auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +50 more potentially affected by CVE-2022-24791 via wasmtime (>=0.7.0, <=0.34.1)

wasmtime CARGO version =0.7.0, =0.1.0, =0.0.0, =0.40.1, =0.45.0, =0.10.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.3, =0.1.0, =0.4.1 and more Source cves: CVE-2022-24791 Source advisory: OSV:RUSTSEC-2022-0099...

niconizer (>=2.0.56, <=2.0.60) potentially affected by CVE-2022-21718 via electron (>=16.0.2, <=16.0.5)

electron NPM version =16.0.2, =2.0.56, =2.0.60 Source cves: CVE-2022-21718 Source advisory: OSV:GHSA-3P22-GHQ8-V749...

@arkecosystem/core (>=3.1.0, <=3.2.0), @arkecosystem/core-forger (>=3.1.0, <=3.2.0) +35 more potentially affected by CVE-2022-24772 via node-forge (>=1.0.0, <=1.2.1)

node-forge NPM version =1.0.0, =3.1.0, =3.1.0, =3.1.0, =1.1.26, =1.0.0-jwt-supply-chain.62c7e930.0, =1.0.0 - @hyperledger/cactus-example-carbon-accounting-backend 1.0.0 - @hyperledger/cactus-example-supply-chain-backend 1.0.0 - @hyperledger/cactus-plugin-htlc-coordinator-besu 1.0.0 -...

@dcdn/client (0.0.1), @dcdn/cloudflare-worker (0.0.1) +5 more potentially affected by CVE-2022-24759 via @chainsafe/libp2p-noise (>=5.0.0, <=5.0.2)

@chainsafe/libp2p-noise NPM version =5.0.0, =1.85.0-next.40, =1.85.0-next.40, =1.85.0-next.40, =1.89.0-next.0 Source cves: CVE-2022-24759 Source advisory: OSV:GHSA-J3FF-XP6C-6GCC...

@backstage/plugin-techdocs (>=0.0.0-nightly-20220504024625, <=1.1.1-next.2), @eui/deps-base (>=13.1.5-snapshot-1652433005121, <=14.0.4) potentially affected by unknown CVE via event-source-polyfill (1.0.26)

event-source-polyfill NPM version 1.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on event-source-polyfill and may be impacted: - @backstage/plugin-techdocs =0.0.0-nightly-20220504024625, =13.1.5-snapshot-1652433005121, =14.0.4 Source cves: unknown...

@cisdi/code-editor (>=3.0.0, <=3.3.10), @cisdi/ui-engine-charts (>=3.2.0, <=3.2.4) +31 more potentially affected by CVE-2021-23771 via notevil (>=1.0.0, <=1.3.3)

notevil NPM version =1.0.0, =3.0.0, =3.2.0, =2.9.0, =1.0.1, =1.0.0, =1.0.0, =0.10.0, =1.5.24, =5.0.0, =3.0.0, =5.2.0, =0.0.1, =0.0.50 and more Source cves: CVE-2021-23771 Source advisory: OSV:GHSA-8G4M-CJM2-96WQ...

roaring-landmask (0.4.0) potentially affected by CVE-2022-0778 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-0778 Source advisory: OSV:GHSA-X3MH-JVJW-3XWX...

123-x-ed-eied (>=1.0.5, <=1.0.6), @0soft/use-nextjs-page-loader (>=0.0.23-alpha.5, <=0.0.25) +855 more potentially affected by CVE-2022-23646 via next (>=10.0.0, <=12.0.10)

next NPM version =10.0.0, =1.0.5, =0.0.23-alpha.5, =0.0.1, =1.1.7, =0.1.0, =1.1.1, =0.0.25, =1.0.39, =0.0.0, =1.0.0, =1.6.1 and more Source cves: CVE-2022-23646 Source advisory: OSV:GHSA-FMVM-X8MV-47MJ...

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +2021 more potentially affected by CVE-2021-23383 via handlebars (>=4.0.0, <=4.7.6)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.2-alpha.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-23383 Source advisory: OSV:GHSA-765H-QJXV-5F44...

@amis-adapter/amis-editor-react (0.0.1), @amis-adapter/amis-editor-webpack (0.1.0) +1039 more potentially affected by CVE-2019-19935 via froala-editor (>=3.0.0, <=3.2.2)

froala-editor NPM version =3.0.0, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =6.10.0, =6.10.1 and more Source cves: CVE-2019-19935 Source advisory: OSV:GHSA-H236-G5GH-VQ6C...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42426 more potentially affected by CVE-2022-0536 via follow-redirects (>=1.0.0, <=1.14.7)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0536 Source advisory: OSV:GHSA-PW2R-VQ6V-HR8C...

@3yourmind/yoco (0.0.2-beta.3), @auto-canary/gh-pages (>=9.16.7-canary.0.b718636d.0, <=11.3.0--canary.2478.87bcf4d47797ed8cc7152538b86fd742d8d19462.0) +7 more potentially affected by CVE-2019-10803 via push-dir (0.4.1)

push-dir NPM version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on push-dir and may be impacted: - @3yourmind/yoco 0.0.2-beta.3 - @auto-canary/gh-pages =9.16.7-canary.0.b718636d.0, =9.17.0, =1.0.0, =0.0.16, =0.0.37, =0.0.1, =0.1.1, =0.7.12 Sour...

@alma-oss/vite-plugin-spirit-icons (>=1.1.0, <=2.1.0), @camptocamp/closure-util (>=1.23.0, <=1.27.0) +132 more potentially affected by CVE-2020-7792 via mout (>=1.0.0, <=1.2.2)

mout NPM version =1.0.0, =1.1.0, =1.23.0, =0.12.2, =1.36.0, =0.0.1, =1.0.0, =0.1.1, =0.1.0, =2.94.2, =0.3.0, =0.3.6 and more Source cves: CVE-2020-7792 Source advisory: OSV:GHSA-PC58-WGMC-HFJR...

1664 (>=0.2.1, <=0.2.3), @aeternity/aepp-sdk (0.25.0-0.1.0) +272 more potentially affected by CVE-2022-25324 via bignum (>=0.4.1, <=0.13.1)

bignum NPM version =0.4.1, =0.2.1, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =0.4.3, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.1.0 and more Source cves: CVE-2022-25324 Source advisory: SNYK:JS-BIGNUM-2388581...

afterglow (>=0.1.0, <=0.3.0), aiid_js (0.0.1) +76 more potentially affected by unknown CVE via bumpalo (>=2.6.0, <=3.6.1)

bumpalo CARGO version =2.6.0, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.1.3, =3.0.0, =4.0.2, =0.114.0, =0.114.0, =0.1.0, =0.1.0, =0.1.1, =0.1.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0078...

@ahora/socket.io (3.0.3), @azteam/express (>=1.2.33, <=1.2.142) +22 more potentially affected by CVE-2022-21676 via engine.io (>=4.0.6, <=4.1.1)

engine.io NPM version =4.0.6, =1.2.33, =1.12.0, =3.0.0, =2.0.0-beta.6, =2.3.0-beta.20, =1.1.3, =2.2.26-3, =2.0.0, =0.9.301, =1.0.0, =0.4.0, =0.4.3 and more Source cves: CVE-2022-21676 Source advisory: OSV:GHSA-273R-MGR4-V34F...

@agoric/cosmic-swingset (>=0.10.8-dev.0, <=0.18.0), @agoric/ertp (>=0.1.4, <=0.4.1) +18 more potentially affected by CVE-2021-23543 via realms-shim (1.2.2)

realms-shim NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on realms-shim and may be impacted: - @agoric/cosmic-swingset =0.10.8-dev.0, =0.1.4, =0.0.1, =0.1.1, =0.0.1, =0.0.20, =0.1.0, =2.0.1, =1.0.0, =0.0.1, =0.4.1, =0.0.6,...

account-db (0.1.0), akita (>=0.1.0, <=0.4.3) +392 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)

lru CARGO version =0.1.17, =0.1.0, =0.3.0, =0.1.0, =0.1.1, =0.1.1, =2.0.0-alpha.22, =2.0.3, =2.0.3, =2.0.3, =0.28.2, =0.7.2, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-45720 Source advisory: OSV:GHSA-V362-2895-H9R2...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9375 more potentially affected by CVE-2021-23382 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23382 Source advisory: OSV:GHSA-566M-QJ78-RWW5...

binjs_es6 (0.2.1) potentially affected by CVE-2021-45683 via binjs_io (0.2.1)

binjsio CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on binjsio and may be impacted: - binjses6 0.2.1 Source cves: CVE-2021-45683 Source advisory: OSV:GHSA-CW4J-CF6C-MMFV...

tremor-language-server (>=0.7.3, <=0.7.4) potentially affected by CVE-2021-45701 +1 more via tremor-script (0.7.2)

tremor-script CARGO version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on tremor-script and may be impacted: - tremor-language-server =0.7.3, =0.7.4 Source cves: CVE-2021-45701, CVE-2021-45702 Source advisory: OSV:GHSA-9QVW-46GF-4FV8...

acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1256 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-76W9-P8MG-J927...

@epam/draft-rte (>=4.0.0--beta.10.0, <=5.7.4), @epam/edu-core-routing (>=3.48.0-beta.1, <=4.6.2-select-all-fix.1) +20 more potentially affected by CVE-2020-28500 via lodash.trimend (>=4.5.0, <=4.5.1)

lodash.trimend NPM version =4.5.0, =4.0.0--beta.10.0, =3.48.0-beta.1, =5.3.0-rc.0, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =4.6.0-alpha.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =5.0.0-alpha.2, =3.48.0-beta.1, =5.0.0-alpha.0, =5.6.23 and more Sourc...

a14_cargo_io (0.1.0), abacuz (0.1.1) +1272 more potentially affected by unknown CVE via dotenv (>=0.4.0, <=0.15.0)

dotenv CARGO version =0.4.0, =0.1.0, =0.2.0-beta.4, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.4.0, =0.0.1, =0.1.1, =0.0.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0141...

@sobotics/caching (1.1.1) potentially affected by CVE-2020-11611 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2020-11611 Source advisory: OSV:GHSA-C6C4-JMQX-3R33...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=1.0.2) +1329 more potentially affected by CVE-2021-43803 via next (>=1.2.3, <=11.1.2)

next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2021-43803 Source advisory: OSV:GHSA-25MP-G6FV-MQXX...

a2 (>=0.2.0, <=0.5.3), aahc (0.1.0) +6615 more potentially affected by CVE-2021-45710 via tokio (>=0.1.16, <=1.8.1)

tokio CARGO version =0.1.16, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.3, =0.2.0, =0.5.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.2.0 and more Source cves: CVE-2021-45710 Source advisory: OSV:RUSTSEC-2021-0124...

@24hr/rawb-search (>=0.10.1, <=0.29.10), @aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3) +79 more potentially affected by unknown CVE via apollo-server (>=2.0.0, <=2.25.0)

apollo-server NPM version =2.0.0, =0.10.1, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.5.0-rc1, =0.3.0-SNAPSHOT1, =2018.8.29-0, =2018.8.28-0, =0.5.7, =1.0.0, =0.0.1-alpha.44, =0.4.0, =0.0.0-d99f4ac.0, =1.27.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QM7X-RC44-RRQW...

@atlassian/aui (>=8.2.4, <=9.4.1), @chinchilla-software/ng-date-time-picker (>=1.0.0, <=1.0.1) +129 more potentially affected by CVE-2021-41183 via jquery-ui (>=1.10.4, <=1.12.1)

jquery-ui NPM version =1.10.4, =8.2.4, =1.0.0, =1.0.0, =0.1.0, =2.3.2, =6.4.0, =1.1.42, =5.0.0-110, =0.0.0, =2.1.1, =4.0.0, =1.0.0-alpha.0, =11.0.0, =17.0.0-dev.3 and more Source cves: CVE-2021-41183 Source advisory: OSV:GHSA-J7QV-PGF6-HVH4...

@atlassian/aui (>=8.2.4, <=9.4.1), @chinchilla-software/ng-date-time-picker (>=1.0.0, <=1.0.1) +129 more potentially affected by CVE-2021-41184 via jquery-ui (>=1.10.4, <=1.12.1)

jquery-ui NPM version =1.10.4, =8.2.4, =1.0.0, =1.0.0, =0.1.0, =2.3.2, =6.4.0, =1.1.42, =5.0.0-110, =0.0.0, =2.1.1, =4.0.0, =1.0.0-alpha.0, =11.0.0, =17.0.0-dev.3 and more Source cves: CVE-2021-41184 Source advisory: OSV:GHSA-GPQQ-952Q-5327...

0.8.18-p11 (0.8.18-p12), @msvx/component (>=1.0.1, <=1.2.2) +24 more potentially affected by CVE-2021-42228 via kindeditor (4.1.10)

kindeditor NPM version 4.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on kindeditor and may be impacted: - 0.8.18-p11 0.8.18-p12 - @msvx/component =1.0.1, =0.0.1, =0.2.3, =0.1.1, =0.0.1, =0.0.3-p12, =4.1.9, =1.3.50, =1.0.0, =0.0.1, =0.2.49,...

@questwork/authenticator (>=0.1.0, <=0.1.5), @questwork/qw-service-tools (>=0.0.8, <=0.1.4) +22 more potentially affected by CVE-2021-23561 via comb (>=0.0.6, <=2.0.0)

comb NPM version =0.0.6, =0.1.0, =0.0.8, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2021-23561 Source advisory: SNYK:JS-COMB-1730083...

aurelia-sails-socket-client (0.10.0) potentially affected by CVE-2021-41097 via aurelia-path (1.0.0-beta.1)

aurelia-path NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on aurelia-path and may be impacted: - aurelia-sails-socket-client 0.10.0 Source cves: CVE-2021-41097 Source advisory: OSV:GHSA-3C9C-2P65-QVWV...

@iamkenos/fragile (>=0.1.1, <=0.1.5) potentially affected by CVE-2021-3666 via body-parser-xml (2.0.1)

body-parser-xml NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on body-parser-xml and may be impacted: - @iamkenos/fragile =0.1.1, =0.1.5 Source cves: CVE-2021-3666 Source advisory: SNYK:JS-BODYPARSERXML-1584211...

acid-store (>=0.12.0, <=0.14.2), aliyundrive-fuse (>=0.1.0, <=0.1.14) +40 more potentially affected by unknown CVE via fuser (>=0.7.0, <=0.15.1)

fuser CARGO version =0.7.0, =0.12.0, =0.1.0, =0.2.4, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.2, =0.6.0, =1.5.5, =0.2.5, =0.1.2, =0.5.2 and more Source cves: unknown CVE Source advisory: SNYK:RUST-FUSER-12671322...

0i0 (1.0.10), 0xgank-tea-advice-pull (1.0.0) +9559 more potentially affected by CVE-2021-3757 via immer (>=7.0.0, <=9.0.5)

immer NPM version =7.0.0, =9.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on immer and may be impacted: - 0i0 1.0.10 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

@adobe/probot-serverless-openwhisk (>=4.0.24, <=4.0.54), @csnext/cs-layer-server (>=0.0.101-beta.22, <=0.0.132-beta.207) +101 more potentially affected by CVE-2021-32822 via hbs (>=4.0.0, <=4.1.2)

hbs NPM version =4.0.0, =4.0.24, =0.0.101-beta.22, =0.7.0, =0.7.0, =0.7.0, =0.19.0, =2.0.1, =0.1.5, =0.0.1-alpha.0, =0.1.2, =0.1.2, =0.1.0, =0.2.1, =0.0.2, =0.0.3 and more Source cves: CVE-2021-32822 Source advisory: OSV:GHSA-7F5C-RPF4-86P8...

keeshond_editor (>=0.1.0, <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (0.2.4)

toodee CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:GHSA-WCVP-R8J8-47PC...

barberousse (>=0.1.0, <=0.1.6), borrowing_exerci (>=0.1.0, <=0.4.51) +19 more potentially affected by CVE-2021-36753 via bat (>=0.9.0, <=0.17.1)

bat CARGO version =0.9.0, =0.1.0, =0.1.0, =0.4.0, =0.6.0, =0.1.0, =0.2.0, =0.0.2-alpha.1, =0.16.0, =0.16.0, =0.1.0-rc1, =0.5.2, =0.12.0, =0.11.1, =0.12.0, =0.14.1 and more Source cves: CVE-2021-36753 Source advisory: OSV:GHSA-P24J-H477-76Q3...

term-handler (0.1.0) potentially affected by CVE-2020-36446 via signal-simple (0.1.1)

signal-simple CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on signal-simple and may be impacted: - term-handler 0.1.0 Source cves: CVE-2020-36446 Source advisory: OSV:GHSA-8892-84WF-CG8F...

afterburn (4.1.0), aoaddons (>=0.1.1, <=0.1.6) +50 more potentially affected by CVE-2019-25054 via pnet (>=0.12.0, <=0.26.0)

pnet CARGO version =0.12.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.4.0 and more Source cves: CVE-2019-25054 Source advisory: OSV:GHSA-R6FF-2Q3C-V3PV...

hwatch (0.1.5) potentially affected by CVE-2019-15547 +1 more via ncurses (5.94.0)

ncurses CARGO version 5.94.0 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - hwatch 0.1.5 Source cves: CVE-2019-15547, CVE-2019-15548 Source advisory: OSV:GHSA-G7R5-X7CR-VM3V...

async_docker (>=0.1.0, <=0.1.1), cargo (>=0.4.0, <=0.8.0) +11 more potentially affected by CVE-2021-38511 via tar (>=0.2.14, <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole 0.1.0 Source cves: CVE-2021-38511 Source advisory: OSV:GHSA-62JX-8VMH-4MCW...

tough-ssm (0.1.0), tuftool (>=0.1.0, <=0.4.0) potentially affected by CVE-2020-15093 via tough (>=0.1.0, <=0.6.0)

tough CARGO version =0.1.0, =0.1.0, =0.4.0 Source cves: CVE-2020-15093 Source advisory: OSV:GHSA-5Q2R-92F9-4M49...

abbegm (>=0.1.0, <=0.2.1), abci-rs (>=0.10.0, <=0.11.1) +594 more potentially affected by CVE-2021-38192 via prost-types (>=0.2.3, <=0.7.0)

prost-types CARGO version =0.2.3, =0.1.0, =0.10.0, =0.0.2, =0.0.0, =0.1.3, =0.1.0, =0.17.0, =0.16.0, =0.1.2-alpha.3, =0.8.0, =0.8.0, =0.8.0, =0.11.0 and more Source cves: CVE-2021-38192 Source advisory: OSV:GHSA-X4QM-MCJQ-V2GF...

booklibrs (>=0.1.0, <=1.0.4), fl2rust (0.3.1) +5 more potentially affected by CVE-2021-28306 +2 more via fltk (>=0.9.7, <=0.14.13)

fltk CARGO version =0.9.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.15 Source cves: CVE-2021-28306, CVE-2021-28307, CVE-2021-28308 Source advisory: OSV:GHSA-5PG8-H4GV-M3P8...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5218 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-5WG8-7C9Q-794V...

cid (>=0.3.0, <=0.4.0), cid_fork_rlay (0.3.1) +58 more potentially affected by CVE-2020-35909 via multihash (>=0.8.0, <=0.10.1)

multihash CARGO version =0.8.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.9, =0.0.1-alpha1, =0.0.18 and more Source cves: CVE-2020-35909 Source advisory: OSV:GHSA-H7QH-3H6F-W79P...

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), azure_sdk_auth_aad (>=0.30.0, <=0.35.0) +19 more potentially affected by CVE-2020-35875 via tokio-rustls (>=0.12.0-alpha.1, <=0.12.0-alpha.8)

tokio-rustls CARGO version =0.12.0-alpha.1, =0.5.0-alpha.6, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.1.0-alpha.1, =0.1.0, =0.30.0, =3.2.2, =3.4.2 and more Source cves: CVE-2020-35875 Source advisory: OSV:GHSA-2JFV-G3FH-XQ3V...

accepted (>=0.1.13, <=0.1.20), actors-rs (>=0.1.0, <=0.1.4) +325 more potentially affected by CVE-2020-25573 via linked-hash-map (>=0.0.9, <=0.4.2)

linked-hash-map CARGO version =0.0.9, =0.1.13, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.5.0, =0.3.1, =0.3.2, =0.1.0, =0.1.0, =0.7.1 and more Source cves: CVE-2020-25573 Source advisory: OSV:GHSA-R43H-GMRM-H5C9...