10909 matches found
yio-cli (1.0.0) potentially affected by CVE-2023-26128 via keep-module-latest (1.0.1)
keep-module-latest NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keep-module-latest and may be impacted: - yio-cli 1.0.0 Source cves: CVE-2023-26128 Source advisory: OSV:GHSA-WXRX-PC44-RCGC...
conkie (0.0.1) potentially affected by CVE-2023-26129 via bwm-ng (0.1.1)
bwm-ng NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on bwm-ng and may be impacted: - conkie 0.0.1 Source cves: CVE-2023-26129 Source advisory: OSV:GHSA-8VW3-VXMJ-H43W...
@berrywallet/core (>=0.1.0, <=0.2.1), @counterplay/simpleflake (>=2.0.0, <=2.0.1) +55 more potentially affected by unknown CVE via bignum (>=0.12.5, <=0.13.0)
bignum NPM version =0.12.5, =0.1.0, =2.0.0, =1.0.0, =1.0.0, =0.14.6, =0.1.0, =1.1.0, =0.0.2, =0.0.17, =0.5.0, =1.0.0, =1.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7CGC-FJV4-52X6...
@abcpros/bitcore-build (>=8.25.29, <=8.25.30), @acanto/october-scripts (3.2.2) +1122 more potentially affected by CVE-2023-32695 via socket.io-parser (>=3.1.1, <=3.3.0)
socket.io-parser NPM version =3.1.1, =8.25.29, =1.0.0, =2018.7.11-0, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =0.2.0, =1.0.10, =3.3.91, =3.3.114 and more Source cves: CVE-2023-32695 Source advisory: OSV:GHSA-CQMJ-92XF-R6R9...
0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +1918 more potentially affected by CVE-2023-32695 via socket.io-parser (>=4.0.5, <=4.2.2)
socket.io-parser NPM version =4.0.5, =1.0.49, =1.0.0, =0.0.28, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =0.0.9 and more Source cves: CVE-2023-32695 Source advisory: OSV:GHSA-CQMJ-92XF-R6R9...
@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0, <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0, <=33.0.0) +2 more potentially affected by CVE-2023-32695 via socket.io-parser (3.4.1)
socket.io-parser NPM version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2023-32695 Source...
@devlego/builder (>=1.1.29-alpha.1, <=1.1.34), @metro-fs/analytics-plugin-posthog (>=1.0.0, <=1.6.0) +6 more potentially affected by CVE-2023-32325 via posthog-js (>=1.4.5, <=1.53.2)
posthog-js NPM version =1.4.5, =1.1.29-alpha.1, =1.0.0, =2.1.0, =2.0.5, =1.3.39, =3.28.0-rc.1, =1.16.0, =1.16.1 Source cves: CVE-2023-32325 Source advisory: OSV:GHSA-8775-5HWV-WR6V...
@0xagnish/circom2-create-project (1.0.412), @0xagnish/create-circom2-project (>=1.0.0, <=1.0.418) +330 more potentially affected by CVE-2023-33252 via snarkjs (>=0.1.7, <=0.6.11)
snarkjs NPM version =0.1.7, =1.0.0, =1.0.0, =1.0.0-beta.0, =1.0.0, =1.1.1, =2.0.0-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1, =0.0.1, =0.1.0, =0.2.2 and more Source cves: CVE-2023-33252 Source advisory: OSV:GHSA-XP5G-JHG3-3RG2...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +230 more potentially affected by CVE-2023-32313 via vm2 (>=3.0.0, <=3.9.17)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...
btctax-store (>=0.1.0, <=0.17.0), did-webkey (0.1.1) +4 more potentially affected by CVE-2023-53160 via sequoia-openpgp (1.14.0)
sequoia-openpgp CARGO version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on sequoia-openpgp and may be impacted: - btctax-store =0.1.0, =0.3.0, =0.4.0-rc.1, =5.0.4 Source cves: CVE-2023-53160 Source advisory: OSV:RUSTSEC-2023-0038...
sequoia-openpgp (1.8.1) potentially affected by CVE-2023-53161 via buffered-reader (1.1.3)
buffered-reader CARGO version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on buffered-reader and may be impacted: - sequoia-openpgp 1.8.1 Source cves: CVE-2023-53161 Source advisory: OSV:RUSTSEC-2023-0039...
aries-askar (>=0.1.2, <=0.2.7), arkworks-r1cs-gadgets (>=0.5.0, <=1.2.0) +108 more potentially affected by unknown CVE via xsalsa20poly1305 (>=0.4.2, <=0.9.1)
xsalsa20poly1305 CARGO version =0.4.2, =0.1.2, =0.5.0, =0.5.0, =0.2.0-pre.1, =0.1.0, =0.1.0, =0.1.1 - bramble-handshake 0.1.0 - bramble-qr 0.1.0 - bramble-rendezvous 0.1.0 - bramble-sync 0.1.0 - bramble-transport 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0037...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +230 more potentially affected by CVE-2023-32314 via vm2 (>=3.0.0, <=3.9.17)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...
get-token-user10 (0.10.1) potentially affected by unknown CVE via http-resources (0.0.1-security)
http-resources NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on http-resources and may be impacted: - get-token-user10 0.10.1 Source cves: unknown CVE Source advisory: OSV:MAL-2023-509...
@miniflare/tre (3.0.0-next.14) potentially affected by CVE-2023-2512 via workerd (1.20230404.0)
workerd NPM version 1.20230404.0 is affected by a known vulnerability. The following packages have a transitive dependency on workerd and may be impacted: - @miniflare/tre 3.0.0-next.14 Source cves: CVE-2023-2512 Source advisory: OSV:GHSA-8VX6-69VG-C46F...
n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27562 via n8n (>=0.81.0, <=0.214.5)
n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27562 Source advisory: OSV:GHSA-P58X-7733-VP9M...
n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27564 via n8n (>=0.81.0, <=0.214.5)
n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27564 Source advisory: OSV:GHSA-R9XW-P7WJ-W792...
n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27563 via n8n (>=0.81.0, <=0.214.5)
n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27563 Source advisory: OSV:GHSA-97CP-MR4M-9MCF...
@nexgin/totaljsapplication (>=0.0.1, <=0.0.66) potentially affected by CVE-2023-30094 via total4 (0.0.80)
total4 NPM version 0.0.80 is affected by a known vulnerability. The following packages have a transitive dependency on total4 and may be impacted: - @nexgin/totaljsapplication =0.0.1, =0.0.66 Source cves: CVE-2023-30094 Source advisory: OSV:GHSA-JJ45-24RW-V6JW...
4cs-cli (>=0.0.28, <=0.0.36), @3kles/3kles-socketio (>=1.0.0, <=1.0.5) +496 more potentially affected by CVE-2023-31125 via engine.io (>=5.1.1, <=6.3.1)
engine.io NPM version =5.1.1, =0.0.28, =1.0.0, =5.1.0, =0.0.0, =0.0.1-2.1-beta-provision, =2.2.6, =2.3.10, =2.2.6, =2.1.15, =2.8.10, =2.7.0, =2.7.0, =2.5.1, =2.7.0, =2.9.36 and more Source cves: CVE-2023-31125 Source advisory: OSV:GHSA-Q9MW-68C2-J6M5...
11-builder (0.1.0), 2muchcoffee-react-scripts (0.1.0) +3097 more potentially affected by unknown CVE via fsevents (>=1.0.14, <=1.2.9)
fsevents NPM version =1.0.14, =0.1.0, =1.0.3, =0.1.4, =1.0.0-beta.1, =0.0.1, =0.7.1, =1.1.0-1, =1.0.0, =1.1.2, =1.1.9 - @abelmuro/food-dasher-app 1.0.0 - @accumineapps/hourlyactual 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2023-462...
@axosoft/azure-devops-node-api (6.6.3), @capgeminiuk/generator-powerapps-project (>=0.1.55, <=0.6.6) +70 more potentially affected by CVE-2023-30846 via typed-rest-client (>=1.0.7, <=1.7.3)
typed-rest-client NPM version =1.0.7, =0.1.55, =1.0.8-1, =2.0.0, =2.0.1-1, =1.1.0, =1.79.5, =0.0.1-develop.1, =1.0.0, =6.0.0 - @kcutils/color 0.2.0-rc.3 - @kcutils/error 0.3.0-rc.1 - @kcutils/helper 0.5.0-rc.5 - @kcutils/logger 0.5.0-rc.5 and more Source cves: CVE-2023-30846 Source advisory:...
@21cnfe/onekit-mp-cli (2.0.1), @alitajs/aconsole (>=2.8.2, <=2.9.0) +36 more potentially affected by CVE-2023-30363 via vconsole (>=3.2.0, <=3.15.0)
vconsole NPM version =3.2.0, =2.8.2, =2.8.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.2, =0.0.8, =0.0.1, =0.1.0, =0.3.3 and more Source cves: CVE-2023-30363 Source advisory: OSV:GHSA-F737-3FH6-JF6W...
payload-cloudinary-plugin (0.0.10), payload-plugin-lexical (>=0.0.19, <=0.0.21) potentially affected by CVE-2023-30843 via payload (>=1.1.26, <=1.6.26)
payload NPM version =1.1.26, =0.0.19, =0.0.21 Source cves: CVE-2023-30843 Source advisory: OSV:GHSA-35JJ-VQCF-F2JF...
qwik-lottie (>=0.0.5, <=0.0.6), storybook-framework-qwik (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-2307 via @builder.io/qwik-city (>=0.0.112, <=0.0.128)
@builder.io/qwik-city NPM version =0.0.112, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2023-2307 Source advisory: OSV:GHSA-C54W-7J5F-XG98...
ember-cli-broccoli-compass (>=0.0.1, <=0.0.5), ember-cli-compass (>=0.0.4, <=0.0.5) +1 more potentially affected by CVE-2023-27848 via broccoli-compass (>=0.0.7, <=0.1.1)
broccoli-compass NPM version =0.0.7, =0.0.1, =0.0.4, =0.0.1, =0.0.13 Source cves: CVE-2023-27848 Source advisory: OSV:GHSA-WQ8F-XMQ3-5VQ9...
@0l00000l/auth (>=1.0.0, <=1.0.8), @1sat/cli (>=0.0.53, <=0.0.99) +1018 more potentially affected by CVE-2023-2251 via yaml (>=2.0.0, <=2.2.1)
yaml NPM version =2.0.0, =1.0.0, =0.0.53, =0.0.31, =0.0.9, =2.0.0, =1.2.2-20211215122352, =3.0.0, =2.1.42, =1.1.5, =14.6.15, =1.11.39, =9.0.0, =2.0.0, =2.0.0, =0.0.1-AHG-001, =0.0.1-AHG-002 and more Source cves: CVE-2023-2251 Source advisory: OSV:GHSA-F9XV-Q969-PQX4...
003-gas-convert (1.0.1), 0510test (1.0.0) +9059 more potentially affected by CVE-2023-30533 via xlsx (>=0.3.10, <=0.18.5)
xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =1.0.1, =0.1.0, =0.1.0, =1.0.0, =1.0.46 and more Source cves: CVE-2023-30533 Source advisory: OSV:GHSA-4R6H-8V6P-XVW6...
4help-shared (>=1.0.8, <=1.0.15), @akalli/components (>=0.0.1, <=0.2.3) +245 more potentially affected by CVE-2023-28131 via expo (>=45.0.0, <=47.0.14)
expo NPM version =45.0.0, =1.0.8, =0.0.1, =0.0.1, =0.0.3, =2.5.0, =0.0.0, =1.2.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2023-28131 Source advisory: SNYK:JS-EXPO-13559201...
@accordproject/cicero-cli (>=0.3.4, <=0.20.11-20200413151148), @accordproject/cicero-core (>=0.3.12-20180525105709, <=0.20.11-20200413151148) +257 more potentially affected by CVE-2023-2142 via nunjucks (>=3.0.0, <=3.2.3)
nunjucks NPM version =3.0.0, =0.3.4, =0.3.12-20180525105709, =0.3.4, =0.3.4, =0.11.2-20190326183124, =0.0.5-20190507210024, =1.1.0-301, =1.3.2, =0.0.5, =1.2.0, =0.0.7, =0.0.18-d11, =0.0.21 and more Source cves: CVE-2023-2142 Source advisory: OSV:GHSA-X77J-W7WF-FJMW...
@flowforge/flowforge (>=0.9.0, <=0.10.0), schwing (>=0.2.14, <=0.2.26) potentially affected by CVE-2023-27495 via @fastify/csrf-protection (5.1.0)
@fastify/csrf-protection NPM version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/csrf-protection and may be impacted: - @flowforge/flowforge =0.9.0, =0.2.14, =0.2.26 Source cves: CVE-2023-27495 Source advisory: OSV:GHSA-QRGF-9GPC-VRX...
@boomerang-io/gatsby-theme-boomerang (>=1.5.0-beta.0, <=1.6.2), @sonarsource/gatsby-theme-marketing (>=3.1.0, <=3.5.0) +1 more potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=5.0.0, <=5.6.0)
gatsby-plugin-sharp NPM version =5.0.0, =1.5.0-beta.0, =3.1.0, =5.0.0-alpha-drupal-proxyurl.14, =5.0.0-alpha-v5.d20221012t101120.57 Source cves: CVE-2023-30548 Source advisory: OSV:GHSA-H2PM-378C-PCXX...
@adobe/gatsby-theme-aio (>=4.5.7, <=4.7.5), @adobe/gatsby-theme-commerce (0.0.2) +19 more potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=4.0.0-alpha-9689ff.4, <=4.25.0-alpha-image-cdn-pathprefix.48)
gatsby-plugin-sharp NPM version =4.0.0-alpha-9689ff.4, =4.5.7, =0.3.0-beta.0, =3.0.0, =4.0.0, =0.0.0-canary-20211022203039, =1.18.5, =1.0.2, =5.0.8, =0.0.1, =2.0.4, =1.0.0, =1.0.12 - fullstack-gatsby-theme-bch-wallet-v1 1.0.12 and more Source cves: CVE-2023-30548 Source advisory:...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +215 more potentially affected by CVE-2023-30547 via vm2 (>=3.0.0, <=3.9.16)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...
4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +362 more potentially affected by CVE-2023-30542 via @openzeppelin/contracts-upgradeable (>=4.3.0, <=4.8.2)
@openzeppelin/contracts-upgradeable NPM version =4.3.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =0.2.1-alpha, =0.2.1-beta2 and more Source cves: CVE-2023-30542 Source advisory:...
4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1448 more potentially affected by CVE-2023-30542 via @openzeppelin/contracts (>=4.3.0, <=4.8.2)
@openzeppelin/contracts NPM version =4.3.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-30542 Source advisory: OSV:GHSA-93HQ-5WGC-JC82...
@goboomtown/entities (>=0.0.14-beta, <=0.0.18-beta), @goboomtown/entities-nest (>=0.0.28-beta, <=0.0.82-beta) +5 more potentially affected by CVE-2022-4942 via eslint-detailed-reporter (>=0.6.10, <=0.8.0)
eslint-detailed-reporter NPM version =0.6.10, =0.0.14-beta, =0.0.28-beta, =0.0.9-beta, =1.0.4, =0.4.0, =1.0.0, =1.0.0, =1.0.7 Source cves: CVE-2022-4942 Source advisory: OSV:GHSA-4XR4-89M5-46C7...
@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +20 more potentially affected by CVE-2023-22621 via @strapi/plugin-email (>=4.0.0, <=4.5.5)
@strapi/plugin-email NPM version =4.0.0, =4.2.0, =4.2.2, =1.0.1, =0.1.1, =1.0.0-alpha.0, =3.1.2, =1.0.0, =4.0.0-beta.0, =4.2.3-a, =4.3.65 - easylaser-vn-cms 0.1.0 and more Source cves: CVE-2023-22621 Source advisory: OSV:GHSA-2H87-4Q2W-V4HF...
@chargeover/strapi (0.0.1-rc1.1), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3) +7 more potentially affected by CVE-2023-22621 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.5.1)
@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0 Source cves: CVE-2023-22621 Source advisory: OSV:GHSA-2H87-4Q2W-V4HF...
@chargeover/strapi (0.0.1-rc1.1), @digicms/admin (>=1.0.5, <=1.1.0) +16 more potentially affected by CVE-2023-22894 via @strapi/strapi (>=4.0.0-beta.0, <=4.7.2-exp.175f7ac70ee76d6c825e4429e15fc85ee78d23bb)
@strapi/strapi NPM version =4.0.0-beta.0, =1.0.5, =1.0.5, =1.0.0-alpha.0, =3.1.2, =1.0.0, =4.6.0-beta.2, =0.0.0, =4.7.2-exp.175f7ac70ee76d6c825e4429e15fc85ee78d23bb, =0.0.84, =0.0.0, =0.9.0, =0.9.2 and more Source cves: CVE-2023-22894 Source advisory: OSV:GHSA-JJQF-J4W7-92W8...
@chargeover/strapi (0.0.1-rc1.1), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3) +7 more potentially affected by CVE-2023-22893 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.5.1)
@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0 Source cves: CVE-2023-22893 Source advisory: OSV:GHSA-583X-23H9-F5W7...
aware (>=0.0.9, <=0.0.13), aws-config (>=0.4.0, <=0.4.1) +304 more potentially affected by CVE-2023-30610 via aws-sigv4 (0.4.2)
aws-sigv4 CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sigv4 and may be impacted: - aware =0.0.9, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1 and more...
aware (>=0.0.1, <=0.0.6), aws-config (>=0.0.22-alpha, <=0.0.26-alpha) +288 more potentially affected by CVE-2023-30610 via aws-sigv4 (>=0.0.22-alpha, <=0.0.26-alpha)
aws-sigv4 CARGO version =0.0.22-alpha, =0.0.1, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.26-alpha and more Source cves:...
@aprilsacil/wallet (>=0.1.36, <=0.1.51), @chainfuse/react (>=0.0.46, <=0.1.0-dev.96) +15 more potentially affected by CVE-2023-30543 via @web3-react/coinbase-wallet (>=8.0.31-beta.0, <=8.0.34-beta.0)
@web3-react/coinbase-wallet NPM version =8.0.31-beta.0, =0.1.36, =0.0.46, =0.0.70, =0.0.6-alpha.0, =0.1.0, =0.0.1, =0.1.0, =0.13.29, =0.1.20, =0.0.1, =0.0.2, =0.0.11, =0.1.31 and more Source cves: CVE-2023-30543 Source advisory: OSV:GHSA-8PF3-6FGR-3G3G...
@aprilsacil/wallet (>=0.1.36, <=0.1.51), @axelraag/frigg-uniswap-widgets (>=0.0.11, <=0.12.0) +35 more potentially affected by CVE-2023-30543 via @web3-react/eip1193 (>=8.0.9-beta.0, <=8.0.26-beta.0)
@web3-react/eip1193 NPM version =8.0.9-beta.0, =0.1.36, =0.0.11, =0.0.1-alpha.0, =0.0.46, =0.0.70, =1.0.0, =0.0.1, =1.1.0, =0.0.3, =0.12.0, =0.0.6-alpha.0, =0.0.12 - @huma-finance/widgets 0.0.6-alpha.0 - @huma-shan/shared 0.0.1 - @huma-shan/superfluid-widget 0.0.1 and more Source cves:...
@aprilsacil/wallet (>=0.1.36, <=0.1.51), @bosonprotocol/react-kit (>=0.1.0-alpha.0, <=0.1.0-alpha.2) +44 more potentially affected by CVE-2023-30543 via @web3-react/metamask (>=8.0.6-beta.0, <=8.0.28-beta.0)
@web3-react/metamask NPM version =8.0.6-beta.0, =0.1.36, =0.1.0-alpha.0, =0.0.46, =0.0.70, =1.0.0, =1.0.0, =0.0.1, =1.1.0, =1.0.2, =0.0.3, =1.0.0, =1.0.0, =0.0.6-alpha.0, =0.0.12 and more Source cves: CVE-2023-30543 Source advisory: OSV:GHSA-8PF3-6FGR-3G3G...
@aprilsacil/wallet (>=0.1.36, <=0.1.51), @chainfuse/react (>=0.0.46, <=0.1.0-dev.96) +40 more potentially affected by CVE-2023-30543 via @web3-react/walletconnect (>=8.0.23-beta.0, <=8.0.36-beta.0)
@web3-react/walletconnect NPM version =8.0.23-beta.0, =0.1.36, =0.0.46, =0.0.70, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =1.1.0, =0.0.3, =1.0.0, =0.0.6-alpha.0, =0.0.12 - @huma-finance/widgets 0.0.6-alpha.0 - @huma-shan/shared 0.0.1 and more Source cves: CVE-2023-30543 Source advisory:...
@chargeover/strapi (0.0.1-rc1.1), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3) +7 more potentially affected by unknown CVE via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.5.1)
@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-XV3Q-JRMM-4FXV...
0x-hunter-core (>=1.0.0-33, <=1.0.0-38), 1155-to-20 (>=1.0.0, <=1.0.2) +3247 more potentially affected by CVE-2023-30541 via @openzeppelin/contracts (>=3.2.0, <=4.8.2)
@openzeppelin/contracts NPM version =3.2.0, =1.0.0-33, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.9.1, =3.24.7, =1.7.2, =3.10.3, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-30541 Source advisory: OSV:GHSA-MX2Q-35M2-X2RH...
4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +469 more potentially affected by CVE-2023-30541 via @openzeppelin/contracts-upgradeable (>=3.4.0, <=4.8.2)
@openzeppelin/contracts-upgradeable NPM version =3.4.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =0.0.1, =0.0.1, =4.0.0-prerelease-17, =4.3.3 and more Source cves: CVE-2023-30541 Source advisory: OSV:GHSA-MX2Q-35M2-X2RH...