@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +9 more potentially affected by CVE-2023-39956 via electron (>=22.0.0, <=22.3.13)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =9.13.1, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-39956 Source advisory: OSV:GHSA-7X97-J373-85X5...

@dweb-browser/desktop (0.1.2), @dweb-browser/js-process (0.1.2) +25 more potentially affected by CVE-2023-39956 via electron (>=25.0.0-beta.1, <=25.4.0)

electron NPM version =25.0.0-beta.1, =1.0.0, =1.0.0, =0.6.0, =0.6.3 - electron-proxy-example 1.0.0 - electronim 0.0.93 - firedev 16.444.5 - firedev-class-helpers 16.444.4 - firedev-config 16.444.4 - firedev-core 16.444.5 - firedev-logger 16.444.4 - firedev-rest 16.444.3 - firedev-storage 16.444.4...

@cubesoft/nx-electron (>=0.49.0, <=0.65.0), @grandlinex/e-kernel (>=0.30.0, <=0.32.0) +4 more potentially affected by CVE-2023-39956 via electron (>=23.0.0, <=23.2.1)

electron NPM version =23.0.0, =0.49.0, =0.30.0, =1.0.0, =0.0.90, =0.0.1, =0.0.15 Source cves: CVE-2023-39956 Source advisory: OSV:GHSA-7X97-J373-85X5...

futamata (0.0.36), hey-you (>=4.1.5, <=4.1.7) +1 more potentially affected by CVE-2023-29198 via electron (24.0.0)

electron NPM version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - futamata 0.0.36 - hey-you =4.1.5, =0.0.31, =0.0.33 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@cubesoft/nx-electron (>=0.49.0, <=0.65.0), @grandlinex/e-kernel (>=0.30.0, <=0.32.0) +4 more potentially affected by CVE-2023-29198 via electron (>=23.0.0, <=23.2.1)

electron NPM version =23.0.0, =0.49.0, =0.30.0, =1.0.0, =0.0.90, =0.0.1, =0.0.15 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +8 more potentially affected by CVE-2023-29198 via electron (>=22.0.0, <=22.3.5)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@finsemble/finsemble-core (>=1.0.0-beta-9, <=8.4.3), @finsemble/finsemble-electron-adapter (>=1.0.0-beta-9, <=8.4.3) +5 more potentially affected by CVE-2023-23623 via electron (22.0.0)

electron NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - @finsemble/finsemble-core =1.0.0-beta-9, =1.0.0-beta-9, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =2.0.92, =2.0.94 Source cves:...

@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), @peterpme/parse-server-mailgun (>=2.4.8, <=2.5.11) +19 more potentially affected by CVE-2023-41058 via parse-server (>=2.0.8, <=3.10.0)

parse-server NPM version =2.0.8, =1.0.5, =2.4.8, =1.0.0, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.0, =1.0.0, =1.0.0, =1.4.0 and more Source cves: CVE-2023-41058 Source advisory: OSV:GHSA-FCV6-FG5R-JM9Q...

decentraland-gatsby (>=5.76.0, <=5.77.1) potentially affected by CVE-2023-41049 via @dcl/single-sign-on-client (0.0.13)

@dcl/single-sign-on-client NPM version 0.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on @dcl/single-sign-on-client and may be impacted: - decentraland-gatsby =5.76.0, =5.77.1 Source cves: CVE-2023-41049 Source advisory: OSV:GHSA-VP4F-WXGW-7X8X...

dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +14 more potentially affected by CVE-2023-41051 via vm-memory (>=0.4.0, <=0.11.0)

vm-memory CARGO version =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-41051 Source advisory: OSV:GHSA-49HH-FPRX-M68G...

dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +14 more potentially affected by CVE-2023-41051 via vm-memory (>=0.4.0, <=0.11.0)

vm-memory CARGO version =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-41051 Source advisory: OSV:RUSTSEC-2023-0056...

@aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3), @aerogear/apollo-voyager-server (>=0.1.0, <=0.2.7-rc3) +157 more potentially affected by unknown CVE via apollo-server-core (>=2.0.0, <=2.25.3)

apollo-server-core NPM version =2.0.0, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.5.0-rc1, =0.3.0-SNAPSHOT1, =0.5.2-dev1, =2018.8.28-0, =0.5.1-alpha.0, =2.11.0, =3.9.0, =2.2.0-alpha.1, =2.3.10, =0.12.0-alpha.3, =0.13.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

@a11ywatch/a11ywatch (>=0.0.1, <=0.3.82), @a11ywatch/core (>=0.1.1, <=0.8.17) +49 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.12.0)

apollo-server-core NPM version =3.0.0-html.2, =0.0.1, =0.1.1, =4.9.2, =1.0.1, =1.1.22, =1.1.19, =1.0.0, =1.1.0, =1.0.0, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =10.0.1, =11.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

@ancademy/platform-sdk-client (>=1.1.1, <=1.1.4), @apollo/server-integration-testsuite (>=4.1.0, <=4.9.2) +31 more potentially affected by unknown CVE via @apollo/server (>=4.1.0, <=4.9.2)

@apollo/server NPM version =4.1.0, =1.1.1, =4.1.0, =0.0.1, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.3.0-rc.0, =0.2.0, =0.1.0-alpha.6, =0.1.18, =0.1.17, =0.2.0, =0.1.17, =0.2.0, =0.2.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

currentrequest (>=1.0.0, <=1.0.6), daichainai-moi (>=1.0.0, <=1.0.2) +5 more potentially affected by CVE-2023-40582 via find-exec (>=1.0.0, <=1.0.2)

find-exec NPM version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.15, =1.1.2, =1.1.5 Source cves: CVE-2023-40582 Source advisory: OSV:GHSA-95RP-6GQP-6622...

@bitfoot/theme-ngx-globular (>=0.1.1, <=0.1.15), @dashkite/genie-markdown (>=0.0.1, <=0.0.5) +43 more potentially affected by CVE-2023-26364 via @adobe/css-tools (>=4.2.0, <=4.3.0-rc.1)

@adobe/css-tools NPM version =4.2.0, =0.1.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.3, =0.1.26, =3.2.0, =3.1.0, =0.1.0-beta.3, =0.0.1, =0.0.3, =7.5.3, =7.5.5 and more Source cves: CVE-2023-26364 Source advisory: OSV:GHSA-HPX4-R86G-5JRG...

@4qwerty7/mathjax-node-page (>=3.2.0, <=3.2.1), @4qwerty7/syzoj-renderer (>=1.0.7, <=1.2.1) +140 more potentially affected by CVE-2023-39663 via mathjax (>=2.6.1, <=2.7.9)

mathjax NPM version =2.6.1, =3.2.0, =1.0.7, =1.0.0, =1.0.0-alpha.6, =2.0.0, =1.0.36, =1.0.0, =6.0.0-2020.8, =6.0.0-2020.12, =6.0.0-2020.8, =6.0.0-2020.8, =0.4.0, =0.1.1, =0.1.8 and more Source cves: CVE-2023-39663 Source advisory: OSV:GHSA-V638-Q856-GRG8...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +755 more potentially affected by CVE-2021-32050 via mongodb (>=4.0.0-beta.1, <=4.16.0)

mongodb NPM version =4.0.0-beta.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =0.1.66, =0.5.17, =3.0.0-beta.3, =0.0.1002, =0.0.7, =0.0.1000, =0.0.2, =0.0.1, =0.0.1000 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...

@36node/template-service (>=0.17.6, <=0.17.9), @88bens/mongoose-multi (2.0.3) +569 more potentially affected by CVE-2021-32050 via mongodb (>=3.6.0, <=3.6.9)

mongodb NPM version =3.6.0, =0.17.6, =3.7.0, =1.0.0, =0.7.0, =2.1.0, =1.1.66, =2.9.8, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.2.0, =3.3.3 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +173 more potentially affected by CVE-2021-32050 via mongodb (>=5.0.0, <=5.7.0)

mongodb NPM version =5.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =0.3.1, =0.8.2, =3.12.0, =1.0.0, =2.0.0-beta.7, =1.0.1, =0.0.0, =1.0.2, =1.3.4 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...

@aloe2/abstract-eth (1.0.20228282226), @aloe2/abstract-utxo (1.1.20228282226) +179 more potentially affected by CVE-2023-41037 via openpgp (>=5.0.0, <=5.9.0)

openpgp NPM version =5.0.0, =5.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on openpgp and may be impacted: - @aloe2/abstract-eth 1.0.20228282226 - @aloe2/abstract-utxo 1.1.20228282226 - @aloe2/account-lib 2.20.20228282226 - @aloe2/bitgo...

@blinkhealth/config-yourself (>=1.0.0, <=1.0.1), @donswayo/wildduckiu (>=1.30.3, <=1.30.6) +18 more potentially affected by CVE-2023-41037 via openpgp (>=4.5.1, <=4.10.10)

openpgp NPM version =4.5.1, =1.0.0, =1.30.3, =9.0.0-dev.5644f38, =0.0.1, =1.1.6, =0.0.1, =2.0.0, =0.3.4, =0.9.0, =1.25.0, =1.31.0 and more Source cves: CVE-2023-41037 Source advisory: OSV:GHSA-CH3C-V47X-4PGP...

a2 (>=0.2.0, <=0.6.2), abacuz (>=0.1.0, <=0.1.1) +3002 more potentially affected by unknown CVE via webpki (>=0.18.1, <=0.21.4)

webpki CARGO version =0.18.1, =0.2.0, =0.1.0, =0.2.0-beta.4, =0.1.1, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =1.0.0, =0.1.0, =0.8.0, =0.1.0, =0.2.2, =1.0.0, =1.0.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8QV2-5VQ6-G2G7...

feembox (>=0.1.0, <=0.1.1), mail (>=0.6.0, <=0.7.0) +5 more potentially affected by unknown CVE via mail-internals (0.2.3)

mail-internals CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mail-internals and may be impacted: - feembox =0.1.0, =0.6.0, =0.6.0, =0.6.0-wip, =0.2.0, =0.6.0, =0.1.0, =0.1.2 Source cves: unknown CVE Source advisory:...

@adobe/git-server (>=1.0.1, <=1.0.5), @adobe/helix-cli (>=5.7.7, <=6.1.0) +21 more potentially affected by CVE-2023-40185 via shescape (>=1.6.1, <=1.6.6)

shescape NPM version =1.6.1, =1.0.1, =5.7.7, =2.16.1, =0.1.3, =0.0.7, =0.1.0, =2.3.2, =2.3.2, =2.3.2, =2.3.3 and more Source cves: CVE-2023-40185 Source advisory: OSV:GHSA-J55R-787P-M549...

a2 (>=0.2.0, <=0.6.2), abacuz (>=0.1.0, <=0.1.1) +3002 more potentially affected by CVE-2018-16875 via webpki (>=0.18.1, <=0.21.4)

webpki CARGO version =0.18.1, =0.2.0, =0.1.0, =0.2.0-beta.4, =0.1.1, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =1.0.0, =0.1.0, =0.8.0, =0.1.0, =0.2.2, =1.0.0, =1.0.7 and more Source cves: CVE-2018-16875 Source advisory: OSV:RUSTSEC-2023-0052...

3d-kit (>=0.0.1, <=0.0.14), @0x4447/broccoli (>=1.0.0, <=1.0.16) +144 more potentially affected by CVE-2023-38894 via tree-kit (>=0.0.4, <=0.6.2)

tree-kit NPM version =0.0.4, =0.0.1, =1.0.0, =2.0.0, =1.0.0, =1.18.0, =0.0.1, =1.0.5-master.20190403074739, =1.0.0-master.20180909013449, =0.1.0-master.20191109234452, =0.1.0-ipcrm-custom-event.20191122150318, =1.1.0-master.20190802170815, =0.1.0-master.20190319050251,...

@blocklet/discuss-kit (>=1.0.8, <=2.0.172), @blocklet/discuss-kit-post (>=1.6.254, <=2.0.172) +54 more potentially affected by CVE-2023-26140 via @excalidraw/excalidraw (>=0.4.3, <=0.15.2-6546-3398d86)

@excalidraw/excalidraw NPM version =0.4.3, =1.0.8, =1.6.254, =1.0.8, =0.0.2, =0.0.6, =1.0.0, =0.0.1, =0.0.1, =0.0.2, =30.1.2, =0.0.0, =0.0.5, =0.1.8, =0.1.72 and more Source cves: CVE-2023-26140 Source advisory: OSV:GHSA-V7V8-GJV7-FFMR...

@story-telling-reporter/draft-editor (>=2.1.0-beta.0, <=2.1.2) potentially affected by CVE-2023-40027 via @keystone-6/core (5.2.0)

@keystone-6/core NPM version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @story-telling-reporter/draft-editor =2.1.0-beta.0, =2.1.2 Source cves: CVE-2023-40027 Source advisory: OSV:GHSA-9CVC-V7WM-992C...

@maggioli-design-system/mds-icon (2.0.0-rc.1), esto-es-una-prueba-ui-components (1.0.0) potentially affected by CVE-2023-40013 via external-svg-loader (>=1.4.0, <=1.6.8)

external-svg-loader NPM version =1.4.0, =1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on external-svg-loader and may be impacted: - @maggioli-design-system/mds-icon 2.0.0-rc.1 - esto-es-una-prueba-ui-components 1.0.0 Source cves: CVE-2023-40013...

@blocklet/discuss-kit (>=1.0.8, <=2.0.172), @blocklet/discuss-kit-post (>=1.6.254, <=2.0.172) +62 more potentially affected by CVE-2023-26140 via @excalidraw/excalidraw (>=0.4.3, <=0.15.3)

@excalidraw/excalidraw NPM version =0.4.3, =1.0.8, =1.6.254, =1.0.8, =0.0.2, =0.0.6, =1.0.0, =0.0.1, =0.0.1, =0.0.2, =30.1.2, =0.0.0, =0.0.5, =0.0.32 and more Source cves: CVE-2023-26140 Source advisory: SNYK:JS-EXCALIDRAWEXCALIDRAW-5841658...

com.github.camel-labs:camel-pubnub (0.1.0), io.relayr:android-sdk (>=0.0.1, <=0.0.7) +3 more potentially affected by CVE-2023-26154 via com.pubnub:pubnub (>=3.6.3, <=3.7.4)

com.pubnub:pubnub MAVEN version =3.6.3, =0.0.1, =0.1.1, =0.1.1, =0.1.1, =0.1.4 Source cves: CVE-2023-26154 Source advisory: SNYK:JAVA-COMPUBNUB-6098371...

@leapdev/auth-agent (>=2.2.6-beta.0, <=2.2.11), @pubnub/chat (>=0.1.0, <=0.2.0) +2 more potentially affected by CVE-2023-26154 via pubnub (>=7.0.1, <=7.3.0)

pubnub NPM version =7.0.1, =2.2.6-beta.0, =0.1.0, =0.13.9, =2.29.0, =2.64.1 Source cves: CVE-2023-26154 Source advisory: SNYK:JS-PUBNUB-5840690...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1554 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts (>=4.0.0, <=4.9.2)

@openzeppelin/contracts NPM version =4.0.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-40014 Source advisory: OSV:GHSA-G4VP-M682-QQMP...

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +411 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.9.2)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =0.2.1-alpha, =0.2.1-beta2 and more Source cves: CVE-2023-40014 Source advisory:...

@angular-architects/build-angular (16.2.0-next.2), @angular-devkit/build-angular (>=16.1.0-next.2, <=16.2.0-rc.0) +9 more potentially affected by CVE-2023-3481 via critters (>=0.0.17, <=0.0.19)

critters NPM version =0.0.17, =16.1.0-next.2, =16.0.1-snapshot-1686757302683, =16.0.1-snapshot-1686757302683, =16.1.0-rc.0, =16.1.0-rc.0, =16.1.0-rc.0, =1.1.40, =3.0.0-next.18, =0.14.29, =0.14.47 Source cves: CVE-2023-3481 Source advisory: OSV:GHSA-CX3J-QQXJ-9597...

@primecms/core (>=0.0.23, <=0.3.3-beta.9), @primecms/field-string (>=0.0.23, <=0.3.4-beta.1) +7 more potentially affected by CVE-2021-27524 via braft-editor (>=2.1.34, <=2.3.8)

braft-editor NPM version =2.1.34, =0.0.23, =0.0.23, =0.1.0, =0.9.4-rc.0, =0.1.0-beta, =0.4.11-beta.0, =0.4.26 Source cves: CVE-2021-27524 Source advisory: OSV:GHSA-JFRF-VV54-J2JG...

kinvey-angular-sdk (>=3.4.0, <=3.5.3), kinvey-angular2-sdk (>=3.4.1, <=3.5.2) +6 more potentially affected by CVE-2021-26505 via hellojs (>=1.13.1, <=1.14.1)

hellojs NPM version =1.13.1, =3.4.0, =3.4.1, =3.4.1, =3.4.0, =3.4.1, =3.4.0, =3.4.0, =3.4.1, =3.5.2 Source cves: CVE-2021-26505 Source advisory: OSV:GHSA-G3VF-47FV-8F3C...

@blockmatic/eosio-ship-reader (>=0.3.0, <=1.2.0), @kongkong21/eosio-ship-reader (>=1.3.0, <=1.3.1) +4 more potentially affected by CVE-2021-29057 via node-worker-threads-pool (1.4.3)

node-worker-threads-pool NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on node-worker-threads-pool and may be impacted: - @blockmatic/eosio-ship-reader =0.3.0, =1.3.0, =1.0.0, =0.0.2, =0.0.1, =1.0.53 Source cves: CVE-2021-29057 Source...

@ai-em/opentelemetry-nestjs (5.0.0), @amplication/opentelemetry-nestjs (>=1.0.0, <=4.2.1) +260 more potentially affected by unknown CVE via @opentelemetry/instrumentation (>=0.40.0, <=0.41.1)

@opentelemetry/instrumentation NPM version =0.40.0, =1.0.0, =1.0.14, =1.0.20, =3.0.1, =0.0.0-2023-07-27--11-15, =0.0.1, =0.0.0-alpha.20230501.1, =1.0.0-alpha.20230614.2, =0.1.2, =1.0.0, =2.3.95, =1.0.2-beta.0, =1.0.2-beta.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F8PQ-3926-8GX...

4337-snap (>=0.1.0, <=0.1.1), @0xpolygonid/snap-example (1.0.0-beta.9) +322 more potentially affected by CVE-2023-39532 via ses (>=0.18.4, <=0.18.5)

ses NPM version =0.18.4, =0.1.0, =1.0.1-beta.0, =1.0.0, =1.6.3, =0.2.3, =0.2.2, =0.3.3-20230923T000433-dev-63b1fb6.0, =0.4.3-20230923T000433-dev-63b1fb6.0, =0.10.4-20230923T000433-dev-63b1fb6.0, =0.16.3-20230923T000433-dev-63b1fb6.0, =0.10.4-mainnet1B-dev-b0c1f78.0, =0.16.2-mainnet1B-dev-b0c1f78....

ses-cjs (>=1.0.0, <=1.0.1) potentially affected by CVE-2023-39532 via ses (0.13.1)

ses NPM version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on ses and may be impacted: - ses-cjs =1.0.0, =1.0.1 Source cves: CVE-2023-39532 Source advisory: OSV:GHSA-9C4H-3F7H-322R...

@nguniversal/builders (>=16.1.0-next.0, <=16.1.1), @nguniversal/express-engine (>=16.1.0-next.0, <=16.1.1) potentially affected by unknown CVE via @nguniversal/common (>=16.1.0, <=16.1.1)

@nguniversal/common NPM version =16.1.0, =16.1.0-next.0, =16.1.0-next.0, =16.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-R3HF-Q8Q7-FV2P...

@ai-em/opentelemetry-nestjs (5.0.0), @amplication/opentelemetry-nestjs (>=1.0.0, <=4.2.1) +262 more potentially affected by CVE-2023-38704 via import-in-the-middle (>=1.3.5, <=1.4.1)

import-in-the-middle NPM version =1.3.5, =1.0.0, =1.0.14, =1.0.20, =3.0.1, =0.0.0-2023-07-27--11-15, =0.0.1, =0.0.0-alpha.20230501.1, =1.0.0-alpha.20230614.2, =0.1.2, =1.0.0, =2.3.95, =1.0.2-beta.0, =1.0.2-beta.1 and more Source cves: CVE-2023-38704 Source advisory: OSV:GHSA-5R27-RW8R-7967...

ahtx0 (>=0.1.0, <=0.1.4), algostru (>=0.1.0, <=0.4.0) +415 more potentially affected by unknown CVE via tui (>=0.1.3, <=0.19.0)

tui CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.2, =0.1.6, =0.1.0, =0.1.0, =0.0.9, =0.0.1, =0.0.7 - ashiba 0.1.0 - atlas-tui 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0049...

feembox (>=0.1.0, <=0.1.1), mail (>=0.6.0, <=0.7.0) +5 more potentially affected by unknown CVE via mail-internals (0.2.3)

mail-internals CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mail-internals and may be impacted: - feembox =0.1.0, =0.6.0, =0.6.0, =0.6.0-wip, =0.2.0, =0.6.0, =0.1.0, =0.1.2 Source cves: unknown CVE Source advisory:...

3gtel-frontend-platform (1.0.0), @achieve-all/v-element (1.0.0) +295 more potentially affected by CVE-2025-3197 via expand-object (>=0.2.3, <=0.4.2)

expand-object NPM version =0.2.3, =0.1.1, =1.0.0, =1.0.0, =2.0.0, =2.0.7, =0.1.0, =1.0.0, =1.0.8, =0.1.2, =1.0.3, =6.0.0-rc1, =1.0.0, =1.0.8 and more Source cves: CVE-2025-3197 Source advisory: SNYK:JS-EXPANDOBJECT-5821390...

matrix-appservice-irc (0.36.0) potentially affected by CVE-2023-38691 via matrix-appservice-bridge (6.0.0)

matrix-appservice-bridge NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-appservice-bridge and may be impacted: - matrix-appservice-irc 0.36.0 Source cves: CVE-2023-38691 Source advisory: OSV:GHSA-VC7J-H8XG-FV5X...

libdoh (>=0.9.0, <=0.9.4) potentially affected by CVE-2023-3766 via odoh-rs (1.0.0)

odoh-rs CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on odoh-rs and may be impacted: - libdoh =0.9.0, =0.9.4 Source cves: CVE-2023-3766 Source advisory: OSV:GHSA-GPCV-P28P-FV2P...

managed-component-to-cloudflare-worker (1.5.2) potentially affected by CVE-2023-3348 via wrangler (2.0.23)

wrangler NPM version 2.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on wrangler and may be impacted: - managed-component-to-cloudflare-worker 1.5.2 Source cves: CVE-2023-3348 Source advisory: OSV:GHSA-8C93-4HCH-XGXP...