@finsemble/finsemble-core (>=8.8.0-beta.1, <=8.9.9), @finsemble/finsemble-electron-adapter (>=8.8.0-beta.1, <=8.9.9) +6 more potentially affected by CVE-2023-4863 +1 more via electron (>=24.0.0, <=24.4.1)

electron NPM version =24.0.0, =8.8.0-beta.1, =8.8.0-beta.1, =4.1.5, =2.0.99, =0.0.31, =0.0.33 - reduxtron 0.0.1-alpha Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:GHSA-J7HP-H8JX-5PPR...

html5-picture (>=0.0.4-alpha, <=0.2.0), image-decompose (>=0.1.0, <=0.4.1) +1 more potentially affected by CVE-2023-4863 +1 more via webp (0.1.3)

webp CARGO version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on webp and may be impacted: - html5-picture =0.0.4-alpha, =0.1.0, =0.4.1 - towebp 0.1.0 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:GHSA-J7HP-H8JX-5PPR...

@dweb-browser/desktop (0.1.2), @dweb-browser/js-process (0.1.2) +27 more potentially affected by CVE-2023-4863 +1 more via electron (>=25.0.0-beta.1, <=25.8.0)

electron NPM version =25.0.0-beta.1, =1.0.0, =1.0.0, =0.6.0, =0.0.22, =0.0.93, =0.0.95 - firedev 16.444.5 - firedev-class-helpers 16.444.4 - firedev-config 16.444.4 - firedev-core 16.444.5 - firedev-logger 16.444.4 - firedev-rest 16.444.3 - firedev-storage 16.444.4 and more Source cves:...

html5-picture (>=0.0.4-alpha, <=0.2.0), image-decompose (>=0.1.0, <=0.4.1) +3 more potentially affected by CVE-2023-4863 +1 more via libwebp-sys (>=0.2.0, <=0.5.0)

libwebp-sys CARGO version =0.2.0, =0.0.4-alpha, =0.1.0, =0.5.17, =0.1.0, =0.2.2 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:RUSTSEC-2023-0061...

ahqstore_cli_rs (>=1.0.0-rc10, <=1.0.0-rc11), algebraics (>=0.1.2, <=0.2.0) +244 more potentially affected by unknown CVE via inventory (>=0.1.10, <=0.1.11)

inventory CARGO version =0.1.10, =1.0.0-rc10, =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.7.0, =0.6.0, =0.5.0, =0.6.0, =0.4.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-36XM-35QQ-795W...

acct (>=0.2.0, <=0.5.0), acme-redirect (0.4.0) +135 more potentially affected by unknown CVE via users (>=0.4.4, <=0.10.0)

users CARGO version =0.4.4, =0.2.0, =4.1.0, =1.0.0, =0.1.0, =0.9.0, =0.9.0, =0.1.0, =0.4.2, =0.4.0, =0.7.4, =0.0.1, =0.1.1, =0.1.6 - chorus-tempo 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-JCR6-4FRQ-9GJJ...

ahqstore_cli_rs (>=1.0.0-rc10, <=1.0.0-rc11), algebraics (>=0.1.2, <=0.2.0) +244 more potentially affected by unknown CVE via inventory (>=0.1.10, <=0.1.11)

inventory CARGO version =0.1.10, =1.0.0-rc10, =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.7.0, =0.6.0, =0.5.0, =0.6.0, =0.4.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GHC8-5CGM-5RPF...

acct (>=0.2.0, <=0.5.0), acid-store (>=0.8.0, <=0.14.2) +292 more potentially affected by unknown CVE via users (>=0.4.4, <=0.11.0)

users CARGO version =0.4.4, =0.2.0, =0.8.0, =0.4.0, =4.1.0, =0.1.0, =1.0.0, =0.1.0, =1.1.0, =0.3.0, =0.3.0, =0.3.0, =0.9.0, =0.9.0, =0.10.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0059...

ahqstore_cli_rs (>=1.0.0-rc10, <=1.0.0-rc11), algebraics (>=0.1.2, <=0.2.0) +244 more potentially affected by unknown CVE via inventory (>=0.1.10, <=0.1.11)

inventory CARGO version =0.1.10, =1.0.0-rc10, =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.7.0, =0.6.0, =0.5.0, =0.6.0, =0.4.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0057...

ahqstore_cli_rs (>=1.0.0-rc10, <=1.0.0-rc11), algebraics (>=0.1.2, <=0.2.0) +244 more potentially affected by unknown CVE via inventory (>=0.1.10, <=0.1.11)

inventory CARGO version =0.1.10, =1.0.0-rc10, =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.7.0, =0.6.0, =0.5.0, =0.6.0, =0.4.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0058...

hexo-theme-shokax (>=0.3.12, <=0.4.2) potentially affected by CVE-2023-39584 via hexo (7.0.0)

hexo NPM version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on hexo and may be impacted: - hexo-theme-shokax =0.3.12, =0.4.2 Source cves: CVE-2023-39584 Source advisory: OSV:GHSA-X2JC-989C-47Q4...

@buttercup/diag (>=0.1.0, <=0.2.0), bcup-cli (>=1.0.0, <=1.2.0) +2 more potentially affected by CVE-2023-41646 via buttercup (>=3.0.0, <=6.17.2)

buttercup NPM version =3.0.0, =0.1.0, =1.0.0, =1.0.1-a, =0.2.3, =0.2.4 Source cves: CVE-2023-41646 Source advisory: OSV:GHSA-7CWQ-P8CR-H9QG...

@finsemble/finsemble-core (>=8.8.0-beta.1, <=8.9.9), @finsemble/finsemble-electron-adapter (>=8.8.0-beta.1, <=8.9.9) +6 more potentially affected by CVE-2023-39956 via electron (>=24.0.0, <=24.4.1)

electron NPM version =24.0.0, =8.8.0-beta.1, =8.8.0-beta.1, =4.1.5, =2.0.99, =0.0.31, =0.0.33 - reduxtron 0.0.1-alpha Source cves: CVE-2023-39956 Source advisory: OSV:GHSA-7X97-J373-85X5...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +9 more potentially affected by CVE-2023-39956 via electron (>=22.0.0, <=22.3.13)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =9.13.1, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-39956 Source advisory: OSV:GHSA-7X97-J373-85X5...

@dweb-browser/desktop (0.1.2), @dweb-browser/js-process (0.1.2) +25 more potentially affected by CVE-2023-39956 via electron (>=25.0.0-beta.1, <=25.4.0)

electron NPM version =25.0.0-beta.1, =1.0.0, =1.0.0, =0.6.0, =0.6.3 - electron-proxy-example 1.0.0 - electronim 0.0.93 - firedev 16.444.5 - firedev-class-helpers 16.444.4 - firedev-config 16.444.4 - firedev-core 16.444.5 - firedev-logger 16.444.4 - firedev-rest 16.444.3 - firedev-storage 16.444.4...

@cubesoft/nx-electron (>=0.49.0, <=0.65.0), @grandlinex/e-kernel (>=0.30.0, <=0.32.0) +4 more potentially affected by CVE-2023-39956 via electron (>=23.0.0, <=23.2.1)

electron NPM version =23.0.0, =0.49.0, =0.30.0, =1.0.0, =0.0.90, =0.0.1, =0.0.15 Source cves: CVE-2023-39956 Source advisory: OSV:GHSA-7X97-J373-85X5...

futamata (0.0.36), hey-you (>=4.1.5, <=4.1.7) +1 more potentially affected by CVE-2023-29198 via electron (24.0.0)

electron NPM version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - futamata 0.0.36 - hey-you =4.1.5, =0.0.31, =0.0.33 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +8 more potentially affected by CVE-2023-29198 via electron (>=22.0.0, <=22.3.5)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@cubesoft/nx-electron (>=0.49.0, <=0.65.0), @grandlinex/e-kernel (>=0.30.0, <=0.32.0) +4 more potentially affected by CVE-2023-29198 via electron (>=23.0.0, <=23.2.1)

electron NPM version =23.0.0, =0.49.0, =0.30.0, =1.0.0, =0.0.90, =0.0.1, =0.0.15 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@finsemble/finsemble-core (>=1.0.0-beta-9, <=8.4.3), @finsemble/finsemble-electron-adapter (>=1.0.0-beta-9, <=8.4.3) +5 more potentially affected by CVE-2023-23623 via electron (22.0.0)

electron NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - @finsemble/finsemble-core =1.0.0-beta-9, =1.0.0-beta-9, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =2.0.92, =2.0.94 Source cves:...

@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), @peterpme/parse-server-mailgun (>=2.4.8, <=2.5.11) +19 more potentially affected by CVE-2023-41058 via parse-server (>=2.0.8, <=3.10.0)

parse-server NPM version =2.0.8, =1.0.5, =2.4.8, =1.0.0, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.0, =1.0.0, =1.0.0, =1.4.0 and more Source cves: CVE-2023-41058 Source advisory: OSV:GHSA-FCV6-FG5R-JM9Q...

decentraland-gatsby (>=5.76.0, <=5.77.1) potentially affected by CVE-2023-41049 via @dcl/single-sign-on-client (0.0.13)

@dcl/single-sign-on-client NPM version 0.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on @dcl/single-sign-on-client and may be impacted: - decentraland-gatsby =5.76.0, =5.77.1 Source cves: CVE-2023-41049 Source advisory: OSV:GHSA-VP4F-WXGW-7X8X...

dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +14 more potentially affected by CVE-2023-41051 via vm-memory (>=0.4.0, <=0.11.0)

vm-memory CARGO version =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-41051 Source advisory: OSV:GHSA-49HH-FPRX-M68G...

dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +14 more potentially affected by CVE-2023-41051 via vm-memory (>=0.4.0, <=0.11.0)

vm-memory CARGO version =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-41051 Source advisory: OSV:RUSTSEC-2023-0056...

@aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3), @aerogear/apollo-voyager-server (>=0.1.0, <=0.2.7-rc3) +157 more potentially affected by unknown CVE via apollo-server-core (>=2.0.0, <=2.25.3)

apollo-server-core NPM version =2.0.0, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.5.0-rc1, =0.3.0-SNAPSHOT1, =0.5.2-dev1, =2018.8.28-0, =0.5.1-alpha.0, =2.11.0, =3.9.0, =2.2.0-alpha.1, =2.3.10, =0.12.0-alpha.3, =0.13.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

@ancademy/platform-sdk-client (>=1.1.1, <=1.1.4), @apollo/server-integration-testsuite (>=4.1.0, <=4.9.2) +31 more potentially affected by unknown CVE via @apollo/server (>=4.1.0, <=4.9.2)

@apollo/server NPM version =4.1.0, =1.1.1, =4.1.0, =0.0.1, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.3.0-rc.0, =0.2.0, =0.1.0-alpha.6, =0.1.18, =0.1.17, =0.2.0, =0.1.17, =0.2.0, =0.2.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

@a11ywatch/a11ywatch (>=0.0.1, <=0.3.82), @a11ywatch/core (>=0.1.1, <=0.8.17) +49 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.12.0)

apollo-server-core NPM version =3.0.0-html.2, =0.0.1, =0.1.1, =4.9.2, =1.0.1, =1.1.22, =1.1.19, =1.0.0, =1.1.0, =1.0.0, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =10.0.1, =11.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

currentrequest (>=1.0.0, <=1.0.6), daichainai-moi (>=1.0.0, <=1.0.2) +5 more potentially affected by CVE-2023-40582 via find-exec (>=1.0.0, <=1.0.2)

find-exec NPM version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.15, =1.1.2, =1.1.5 Source cves: CVE-2023-40582 Source advisory: OSV:GHSA-95RP-6GQP-6622...

@bitfoot/theme-ngx-globular (>=0.1.1, <=0.1.15), @dashkite/genie-markdown (>=0.0.1, <=0.0.5) +43 more potentially affected by CVE-2023-26364 via @adobe/css-tools (>=4.2.0, <=4.3.0-rc.1)

@adobe/css-tools NPM version =4.2.0, =0.1.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.3, =0.1.26, =3.2.0, =3.1.0, =0.1.0-beta.3, =0.0.1, =0.0.3, =7.5.3, =7.5.5 and more Source cves: CVE-2023-26364 Source advisory: OSV:GHSA-HPX4-R86G-5JRG...

@4qwerty7/mathjax-node-page (>=3.2.0, <=3.2.1), @4qwerty7/syzoj-renderer (>=1.0.7, <=1.2.1) +140 more potentially affected by CVE-2023-39663 via mathjax (>=2.6.1, <=2.7.9)

mathjax NPM version =2.6.1, =3.2.0, =1.0.7, =1.0.0, =1.0.0-alpha.6, =2.0.0, =1.0.36, =1.0.0, =6.0.0-2020.8, =6.0.0-2020.12, =6.0.0-2020.8, =6.0.0-2020.8, =0.4.0, =0.1.1, =0.1.8 and more Source cves: CVE-2023-39663 Source advisory: OSV:GHSA-V638-Q856-GRG8...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +755 more potentially affected by CVE-2021-32050 via mongodb (>=4.0.0-beta.1, <=4.16.0)

mongodb NPM version =4.0.0-beta.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =0.1.66, =0.5.17, =3.0.0-beta.3, =0.0.1002, =0.0.7, =0.0.1000, =0.0.2, =0.0.1, =0.0.1000 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...

@36node/template-service (>=0.17.6, <=0.17.9), @88bens/mongoose-multi (2.0.3) +564 more potentially affected by CVE-2021-32050 via mongodb (>=3.6.0, <=3.6.9)

mongodb NPM version =3.6.0, =0.17.6, =3.7.0, =1.0.0, =0.7.0, =2.1.0, =1.1.66, =2.9.8, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.2.0, =3.3.3 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +174 more potentially affected by CVE-2021-32050 via mongodb (>=5.0.0, <=5.7.0)

mongodb NPM version =5.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =0.3.1, =0.8.2, =3.12.0, =1.0.0, =2.0.0-beta.7, =1.0.1, =0.0.0, =1.0.2, =1.3.4 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...

@aloe2/abstract-eth (1.0.20228282226), @aloe2/abstract-utxo (1.1.20228282226) +179 more potentially affected by CVE-2023-41037 via openpgp (>=5.0.0, <=5.9.0)

openpgp NPM version =5.0.0, =5.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on openpgp and may be impacted: - @aloe2/abstract-eth 1.0.20228282226 - @aloe2/abstract-utxo 1.1.20228282226 - @aloe2/account-lib 2.20.20228282226 - @aloe2/bitgo...

@blinkhealth/config-yourself (>=1.0.0, <=1.0.1), @donswayo/wildduckiu (>=1.30.3, <=1.30.6) +18 more potentially affected by CVE-2023-41037 via openpgp (>=4.5.1, <=4.10.10)

openpgp NPM version =4.5.1, =1.0.0, =1.30.3, =9.0.0-dev.5644f38, =0.0.1, =1.1.6, =0.0.1, =2.0.0, =0.3.4, =0.9.0, =1.25.0, =1.31.0 and more Source cves: CVE-2023-41037 Source advisory: OSV:GHSA-CH3C-V47X-4PGP...

a2 (>=0.2.0, <=0.6.2), abacuz (>=0.1.0, <=0.1.1) +3004 more potentially affected by unknown CVE via webpki (>=0.18.1, <=0.21.4)

webpki CARGO version =0.18.1, =0.2.0, =0.1.0, =0.2.0-beta.4, =0.1.1, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =1.0.0, =0.1.0, =0.8.0, =0.1.0, =0.2.2, =1.0.0, =1.0.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8QV2-5VQ6-G2G7...

feembox (>=0.1.0, <=0.1.1), mail (>=0.6.0, <=0.7.0) +5 more potentially affected by unknown CVE via mail-internals (0.2.3)

mail-internals CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mail-internals and may be impacted: - feembox =0.1.0, =0.6.0, =0.6.0, =0.6.0-wip, =0.2.0, =0.6.0, =0.1.0, =0.1.2 Source cves: unknown CVE Source advisory:...

@adobe/git-server (>=1.0.1, <=1.0.5), @adobe/helix-cli (>=5.7.7, <=6.1.0) +21 more potentially affected by CVE-2023-40185 via shescape (>=1.6.1, <=1.6.6)

shescape NPM version =1.6.1, =1.0.1, =5.7.7, =2.16.1, =0.1.3, =0.0.7, =0.1.0, =2.3.2, =2.3.2, =2.3.2, =2.3.3 and more Source cves: CVE-2023-40185 Source advisory: OSV:GHSA-J55R-787P-M549...

a2 (>=0.2.0, <=0.6.2), abacuz (>=0.1.0, <=0.1.1) +3004 more potentially affected by CVE-2018-16875 via webpki (>=0.18.1, <=0.21.4)

webpki CARGO version =0.18.1, =0.2.0, =0.1.0, =0.2.0-beta.4, =0.1.1, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =1.0.0, =0.1.0, =0.8.0, =0.1.0, =0.2.2, =1.0.0, =1.0.7 and more Source cves: CVE-2018-16875 Source advisory: OSV:RUSTSEC-2023-0052...

3d-kit (>=0.0.1, <=0.0.14), @0x4447/broccoli (>=1.0.0, <=1.0.16) +144 more potentially affected by CVE-2023-38894 via tree-kit (>=0.0.4, <=0.6.2)

tree-kit NPM version =0.0.4, =0.0.1, =1.0.0, =2.0.0, =1.0.0, =1.18.0, =0.0.1, =1.0.5-master.20190403074739, =1.0.0-master.20180909013449, =0.1.0-master.20191109234452, =0.1.0-ipcrm-custom-event.20191122150318, =1.1.0-master.20190802170815, =0.1.0-master.20190319050251,...

@blocklet/discuss-kit (>=1.0.8, <=2.0.172), @blocklet/discuss-kit-post (>=1.6.254, <=2.0.172) +54 more potentially affected by CVE-2023-26140 via @excalidraw/excalidraw (>=0.4.3, <=0.15.2-6546-3398d86)

@excalidraw/excalidraw NPM version =0.4.3, =1.0.8, =1.6.254, =1.0.8, =0.0.2, =0.0.6, =1.0.0, =0.0.1, =0.0.1, =0.0.2, =30.1.2, =0.0.0, =0.0.5, =0.1.8, =0.1.72 and more Source cves: CVE-2023-26140 Source advisory: OSV:GHSA-V7V8-GJV7-FFMR...

@story-telling-reporter/draft-editor (>=2.1.0-beta.0, <=2.1.2) potentially affected by CVE-2023-40027 via @keystone-6/core (5.2.0)

@keystone-6/core NPM version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @story-telling-reporter/draft-editor =2.1.0-beta.0, =2.1.2 Source cves: CVE-2023-40027 Source advisory: OSV:GHSA-9CVC-V7WM-992C...

@maggioli-design-system/mds-icon (2.0.0-rc.1), esto-es-una-prueba-ui-components (1.0.0) potentially affected by CVE-2023-40013 via external-svg-loader (>=1.4.0, <=1.6.8)

external-svg-loader NPM version =1.4.0, =1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on external-svg-loader and may be impacted: - @maggioli-design-system/mds-icon 2.0.0-rc.1 - esto-es-una-prueba-ui-components 1.0.0 Source cves: CVE-2023-40013...

@blocklet/discuss-kit (>=1.0.8, <=2.0.172), @blocklet/discuss-kit-post (>=1.6.254, <=2.0.172) +62 more potentially affected by CVE-2023-26140 via @excalidraw/excalidraw (>=0.4.3, <=0.15.3)

@excalidraw/excalidraw NPM version =0.4.3, =1.0.8, =1.6.254, =1.0.8, =0.0.2, =0.0.6, =1.0.0, =0.0.1, =0.0.1, =0.0.2, =30.1.2, =0.0.0, =0.0.5, =0.0.32 and more Source cves: CVE-2023-26140 Source advisory: SNYK:JS-EXCALIDRAWEXCALIDRAW-5841658...

com.github.camel-labs:camel-pubnub (0.1.0), io.relayr:android-sdk (>=0.0.1, <=0.0.7) +3 more potentially affected by CVE-2023-26154 via com.pubnub:pubnub (>=3.6.3, <=3.7.4)

com.pubnub:pubnub MAVEN version =3.6.3, =0.0.1, =0.1.1, =0.1.1, =0.1.1, =0.1.4 Source cves: CVE-2023-26154 Source advisory: SNYK:JAVA-COMPUBNUB-6098371...

@leapdev/auth-agent (>=2.2.6-beta.0, <=2.2.11), @pubnub/chat (>=0.1.0, <=0.2.0) +2 more potentially affected by CVE-2023-26154 via pubnub (>=7.0.1, <=7.3.0)

pubnub NPM version =7.0.1, =2.2.6-beta.0, =0.1.0, =0.13.9, =2.29.0, =2.64.1 Source cves: CVE-2023-26154 Source advisory: SNYK:JS-PUBNUB-5840690...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1553 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts (>=4.0.0, <=4.9.2)

@openzeppelin/contracts NPM version =4.0.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-40014 Source advisory: OSV:GHSA-G4VP-M682-QQMP...

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +410 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.9.2)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =0.2.1-alpha, =0.2.1-beta2 and more Source cves: CVE-2023-40014 Source advisory:...

@angular-architects/build-angular (16.2.0-next.2), @angular-devkit/build-angular (>=16.1.0-next.2, <=16.2.0-rc.0) +9 more potentially affected by CVE-2023-3481 via critters (>=0.0.17, <=0.0.19)

critters NPM version =0.0.17, =16.1.0-next.2, =16.0.1-snapshot-1686757302683, =16.0.1-snapshot-1686757302683, =16.1.0-rc.0, =16.1.0-rc.0, =16.1.0-rc.0, =1.1.40, =3.0.0-next.18, =0.14.29, =0.14.47 Source cves: CVE-2023-3481 Source advisory: OSV:GHSA-CX3J-QQXJ-9597...

@primecms/core (>=0.0.23, <=0.3.3-beta.9), @primecms/field-string (>=0.0.23, <=0.3.4-beta.1) +7 more potentially affected by CVE-2021-27524 via braft-editor (>=2.1.34, <=2.3.8)

braft-editor NPM version =2.1.34, =0.0.23, =0.0.23, =0.1.0, =0.9.4-rc.0, =0.1.0-beta, =0.4.11-beta.0, =0.4.26 Source cves: CVE-2021-27524 Source advisory: OSV:GHSA-JFRF-VV54-J2JG...