @hyperledger/cactus-example-carbon-accounting-backend 1.0.0 - @hyperledger/cactus-example-supply-chain-backend 1.0.0 - @hyperledger/cactus-plugin-htlc-coordinator-besu 1.0.0 -...

@arkecosystem/core (>=3.1.0, <=3.2.0), @arkecosystem/core-forger (>=3.1.0, <=3.2.0) +35 more potentially affected by CVE-2022-24771 via node-forge (>=1.0.0, <=1.2.1)

node-forge NPM version =1.0.0, =3.1.0, =3.1.0, =3.1.0, =1.1.26, =1.0.0-jwt-supply-chain.62c7e930.0, =1.0.0 - @hyperledger/cactus-example-carbon-accounting-backend 1.0.0 - @hyperledger/cactus-example-supply-chain-backend 1.0.0 - @hyperledger/cactus-plugin-htlc-coordinator-besu 1.0.0 -...

@chainsafe/lodestar (>=0.28.2-dev.9, <=0.29.3-dev.5), @chainsafe/lodestar-cli (>=0.28.2-dev.0, <=0.28.2-dev.18) potentially affected by CVE-2022-24759 via @chainsafe/libp2p-noise (4.1.0)

@chainsafe/libp2p-noise NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @chainsafe/libp2p-noise and may be impacted: - @chainsafe/lodestar =0.28.2-dev.9, =0.28.2-dev.0, =0.28.2-dev.18 Source cves: CVE-2022-24759 Source advisory:...

@dcdn/client (0.0.1), @dcdn/cloudflare-worker (0.0.1) +5 more potentially affected by CVE-2022-24759 via @chainsafe/libp2p-noise (>=5.0.0, <=5.0.2)

@chainsafe/libp2p-noise NPM version =5.0.0, =1.85.0-next.40, =1.85.0-next.40, =1.85.0-next.40, =1.89.0-next.0 Source cves: CVE-2022-24759 Source advisory: OSV:GHSA-J3FF-XP6C-6GCC...

@backstage/plugin-techdocs (>=0.0.0-nightly-20220504024625, <=1.1.1-next.2), @eui/deps-base (>=13.1.5-snapshot-1652433005121, <=14.0.4) potentially affected by unknown CVE via event-source-polyfill (1.0.26)

event-source-polyfill NPM version 1.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on event-source-polyfill and may be impacted: - @backstage/plugin-techdocs =0.0.0-nightly-20220504024625, =13.1.5-snapshot-1652433005121, =14.0.4 Source cves: unknown...

sails-hook-api-version-accept (0.1.0), sails-hook-route (>=0.0.1, <=0.0.4) potentially affected by CVE-2021-44908 via sails (>=1.0.1, <=1.0.3-2)

sails NPM version =1.0.1, =0.0.1, =0.0.4 Source cves: CVE-2021-44908 Source advisory: OSV:GHSA-8V3J-JFG3-V3FV...

10-24-dars (1.0.0), @alephdata/react-ftm (>=1.9.1, <=2.4.0-alpha.2) +206 more potentially affected by CVE-2021-23632 via git (0.1.5)

git NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on git and may be impacted: - 10-24-dars 1.0.0 - @alephdata/react-ftm =1.9.1, =1.5.2, =0.4.120, =1.0.0-alpha.0, =7.7.1, =1.1.7, =1.0.1, =0.13.1, =1.12.2, =1.0.0, =2.1.1 and more Source...

@kamilic-pkg/toolbox (>=1.0.0, <=1.1.0), @q7/cli (>=0.0.2, <=0.2.0) +8 more potentially affected by CVE-2022-0748 via post-loader (>=1.1.2, <=2.0.0)

post-loader NPM version =1.1.2, =1.0.0, =0.0.2, =0.0.2, =0.1.0, =0.0.4, =0.0.1, =2.6.21, =0.0.2, =0.0.4 Source cves: CVE-2022-0748 Source advisory: OSV:GHSA-66WW-999Q-MFFQ...

@cisdi/code-editor (>=3.0.0, <=3.3.10), @cisdi/ui-engine-charts (>=3.2.0, <=3.2.4) +31 more potentially affected by CVE-2021-23771 via notevil (>=1.0.0, <=1.3.3)

notevil NPM version =1.0.0, =3.0.0, =3.2.0, =2.9.0, =1.0.1, =1.0.0, =1.0.0, =0.10.0, =1.5.24, =5.0.0, =3.0.0, =5.2.0, =0.0.1, =0.0.50 and more Source cves: CVE-2021-23771 Source advisory: OSV:GHSA-8G4M-CJM2-96WQ...

@superdev-official/buffet-angular (1.0.11), apps-b-builder (>=0.1.0, <=0.4.3) +9 more potentially affected by CVE-2022-25760 via accesslog (0.0.2)

accesslog NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on accesslog and may be impacted: - @superdev-official/buffet-angular 1.0.11 - apps-b-builder =0.1.0, =0.6.0, =3.1.0, =0.1.0, =2.0.0, =0.4.0, =0.1.0, =0.4.1, =0.5.0 Source cves:...

0.8.18-p11 (0.8.18-p12), 0.extends.wechat (>=1.0.51, <=1.0.65) +10286 more potentially affected by CVE-2021-44906 via minimist (>=1.0.0, <=1.2.5)

minimist NPM version =1.0.0, =1.0.51, =2.3.0, =0.0.1, =1.0.0, =1.0.0, =0.0.2, =0.3.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.14 and more Source cves: CVE-2021-44906 Source advisory: OSV:GHSA-XVCH-5GV4-984H...

01-numacert (>=1.0.0, <=3.0.0), 06-tekbooks (0.1.0) +46672 more potentially affected by CVE-2021-44906 via minimist (>=0.0.2, <=0.2.1)

minimist NPM version =0.0.2, =1.0.0, =0.3.0, =0.0.15, =1.0.4, =1.0.0, =1.0.0, =1.0.1 - 20190403-utils 1.0.0 - 20231122-npm 1.0.0 and more Source cves: CVE-2021-44906 Source advisory: OSV:GHSA-XVCH-5GV4-984H...

@agoric/cosmic-swingset (>=0.15.0, <=0.20.1), @agoric/swing-store-lmdb (>=0.2.0, <=0.3.6-dev.2) +42 more potentially affected by CVE-2022-21164 via node-lmdb (>=0.3.0, <=0.9.6)

node-lmdb NPM version =0.3.0, =0.15.0, =0.2.0, =0.0.7, =0.0.1, =0.2.0, =1.3.0, =0.1.1, =0.1.4, =0.6.2, =0.0.1, =0.1.0, =0.82.0, =0.0.7, =0.0.2, =0.4.2 and more Source cves: CVE-2022-21164 Source advisory: OSV:GHSA-32J9-6QQM-MQ9G...

@douglara/n8n-nodes-discord (>=0.5.4, <=0.5.5), @dxos/gravity-agent (>=0.1.19, <=0.3.5-next.5910692) +42 more potentially affected by unknown CVE via node-ipc (11.1.0)

node-ipc NPM version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-ipc and may be impacted: - @douglara/n8n-nodes-discord =0.5.4, =0.1.19, =1.0.2, =0.5.2, =0.5.4-1, =0.5.0, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =0.5.0, =0.1.0, =0.1.2 -...

ferris-rich-input (0.0.1) potentially affected by CVE-2022-24728 +1 more via ckeditor4 (4.14.0)

ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2022-24728, CVE-2022-24729 Source advisory: OSV:GHSA-4FC4-4P5G-6W89...

roaring-landmask (0.4.0) potentially affected by CVE-2022-0778 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-0778 Source advisory: OSV:GHSA-X3MH-JVJW-3XWX...