@kentcdodds/workshop-app (>=1.41.0, <=1.46.7), remix-server-kit (>=3.0.0-beta1, <=3.0.0-beta4) potentially affected by CVE-2024-32866 via @conform-to/zod (>=0.5.1, <=0.7.4)

@conform-to/zod NPM version =0.5.1, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...

@leapwallet/elements (1.1.0), @neoswap/solana-collection-swap (0.1.6-Beta1) +3 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.91.1, <=1.91.2)

@solana/web3.js NPM version =1.91.1, =0.0.18, =4.1.2, =2.2.5, =6.1.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@dynamic-labs/blocto-evm (>=0.19.0-alpha.21, <=2.1.0-alpha.0), @dynamic-labs/ethereum (>=0.17.0-RC.9, <=2.1.0-alpha.0) +18 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.70.1, <=1.70.3)

@solana/web3.js NPM version =1.70.1, =0.19.0-alpha.21, =0.17.0-RC.9, =2.0.0-alpha.31, =0.18.100-viem.1, =0.15.1-minimal.0, =2.0.0-alpha.4, =0.17.0-RC.7, =0.17.0-RC.7, =0.17.0-RC.10, =0.19.3, =0.19.0-alpha.13, =2.1.0, =0.1.18, =0.0.23, =0.0.21, =0.0.32 and more Source cves: CVE-2024-30253 Source...

@civic/civic-sign (>=0.0.4, <=0.0.14), @civic/serum (>=0.17.3, <=0.17.4) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.39.0, <=1.39.1)

@solana/web3.js NPM version =1.39.0, =0.0.4, =0.17.3, =0.3.1-3.beta.1, =0.0.1, =0.2.1, =3.4.1, =2.0.0-beta.1, =0.4.3, =3.11.8, =3.11.14 - winto-sdk 1.0.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2024-32884 via gix (0.0.0)

gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2024-32884 Source advisory: OSV:GHSA-98P4-XJMM-8MFH...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +476 more potentially affected by CVE-2024-31207 via vite (>=4.0.0, <=4.5.2)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2024-31207 Source advisory: OSV:GHSA-8JHW-289H-JH2G...

@hyperledger/cactus-plugin-htlc-coordinator-besu (2.0.0-alpha.2), @hyperledger/cactus-plugin-persistence-ethereum (>=2.0.0-2945-supply-chain-app-build-failed.241, <=2.0.0-main.214) +19 more potentially affected by CVE-2024-21505 via web3-utils (>=4.0.2, <=4.1.2-dev.998954f.0)

web3-utils NPM version =4.0.2, =2.0.0-2945-supply-chain-app-build-failed.241, =2.0.0-2945-supply-chain-app-build-failed.241, =0.0.88, =0.0.84, =0.0.244-test-deposit-improve-v19, =4.0.2-dev.023f02d.0, =4.0.2-dev.023f02d.0, =4.0.2-dev.023f02d.0, =4.0.2-dev.023f02d.0, =4.0.2-dev.023f02d.0,...

aliyundrive-webdav (>=1.2.0, <=1.10.1), simple-hyper-server-tls (>=0.1.0, <=0.3.2) +1 more potentially affected by CVE-2024-28854 via tls-listener (>=0.3.0, <=0.5.1)

tls-listener CARGO version =0.3.0, =1.2.0, =0.1.0, =0.3.2 - yahf 0.0.2 Source cves: CVE-2024-28854 Source advisory: OSV:GHSA-2QPH-QPVM-2QF7...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +3 more potentially affected by CVE-2024-1765 via quiche (>=0.10.0, <=0.18.0)

quiche CARGO version =0.10.0, =0.1.0, =0.6.9 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2024-1765 Source advisory: OSV:GHSA-78WX-JG4J-5J6G...

@adobe/helix-google-support (>=1.3.4, <=3.0.8), @adobe/helix-html-pipeline (>=3.0.0, <=5.0.11) +454 more potentially affected by CVE-2024-28176 via jose (>=3.7.0, <=4.15.4)

jose NPM version =3.7.0, =1.3.4, =3.0.0, =1.11.39, =8.0.0, =2.1.2, =1.6.0, =2.1.1, =1.5.3, =7.1.0, =0.1.0, =1.23.2, =0.1.1, =0.1.4 and more Source cves: CVE-2024-28176 Source advisory: OSV:GHSA-HHHV-Q57G-882Q...

@1inch/calldata-compressor (>=0.0.6, <=0.0.7), @1inch/delegating (>=1.1.0, <=2.0.0) +29 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts (>=5.0.0, <=5.0.1)

@openzeppelin/contracts NPM version =5.0.0, =0.0.6, =1.1.0, =3.2.0, =4.0.0-prerelease-16, =4.0.1, =2.0.0-prerelease, =3.3.0, =1.2.0, =2.0.0-rc.0, =0.0.2-00080dc-272, =1.0.0, =2.5.5, =2.7.0-3 and more Source cves: CVE-2024-27094 Source advisory: OSV:GHSA-9VX6-7XXF-X967...

@rocketmakers/prettier-config (>=1.0.1, <=2.1.0), @rocketmakers/stylelint-config (>=1.0.1, <=2.1.0) potentially affected by CVE-2024-1899 via showdown (2.0.1)

showdown NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on showdown and may be impacted: - @rocketmakers/prettier-config =1.0.1, =1.0.1, =2.1.0 Source cves: CVE-2024-1899 Source advisory: OSV:GHSA-RMMH-P597-PPVV...

@apolitical/component-library (>=1.7.0-beta.1, <=10.5.2), @apolitical/styleguide2 (>=3.17.0-rc.1, <=7.8.1) +60 more potentially affected by CVE-2024-21535 via markdown-to-jsx (>=7.0.0, <=7.3.2)

markdown-to-jsx NPM version =7.0.0, =1.7.0-beta.1, =3.17.0-rc.1, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =6.1.1, =7.3.2, =0.1.0, =0.9.1, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =0.1.0-alpha.39, =1.1.1-beta.3, =1.2.2 and more Source cves: CVE-2024-21535 Source advisory:...

@edropin/canvas (>=1.1.0, <=2.0.0), @launchtray/hatch-test-pdf (>=0.11.2, <=0.23.0) +15 more potentially affected by unknown CVE via pdf-image (>=1.1.0, <=2.0.0)

pdf-image NPM version =1.1.0, =1.1.0, =0.11.2, =0.2.0, =0.0.2, =0.13.0-beta.1, =0.0.2, =0.0.12, =0.19.5, =0.0.2, =0.1.1, =0.3.0, =0.1.1, =1.0.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-PDFIMAGE-6424686...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +2 more potentially affected by CVE-2023-6193 via quiche (>=0.16.0, <=0.18.0)

quiche CARGO version =0.16.0, =0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on quiche and may be impacted: - masquerade-proxy 0.1.0 - monoio-quiche 0.0.1 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2023-6193 Source advisory:...

@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +134 more potentially affected by CVE-2023-48219 via tinymce (>=5.0.6, <=5.10.8)

tinymce NPM version =5.0.6, =0.1.2, =0.3.7, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =0.5.2, =10.3.1-snapshot-1616513687673, =0.1.0, =1.68.82, =0.65.0, =0.18.0, =3.4.0 and more Source cves: CVE-2023-48219 Source advisory: OSV:GHSA-V626-R774-J7F8...

123-x-ed-eied (>=1.0.5, <=1.0.6), 24social-ui (>=1.0.0, <=1.0.5) +4988 more potentially affected by CVE-2023-46298 via next (>=1.2.3, <=13.4.19)

next NPM version =1.2.3, =1.0.5, =1.0.0, =0.0.2, =0.3.0, =1.0.51, =0.0.0-canary.0, =0.0.1, =1.0.0, =0.0.2, =1.6.1, =1.6.3 - @6bdigital/crm-component-library 0.0.1 - @90pixel/okr 0.1.0 and more Source cves: CVE-2023-46298 Source advisory: OSV:GHSA-C59H-R6P8-Q9WC...

ahqstore_cli_rs (>=1.0.0-rc10, <=1.0.0-rc11), algebraics (>=0.1.2, <=0.2.0) +244 more potentially affected by unknown CVE via inventory (>=0.1.10, <=0.1.11)

inventory CARGO version =0.1.10, =1.0.0-rc10, =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.7.0, =0.6.0, =0.5.0, =0.6.0, =0.4.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0058...

@cubesoft/nx-electron (>=0.49.0, <=0.65.0), @grandlinex/e-kernel (>=0.30.0, <=0.32.0) +4 more potentially affected by CVE-2023-29198 via electron (>=23.0.0, <=23.2.1)

electron NPM version =23.0.0, =0.49.0, =0.30.0, =1.0.0, =0.0.90, =0.0.1, =0.0.15 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@bitfoot/theme-ngx-globular (>=0.1.1, <=0.1.15), @dashkite/genie-markdown (>=0.0.1, <=0.0.5) +43 more potentially affected by CVE-2023-26364 via @adobe/css-tools (>=4.2.0, <=4.3.0-rc.1)

@adobe/css-tools NPM version =4.2.0, =0.1.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.3, =0.1.26, =3.2.0, =3.1.0, =0.1.0-beta.3, =0.0.1, =0.0.3, =7.5.3, =7.5.5 and more Source cves: CVE-2023-26364 Source advisory: OSV:GHSA-HPX4-R86G-5JRG...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1553 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts (>=4.0.0, <=4.9.2)

@openzeppelin/contracts NPM version =4.0.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-40014 Source advisory: OSV:GHSA-G4VP-M682-QQMP...

@activepieces/piece-amazon-s3 (0.0.2), @adobe/helix-admin-support (>=2.1.22, <=2.1.23) +472 more potentially affected by unknown CVE via fast-xml-parser (4.2.4)

fast-xml-parser NPM version 4.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-xml-parser and may be impacted: - @activepieces/piece-amazon-s3 0.0.2 - @adobe/helix-admin-support =2.1.22, =9.0.39, =2.1.1, =2.1.15, =1.11.158, =1.0.4-0, =1.2.39-0,...

@actvalue/av-aws-sdk (>=0.5.0, <=0.9.2), @adiza/sfpowerscripts (>=23.0.0, <=25.0.7) +617 more potentially affected by CVE-2021-26920 +1 more via fast-xml-parser (>=4.0.0, <=4.1.1)

fast-xml-parser NPM version =4.0.0, =0.5.0, =23.0.0, =35.0.0, =1.6.3, =7.1.3, =2.0.17, =1.2.11, =1.11.83, =8.3.11, =3.10.0, =3.0.0, =0.0.1-beta.1, =0.0.1-beta.1, =2.0.0, =10.8.0-RC.0, =10.12.0-RC.1 and more Source cves: CVE-2021-26920, CVE-2023-26920 Source advisory: OSV:GHSA-X3CC-X39P-42QX...

@alioth_91/alita (>=3.3.9-patch.1, <=3.3.9-patch.2), @alitajs/vue-i18n (>=0.0.7, <=0.0.8) +98 more potentially affected by CVE-2023-34092 via vite (>=4.3.0, <=4.3.8)

vite NPM version =4.3.0, =3.3.9-patch.1, =0.0.7, =0.0.7, =0.0.7, =0.0.7, =0.0.7, =0.0.1-canary.0, =0.0.1-canary.0, =16.0.0-rc.2, =2.0.0-bate-1, =12.0.0, =0.0.0-canary-20230426131112, =0.0.1, =0.0.12 - @deconz-community/directus-extension-ddf-store 0.1.0 and more Source cves: CVE-2023-34092 Source...

@nexgin/totaljsapplication (>=0.0.1, <=0.0.66) potentially affected by CVE-2023-30094 via total4 (0.0.80)

total4 NPM version 0.0.80 is affected by a known vulnerability. The following packages have a transitive dependency on total4 and may be impacted: - @nexgin/totaljsapplication =0.0.1, =0.0.66 Source cves: CVE-2023-30094 Source advisory: OSV:GHSA-JJ45-24RW-V6JW...

@0l00000l/auth (>=1.0.0, <=1.0.8), @1sat/cli (>=0.0.53, <=0.0.110) +1023 more potentially affected by CVE-2023-2251 via yaml (>=2.0.0, <=2.2.1)

yaml NPM version =2.0.0, =1.0.0, =0.0.53, =0.0.31, =0.0.9, =2.0.0, =1.2.2-20211215122352, =3.0.0, =2.1.42, =1.1.5, =14.6.15, =1.11.39, =9.0.0, =2.0.0, =2.0.0, =0.0.1-AHG-001, =0.0.1-AHG-002 and more Source cves: CVE-2023-2251 Source advisory: OSV:GHSA-F9XV-Q969-PQX4...

accountnovafi (>=0.1.0, <=0.2.0), accountnovafi1 (0.1.0) +942 more potentially affected by unknown CVE via borsh (>=0.2.10, <=0.10.3)

borsh CARGO version =0.2.10, =0.1.0, =0.1.0, =1.0.5, =0.0.1, =0.0.1, =0.0.0-alpha, =0.0.1-alpha.1, =0.1.0, =0.0.1, =0.1.0, =0.2.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0033...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +213 more potentially affected by CVE-2023-29017 via vm2 (>=3.0.0, <=3.9.14)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

@brewer/beerui (>=1.1.9, <=1.1.17), @dirk-bester/dark-light (>=0.0.1, <=1.0.0) +18 more potentially affected by CVE-2023-29008 via @sveltejs/kit (>=1.0.0, <=1.13.0)

@sveltejs/kit NPM version =1.0.0, =1.1.9, =0.0.1, =4.6.2, =0.0.0-24593668, =4.3.8, =1.0.4, =1.0.0-next.8, =1.0.0-next.13, =0.0.20, =0.15.0-next.1, =0.19.0, =0.17.0-next.1, =0.18.0 and more Source cves: CVE-2023-29008 Source advisory: OSV:GHSA-GV7G-X59X-WF8F...

amts-prelude (>=0.2.2, <=0.2.4), async-nats (>=0.9.0, <=0.10.1) +36 more potentially affected by unknown CVE via nats (>=0.9.18, <=0.23.1)

nats CARGO version =0.9.18, =0.2.2, =0.9.0, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.17.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.6.0-beta.1, =0.9.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0029...

cargo-generate (>=0.13.1, <=0.16.0), cargo-smart-release (>=0.1.0, <=0.2.4) +44 more potentially affected by unknown CVE via git-hash (>=0.1.2, <=0.10.3)

git-hash CARGO version =0.1.2, =0.13.1, =0.1.0, =0.2.11, =11.0.0, =0.12.11, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.3 - git-lock 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...

@byinti/printer-js (>=0.0.1, <=0.0.6), @dkaframework/printer (1.0.1) +18 more potentially affected by CVE-2023-26110 via node-bluetooth (1.2.6)

node-bluetooth NPM version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth and may be impacted: - @byinti/printer-js =0.0.1, =1.0.3, =1.2.11, =0.0.3, =2.5.0, =0.0.1-alpha.0, =0.1.0, =0.1.8, =1.0.3, =0.1.3, =0.1.5 - flexprinter 0.0....

@roots/bud-imagemin (2023.2.13) potentially affected by unknown CVE via @roots/bud (2023.2.13)

@roots/bud NPM version 2023.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on @roots/bud and may be impacted: - @roots/bud-imagemin 2023.2.13 Source cves: unknown CVE Source advisory: SNYK:JS-ROOTSBUD-3326363...

@accounter-toolkit/green-invoice-graphql (>=0.0.2-alpha-20220914223128-d706aab, <=0.2.0-alpha-20230313141007-4bdbab6), @accounter-toolkit/hashavshevet-mesh (>=0.0.2-alpha-20220915073207-1bb0680, <=0.0.4-alpha-20230313141007-4bdbab6) +11 more potentially affected by CVE-2025-27098 via @graphql-mesh/http (>=0.1.0, <=0.3.18-alpha-20230215130920-0b4a8cec6)

@graphql-mesh/http NPM version =0.1.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =0.2.0-alpha.24, =5.1.0-canary.3, =6.0.0-canary.20, =6.0.0-canary.20, =6.0.0-canary.20, =2.2.6-alpha-20220906004558-09c8599,...

accesskit_consumer (>=0.1.0, <=0.7.1), accesskit_windows (>=0.1.0, <=0.8.0) +977 more potentially affected by unknown CVE via im (>=9.0.0, <=15.1.0)

im CARGO version =9.0.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =1.0.5, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.0.1, =0.0.1, =0.0.0-alpha, =0.0.0-alpha.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0126...

svg-sketch-pdf (>=1.0.12, <=1.0.28) potentially affected by CVE-2018-25061 via rgb2hex (0.1.0)

rgb2hex NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on rgb2hex and may be impacted: - svg-sketch-pdf =1.0.12, =1.0.28 Source cves: CVE-2018-25061 Source advisory: OSV:GHSA-7599-FQGM-V84P...

37sy-build (>=1.0.0, <=1.3.3), @emintayfur/hub (>=0.0.1, <=0.1.2) +117 more potentially affected by CVE-2023-26135 via flatnest (>=0.2.2, <=1.0.1)

flatnest NPM version =0.2.2, =1.0.0, =0.0.1, =0.5.10, =0.1.2, =1.0.71, =1.0.23, =1.0.1-alpha.0, =1.2.1, =0.0.1-1, =1.0.1, =1.0.10, =1.0.0, =0.0.1, =1.0.6 and more Source cves: CVE-2023-26135 Source advisory: SNYK:JS-FLATNEST-3185149...

@braira/changelog (>=1.0.0, <=1.0.4), grunt-ivantage-svn-changelog (>=0.3.0, <=0.4.1) potentially affected by CVE-2022-25853 via semver-tags (>=0.1.5, <=0.4.10)

semver-tags NPM version =0.1.5, =1.0.0, =0.3.0, =0.4.1 Source cves: CVE-2022-25853 Source advisory: SNYK:JS-SEMVERTAGS-3175612...

@athenna/database (>=1.2.2, <=1.4.6), @aws-amplify/amplify-appsync-simulator (2.9.4-rdsv2preview.0) +141 more potentially affected by CVE-2016-20018 via knex (>=2.0.0, <=2.3.0)

knex NPM version =2.0.0, =1.2.2, =4.2.0-rds-v2.3, =10.5.3-rds-v2.0, =11.1.2-sync-fix.0 - @aws-amplify/graphql-auth-transformer 1.2.6-rdsv2preview.0 - @aws-amplify/graphql-default-value-transformer 0.7.8-rdsv2preview.0 - @aws-amplify/graphql-function-transformer 0.7.36-rdsv2preview.0 and more Sour...

auditor (>=0.0.1, <=0.0.2), avrisp (0.3.0) +29 more potentially affected by unknown CVE via claim (>=0.3.1, <=0.5.0)

claim CARGO version =0.3.1, =0.0.1, =0.1.0, =0.3.0, =0.1.0, =0.2.0, =0.1.1, =2.0.0, =0.1.0, =0.0.1, =0.0.2, =0.9.0, =0.8.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0077...

bioyino-metric (>=0.1.0, <=0.2.0), cafs (0.0.1) +29 more potentially affected by CVE-2022-46149 via capnp (>=0.0.1, <=0.12.4)

capnp CARGO version =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.5.0, =0.1.6, =0.2.8, =0.2.0, =0.17.0, =0.2.2, =0.6.0, =0.7.0 and more Source cves: CVE-2022-46149 Source advisory: OSV:RUSTSEC-2022-0068...

@abstraktor/actordemo (>=0.0.0-ad-beta.1, <=0.0.0-ad-beta.2), @abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.6) +175 more potentially affected by CVE-2022-24066 +1 more via simple-git (>=3.0.3, <=3.14.1)

simple-git NPM version =3.0.3, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =1.4.0, =5.15.0, =10.0.0-version-usage.0, =1.0.1, =2.0.0, =1.1.0, =1.1.0, =0.0.0-semantic-release, =1.1.12, =0.0.1, =0.0.63 - @custis/file-adapter-front 1.1.1 and more Source cves: CVE-2022-24066, CVE-2022-25912 Source advisory:...

hapi-saml2 (>=3.2.0, <=3.2.1), tensor-cloudnative-express-auth (>=1.0.69, <=2.0.6) potentially affected by CVE-2022-39299 via passport-saml (3.2.0)

passport-saml NPM version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on passport-saml and may be impacted: - hapi-saml2 =3.2.0, =1.0.69, =2.0.6 Source cves: CVE-2022-39299 Source advisory: OSV:GHSA-M974-647V-WHV7...

@24hr/rawb-search (>=0.10.1, <=0.29.10), @aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3) +80 more potentially affected by unknown CVE via apollo-server (>=2.0.0, <=2.25.3)

apollo-server NPM version =2.0.0, =0.10.1, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.5.0-rc1, =0.3.0-SNAPSHOT1, =2018.8.29-0, =2018.8.28-0, =0.5.7, =1.0.0, =0.0.1-alpha.44, =0.4.0, =0.0.0-d99f4ac.0, =1.27.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2P3C-P3QW-69R4...

@adobe/git-server (>=1.0.3, <=1.0.5), @adobe/helix-cli (>=5.9.3, <=6.1.0) +30 more potentially affected by CVE-2022-22984 +1 more via @snyk/snyk-cocoapods-plugin (>=2.0.1, <=2.5.2)

@snyk/snyk-cocoapods-plugin NPM version =2.0.1, =1.0.3, =5.9.3, =2.17.2, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.5.8, =3.2.4, =0.0.2, =0.0.8, =0.2.0-a1, =1.20.0-alpha.11736.3, =1.24.0-alpha.1 and more Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory: SNYK:JS-SNYKSNYKCOCOAPODSPLUGIN-3038...

d8s-dates (0.1.0) potentially affected by unknown CVE via democritus-timezones (2021.1.201)

democritus-timezones PYPI version 2021.1.201 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-timezones and may be impacted: - d8s-dates 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSTIMEZONES-8400832...

@adobe/helix-google-support (>=1.3.4, <=2.0.3), @adobe/helix-html-pipeline (>=3.0.0, <=3.1.8) +64 more potentially affected by CVE-2022-36083 via jose (>=4.0.3, <=4.9.1)

jose NPM version =4.0.3, =1.3.4, =3.0.0, =1.11.39, =8.0.0, =0.0.1, =0.0.2-alpha.15, =2.2.2, =2022.2.6, =1.0.1, =2.7.3, =1.0.4-alpha.0, =2.2.9, =1.1.5, =1.1.9 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@beer-code-industry/common-frontend (>=0.5.0, <=0.7.6), @birthdayresearch/contented (1.0.1) +29 more potentially affected by CVE-2022-36046 via next (12.2.3-canary.2)

next NPM version 12.2.3-canary.2 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @beer-code-industry/common-frontend =0.5.0, =1.0.1, =1.0.0, =1.89.0-next.89, =0.0.19, =0.0.19, =0.0.20, =0.0.44, =0.0.15, =0.0.31 -...

safe-transitive-test (0.0.3) potentially affected by unknown CVE via webb3 (0.0.1-security)

webb3 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webb3 and may be impacted: - safe-transitive-test 0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2022-7089...

@amirmarmul/waba-common (>=2.2.51, <=2.9.8), @aptana/multichannel-common (>=2.9.12, <=2.10.3) +14 more potentially affected by CVE-2022-25921 via morgan-json (1.1.0)

morgan-json NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on morgan-json and may be impacted: - @amirmarmul/waba-common =2.2.51, =2.9.12, =1.0.0, =1.1.3, =1.0.0, =1.0.3, =0.11.0, =2.0.0, =0.0.5, =1.0.0, =0.1.0, =1.1.0, =2.0.0, =2.1.5 a...