4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1554 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts (>=4.0.0, <=4.9.2)

@openzeppelin/contracts NPM version =4.0.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-40014 Source advisory: OSV:GHSA-G4VP-M682-QQMP...

3gtel-frontend-platform (1.0.0), @achieve-all/v-element (1.0.0) +296 more potentially affected by CVE-2025-3197 via expand-object (>=0.2.3, <=0.4.2)

expand-object NPM version =0.2.3, =0.1.1, =1.0.0, =1.0.0, =2.0.0, =2.0.7, =0.1.0, =1.0.0, =1.0.8, =0.1.2, =1.0.3, =6.0.0-rc1, =1.0.0, =1.0.8 and more Source cves: CVE-2025-3197 Source advisory: SNYK:JS-EXPANDOBJECT-5821390...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +2 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (>=5.0.0-pre.9, <=5.0.5)

@feathersjs/transport-commons NPM version =5.0.0-pre.9, =0.4.11, =0.5.4, =0.5.8 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +305 more potentially affected by CVE-2023-3696 via mongoose (>=6.0.1, <=6.11.2)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.0.1, =0.1.9 and more Source cves: CVE-2023-3696 Source advisory: OSV:GHSA-9M93-W8W6-76HH...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +866 more potentially affected by CVE-2023-53159 via openssl (>=0.2.18, <=0.10.52)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: CVE-2023-53159 Source advisory: OSV:RUSTSEC-2023-0044...

@104corp/cdk-aws-codedeploy-on-premises (>=1.0.0, <=1.0.2), @aws-cdk/aws-stepfunctions-tasks (>=1.91.0, <=1.201.0) +30 more potentially affected by CVE-2023-35165 via @aws-cdk/aws-eks (>=1.57.0, <=1.201.0)

@aws-cdk/aws-eks NPM version =1.57.0, =1.0.0, =1.91.0, =1.57.0, =0.12.1, =1.115.0, =1.91.0, =1.91.0, =1.115.0, =0.0.1-beta.1, =0.0.1, =25.1.0, =0.2.0, =0.1.0, =0.3.2 and more Source cves: CVE-2023-35165 Source advisory: OSV:GHSA-RX28-R23P-2QC3...

@activepieces/piece-amazon-s3 (0.0.2), @adobe/helix-admin-support (>=2.1.22, <=2.1.23) +472 more potentially affected by unknown CVE via fast-xml-parser (4.2.4)

fast-xml-parser NPM version 4.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-xml-parser and may be impacted: - @activepieces/piece-amazon-s3 0.0.2 - @adobe/helix-admin-support =2.1.22, =9.0.39, =2.1.1, =2.1.15, =1.11.158, =1.0.4-0, =1.2.39-0,...

@aws-amplify/geo (>=2.0.13-push-notification-dryrun.43, <=2.0.35-unstable.3e5e6f9.1), @aws-amplify/interactions (>=5.0.13-push-notification-dryrun.43, <=5.1.1-unstable.3e5e6f9.1) +98 more potentially affected by CVE-2023-34104 via fast-xml-parser (>=4.1.3, <=4.2.3)

fast-xml-parser NPM version =4.1.3, =2.0.13-push-notification-dryrun.43, =5.0.13-push-notification-dryrun.43, =1.0.13-push-notification-dryrun.43, =5.0.13-push-notification-dryrun.43, =5.1.3-push-notification-dryrun.43, =1.1.6-exodus.1, =6.2.44, =9.1.0, =9.1.0, =9.53.0 and more Source cves:...

@0x-jerry/x-release (>=0.0.2, <=0.3.6), @_igetter/yxtvant (>=1.0.1, <=1.0.2) +453 more potentially affected by CVE-2023-2972 via @antfu/utils (>=0.1.7, <=0.7.2)

@antfu/utils NPM version =0.1.7, =0.0.2, =1.0.1, =1.1.10, =0.0.2, =1.0.0-rc2, =0.0.0, =1.15.0, =0.3.0-beta.2, =0.5.3, =1.6.24, =1.0.2, =0.1.1, =0.1.1, =0.1.9 and more Source cves: CVE-2023-2972 Source advisory: OSV:GHSA-P2FH-2H23-6GRG...

n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27562 via n8n (>=0.81.0, <=0.214.5)

n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27562 Source advisory: OSV:GHSA-P58X-7733-VP9M...

n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27564 via n8n (>=0.81.0, <=0.214.5)

n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27564 Source advisory: OSV:GHSA-R9XW-P7WJ-W792...

11-builder (0.1.0), 2muchcoffee-react-scripts (0.1.0) +3097 more potentially affected by unknown CVE via fsevents (>=1.0.14, <=1.2.9)

fsevents NPM version =1.0.14, =0.1.0, =1.0.3, =0.1.4, =1.0.0-beta.1, =0.0.1, =0.7.1, =1.1.0-1, =1.0.0, =1.1.2, =1.1.9 - @abelmuro/food-dasher-app 1.0.0 - @accumineapps/hourlyactual 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2023-462...

@0l00000l/auth (>=1.0.0, <=1.0.8), @1sat/cli (>=0.0.53, <=0.0.101) +1024 more potentially affected by CVE-2023-2251 via yaml (>=2.0.0, <=2.2.1)

yaml NPM version =2.0.0, =1.0.0, =0.0.53, =0.0.31, =0.0.9, =2.0.0, =1.2.2-20211215122352, =3.0.0, =2.1.42, =1.1.5, =14.6.15, =1.11.39, =9.0.0, =2.0.0, =2.0.0, =0.0.1-AHG-001, =0.0.1-AHG-002 and more Source cves: CVE-2023-2251 Source advisory: OSV:GHSA-F9XV-Q969-PQX4...

4help-shared (>=1.0.8, <=1.0.15), @akalli/components (>=0.0.1, <=0.2.3) +245 more potentially affected by CVE-2023-28131 via expo (>=45.0.0, <=47.0.14)

expo NPM version =45.0.0, =1.0.8, =0.0.1, =0.0.1, =0.0.3, =2.5.0, =0.0.0, =1.2.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2023-28131 Source advisory: SNYK:JS-EXPO-13559201...

aware (>=0.0.9, <=0.0.13), aws-config (>=0.4.0, <=0.4.1) +304 more potentially affected by CVE-2023-30610 via aws-sigv4 (0.4.2)

aws-sigv4 CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sigv4 and may be impacted: - aware =0.0.9, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1 and more...

acari-lib (>=0.1.11, <=0.1.12), acme-rs (>=0.1.0, <=0.2.0) +304 more potentially affected by unknown CVE via multipart (>=0.3.1, <=0.18.0)

multipart CARGO version =0.3.1, =0.1.11, =0.1.0, =0.9.2, =0.2.0, =0.1.0, =0.0.1, =0.1.5, =0.0.1, =0.1.0, =1.0.0, =0.26.1, =0.4.4, =0.26.1 - authenticator 0.3.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0050...

0.extends.wechat (>=1.0.51, <=1.0.65), 00ld8nuivn (2.1.0) +30722 more potentially affected by CVE-2023-0842 via xml2js (>=0.1.5, <=0.4.23)

xml2js NPM version =0.1.5, =1.0.51, =1.0.65 - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 - 0850u4lkpu 1.1.0 - 098of6vzvl 1.1.0 -...

amts-prelude (>=0.2.2, <=0.2.4), async-nats (>=0.9.0, <=0.10.1) +36 more potentially affected by unknown CVE via nats (>=0.9.18, <=0.23.1)

nats CARGO version =0.9.18, =0.2.2, =0.9.0, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.17.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.6.0-beta.1, =0.9.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0029...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +807 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.40)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0022...

@byinti/printer-js (>=0.0.1, <=0.0.6), @dkaframework/printer (1.0.1) +18 more potentially affected by CVE-2023-26110 via node-bluetooth (1.2.6)

node-bluetooth NPM version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth and may be impacted: - @byinti/printer-js =0.0.1, =1.0.3, =1.2.11, =0.0.3, =2.5.0, =0.0.1-alpha.0, =0.1.0, =0.1.8, =1.0.3, =0.1.3, =0.1.5 - flexprinter 0.0....

dbaas (>=0.1.6, <=0.7.1) potentially affected by CVE-2023-27474 via directus (>=9.6.0, <=9.21.2)

directus NPM version =9.6.0, =0.1.6, =0.7.1 Source cves: CVE-2023-27474 Source advisory: OSV:GHSA-4HMQ-GGRM-QFC6...

@wmfs/addressbase-plus-blueprint (>=1.1.0, <=1.182.0), @wmfs/addressbase-premium-blueprint (>=1.0.0, <=1.185.0) +50 more potentially affected by CVE-2023-26132 via dottie (>=2.0.0, <=2.0.3)

dottie NPM version =2.0.0, =1.1.0, =1.0.0, =1.0.0, =1.11.0, =1.10.0, =1.0.0, =1.0.0, =1.0.0, =1.27.0, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.8.0 and more Source cves: CVE-2023-26132 Source advisory: SNYK:JS-DOTTIE-3332763...

vue2-baremetrics-calendar (>=0.1.0, <=1.6.1) potentially affected by CVE-2021-32859 via baremetrics-calendar (1.0.14)

baremetrics-calendar NPM version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on baremetrics-calendar and may be impacted: - vue2-baremetrics-calendar =0.1.0, =1.6.1 Source cves: CVE-2021-32859 Source advisory: OSV:GHSA-465F-MXXH-GRC4...

@accounter-toolkit/green-invoice-graphql (>=0.0.2-alpha-20220914223128-d706aab, <=0.2.0-alpha-20230313141007-4bdbab6), @accounter-toolkit/hashavshevet-mesh (>=0.0.2-alpha-20220915073207-1bb0680, <=0.0.4-alpha-20230313141007-4bdbab6) +10 more potentially affected by CVE-2025-27098 via @graphql-mesh/cli (>=0.78.0, <=0.82.21)

@graphql-mesh/cli NPM version =0.78.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =0.2.0-alpha.24, =5.1.0-canary.3, =6.0.0-canary.20, =6.0.0-canary.20, =6.0.0-canary.20, =2.2.6-alpha-20220906004558-09c8599,...

1095h-cli (1.0.1), 5coder-pages (0.2.0) +547 more potentially affected by CVE-2023-25345 via swig-templates (>=2.0.2, <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0-beta.1, =0.0.1-alpha.0, =0.0.1 and more Source cves: CVE-2023-25345 Source advisory: SNYK:JS-SWIGTEMPLATES-3266805...

@51jbs/incremental-coverage-plugin (1.0.5), @51jbs/spec-plugin (2.0.0) +202 more potentially affected by CVE-2022-25860 via simple-git (>=3.0.3, <=3.15.1)

simple-git NPM version =3.0.3, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =1.4.0, =5.15.0, =10.0.0-version-usage.0, =1.0.1, =2.0.0, =1.1.0, =1.1.0, =0.0.0-semantic-release, =0.0.1-semantic-release - @colliercz/gatsby-transformer-gitinfo 1.3.0 and more Source cves: CVE-2022-25860 Source advisory:...

svg-sketch-pdf (>=1.0.12, <=1.0.28) potentially affected by CVE-2018-25061 via rgb2hex (0.1.0)

rgb2hex NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on rgb2hex and may be impacted: - svg-sketch-pdf =1.0.12, =1.0.28 Source cves: CVE-2018-25061 Source advisory: OSV:GHSA-7599-FQGM-V84P...

@albalyu/npm-scripts (>=2.0.1, <=2.0.40), @opuscapita/eslint-config-opuscapita-bnapp (>=1.0.1-next.0, <=1.0.6) +7 more potentially affected by CVE-2020-36632 via flat (3.0.0)

flat NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flat and may be impacted: - @albalyu/npm-scripts =2.0.1, =1.0.1-next.0, =2.2.1, =2.0.0-beta.3, =0.0.1-beta.2, =4.0.1, =0.3.0-beta.16, =0.3.0-beta.83 Source cves: CVE-2020-36632 Sour...

@emartech/angular-translate (>=2.0.0, <=2.3.0), @fjandin/config-man (>=1.2.0, <=1.2.4) +45 more potentially affected by CVE-2020-36632 via flat (5.0.0)

flat NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flat and may be impacted: - @emartech/angular-translate =2.0.0, =1.2.0, =0.0.2, =0.5.2, =3.34.3, =2.3.0, =2.7.0, =0.1.2, =1.0.0, =0.2.2, =0.0.5, =0.17.0, =0.5.0, =1.3.2 - good-confi...

node-sass-with-bindings (>=4.5.5, <=4.5.6) potentially affected by CVE-2022-25895 via lite-dev-server (3.2.7)

lite-dev-server NPM version 3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on lite-dev-server and may be impacted: - node-sass-with-bindings =4.5.5, =4.5.6 Source cves: CVE-2022-25895 Source advisory: OSV:GHSA-PPPV-CH8P-RP2W...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019073743), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.1-20221008145236) +190 more potentially affected by CVE-2022-25893 via vm2 (>=3.0.0, <=3.9.9)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves: CVE-2022-258...

@athenna/database (>=1.2.2, <=1.4.6), @aws-amplify/amplify-appsync-simulator (2.9.4-rdsv2preview.0) +141 more potentially affected by CVE-2016-20018 via knex (>=2.0.0, <=2.3.0)

knex NPM version =2.0.0, =1.2.2, =4.2.0-rds-v2.3, =10.5.3-rds-v2.0, =11.1.2-sync-fix.0 - @aws-amplify/graphql-auth-transformer 1.2.6-rdsv2preview.0 - @aws-amplify/graphql-default-value-transformer 0.7.8-rdsv2preview.0 - @aws-amplify/graphql-function-transformer 0.7.36-rdsv2preview.0 and more Sour...

ibc (>=0.11.0, <=0.19.0), ibc-relayer (>=0.11.0, <=0.19.0) +6 more potentially affected by CVE-2022-23507 via tendermint-light-client-verifier (>=0.23.5, <=0.27.0)

tendermint-light-client-verifier CARGO version =0.23.5, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.15.0, =0.23.5, =0.23.0, =0.27.0 Source cves: CVE-2022-23507 Source advisory: OSV:GHSA-XQQC-C5GW-C5R5...

node-sass-with-bindings (>=4.5.5, <=4.5.6) potentially affected by CVE-2022-25895 via lite-dev-server (3.2.7)

lite-dev-server NPM version 3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on lite-dev-server and may be impacted: - node-sass-with-bindings =4.5.5, =4.5.6 Source cves: CVE-2022-25895 Source advisory: SNYK:JS-LITEDEVSERVER-3153718...

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1267 more potentially affected by CVE-2022-41940 via engine.io (>=3.1.0, <=3.5.0)

engine.io NPM version =3.1.0, =4.11.25, =8.25.29, =0.1.53, =5.1.0, =5.1.0, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2022-41940 Source advisory: OSV:GHSA-R7QP-CFHV-P84W...

@flightpkg/create-redwood-app (1.0.0), @layer0/redwood (>=4.7.1-next-1639602777-e3c518e56.0, <=4.7.1-next-1639605987-6c7a0e965.0) +10 more potentially affected by unknown CVE via @redwoodjs/api (>=0.38.0, <=2.2.4)

@redwoodjs/api NPM version =0.38.0, =4.7.1-next-1639602777-e3c518e56.0, =0.38.0-rc.69, =0.38.0-rc.69, =0.39.0-rc.83, =0.38.0-rc.69, =0.38.0-rc.69, =0.38.0-rc.69, =0.38.0-rc.69, =0.0.1, =0.38.0-rc.69, =0.38.0-rc.69, =2.2.4 Source cves: unknown CVE Source advisory: OSV:GHSA-3QMC-2R76-4RQP...

@0x77/ccpack (>=0.0.0, <=0.1.5), @aio-server/core (>=0.0.1, <=0.0.1001) +27 more potentially affected by CVE-2022-39386 via fastify-websocket (>=4.0.0, <=4.2.2)

fastify-websocket NPM version =4.0.0, =0.0.0, =0.0.1, =0.0.1, =4.3.0-depup.0, =0.2.42, =2.0.3, =9.1.1, =1.8.0, =1.0.0-pre.3, =2.0.0-alpha, =1.0.0, =0.0.1, =1.0.1, =0.0.10, =0.0.40 and more Source cves: CVE-2022-39386 Source advisory: OSV:GHSA-4PCG-WR6C-H9CQ...

etclient (0.3.0), eth-utils (>=0.1.1, <=0.2.0) +32 more potentially affected by CVE-2022-39354 via evm (>=0.7.1, <=0.33.1)

evm CARGO version =0.7.1, =0.1.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2022-39354 Source advisory: OSV:RUSTSEC-2022-0083...

hapi-saml2 (>=3.2.0, <=3.2.1), tensor-cloudnative-express-auth (>=1.0.69, <=2.0.6) potentially affected by CVE-2022-39299 via passport-saml (3.2.0)

passport-saml NPM version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on passport-saml and may be impacted: - hapi-saml2 =3.2.0, =1.0.69, =2.0.6 Source cves: CVE-2022-39299 Source advisory: OSV:GHSA-M974-647V-WHV7...

kit-deploymentizer (>=3.1.4, <=4.6.38) potentially affected by CVE-2022-37614 via mockery (2.0.0)

mockery NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mockery and may be impacted: - kit-deploymentizer =3.1.4, =4.6.38 Source cves: CVE-2022-37614 Source advisory: OSV:GHSA-GMWP-3PWC-3J3G...

@adobe/git-server (>=1.0.1, <=1.0.5), @adobe/helix-cli (>=5.7.7, <=6.1.0) +34 more potentially affected by CVE-2022-22984 +1 more via snyk-gradle-plugin (>=3.1.0, <=3.24.2)

snyk-gradle-plugin NPM version =3.1.0, =1.0.1, =5.7.7, =2.16.1, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =0.2.0-a1, =1.20.0-alpha.11736.3, =1.24.0-alpha.1 and more Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory: SNYK:JS-SNYKGRADLEPLUGIN-3038624...

@adobe/helix-deploy (>=7.0.0, <=7.0.8) potentially affected by CVE-2022-39218 via @fastly/js-compute (>=0.4.0, <=0.5.2)

@fastly/js-compute NPM version =0.4.0, =7.0.0, =7.0.8 Source cves: CVE-2022-39218 Source advisory: OSV:GHSA-CMR8-5W4C-44V8...

d8s-archives (0.1.0), d8s-grammars (0.1.0) +5 more potentially affected by unknown CVE via democritus-strings (2021.1.28901)

democritus-strings PYPI version 2021.1.28901 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-strings and may be impacted: - d8s-archives 0.1.0 - d8s-grammars 0.1.0 - d8s-json 0.1.0 - d8s-math 0.1.0 - d8s-netstrings 0.1.0 - d8s-urls 0.1.0 -...

d8s-stats (0.1.0) potentially affected by unknown CVE via democritus-math (2021.1.2801)

democritus-math PYPI version 2021.1.2801 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-math and may be impacted: - d8s-stats 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSMATH-8400834...

d8s-dates (0.1.0) potentially affected by unknown CVE via democritus-timezones (2021.1.201)

democritus-timezones PYPI version 2021.1.201 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-timezones and may be impacted: - d8s-dates 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSTIMEZONES-8400832...

alloc-cortex-m (>=0.1.0, <=0.4.2), bottleos (0.2.0) +24 more potentially affected by CVE-2022-36086 via linked_list_allocator (>=0.2.7, <=0.9.1)

linkedlistallocator CARGO version =0.2.7, =0.1.0, =0.1.0, =0.3.0, =0.4.0-pre, =0.4.0-pre, =0.1.0, =0.0.1, =0.3.2, =0.11.0, =0.1.0, =0.1.3 and more Source cves: CVE-2022-36086 Source advisory: OSV:RUSTSEC-2022-0063...

@beer-code-industry/common-frontend (>=0.5.0, <=0.7.6), @birthdayresearch/contented (1.0.1) +29 more potentially affected by CVE-2022-36046 via next (12.2.3-canary.2)

next NPM version 12.2.3-canary.2 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @beer-code-industry/common-frontend =0.5.0, =1.0.1, =1.0.0, =1.89.0-next.89, =0.0.19, =0.0.19, =0.0.20, =0.0.44, =0.0.15, =0.0.31 -...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +137 more potentially affected by CVE-2022-24304 via mongoose (>=6.0.1, <=6.4.5)

mongoose NPM version =6.0.1, =1.2.3, =1.0.5, =1.0.9, =1.1.80, =0.0.1, =1.0.13, =1.0.0-rc.1.8.10, =1.0.2, =1.0.3, =0.4.3, =0.4.3, =0.4.3, =2.0.1, =2.0.2 and more Source cves: CVE-2022-24304 Source advisory: OSV:GHSA-H8HF-X3F4-XWGP...

@sandw/segoro (1.1.7) potentially affected by unknown CVE via suer (0.0.1-security)

suer NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on suer and may be impacted: - @sandw/segoro 1.1.7 Source cves: unknown CVE Source advisory: OSV:MAL-2022-6346...

console-blame (>=1.0.0, <=1.1.1), grunt-lintblame (>=0.1.0, <=0.3.5) +2 more potentially affected by CVE-2020-28434 via gitblame (>=0.1.0, <=0.1.1)

gitblame NPM version =0.1.0, =1.0.0, =0.1.0, =0.2.5, =0.9.5 - tch-lint-jshint 0.0.1 Source cves: CVE-2020-28434 Source advisory: OSV:GHSA-3486-RVXC-HRRJ...