@loopspeed/epubjs-rn (>=0.2.38, <=0.2.77), @muriloneo/epubjs-rn (0.2.37) +8 more potentially affected by CVE-2021-33040 via epubjs (>=0.2.21, <=0.3.88)

epubjs NPM version =0.2.21, =0.2.38, =0.3.25, =0.2.33, =0.2.5, =0.1.0, =0.0.9, =0.2.37, =0.13.1, =0.13.2 - unext-epub-viewer 1.0.0 Source cves: CVE-2021-33040 Source advisory: OSV:GHSA-C6RP-XVQV-MWMF...

10chars-test (>=1.0.4, <=1.0.34), 12g (>=0.0.16, <=1.0.1) +24238 more potentially affected by CVE-2022-0144 via shelljs (>=0.0.2, <=0.8.4)

shelljs NPM version =0.0.2, =1.0.4, =0.0.16, =1.3.0, =1.0.0, =1.0.2, =1.0.0, =0.0.3, =1.0.0, =1.0.3, =2.11.4, =2.0.0, =2.11.4, =2.13.7 and more Source cves: CVE-2022-0144 Source advisory: OSV:GHSA-4RQ4-32RV-6WP6...

@adobe/pdftools-extract-node-sdk (>=0.5.0-beta, <=0.6.0-beta), @adrian.insua/release-notes-generator (>=1.0.0, <=2.6.2) +136 more potentially affected by CVE-2022-21704 via log4js (>=6.0.0, <=6.3.0)

log4js NPM version =6.0.0, =0.5.0-beta, =1.0.0, =0.1.3, =0.0.1-beta.0, =0.0.1-beta.0, =4.0.2, =0.0.1, =1.0.4, =8.0.1, =0.0.46, =0.1.7 and more Source cves: CVE-2022-21704 Source advisory: OSV:GHSA-82V2-MX6X-WQ7Q...

3loc (>=0.1.0, <=0.4.0), 3scale (0.2.0) +362 more potentially affected by CVE-2022-21144 via libxmljs (>=0.4.1, <=0.19.7)

libxmljs NPM version =0.4.1, =0.1.0, =4.0.1, =0.0.5, =0.1.0, =1.0.0, =0.0.0-development, =0.0.3, =1.3.0, =6.3.4, =0.2.0, =1.0.3-wmf.0, =0.1.2, =1.1.3-alpha.0, =1.1.5-wmf.0 - @leonardodino/freshbooks 2.0.0 and more Source cves: CVE-2022-21144 Source advisory: SNYK:JS-LIBXMLJS-2348756...

@alma-oss/vite-plugin-spirit-icons (>=1.1.0, <=2.1.0), @camptocamp/closure-util (>=1.23.0, <=1.27.0) +132 more potentially affected by CVE-2020-7792 +1 more via mout (>=1.0.0, <=1.2.3)

mout NPM version =1.0.0, =1.1.0, =1.23.0, =0.12.2, =1.36.0, =0.0.1, =1.0.0, =0.1.1, =0.1.0, =2.94.2, =0.3.0, =0.3.6 and more Source cves: CVE-2020-7792, CVE-2022-21213 Source advisory: SNYK:JS-MOUT-2342654...

bmoor-cache (>=0.3.0, <=0.6.0), bmoor-comm (>=0.0.1, <=0.6.0) +7 more potentially affected by CVE-2020-7736 +1 more via bmoor (>=0.0.5, <=0.9.8)

bmoor NPM version =0.0.5, =0.3.0, =0.0.1, =0.5.0, =0.2.0, =0.1.0, =0.0.4, =0.6.0, =0.6.43 Source cves: CVE-2020-7736, CVE-2021-23558 Source advisory: SNYK:JS-BMOOR-2342622...

odbc-avro (>=0.1.0, <=0.2.1), odbc-iter (>=0.1.0, <=0.2.7) +6 more potentially affected by unknown CVE via odbc (>=0.9.17, <=0.16.1)

odbc CARGO version =0.9.17, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.1.1 - unidbpgsql 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0039...

unidb (>=0.2.1, <=0.3.5), unidb_odbc (>=0.1.0, <=0.1.1) +1 more potentially affected by unknown CVE via r2d2_odbc (0.5.0)

r2d2odbc CARGO version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on r2d2odbc and may be impacted: - unidb =0.2.1, =0.1.0, =0.1.1 - unidbpgsql 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0036...

@1023-ventures/serra-common (>=0.3.31, <=0.3.33), @2600hz/sds-react-native-components (>=0.1.0, <=1.8.1) +2399 more potentially affected by CVE-2021-24044 via hermes-engine (>=0.0.0, <=0.9.0)

hermes-engine NPM version =0.0.0, =0.3.31, =0.1.0, =0.6.0-alpha.1, =1.0.0, =1.0.1, =0.0.1, =0.0.1, =3.0.0, =0.1.0, =10.2.0-alpha.0, =12.0.3-alpha.1, =0.0.1, =1.0.4, =1.0.7 and more Source cves: CVE-2021-24044 Source advisory: OSV:GHSA-7MHC-PRGV-R3Q4...

10chars-test (>=1.0.4, <=1.0.34), 12g (>=0.0.16, <=1.0.1) +24238 more potentially affected by unknown CVE via shelljs (>=0.0.2, <=0.8.4)

shelljs NPM version =0.0.2, =1.0.4, =0.0.16, =1.3.0, =1.0.0, =1.0.2, =1.0.0, =0.0.3, =1.0.0, =1.0.3, =2.11.4, =2.0.0, =2.11.4, =2.13.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-64G7-MVW6-V9QJ...

@arcanis/sherlock (>=1.0.0, <=1.0.16), @grafana/data (>=8.3.0-beta.1, <=8.4.0-pre-fde26b0bd9) +42 more potentially affected by CVE-2022-21681 via marked (>=4.0.0, <=4.0.9)

marked NPM version =4.0.0, =1.0.0, =8.3.0-beta.1, =8.3.0-beta.1, =8.3.0-beta.1, =8.3.0-beta.1, =0.4.0, =0.0.133, =0.2.0, =0.0.49, =3.2.0, =1.0.4, =1.0.0-test, =0.1.6, =0.1.6, =2.0.1 and more Source cves: CVE-2022-21681 Source advisory: OSV:GHSA-5V2H-R2CX-5XGJ...

afterglow (>=0.1.0, <=0.3.0), aiid_js (0.0.1) +76 more potentially affected by unknown CVE via bumpalo (>=2.6.0, <=3.6.1)

bumpalo CARGO version =2.6.0, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.1.3, =3.0.0, =4.0.2, =0.114.0, =0.114.0, =0.1.0, =0.1.0, =0.1.1, =0.1.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0078...

acme-dns-rust (>=1.0.0, <=1.0.6), acme2-slim (0.2.0) +163 more potentially affected by unknown CVE via warp (>=0.1.23, <=0.3.1)

warp CARGO version =0.1.23, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =1.0.0, =0.14.0, =0.4.0, =0.1.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0082...

@3kles/3kles-socketio (>=1.0.0, <=1.0.5), @livejack/broker (1.3.4) +22 more potentially affected by CVE-2022-21676 via engine.io (6.0.1)

engine.io NPM version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on engine.io and may be impacted: - @3kles/3kles-socketio =1.0.0, =0.1.0, =8.1.2, =1.4.0, =0.4.11, =0.4.0, =0.4.0, =0.4.10, =0.4.11, =0.4.5-beta4, =5.0.0, =1.0.0-alpha.1,...

0.edsql (>=1.0.49, <=1.0.50), @codious/core (>=1.2.15, <=1.2.18) +99 more potentially affected by CVE-2022-21676 via engine.io (>=5.0.0, <=5.1.1)

engine.io NPM version =5.0.0, =1.0.49, =1.2.15, =0.5.3, =0.6.3, =0.6.3, =0.6.3, =0.6.3, =0.6.5, =0.6.4, =0.6.3, =0.6.3, =8.0.0, =2.0.0, =0.5.1-feat-1122.01a4d64d.130, =0.5.1-feat-1122.01a4d64d.130, =1.0.0-rc.3 and more Source cves: CVE-2022-21676 Source advisory: OSV:GHSA-273R-MGR4-V34F...

@ahora/socket.io (3.0.3), @azteam/express (>=1.2.33, <=1.2.142) +22 more potentially affected by CVE-2022-21676 via engine.io (>=4.0.6, <=4.1.1)

engine.io NPM version =4.0.6, =1.2.33, =1.12.0, =3.0.0, =2.0.0-beta.6, =2.3.0-beta.20, =1.1.3, =2.2.26-3, =2.0.0, =0.9.301, =1.0.0, =0.4.0, =0.4.3 and more Source cves: CVE-2022-21676 Source advisory: OSV:GHSA-273R-MGR4-V34F...

@biconomy/hyphen-contracts (1.0.4), @bobanetwork/contracts (0.0.2) +17 more potentially affected by unknown CVE via @openzeppelin/contracts-upgradeable (>=4.3.0, <=4.4.1)

@openzeppelin/contracts-upgradeable NPM version =4.3.0, =0.0.1, =0.5.0, =3.4.0, =1.5.0, =1.4.0, =1.5.0, =1.4.0, =1.0.0-main.334593a7.46, =2.4.0, =2.0.0, =1.0.0-rc3, =2.0.2, =3.0.0-beta, =3.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M6W8-FQ7V-PH4M...

4337-snap (>=0.1.0, <=0.1.1), @1inch/limit-order-protocol-contract (>=4.0.0-prerelease, <=4.3.3) +223 more potentially affected by unknown CVE via @openzeppelin/contracts (>=4.3.0, <=4.4.1)

@openzeppelin/contracts NPM version =4.3.0, =0.1.0, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =0.1.0, =0.9.5, =1.0.0, =2.0.9, =0.0.1, =0.0.1, =1.0.0, =0.0.28, =0.4.1, =0.7.5 - @biconomy-devx/paymasters 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M6W8-FQ7V-PH4M...

@agoric/cosmic-swingset (>=0.10.8-dev.0, <=0.18.0), @agoric/ertp (>=0.1.4, <=0.4.1) +18 more potentially affected by CVE-2021-23543 via realms-shim (1.2.2)

realms-shim NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on realms-shim and may be impacted: - @agoric/cosmic-swingset =0.10.8-dev.0, =0.1.4, =0.0.1, =0.1.1, =0.0.1, =0.0.20, =0.1.0, =2.0.1, =1.0.0, =0.0.1, =0.4.1, =0.0.6,...

20190403-utils (1.0.0), @alex_xu/xdb (0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (1.0.0)

extend2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils 1.0.0 - @alexxu/xdb 0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0...