libdoh (>=0.9.0, <=0.9.4) potentially affected by CVE-2023-3766 via odoh-rs (1.0.0)

odoh-rs CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on odoh-rs and may be impacted: - libdoh =0.9.0, =0.9.4 Source cves: CVE-2023-3766 Source advisory: OSV:RUSTSEC-2023-0095...

@chargeover/strapi (0.0.1-rc1.1), @code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.5.1) +34 more potentially affected by CVE-2023-34093 via @strapi/strapi (>=4.0.0-beta.0, <=4.10.7)

@strapi/strapi NPM version =4.0.0-beta.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.9.2, =4.9.2, =1.0.5, =1.0.5, =1.0.0-alpha.0, =1.0.0-alpha.3 - @nexacarts/admin 2.0.9 and more Source cves: CVE-2023-34093 Source advisory: OSV:GHSA-CHMR-RG2F-9JMF...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2023-37466 via vm2 (>=3.0.0, <=3.9.19)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2023-37903 +1 more via vm2 (>=3.0.0, <=3.9.19)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +4042 more potentially affected by unknown CVE via memoffset (>=0.1.0, <=0.5.6)

memoffset CARGO version =0.1.0, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.7.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WFG4-322G-9VQV...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +866 more potentially affected by CVE-2023-53159 via openssl (>=0.2.18, <=0.10.52)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: CVE-2023-53159 Source advisory: OSV:RUSTSEC-2023-0044...

cyfs-cip (>=0.5.0, <=0.6.4) potentially affected by unknown CVE via cyfs-base (>=0.5.5, <=0.6.12)

cyfs-base CARGO version =0.5.5, =0.5.0, =0.6.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0046...

@story-telling-reporter/draft-editor (>=2.1.0-beta.0, <=2.1.2) potentially affected by unknown CVE via @keystone-6/core (5.2.0)

@keystone-6/core NPM version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @story-telling-reporter/draft-editor =2.1.0-beta.0, =2.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-5FP6-4XW3-XQQ3...

@cityofzion/neon-core (>=4.7.2, <=4.8.0), balanceofsatoshis (5.19.0) potentially affected by CVE-2020-36732 via crypto-js (3.2.0)

crypto-js NPM version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on crypto-js and may be impacted: - @cityofzion/neon-core =4.7.2, =4.8.0 - balanceofsatoshis 5.19.0 Source cves: CVE-2020-36732 Source advisory: OSV:GHSA-3W3W-PXMM-2W2J...

abel (>=0.1.0, <=0.1.1), abel-core (>=0.1.0, <=0.1.1) +323 more potentially affected by unknown CVE via ouroboros (>=0.5.1, <=0.15.6)

ouroboros CARGO version =0.5.1, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.2.0, =0.4.0, =0.6.0, =0.1.0, =1.1.0, =0.6.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0042...

@alioth_91/alita (>=3.3.9-patch.1, <=3.3.9-patch.2), @alitajs/vue-i18n (>=0.0.7, <=0.0.8) +98 more potentially affected by CVE-2023-34092 via vite (>=4.3.0, <=4.3.8)

vite NPM version =4.3.0, =3.3.9-patch.1, =0.0.7, =0.0.7, =0.0.7, =0.0.7, =0.0.7, =0.0.1-canary.0, =0.0.1-canary.0, =16.0.0-rc.2, =2.0.0-bate-1, =12.0.0, =0.0.0-canary-20230426131112, =0.0.1, =0.0.12 - @deconz-community/directus-extension-ddf-store 0.1.0 and more Source cves: CVE-2023-34092 Source...

conkie (0.0.1) potentially affected by CVE-2023-26129 via bwm-ng (0.1.1)

bwm-ng NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on bwm-ng and may be impacted: - conkie 0.0.1 Source cves: CVE-2023-26129 Source advisory: OSV:GHSA-8VW3-VXMJ-H43W...

@berrywallet/core (>=0.1.0, <=0.2.1), @counterplay/simpleflake (>=2.0.0, <=2.0.1) +55 more potentially affected by unknown CVE via bignum (>=0.12.5, <=0.13.0)

bignum NPM version =0.12.5, =0.1.0, =2.0.0, =1.0.0, =1.0.0, =0.14.6, =0.1.0, =1.1.0, =0.0.2, =0.0.17, =0.5.0, =1.0.0, =1.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7CGC-FJV4-52X6...

@devlego/builder (>=1.1.29-alpha.1, <=1.1.34), @metro-fs/analytics-plugin-posthog (>=1.0.0, <=1.6.0) +6 more potentially affected by CVE-2023-32325 via posthog-js (>=1.4.5, <=1.53.2)

posthog-js NPM version =1.4.5, =1.1.29-alpha.1, =1.0.0, =2.1.0, =2.0.5, =1.3.39, =3.28.0-rc.1, =1.16.0, =1.16.1 Source cves: CVE-2023-32325 Source advisory: OSV:GHSA-8775-5HWV-WR6V...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +230 more potentially affected by CVE-2023-32313 via vm2 (>=3.0.0, <=3.9.17)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27562 via n8n (>=0.81.0, <=0.214.5)

n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27562 Source advisory: OSV:GHSA-P58X-7733-VP9M...

n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27564 via n8n (>=0.81.0, <=0.214.5)

n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27564 Source advisory: OSV:GHSA-R9XW-P7WJ-W792...

@axosoft/azure-devops-node-api (6.6.3), @capgeminiuk/generator-powerapps-project (>=0.1.55, <=0.6.6) +70 more potentially affected by CVE-2023-30846 via typed-rest-client (>=1.0.7, <=1.7.3)

typed-rest-client NPM version =1.0.7, =0.1.55, =1.0.8-1, =2.0.0, =2.0.1-1, =1.1.0, =1.79.5, =0.0.1-develop.1, =1.0.0, =6.0.0 - @kcutils/color 0.2.0-rc.3 - @kcutils/error 0.3.0-rc.1 - @kcutils/helper 0.5.0-rc.5 - @kcutils/logger 0.5.0-rc.5 and more Source cves: CVE-2023-30846 Source advisory:...

003-gas-convert (1.0.1), 0510test (1.0.0) +9016 more potentially affected by CVE-2023-30533 via xlsx (>=0.3.10, <=0.18.5)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =1.0.1, =0.1.0, =0.1.0, =1.0.0, =1.0.46 and more Source cves: CVE-2023-30533 Source advisory: OSV:GHSA-4R6H-8V6P-XVW6...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +215 more potentially affected by CVE-2023-30547 via vm2 (>=3.0.0, <=3.9.16)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

@goboomtown/entities (>=0.0.14-beta, <=0.0.18-beta), @goboomtown/entities-nest (>=0.0.28-beta, <=0.0.82-beta) +5 more potentially affected by CVE-2022-4942 via eslint-detailed-reporter (>=0.6.10, <=0.8.0)

eslint-detailed-reporter NPM version =0.6.10, =0.0.14-beta, =0.0.28-beta, =0.0.9-beta, =1.0.4, =0.4.0, =1.0.0, =1.0.0, =1.0.7 Source cves: CVE-2022-4942 Source advisory: OSV:GHSA-4XR4-89M5-46C7...

acari-lib (>=0.1.1, <=0.1.8), agate (1.1.0) +59 more potentially affected by unknown CVE via tree_magic (0.2.3)

treemagic CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on treemagic and may be impacted: - acari-lib =0.1.1, =1.2.0, =0.6.0, =0.1.0, =0.1.0, =1.1.0, =0.10.1, =0.1.0, =0.1.4 - fractal-matrix-api 4.0.0 and more Source cves: unknown CV...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +213 more potentially affected by CVE-2023-29017 via vm2 (>=3.0.0, <=3.9.14)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

0.extends.wechat (>=1.0.51, <=1.0.65), 00ld8nuivn (2.1.0) +30707 more potentially affected by CVE-2023-0842 via xml2js (>=0.1.5, <=0.4.23)

xml2js NPM version =0.1.5, =1.0.51, =1.0.65 - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 - 0850u4lkpu 1.1.0 - 098of6vzvl 1.1.0 -...

matrix-react-sdk (>=3.48.0-rc.1, <=3.52.0) potentially affected by CVE-2022-36059 via matrix-js-sdk (>=19.0.0, <=19.3.0-rc.2)

matrix-js-sdk NPM version =19.0.0, =3.48.0-rc.1, =3.52.0 Source cves: CVE-2022-36059 Source advisory: OSV:GHSA-RFV9-X7HH-XC32...

core-lib (>=0.1.0, <=0.2.0), eventsourced-nats (>=0.1.0, <=0.6.0) +26 more potentially affected by unknown CVE via async-nats (>=0.9.18, <=0.27.1)

async-nats CARGO version =0.9.18, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.26.0, =0.25.0, =0.1.0, =0.12.0-alpha.1, =0.9.0, =0.16.0, =0.21.0 - wasmcloud-example-runner 0.4.0 - wasmcloud-examples-payments 0.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F5V5-CCQC-6W36...

core-lib (>=0.1.0, <=0.2.0), eventsourced-nats (>=0.1.0, <=0.6.0) +26 more potentially affected by unknown CVE via async-nats (>=0.9.18, <=0.27.1)

async-nats CARGO version =0.9.18, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.26.0, =0.25.0, =0.1.0, =0.12.0-alpha.1, =0.9.0, =0.16.0, =0.21.0 - wasmcloud-example-runner 0.4.0 - wasmcloud-examples-payments 0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0027...

dbaas (>=0.1.6, <=0.7.1) potentially affected by CVE-2023-28443 via directus (>=9.6.0, <=9.21.2)

directus NPM version =9.6.0, =0.1.6, =0.7.1 Source cves: CVE-2023-28443 Source advisory: OSV:GHSA-8VG2-WF3Q-MWV7...

cargo-generate (>=0.13.1, <=0.16.0), cargo-smart-release (>=0.1.0, <=0.2.4) +43 more potentially affected by unknown CVE via git-hash (>=0.1.2, <=0.10.3)

git-hash CARGO version =0.1.2, =0.13.1, =0.1.0, =0.2.11, =11.0.0, =0.12.11, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.3 - git-lock 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...

@byinti/printer-js (>=0.0.1, <=0.0.6), @dkaframework/printer (1.0.1) +18 more potentially affected by CVE-2023-26110 via node-bluetooth (1.2.6)

node-bluetooth NPM version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth and may be impacted: - @byinti/printer-js =0.0.1, =1.0.3, =1.2.11, =0.0.3, =2.5.0, =0.0.1-alpha.0, =0.1.0, =0.1.8, =1.0.3, =0.1.3, =0.1.5 - flexprinter 0.0....

iobroker.combustion-control (0.0.1), jcode-ble (0.0.1) +1 more potentially affected by CVE-2023-26109 via node-bluetooth-serial-port (2.2.7)

node-bluetooth-serial-port NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth-serial-port and may be impacted: - iobroker.combustion-control 0.0.1 - jcode-ble 0.0.1 - jcode-bluetooth =0.1.0, =0.9.2 Source cves:...

barfs (0.1.2), cranefack (0.4.1) +49 more potentially affected by CVE-2023-26489 via cranelift-codegen (>=0.84.0, <=0.90.1)

cranelift-codegen CARGO version =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =10.0.0, =10.0.0, =17.0.0 and more Source cves: CVE-2023-26489 Source advisory: OSV:GHSA-FF4P-7XRQ-Q5R8...

@broadcom/test4z (>=0.0.1, <=2.0.0), @ibm/rse-api-for-zowe-cli (>=2.0.2, <=3.0.1) +2 more potentially affected by CVE-2021-4326 via @zowe/imperative (>=5.0.0, <=5.7.0)

@zowe/imperative NPM version =5.0.0, =0.0.1, =2.0.2, =7.0.0-next.202003271736, =2.0.0-next.202110141604, =2.4.1 Source cves: CVE-2021-4326 Source advisory: OSV:GHSA-6Q8M-42QQ-64R7...

abrute (>=0.1.7, <=0.1.9), alass-cli (>=1.0.0, <=2.0.0) +159 more potentially affected by unknown CVE via ascii (>=0.7.1, <=0.8.7)

ascii CARGO version =0.7.1, =0.1.7, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.0.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0015...

vue2-baremetrics-calendar (>=0.1.0, <=1.6.1) potentially affected by CVE-2021-32859 via baremetrics-calendar (1.0.14)

baremetrics-calendar NPM version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on baremetrics-calendar and may be impacted: - vue2-baremetrics-calendar =0.1.0, =1.6.1 Source cves: CVE-2021-32859 Source advisory: OSV:GHSA-465F-MXXH-GRC4...

azureml_widgets (>=1.0.0, <=1.0.6) potentially affected by CVE-2021-32860 via izimodal (1.5.1)

izimodal NPM version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on izimodal and may be impacted: - azuremlwidgets =1.0.0, =1.0.6 Source cves: CVE-2021-32860 Source advisory: OSV:GHSA-H685-83W4-3PH3...

aubio-sys (>=0.2.0, <=0.2.1), bioutils (>=0.1.5, <=0.2.4) +31 more potentially affected by unknown CVE via ftp (3.0.1)

ftp CARGO version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ftp and may be impacted: - aubio-sys =0.2.0, =0.1.5, =0.2.0, =0.32.0, =0.0.1, =0.6.0, =0.6.0, =0.1.0, =0.0.1, =1.1.1, =0.3.0, =0.5.0, =0.0.1, =0.4.17, =0.6.0 and more Source cves:...

@janus-idp/backstage-plugin-keycloak-backend (1.0.0) potentially affected by CVE-2023-25571 via @backstage/plugin-catalog-backend (1.5.1)

@backstage/plugin-catalog-backend NPM version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-catalog-backend and may be impacted: - @janus-idp/backstage-plugin-keycloak-backend 1.0.0 Source cves: CVE-2023-25571 Source advisory:...

@api-platform/admin (3.0.0-rc.0) potentially affected by CVE-2023-25572 via react-admin (4.0.0-rc.0)

react-admin NPM version 4.0.0-rc.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-admin and may be impacted: - @api-platform/admin 3.0.0-rc.0 Source cves: CVE-2023-25572 Source advisory: OSV:GHSA-5JCR-82FH-339V...

@arcblock/gatsby-theme-docs (>=5.7.0, <=7.34.5), @changeinc/components (>=1.0.4, <=1.0.20) +87 more potentially affected by CVE-2021-23433 +1 more via algoliasearch-helper (>=2.1.2, <=2.28.1)

algoliasearch-helper NPM version =2.1.2, =5.7.0, =1.0.4, =1.0.4, =1.0.0, =2.2.1-custom, =0.0.7, =0.1.2, =0.1.4, =0.2.3, =0.2.1, =0.0.1, =2.0.0, =0.0.0, =1.9.0, =1.0.0, =1.4.2 and more Source cves: CVE-2021-23433, CVE-2025-3193 Source advisory: SNYK:JS-ALGOLIASEARCHHELPER-3318396...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0216 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0216 Source advisory: OSV:GHSA-29XX-HCV2-C4CP...

@byinti/printer-js (>=0.0.1, <=0.0.6), @dkaframework/printer (1.0.1) +18 more potentially affected by CVE-2023-26110 via node-bluetooth (1.2.6)

node-bluetooth NPM version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth and may be impacted: - @byinti/printer-js =0.0.1, =1.0.3, =1.2.11, =0.0.3, =2.5.0, =0.0.1-alpha.0, =0.1.0, =0.1.8, =1.0.3, =0.1.3, =0.1.5 - flexprinter 0.0....

@chenng/recognition (1.0.0), @evelaguti/uberocr (>=0.0.1, <=0.0.3) +62 more potentially affected by CVE-2018-25079 via is-url (>=1.0.0, <=1.2.2)

is-url NPM version =1.0.0, =0.0.1, =1.0.1, =0.4.0, =0.1.1, =0.1.0, =0.0.4, =0.0.1, =1.0.5, =0.1.0, =0.1.6, =0.0.3, =0.0.5 and more Source cves: CVE-2018-25079 Source advisory: OSV:GHSA-P9W8-2MPQ-49H9...

1095h-cli (1.0.1), 5coder-pages (0.2.0) +547 more potentially affected by CVE-2023-25344 via swig-templates (>=2.0.2, <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0-beta.1, =0.0.1-alpha.0, =0.0.1 and more Source cves: CVE-2023-25344 Source advisory: SNYK:JS-SWIGTEMPLATES-3266806...

1095h-cli (1.0.1), 5coder-pages (0.2.0) +547 more potentially affected by CVE-2023-25345 via swig-templates (>=2.0.2, <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0-beta.1, =0.0.1-alpha.0, =0.0.1 and more Source cves: CVE-2023-25345 Source advisory: SNYK:JS-SWIGTEMPLATES-3266805...

@aaa-backend-stack/file-storage-local (>=1.16.0, <=2.4.4), @aaa-backend-stack/file-storage-s3 (>=1.16.0, <=2.4.4) +627 more potentially affected by unknown CVE via zxcvbn (>=2.0.1, <=4.4.2)

zxcvbn NPM version =2.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =1.0.0, =0.0.9, =1.7.7, =2.0.6, =0.0.5, =1.1.10, =1.16.136 and more Source cves: unknown CVE Source advisory: SNYK:JS-ZXCVBN-3257741...

@2109-t5/server (>=1.0.0, <=1.0.9), @accounter/green-invoice-graphql (>=0.7.2-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, <=0.7.3-alpha-20250224164805-3a96c9f8d619656e3b6a8c0d26319b937adbafe6) +207 more potentially affected by CVE-2022-25881 via http-cache-semantics (>=4.0.3, <=4.1.0)

http-cache-semantics NPM version =4.0.3, =1.0.0, =0.7.2-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =0.2.3-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =0.2.3-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =1.1.3, =3.0.0, =1.9.19, =1.18.0,...

acari-lib (>=0.1.11, <=0.1.12), acme-rs (>=0.1.0, <=0.2.0) +355 more potentially affected by unknown CVE via buf_redux (>=0.1.3, <=0.8.4)

bufredux CARGO version =0.1.3, =0.1.11, =0.1.0, =0.9.2, =0.5.1, =0.2.0, =0.1.0, =0.0.1, =0.1.5, =0.0.5, =0.0.1, =0.1.0, =1.0.0, =0.26.1, =0.26.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0028...

cargo-crates (>=0.1.3, <=0.1.5), cargo-index-transit (0.1.1) +6 more potentially affected by CVE-2023-22742 via libgit2-sys (0.14.1+1.5.0)

libgit2-sys CARGO version 0.14.1+1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on libgit2-sys and may be impacted: - cargo-crates =0.1.3, =0.1.0, =2.1.8, =2.7.0, =0.6.0, =0.6.2 Source cves: CVE-2023-22742 Source advisory: OSV:RUSTSEC-2023-0003...

csv-interact (>=0.0.1, <=1.0.0), jb55-json2csv (>=3.0.0, <=3.1.1) +1 more potentially affected by CVE-2023-26106 via dot-lens (1.2.3)

dot-lens NPM version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on dot-lens and may be impacted: - csv-interact =0.0.1, =3.0.0, =3.1.1 - tableize-csv-parser 0.0.1 Source cves: CVE-2023-26106 Source advisory: SNYK:JS-DOTLENS-3227646...