10909 matches found
@alauda/custom-webpack (>=4.0.0, <=4.4.0), @glow-app/glow-client (0.3.0) +43 more potentially affected by CVE-2022-33987 via got (>=12.0.0, <=12.0.4)
got NPM version =12.0.0, =4.0.0, =1.0.1, =6.0.0, =10.1.2, =9.1.3, =4.0.5, =2.0.0, =1.0.0, =1.7.0, =0.0.0, =2.1.0, =1.1.0, =1.10.0, =2.5.0, =2.5.1 and more Source cves: CVE-2022-33987 Source advisory: OSV:GHSA-PFRX-2Q88-QQ97...
@mohamed.abdelall/omni-backend (>=1.0.0, <=1.1.53), generator-rest (0.2.0) +7 more potentially affected by CVE-2022-25871 via querymen (2.1.4)
querymen NPM version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on querymen and may be impacted: - @mohamed.abdelall/omni-backend =1.0.0, =0.0.1, =1.0.0, =1.0.0, =0.1.0, =1.0.14, =1.0.6, =1.4.10 - vulnogram 0.1.0-rc1 Source cves: CVE-2022-25871...
buster (0.1.0), glog (0.1.0) +4 more potentially affected by unknown CVE via thread_local (1.0.1)
threadlocal CARGO version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on threadlocal and may be impacted: - buster 0.1.0 - glog 0.1.0 - simconnect 0.1.4 - skia-bindings =0.37.0, =0.37.0, =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory:...
bencode (>=0.1.1, <=0.1.8), bincode (>=0.0.3, <=0.0.9) +49 more potentially affected by unknown CVE via rustc-serialize (>=0.1.5, <=0.3.22)
rustc-serialize CARGO version =0.1.5, =0.1.1, =0.0.3, =0.1.12, =0.1.2, =0.5.3, =0.5.2, =0.5.1, =0.1.4, =0.1.8, =0.6.41, =0.6.42 - docoptmacros 0.6.42 - email 0.0.9 - envelope 0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2226-4V3C-CFF8...
alexcrichton-cranelift-native (>=0.52.0, <=0.53.0), alexcrichton-cranelift-simplejit (0.53.0) +153 more potentially affected by CVE-2021-45687 via raw-cpuid (>=3.1.0, <=8.1.2)
raw-cpuid CARGO version =3.1.0, =0.52.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.26.1, =0.6.2, =0.5.0, =0.2.0, =0.5.1 and more Source cves: CVE-2021-45687 Source advisory: OSV:GHSA-JF5H-CF95-W759...
acid-store (>=0.8.0, <=0.11.2), alsa (0.5.1) +13 more potentially affected by CVE-2021-45707 via nix (0.21.0)
nix CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on nix and may be impacted: - acid-store =0.8.0, =0.1.4, =0.1.4, =0.1.4, =4.0.0, =0.1.0-alpha.1, =0.1.2, =0.10.0, =1.4.10, =0.13.0-alpha.1, =0.0.8, =0.0.13 Source cves: CVE-2021-4570...
agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)
csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-R67P-M7G9-GXW6...
a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), abci-rs (0.2.0) +424 more potentially affected by unknown CVE via crossbeam-queue (>=0.1.2, <=0.2.0)
crossbeam-queue CARGO version =0.1.2, =0.5.0-alpha.6, =0.0.2, =0.0.1, =0.1.0-alpha.2, =0.1.5, =0.12.0, =0.5.0, =0.1.0, =0.3.0 - amethyst-navigation 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6888-WF7J-34JQ...
a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +280 more potentially affected by CVE-2021-45688 via ash (>=0.24.4, <=0.32.1)
ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.2.0, =0.1.0, =0.1.3, =0.1.4 - aravis-utils 0.7.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:GHSA-QJ69-C89V-JWQ2...
@finsemble/finsemble-electron-adapter (>=7.0.0-beta.2, <=7.0.1), @manniwatch/client-desktop (>=0.28.3, <=0.29.1) +9 more potentially affected by CVE-2022-29247 via electron (>=16.0.2, <=16.2.3)
electron NPM version =16.0.2, =7.0.0-beta.2, =0.28.3, =0.0.1, =0.0.14, =0.0.15, =2.0.56, =1.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.3 Source cves: CVE-2022-29247 Source advisory: OSV:GHSA-MQ8J-3H7H-P8G7...
@3dlook/camera (>=2.1.0, <=2.2.0), @activescott/cookieconsent (>=1.0.0-beta.2, <=4.0.6) +408 more potentially affected by CVE-2022-31051 via semantic-release (>=17.0.4, <=19.0.2)
semantic-release NPM version =17.0.4, =2.1.0, =1.0.0-beta.2, =2.3.0, =1.0.0, =1.2.0, =1.0.0, =1.0.0, =2.1.2, =1.0.1, =3.0.0, =1.0.0, =1.33.1, =1.0.27, =1.0.29, =1.0.36 and more Source cves: CVE-2022-31051 Source advisory: OSV:GHSA-X2PG-MJHR-2M5X...
@ampersandhq/disable-proxy-ssl-verification (0.0.1), @deg-skeletor/plugin-express (>=1.4.0, <=1.4.8) +21 more potentially affected by CVE-2022-1929 via devcert (>=1.0.0, <=1.2.0)
devcert NPM version =1.0.0, =1.4.0, =1.0.0, =0.0.1, =1.0.0, =13.3.0, =0.0.18, =0.0.1, =1.0.0-alpha.1, =2.0.0-rc.15, =2.0.0-rc.3, =14.5.1 and more Source cves: CVE-2022-1929 Source advisory: OSV:GHSA-FP36-299X-PWMW...
@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-43306 via jquery-validation (>=1.14.0, <=1.19.1)
jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-43306 Source advisory: OSV:GHSA-J9M2-H2PV-WVPH...
16pixels (>=0.1.10, <=0.1.12), @3dlook/camera (>=2.1.0, <=2.2.0) +1120 more potentially affected by CVE-2022-29244 via npm (>=7.9.0, <=8.8.0)
npm NPM version =7.9.0, =0.1.10, =2.1.0, =5.0.5, =2.0.0, =1.0.0, =1.0.0-beta.2, =2.3.0, =1.0.0, =0.8.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0, =3.0.2 and more Source cves: CVE-2022-29244 Source advisory: OSV:GHSA-HJ9C-8JMM-8C52...
mongo-rest-api (0.1.0), pine-ql (>=0.1.0, <=0.5.4) potentially affected by CVE-2020-28272 via keyget (1.0.1)
keyget NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api 0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2020-28272 Source advisory: OSV:GHSA-8MP8-28XH-R486...
@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1912 via hermes-engine (>=0.0.0, <=0.5.1)
hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1912 Source advisory: OSV:GHSA-PF27-929J-9PMM...
@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1911 via hermes-engine (>=0.0.0, <=0.5.1)
hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1911 Source advisory: OSV:GHSA-F5X2-XV93-4P23...
gemachain-bpf-loader-program (1.8.0), lido (1.1.0-patch.1) +42 more potentially affected by CVE-2022-31264 via solana_rbpf (>=0.1.5, <=0.2.24)
solanarbpf CARGO version =0.1.5, =1.2.3, =0.1.1, =0.1.4, =0.1.0, =1.0.2, =3.0.1, =1.6.16, =1.6.16, =1.2.3, =1.2.4 and more Source cves: CVE-2022-31264 Source advisory: OSV:GHSA-FFX3-8QVM-PQ3J...
@hpcc-js/dgrid-shim (>=0.0.29, <=0.1.12), bryaktestgrid (>=0.0.1, <=0.0.6) +3 more potentially affected by CVE-2018-6561 via dijit (>=1.8.13, <=1.13.0)
dijit NPM version =1.8.13, =0.0.29, =0.0.1, =0.1.0, =1.8.13, =0.0.1, =0.5.24 Source cves: CVE-2018-6561 Source advisory: OSV:GHSA-WP32-WQ34-2RQH...
net.osgiliath.framework:net.osgiliath.features.karaf-features-full (>=0.0.1, <=0.0.3), net.osgiliath.framework:net.osgiliath.features.karaf-features-jpa (>=0.0.1, <=0.0.3) +48 more potentially affected by CVE-2015-7501 via org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections (>=3.2.1_1, <=3.2.1_3)
org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections MAVEN version =3.2.11, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.2.0, =1.0.2, =1.0.8 - org.frie...
@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +37 more potentially affected by CVE-2013-4942 via yui (>=3.5.0, <=3.9.1)
yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4942 Source advisory: OSV:GHSA-9WW8-J8J2-3788...
@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +37 more potentially affected by CVE-2013-4941 via yui (>=3.5.0, <=3.9.1)
yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4941 Source advisory: OSV:GHSA-64R3-582J-FRQM...
abci-storage (0.0.3), arcon_backend (>=0.1.0, <=0.1.1) +138 more potentially affected by unknown CVE via rocksdb (>=0.1.1, <=0.18.0)
rocksdb CARGO version =0.1.1, =0.1.0, =0.2.0, =0.2.0, =0.1.1, =1.2.0-alpha-1, =0.6.0, =6.0.0, =0.1.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0046...
a2 (>=0.2.0, <=0.3.6), abc (>=0.1.0, <=0.2.3) +502 more potentially affected by unknown CVE via crossbeam (>=0.1.6, <=0.6.0)
crossbeam CARGO version =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0020...
a2 (>=0.2.0, <=0.5.3), abci-rs (0.10.0) +5483 more potentially affected by unknown CVE via hyper (>=0.0.1, <=0.14.11)
hyper CARGO version =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0022...
1664 (>=0.2.1, <=0.2.3), @aeternity/aepp-sdk (0.25.0-0.1.0) +272 more potentially affected by CVE-2022-25324 via bignum (>=0.4.1, <=0.13.1)
bignum NPM version =0.4.1, =0.2.1, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =0.4.3, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.1.0 and more Source cves: CVE-2022-25324 Source advisory: OSV:GHSA-6429-3G3W-6MW5...
@koj/strapi (>=0.0.0, <=1.4.3), @psworld/backend_project (0.0.1) +11 more potentially affected by CVE-2021-46440 via strapi (>=3.0.0, <=3.6.8)
strapi NPM version =3.0.0, =0.0.0, =0.0.1, =0.0.34, =1.1.0, =0.1.3, =0.0.1-alpha.1, =0.3.0, =0.3.1 Source cves: CVE-2021-46440 Source advisory: OSV:GHSA-85VG-GRR5-PW42...
3loc (>=0.1.0, <=0.4.0), 3scale (0.2.0) +362 more potentially affected by CVE-2022-21144 via libxmljs (>=0.4.1, <=0.19.7)
libxmljs NPM version =0.4.1, =0.1.0, =4.0.1, =0.0.5, =0.1.0, =1.0.0, =0.0.0-development, =0.0.3, =1.3.0, =6.3.4, =0.2.0, =1.0.3-wmf.0, =0.1.2, =1.1.3-alpha.0, =1.1.5-wmf.0 - @leonardodino/freshbooks 2.0.0 and more Source cves: CVE-2022-21144 Source advisory: OSV:GHSA-773H-W45W-F2F9...
acmev02 (0.1.0), adventure-rusoto-ecs (0.4.0) +405 more potentially affected by unknown CVE via rusoto_credential (>=0.41.1, <=0.48.0)
rusotocredential CARGO version =0.41.1, =0.3.5, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.3.0 - aws-instance 0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0071...
payload-plugin-cloud-storage (>=0.0.1, <=1.1.0), payload-plugin-form-builder (1.0.0) potentially affected by CVE-2022-27952 via payload (>=0.8.2, <=0.14.0)
payload NPM version =0.8.2, =0.0.1, =1.1.0 - payload-plugin-form-builder 1.0.0 Source cves: CVE-2022-27952 Source advisory: OSV:GHSA-W8XH-93QH-35VW...
@apsis/cli (0.5.0), @asmallstudio/utilities (>=0.2.2, <=0.3.3) +121 more potentially affected by CVE-2022-24376 via git-promise (>=0.2.0, <=1.0.0)
git-promise NPM version =0.2.0, =0.2.2, =1.1.8, =1.0.0, =2.0.0-beta.10, =1.0.13, =1.0.0, =0.0.8, =1.1.1 - @efox/eslint-config-react-prittier-ts 1.0.19 - @efox/pay 1.0.8 - @efox/plugin-babel-react 1.0.1 - @emfc/emfc-cli 1.1.0 and more Source cves: CVE-2022-24376 Source advisory:...
10-24-dars (1.0.0), @alephdata/react-ftm (>=1.9.1, <=2.4.0-alpha.2) +205 more potentially affected by CVE-2021-23632 via git (0.1.5)
git NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on git and may be impacted: - 10-24-dars 1.0.0 - @alephdata/react-ftm =1.9.1, =1.5.2, =0.4.120, =1.0.0-alpha.0, =1.1.7, =1.0.1, =0.13.1, =1.12.2, =1.0.0, =2.1.1 -...
roaring-landmask (0.4.0) potentially affected by CVE-2022-0778 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-0778 Source advisory: OSV:RUSTSEC-2022-0014...
@hifi/amm (>=1.1.2, <=1.4.0), @hifi/flash-swap (>=1.0.1, <=1.3.1) +6 more potentially affected by unknown CVE via @openzeppelin/contracts-upgradeable (4.2.0)
@openzeppelin/contracts-upgradeable NPM version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/contracts-upgradeable and may be impacted: - @hifi/amm =1.1.2, =1.0.1, =1.1.2, =1.0.0, =0.8.1-pr-brioux-1333.92b26c3a.36, =1.0.5, =2.3.0...
bibjoin (>=0.2.2, <=0.3.0), idhash (0.1.3) +9 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.6.2)
arrow2 CARGO version =0.5.3, =0.2.2, =0.38.0, =0.38.0, =0.39.0 - polars 0.16.0 - polars-arrow 0.16.0 - polars-core 0.16.0 - polars-io 0.16.0 - polars-lazy 0.16.0 - rinfluxdb 0.2.0 - rinfluxdb-polars 0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0012...
@commercetools-docs/gatsby-theme-docs (>=0.0.0-canary-20211022203039, <=19.1.0), @dcl/docs-site (>=1.0.0-3010867520.commit-1740972, <=1.0.0-20220919140413.commit-6dee65c) +5 more potentially affected by CVE-2022-25863 via gatsby-plugin-mdx (>=3.2.0, <=3.13.0)
gatsby-plugin-mdx NPM version =3.2.0, =0.0.0-canary-20211022203039, =1.0.0-3010867520.commit-1740972, =1.1.1, =1.18.5, =1.0.2, =1.0.8 - gatsby.webstackbuilders.com 0.1.0 Source cves: CVE-2022-25863 Source advisory: SNYK:JS-GATSBYPLUGINMDX-2405699...
@accordproject/cicero-cli (>=0.3.4, <=0.22.3-20220223023655), @accordproject/cicero-common (>=0.3.4, <=0.3.12) +479 more potentially affected by CVE-2022-0613 via urijs (>=1.16.1, <=1.19.7)
urijs NPM version =1.16.1, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.4.5-20180705184508, =0.11.2-20190326183124, =0.10.2-20190213145246, =0.22.2-20210714131804, =0.0.5-20190507210024, =0.71.8-20190915045234, =0.80.2-20190926121100, =0.80.4-20191003231621, =0.61.2-20190916200303, =0.90.1-20200514190616,...
4q (>=0.5.0, <=0.6.0), @aibulat/fs (>=0.0.2, <=0.0.10) +100 more potentially affected by CVE-2022-21211 via posix (>=0.0.7, <=4.2.0)
posix NPM version =0.0.7, =0.5.0, =0.0.2, =0.0.1, =1.0.11, =1.0.0, =1.0.0, =1.0.0-beta.1, =0.1.3-beta.0, =1.161.831, =0.0.0, =0.2.14, =1.13.0-0, =0.1.6, =1.1.7, =2.4.1 and more Source cves: CVE-2022-21211 Source advisory: SNYK:JS-POSIX-2400719...
@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2021-23597 via fastify-multipart (>=5.2.1, <=5.3.0)
fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2021-23597 Source advisory: OSV:GHSA-QH73-QC3P-RJV2...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +2021 more potentially affected by CVE-2021-23383 via handlebars (>=4.0.0, <=4.7.6)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.2-alpha.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-23383 Source advisory: OSV:GHSA-765H-QJXV-5F44...
3d-crystal-model (0.1.0), 5ug-cli (>=1.0.23, <=1.0.70) +3150 more potentially affected by CVE-2020-15366 via ajv (>=6.0.0, <=6.12.2)
ajv NPM version =6.0.0, =1.0.23, =0.0.1, =1.0.0, =1.0.0, =6.0.0, =1.0.6, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.4, =3.0.0-beta.3, =0.0.1, =0.33.12 and more Source cves: CVE-2020-15366 Source advisory: OSV:GHSA-V88G-CGMW-V5XW...
-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42439 more potentially affected by CVE-2022-0536 via follow-redirects (>=1.0.0, <=1.14.7)
follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0536 Source advisory: OSV:GHSA-PW2R-VQ6V-HR8C...
@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +396 more potentially affected by CVE-2020-7793 via ua-parser-js (>=0.6.2, <=0.7.22)
ua-parser-js NPM version =0.6.2, =1.4.0, =0.16.9, =2018.7.11-0, =2.0.1, =1.0.0-beta.11, =2.0.0-beta.1, =1.9.0, =1.9.0, =1.0.0, =5.0.0, =1.1.3, =2.6.6, =2.7.0 and more Source cves: CVE-2020-7793 Source advisory: OSV:GHSA-394C-5J6W-4XMX...
create-frourio-app (>=0.15.0, <=0.29.0) potentially affected by CVE-2022-23623 via frourio (>=0.18.2, <=0.25.1)
frourio NPM version =0.18.2, =0.15.0, =0.29.0 Source cves: CVE-2022-23623 Source advisory: OSV:GHSA-8XXM-H73R-GHFJ...
@mohamed.abdelall/omni-backend (>=1.0.0, <=1.1.53), generator-rest (0.2.0) +7 more potentially affected by CVE-2020-7600 +1 more via querymen (2.1.4)
querymen NPM version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on querymen and may be impacted: - @mohamed.abdelall/omni-backend =1.0.0, =0.0.1, =1.0.0, =1.0.0, =0.1.0, =1.0.14, =1.0.6, =1.4.10 - vulnogram 0.1.0-rc1 Source cves: CVE-2020-7600,...
bmoor-cache (>=0.3.0, <=0.6.0), bmoor-comm (>=0.0.1, <=0.6.0) +7 more potentially affected by CVE-2021-23558 via bmoor (>=0.0.5, <=0.9.8)
bmoor NPM version =0.0.5, =0.3.0, =0.0.1, =0.5.0, =0.2.0, =0.1.0, =0.0.4, =0.6.0, =0.6.43 Source cves: CVE-2021-23558 Source advisory: OSV:GHSA-4M8H-H59M-M34J...
@webiny/api-page-builder (>=0.0.0-mt-1, <=5.21.0), @webiny/api-page-builder-import-export (>=0.0.0-mt-1, <=5.21.0) +5 more potentially affected by CVE-2021-23484 via zip-local (0.3.4)
zip-local NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on zip-local and may be impacted: - @webiny/api-page-builder =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.1.0, =0.0.2, =0.0.7 Source cves: CVE-2021-23484...
gemachain-bpf-loader-program (1.8.0), solana-bpf-loader-program (1.8.7) +1 more potentially affected by CVE-2021-46102 via solana_rbpf (>=0.2.14, <=0.2.16)
solanarbpf CARGO version =0.2.14, =0.1.8, =0.1.9 Source cves: CVE-2021-46102 Source advisory: OSV:GHSA-XWQR-XMGG-J69Q...
@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +11 more potentially affected by CVE-2021-23631 via convert-svg-to-png (>=0.3.3, <=0.4.0)
convert-svg-to-png NPM version =0.3.3, =0.0.1, =0.0.18, =0.1.6, =0.0.1, =1.0.3, =0.0.1, =0.0.3, =1.0.0, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.2 - xd2svg 0.8.0 Source cves: CVE-2021-23631 Source advisory: OSV:GHSA-JV7G-9G6Q-CXVW...
0.edsql (>=1.0.49, <=1.0.50), @codious/core (>=1.2.15, <=1.2.18) +99 more potentially affected by CVE-2022-21676 via engine.io (>=5.0.0, <=5.1.1)
engine.io NPM version =5.0.0, =1.0.49, =1.2.15, =0.5.3, =0.6.3, =0.6.3, =0.6.3, =0.6.3, =0.6.5, =0.6.4, =0.6.3, =0.6.3, =8.0.0, =2.0.0, =0.5.1-feat-1122.01a4d64d.130, =0.5.1-feat-1122.01a4d64d.130, =1.0.0-rc.3 and more Source cves: CVE-2022-21676 Source advisory: OSV:GHSA-273R-MGR4-V34F...