@sobotics/caching (1.1.1) potentially affected by CVE-2020-11611 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2020-11611 Source advisory: OSV:GHSA-C6C4-JMQX-3R33...

@sobotics/caching (1.1.1) potentially affected by CVE-2015-9544 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2015-9544 Source advisory: OSV:GHSA-VRC7-6G8W-JH56...

@egomobile/http-server (>=0.18.0, <=0.23.0), @lyra-network/openapi-dev-tool (>=9.0.0, <=9.5.0) +1 more potentially affected by unknown CVE via swagger-ui-dist (>=4.0.0-beta.2, <=4.1.2)

swagger-ui-dist NPM version =4.0.0-beta.2, =0.18.0, =9.0.0, =1.3.0-moderate-vulnerability, =24.7.0-moderate-vulnerability Source cves: unknown CVE Source advisory: OSV:GHSA-QRMM-W75W-3WPX...

@goodrequest/express-joi-to-swagger (0.2.0), swagger-editor (>=4.0.0-beta.0, <=4.0.0-beta.2) potentially affected by unknown CVE via swagger-ui (>=4.0.0-beta.2, <=4.1.0)

swagger-ui NPM version =4.0.0-beta.2, =4.0.0-beta.0, =4.0.0-beta.2 Source cves: unknown CVE Source advisory: OSV:GHSA-QRMM-W75W-3WPX...

@superdev-official/buffet-angular (1.0.11), apps-b-builder (>=0.1.0, <=0.4.3) +9 more potentially affected by CVE-2022-25760 via accesslog (0.0.2)

accesslog NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on accesslog and may be impacted: - @superdev-official/buffet-angular 1.0.11 - apps-b-builder =0.1.0, =0.6.0, =3.1.0, =0.1.0, =2.0.0, =0.4.0, =0.1.0, =0.4.1, =0.5.0 Source cves:...

02url-querystring-http (>=1.0.1, <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6) +12541 more potentially affected by CVE-2022-24434 via dicer (>=0.1.2, <=0.3.1)

dicer NPM version =0.1.2, =1.0.1, =1.0.5, =1.0.0, =1.0.0, =1.0.0, =4.11.0, =1.0.0, =3.10.1, =3.11.0 and more Source cves: CVE-2022-24434 Source advisory: SNYK:JS-DICER-2311764...

@agoric/cosmic-swingset (>=0.10.8-dev.0, <=0.18.0), @agoric/ertp (>=0.1.4, <=0.4.1) +18 more potentially affected by CVE-2021-23543 via realms-shim (1.2.2)

realms-shim NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on realms-shim and may be impacted: - @agoric/cosmic-swingset =0.10.8-dev.0, =0.1.4, =0.0.1, =0.1.1, =0.0.1, =0.0.20, =0.1.0, =2.0.1, =1.0.0, =0.0.1, =0.4.1, =0.0.6,...

@agoric/cosmic-swingset (>=0.10.8-dev.0, <=0.18.0), @agoric/ertp (>=0.1.4, <=0.4.1) +18 more potentially affected by CVE-2021-23594 via realms-shim (1.2.2)

realms-shim NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on realms-shim and may be impacted: - @agoric/cosmic-swingset =0.10.8-dev.0, =0.1.4, =0.0.1, =0.1.1, =0.0.1, =0.0.20, =0.1.0, =2.0.1, =1.0.0, =0.0.1, =0.4.1, =0.0.6,...

@accordproject/cicero-cli (>=0.3.4, <=0.23.0-alpha.1), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.0-alpha.1) +151 more potentially affected by CVE-2021-23555 via vm2 (>=3.0.0, <=3.9.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2018.7.11-0, =2018.8.5-0, =2018.8.14-0 - @appium/execute-driver-plugin...

a-gpt (>=0.1.0, <=0.4.0), a2lfile (0.8.0) +812 more potentially affected by unknown CVE via encoding (0.2.33)

encoding CARGO version 0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on encoding and may be impacted: - a-gpt =0.1.0, =0.1.7, =0.5.0, =0.1.1, =0.8.0-alpha.2, =0.3.0-alpha.1, =0.1.3, =0.1.0, =0.3.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1,...

@backstage/plugin-auth-backend (>=0.0.0-nightly-20240122021809, <=0.0.0-nightly-20240928023157), @backstage/plugin-auth-backend-module-aws-alb-provider (>=0.0.0-nightly-20240126021148, <=0.0.0-nightly-20260829022506) +4 more potentially affected by CVE-2021-43776 via @backstage/plugin-auth-backend (>=0.0.0-nightly-20240929023448, <=0.0.0-nightly-20260829022506)

@backstage/plugin-auth-backend NPM version =0.0.0-nightly-20240929023448, =0.0.0-nightly-20240122021809, =0.0.0-nightly-20240126021148, =0.0.0-nightly-20240122021809, =0.0.0-nightly-202111222339, =0.0.0-nightly-2021102522541, =0.0.0-nightly-20220203021748, =0.0.0-nightly-2022122206 Source cves:...

@backstage/plugin-scaffolder-backend-module-confluence-to-markdown (>=0.0.0-nightly-20230325022054, <=0.0.0-nightly-20230801022410), @backstage/plugin-scaffolder-backend-module-cookiecutter (>=0.0.0-nightly-2021101022158, <=0.1.0) +3 more potentially affected by unknown CVE via @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20220708025041, <=0.14.2)

@backstage/plugin-scaffolder-backend NPM version =0.0.0-nightly-20220708025041, =0.0.0-nightly-20230325022054, =0.0.0-nightly-2021101022158, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20230112022659, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20230123022600 Source cves: unknown CVE Source...

@backstage/plugin-scaffolder-backend-module-confluence-to-markdown (>=0.0.0-nightly-20230325022054, <=0.0.0-nightly-20230801022410), @backstage/plugin-scaffolder-backend-module-cookiecutter (>=0.0.0-nightly-2021101022158, <=0.1.0) +3 more potentially affected by CVE-2021-43783 via @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20220708025041, <=0.14.2)

@backstage/plugin-scaffolder-backend NPM version =0.0.0-nightly-20220708025041, =0.0.0-nightly-20230325022054, =0.0.0-nightly-2021101022158, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20230112022659, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20230123022600 Source cves: CVE-2021-43783 Source...

@dpu/hexo-github-include (>=0.0.1, <=0.0.2), @git-story/hexo-meta-data (>=1.0.0, <=1.1.1) +81 more potentially affected by CVE-2021-25987 via hexo (>=2.4.5, <=5.4.2)

hexo NPM version =2.4.5, =0.0.1, =1.0.0, =1.4.0, =1.0.2, =22.8.141, =2.0.0, =1.0.0, =1.0.11, =1.0.16, =1.0.0, =0.0.1, =0.0.3 and more Source cves: CVE-2021-25987 Source advisory: OSV:GHSA-Q54R-R9PR-W7QV...

embly-wrapper (0.0.2), wasi-common-lucet (>=0.4.0, <=0.4.2) potentially affected by CVE-2021-43790 via lucet-runtime (>=0.4.3, <=0.6.1)

lucet-runtime CARGO version =0.4.3, =0.4.0, =0.4.2 Source cves: CVE-2021-43790 Source advisory: OSV:GHSA-HF79-8HJP-RRVQ...

embly-wrapper (0.0.2), wasi-common-lucet (>=0.4.0, <=0.4.2) potentially affected by CVE-2021-43790 via lucet-runtime (>=0.4.3, <=0.6.1)

lucet-runtime CARGO version =0.4.3, =0.4.0, =0.4.2 Source cves: CVE-2021-43790 Source advisory: OSV:RUSTSEC-2021-0155...

@nordicsemiconductor/asset-tracker-cloud-aws (31.2.0-aws-iot-device-sdk-v2.1) potentially affected by CVE-2021-40831 via aws-iot-device-sdk-v2 (1.5.4)

aws-iot-device-sdk-v2 NPM version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on aws-iot-device-sdk-v2 and may be impacted: - @nordicsemiconductor/asset-tracker-cloud-aws 31.2.0-aws-iot-device-sdk-v2.1 Source cves: CVE-2021-40831 Source advisory...

@likenttt/waline-with-feishu (>=1.24.1, <=1.24.2), @waline/vercel (>=1.18.6, <=1.28.2) potentially affected by CVE-2020-21176 via thinkjs (3.2.14)

thinkjs NPM version 3.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on thinkjs and may be impacted: - @likenttt/waline-with-feishu =1.24.1, =1.18.6, =1.28.2 Source cves: CVE-2020-21176 Source advisory: OSV:GHSA-Q5MQ-6FJG-4MW8...

@1pedro/eslint-config (0.1.16), @2109-t5/server (>=1.0.0, <=1.0.9) +2547 more potentially affected by CVE-2021-3918 via json-schema (>=0.2.0, <=0.3.0)

json-schema NPM version =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.0.0-semantic-release, =14.0.0, =0.1.9, =0.1.9, =0.0.1, =0.0.1, =3.0.0-beta.3 and more Source cves: CVE-2021-3918 Source advisory: OSV:GHSA-896R-F27R-55MW...

01homework (>=1.0.0, <=1.0.1), 6ix (0.0.0-canary.0) +2333 more potentially affected by unknown CVE via validator (>=11.1.0, <=13.6.0)

validator NPM version =11.1.0, =1.0.0, =4.11.0, =0.0.0-canary.0, =0.0.1, =0.0.62-test, =0.0.1, =0.4.0, =11.1.0, =2.0.0-beta.43, =2.7.0, =0.1.1-alpha.51, =0.0.16-development, =1.1.0, =1.1.0, =1.2.390 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XX4C-JJ58-R7X6...