claude-agents-md (>=1.8.0, <=1.8.5), claude-yolo (>=1.4.0, <=1.7.0) potentially affected by CVE-2025-54794 +1 more via @anthropic-ai/claude-code (>=0.2.14, <=0.2.35)

@anthropic-ai/claude-code NPM version =0.2.14, =1.8.0, =1.4.0, =1.7.0 Source cves: CVE-2025-54794, CVE-2025-547954 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-11502064...

dji-log-parser (>=0.5.0, <=0.5.7) potentially affected by unknown CVE via tsify-next (0.5.6)

tsify-next CARGO version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on tsify-next and may be impacted: - dji-log-parser =0.5.0, =0.5.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0048...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8010 via electron (>=37.0.0, <=37.2.4)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8010 Source advisory: SNYK:JS-ELECTRON-11023263...

@-xun/symbiote (>=3.7.0, <=4.11.4), @0x57/pierre (>=0.0.3, <=0.0.16) +889 more potentially affected by unknown CVE via @eslint/plugin-kit (>=0.1.0, <=0.2.8)

@eslint/plugin-kit NPM version =0.1.0, =3.7.0, =0.0.3, =1.1.44, =1.1.14, =0.0.1-alpha.3, =0.0.1, =10.0.0, =10.0.0, =8.3.0, =13.0.0, =2.6.0, =2.2.9, =0.0.2, =35.0.1, =38.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XFFM-G5W8-QVG7...

84447xe5t8 (1.0.0), @0xnukeee/test-sdk (>=1.0.10, <=4.1.2) +252 more potentially affected by CVE-2025-53638 via solady (>=0.0.138, <=0.1.7)

solady NPM version =0.0.138, =1.0.10, =4.3.0, =0.0.8, =0.10.1002, =1.2.6, =3.0.0-alpha0, =1.2.0, =1.0.0, =1.8.5, =0.28.0-rc.0, =2.0.0-beta.0, =3.2.0 and more Source cves: CVE-2025-53638 Source advisory: SNYK:JS-SOLADY-11342790...

eth-utils (>=0.1.1, <=0.2.0), evm (>=0.17.3, <=0.36.0) +25 more potentially affected by CVE-2025-53359 via ethereum (>=0.4.2, <=0.12.0)

ethereum CARGO version =0.4.2, =0.1.1, =0.17.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - ovr-evm-precompile-ed25519 2.0.0 - ovr-evm-precompile-modexp 2.0.0 - ovr-evm-precompile-sha3fips 2.0.0 - ovr-evm-test-vector-support 1.0.0 and more Source cves: CVE-2025-53359 Source advisory: OSV:GHSA-3W94-VQ2X-V5WR...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +16510 more potentially affected by CVE-2025-46392 via commons-configuration:commons-configuration (>=1.0-rc1, <=1.10)

commons-configuration:commons-configuration MAVEN version =1.0-rc1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 and more Source cves:...

mod3d-gl (>=0.1.0, <=0.2.0), mod3d-gltf (>=0.1.0, <=0.2.0) +1 more potentially affected by unknown CVE via mod3d-base (>=0.1.0, <=0.2.0)

mod3d-base CARGO version =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0171...

@chainlink/external-adapter-framework (>=1.7.5, <=1.7.7), @intuned/runtime (1.3.15) +89 more potentially affected by CVE-2025-32442 +1 more via fastify (4.29.0)

fastify NPM version 4.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastify and may be impacted: - @chainlink/external-adapter-framework =1.7.5, =1.3.14-ts-runtime-helpers, =0.0.0-a2a-20250421213654, =3.26.12-beta.2, =0.0.2, =0.3.23, =1.1.26,...

@andesite-lab/andesite-core (>=1.60.2, <=1.62.0), @bechara/crux (>=6.0.0-alpha.1, <=6.6.2) +151 more potentially affected by CVE-2025-32442 +1 more via fastify (>=5.0.0, <=5.3.1)

fastify NPM version =5.0.0, =1.60.2, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.11, =1.9.4, =2.0.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 and more Source cves: CVE-2025-32442, CVE-2026-33806 Source advisory:...

org.webjars.npm:class-validator (>=0.8.5, <=0.14.0), org.webjars.npm:image-thumbnail (1.0.15) +8 more potentially affected by CVE-2025-56200 via org.webjars.npm:validator (>=3.43.0, <=13.12.0)

org.webjars.npm:validator MAVEN version =3.43.0, =0.8.5, =3.1.2, =3.18.2, =3.25.1 Source cves: CVE-2025-56200 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14102004...

@genesisx/graphql (>=3.0.0-beta.1, <=4.0.1), @genesisx/graphql-utils (>=3.0.0-beta.0, <=3.0.1) +9 more potentially affected by CVE-2025-32031 via @apollo/gateway (>=2.0.0-preview.2, <=2.10.0)

@apollo/gateway NPM version =2.0.0-preview.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.11.46-alpha-bad726532.0, =0.0.1, =8.6.7, =2.8.54, =0.0.0-preview-20220428090254, =0.0.0-preview-20221125005457, =1.3.3, =0.0.3, =1.0.48 - nestjs-registry 0.0.1 Source cves: CVE-2025-32031 Source advisory:...

@adhd/backlog (>=1.0.0, <=1.0.8), @adhd/react-hooks (2.2.1) +447 more potentially affected by CVE-2025-31486 via vite (>=5.0.0, <=5.4.16)

vite NPM version =5.0.0, =1.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =0.5.5 - @avorati/strapi-plugin-preview 1.0.1 - @beaker-tools/typescript-toolkit 1.3.0 - @beardeddudes/strapi-types 0.1.1 and more Source cves:...

@boxyhq/saml-jackson (>=1.3.2, <=1.11.1), @boxyhq/saml20 (>=1.0.11, <=1.2.3) +4 more potentially affected by CVE-2025-29775 via xml-crypto (>=3.0.0, <=3.2.0)

xml-crypto NPM version =3.0.0, =1.3.2, =1.0.11, =1.13.3, =1.13.5, =2.1.0, =1.0.0, =1.0.1 Source cves: CVE-2025-29775 Source advisory: OSV:GHSA-X3M8-899R-F7C3...

@alexssmusica/emissao-nota-fiscal (>=1.0.0, <=1.0.5), @borodutch-labs/in-app-purchase (1.13.2) +12 more potentially affected by CVE-2025-29774 via xml-crypto (>=2.0.0, <=2.1.5)

xml-crypto NPM version =2.0.0, =1.0.0, =0.1.0-beta.57, =0.2.1-beta.36, =1.14.0, =1.12.1, =0.7.1, =0.0.1, =0.0.9 Source cves: CVE-2025-29774 Source advisory: OSV:GHSA-9P8X-F768-WP2G...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0.3.20-beta.11 (0.3.19) +24561 more potentially affected by CVE-2025-27789 via @babel/runtime (>=7.0.0, <=7.26.9)

@babel/runtime NPM version =7.0.0, =1.0.1, =1.0.5, =0.1.0, =0.2.0, =0.1.0, =1.3.4, =0.1.0, =1.0.6, =1.1.3 and more Source cves: CVE-2025-27789 Source advisory: OSV:GHSA-968P-4WVH-CQC8...

org.webjars.npm:vxe-pc-ui (4.14.26), org.webjars.npm:vxe-table (4.19.6) +1 more potentially affected by CVE-2024-57074 via org.webjars.npm:xe-utils (4.0.8)

org.webjars.npm:xe-utils MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:xe-utils and may be impacted: - org.webjars.npm:vxe-pc-ui 4.14.26 - org.webjars.npm:vxe-table 4.19.6 - org.webjars.npm:vxe-uicore 4.4.13 Source...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.5), @vxrn/better-auth (>=1.1.368, <=1.1.416) potentially affected by CVE-2024-56734 +1 more via better-auth (>=1.0.0, <=1.1.5)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =1.1.368, =1.1.416 Source cves: CVE-2024-56734, CVE-2025-27143 Source advisory: OSV:GHSA-8JHW-6PJJ-8723...

@directus/api (>=20.0.0-rc.0, <=23.1.2) potentially affected by CVE-2024-54128 via directus (>=11.0.0, <=11.2.1)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.1.2 Source cves: CVE-2024-54128 Source advisory: OSV:GHSA-R6WX-627V-GH2F...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +414 more potentially affected by CVE-2024-53900 via mongoose (>=6.0.1, <=6.13.4)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.1.16 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

1k-tasks (>=4.0.0, <=4.2.2), @adobe/helix-deploy (>=9.3.8, <=9.6.1) +227 more potentially affected by CVE-2024-47068 via rollup (>=4.0.2, <=4.22.2)

rollup NPM version =4.0.2, =4.0.0, =9.3.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =2.17.15, =1.9.12, =18.1.0-rc.1, =18.1.0-rc.1, =10.0.0-alpha.0, =10.0.0-alpha.0, =13.0.0 and more Source cves: CVE-2024-47068 Source advisory: OSV:GHSA-GCX4-MW62-G8WM...

@akrc/vidocs (>=0.0.0, <=0.0.2), @alexzzz/npms (>=0.0.5, <=0.2.0) +135 more potentially affected by CVE-2024-45811 via vite (>=3.0.0, <=3.2.8)

vite NPM version =3.0.0, =0.0.0, =0.0.5, =1.0.1, =1.0.1, =3.2.0, =1.11.2, =0.0.37, =0.0.35, =0.2.3, =0.0.0-canary-20220718083044, =0.0.6, =0.1.0, =0.0.3, =6.24.0, =7.12.2 and more Source cves: CVE-2024-45811 Source advisory: OSV:GHSA-9CWX-2883-4WFX...

@genesisx/graphql (>=3.0.0-beta.1, <=4.0.1), @genesisx/graphql-utils (>=3.0.0-beta.0, <=3.0.1) +9 more potentially affected by CVE-2024-43414 via @apollo/gateway (>=2.0.0-preview.2, <=2.8.4)

@apollo/gateway NPM version =2.0.0-preview.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.11.46-alpha-bad726532.0, =0.0.1, =8.6.7, =2.8.54, =0.0.0-preview-20220428090254, =0.0.0-preview-20221125005457, =1.3.3, =0.0.3, =1.0.48 - nestjs-registry 0.0.1 Source cves: CVE-2024-43414 Source advisory:...

@bloggrify/bento (>=0.9.1, <=0.9.4), @bloggrify/core (>=1.1.1, <=1.4.5) +62 more potentially affected by CVE-2024-34343 via nuxt (>=3.0.0, <=3.12.3)

nuxt NPM version =3.0.0, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =4.0.3, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.5.0, =1.0.0-beta.11, =1.2.0 and more Source cves: CVE-2024-34343 Source advisory: OSV:GHSA-VF6R-87Q4-2VJF...

actix-session-surrealdb (>=0.1.0, <=0.1.5) potentially affected by CVE-2024-58363 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.5 Source cves: CVE-2024-58363 Source advisory: OSV:GHSA-GH9F-6XM2-C4J2...

checked-rs-macro-impl (1.0.0), raft-engine (>=0.2.0, <=0.2.2) +7 more potentially affected by CVE-2024-36760 via rhai (>=1.4.1, <=1.16.3)

rhai CARGO version =1.4.1, =0.2.0, =0.2.0, =0.2.1, =0.1.7, =0.1.2, =1.4.0, =0.1.6, =0.0.5, =0.1.1 Source cves: CVE-2024-36760 Source advisory: OSV:GHSA-67FV-9R7G-432H...

@chargeover/strapi (0.0.1-rc1.1), @code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3) +18 more potentially affected by CVE-2024-34065 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.19.0)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =0.0.1, =0.0.4 - devlaunchers-strapiv4 0.1.0 - easylaser-vn-cms 0.1.0 - sneakmax 0.1.0 - sneakmaxtesttemplate 0.1.0 - sneakmaxtesttemplatev2 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 -...

@alezanai/torquator (>=1.0.0, <=1.5.0), singwareplayercreator (1.1.0) potentially affected by CVE-2024-25355 via s3-url-parser (1.0.3)

s3-url-parser NPM version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on s3-url-parser and may be impacted: - @alezanai/torquator =1.0.0, =1.5.0 - singwareplayercreator 1.1.0 Source cves: CVE-2024-25355 Source advisory: OSV:GHSA-R4Q9-XX5G-J24P...

endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2024-32884 via gix (0.0.0)

gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2024-32884 Source advisory: OSV:GHSA-98P4-XJMM-8MFH...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +2 more potentially affected by CVE-2023-6193 via quiche (>=0.16.0, <=0.18.0)

quiche CARGO version =0.16.0, =0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on quiche and may be impacted: - masquerade-proxy 0.1.0 - monoio-quiche 0.0.1 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2023-6193 Source advisory:...

@0xtfm/widget-ibc (>=0.0.8-alpha.0, <=0.0.8-alpha.5), @1kdanny/n8n-nodes-firecrawl (>=1.0.0, <=1.0.2) +1509 more potentially affected by CVE-2023-46233 via crypto-js (>=4.0.0, <=4.1.1)

crypto-js NPM version =4.0.0, =0.0.8-alpha.0, =1.0.0, =3.0.0, =4.22.0, =1.0.0-alpha.0, =1.0.0-alpha.1, =1.1.56, =0.1.1, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938,...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +2 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (>=5.0.0-pre.9, <=5.0.5)

@feathersjs/transport-commons NPM version =5.0.0-pre.9, =0.4.11, =0.5.4, =0.5.8 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +279 more potentially affected by CVE-2023-37466 via vm2 (>=3.0.0, <=3.9.19)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

aware (>=0.0.1, <=0.0.6), aws-config (>=0.0.22-alpha, <=0.0.26-alpha) +288 more potentially affected by CVE-2023-30610 via aws-sigv4 (>=0.0.22-alpha, <=0.0.26-alpha)

aws-sigv4 CARGO version =0.0.22-alpha, =0.0.1, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.26-alpha and more Source cves:...

@aprilsacil/wallet (>=0.1.36, <=0.1.51), @chainfuse/react (>=0.0.46, <=0.1.0-dev.96) +15 more potentially affected by CVE-2023-30543 via @web3-react/coinbase-wallet (>=8.0.31-beta.0, <=8.0.34-beta.0)

@web3-react/coinbase-wallet NPM version =8.0.31-beta.0, =0.1.36, =0.0.46, =0.0.70, =0.0.6-alpha.0, =0.1.0, =0.0.1, =0.1.0, =0.13.29, =0.1.20, =0.0.1, =0.0.2, =0.0.11, =0.1.31 and more Source cves: CVE-2023-30543 Source advisory: OSV:GHSA-8PF3-6FGR-3G3G...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +213 more potentially affected by CVE-2023-29017 via vm2 (>=3.0.0, <=3.9.14)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +807 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.40)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0023...

priyanshbot12 (1.0.2) potentially affected by unknown CVE via fb-tools (0.0.1-security)

fb-tools NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fb-tools and may be impacted: - priyanshbot12 1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2023-327...

barfs (0.1.2), cranelift (>=0.88.0, <=0.90.1) +20 more potentially affected by CVE-2023-27477 via cranelift-codegen (>=0.88.2, <=0.90.1)

cranelift-codegen CARGO version =0.88.2, =0.88.0, =0.88.0, =0.88.0, =0.88.0, =0.88.0, =0.88.0, =0.88.0, =0.88.0, =0.88.0, =0.88.0, =0.88.0, =13.0.0, =13.0.0, =13.0.0, =23.0.0 and more Source cves: CVE-2023-27477 Source advisory: OSV:GHSA-XM67-587Q-R2VW...

@athenna/database (>=1.2.2, <=1.4.6), @aws-amplify/amplify-appsync-simulator (2.9.4-rdsv2preview.0) +141 more potentially affected by CVE-2016-20018 via knex (>=2.0.0, <=2.3.0)

knex NPM version =2.0.0, =1.2.2, =4.2.0-rds-v2.3, =10.5.3-rds-v2.0, =11.1.2-sync-fix.0 - @aws-amplify/graphql-auth-transformer 1.2.6-rdsv2preview.0 - @aws-amplify/graphql-default-value-transformer 0.7.8-rdsv2preview.0 - @aws-amplify/graphql-function-transformer 0.7.36-rdsv2preview.0 and more Sour...

@weedx/components (0.0.1-beta), acmcoder-ui (>=1.0.2, <=1.0.11) +8 more potentially affected by CVE-2022-23494 via tinymce (>=6.0.0, <=6.2.0)

tinymce NPM version =6.0.0, =1.0.2, =1.0.96, =0.0.19, =1.0.0, =0.70.4, =1.0.6, =0.0.2, =0.0.5 Source cves: CVE-2022-23494 Source advisory: OSV:GHSA-GG8R-XJWQ-4W92...

@aicore/cocodb (>=1.0.1, <=1.0.6), @chainlink/external-adapter-framework (>=0.0.65, <=0.12.0) +77 more potentially affected by CVE-2022-39288 via fastify (>=4.0.2, <=4.7.0)

fastify NPM version =4.0.2, =1.0.1, =0.0.65, =1.1.1, =5.0.1, =1.0.0, =2.0.0, =9.0.0-next.2, =3.7.4, =2.2.1-canary.98, =3.0.0, =3.0.0, =0.0.1, =0.0.5, =6.0.0-6-next.35, =6.0.0-6-next.49 and more Source cves: CVE-2022-39288 Source advisory: OSV:GHSA-455W-C45V-86RG...

@adobe/git-server (>=1.0.3, <=1.0.5), @adobe/helix-cli (>=5.9.3, <=6.1.0) +29 more potentially affected by CVE-2022-22984 +1 more via @snyk/snyk-cocoapods-plugin (>=2.0.1, <=2.5.2)

@snyk/snyk-cocoapods-plugin NPM version =2.0.1, =1.0.3, =5.9.3, =2.17.2, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.5.8, =0.0.2, =0.0.8, =0.2.0-a1, =1.20.0-alpha.11736.3, =2.3.2, =2.6.4 and more Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory: SNYK:JS-SNYKSNYKCOCOAPODSPLUGIN-3038625...

@adobe/helix-deploy (>=7.0.0, <=7.0.8) potentially affected by CVE-2022-39218 via @fastly/js-compute (>=0.4.0, <=0.5.2)

@fastly/js-compute NPM version =0.4.0, =7.0.0, =7.0.8 Source cves: CVE-2022-39218 Source advisory: OSV:GHSA-CMR8-5W4C-44V8...

@adobe/helix-google-support (>=1.3.4, <=2.0.3), @adobe/helix-html-pipeline (>=3.0.0, <=3.1.8) +64 more potentially affected by CVE-2022-36083 via jose (>=4.0.3, <=4.9.1)

jose NPM version =4.0.3, =1.3.4, =3.0.0, =1.11.39, =8.0.0, =0.0.1, =0.0.2-alpha.15, =2.2.2, =2022.2.6, =1.0.1, =2.7.3, =1.0.4-alpha.0, =2.2.9, =1.1.5, =1.1.9 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@beer-code-industry/common-frontend (>=0.5.0, <=0.7.6), @birthdayresearch/contented (1.0.1) +29 more potentially affected by CVE-2022-36046 via next (12.2.3-canary.2)

next NPM version 12.2.3-canary.2 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @beer-code-industry/common-frontend =0.5.0, =1.0.1, =1.0.0, =1.89.0-next.89, =0.0.19, =0.0.19, =0.0.20, =0.0.44, =0.0.15, =0.0.31 -...

@fb24m/etc (>=1.0.0, <=1.2.0), pdf-exports (1.0.0) +1 more potentially affected by CVE-2022-21165 via font-converter (1.1.1)

font-converter NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on font-converter and may be impacted: - @fb24m/etc =1.0.0, =1.2.0 - pdf-exports 1.0.0 - pdf-img-exports 1.0.0 Source cves: CVE-2022-21165 Source advisory:...

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (>=0.3.5, <=0.17.9) +737 more potentially affected by CVE-2022-2564 via mongoose (>=5.0.0, <=5.13.14)

mongoose NPM version =5.0.0, =0.24.0, =0.3.5, =0.2.0, =3.7.0, =0.1.17, =1.0.0, =2.8.0, =0.0.1, =0.0.2, =0.7.0, =1.0.33, =2.1.3 and more Source cves: CVE-2022-2564 Source advisory: OSV:GHSA-F825-F98C-GJ3G...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +137 more potentially affected by CVE-2022-2564 via mongoose (>=6.0.1, <=6.4.5)

mongoose NPM version =6.0.1, =1.2.3, =1.0.5, =1.0.9, =1.1.80, =0.0.1, =1.0.13, =1.0.0-rc.1.8.10, =1.0.2, =1.0.3, =0.4.3, =0.4.3, =0.4.3, =2.0.1, =2.0.2 and more Source cves: CVE-2022-2564 Source advisory: OSV:GHSA-F825-F98C-GJ3G...