@actvalue/av-aws-sdk (>=0.5.0, <=0.9.2), @adiza/sfpowerscripts (>=23.0.0, <=25.0.7) +618 more potentially affected by CVE-2023-26920 via fast-xml-parser (>=4.0.0, <=4.1.1)

fast-xml-parser NPM version =4.0.0, =0.5.0, =23.0.0, =35.0.0, =1.6.3, =7.1.3, =2.0.17, =1.2.11, =1.11.83, =8.3.11, =3.10.0, =3.0.0, =0.0.1-beta.1, =0.0.1-beta.1, =2.0.0, =10.8.0-RC.0, =10.12.0-RC.1 and more Source cves: CVE-2023-26920 Source advisory: SNYK:JS-FASTXMLPARSER-3325616...

@3xanax/youtube-stream-status (>=1.0.0, <=1.0.3), @about7sharks/get-articles (>=0.0.24, <=0.0.39) +1093 more potentially affected by CVE-2023-23936 via undici (>=2.0.5, <=5.18.0)

undici NPM version =2.0.5, =1.0.0, =0.0.24, =0.0.0, =0.7.1, =1.0.0, =1.0.0-beta.15, =1.0.0, =1.0.0, =0.1.1-alpha.1, =0.0.1, =0.0.2, =2.9.7, =0.1.1, =1.0.0, =1.4.0 and more Source cves: CVE-2023-23936 Source advisory: OSV:GHSA-5R9G-QH6M-JXFF...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +522 more potentially affected by CVE-2023-24807 via undici (>=5.0.0, <=5.18.0)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =4.0.0-alpha.4, =2.0.0, =1.6.0, =1.0.0, =0.0.4, =0.2.0-beta.0, =0.2.0-beta.20 and more Source cves: CVE-2023-24807 Source advisory: OSV:GHSA-R6CH-MQF9-QC9W...

7ghost (>=4.11.0, <=4.11.46), @credify/credify-js (>=1.8.0, <=1.16.7) +33 more potentially affected by CVE-2023-25653 via node-jose (>=2.0.0, <=2.1.1)

node-jose NPM version =2.0.0, =4.11.0, =1.8.0, =1.4.6, =0.6.1, =0.1.11, =2.0.0, =0.0.0-experimental-1bf6ab9, =0.1.4, =3.41.6, =1.1.68, =1.0.0, =0.4.0, =0.7.7 and more Source cves: CVE-2023-25653 Source advisory: OSV:GHSA-5H4J-QRVG-9XHW...

@accounter-toolkit/green-invoice-graphql (>=0.0.2-alpha-20220914223128-d706aab, <=0.2.0-alpha-20230313141007-4bdbab6), @accounter-toolkit/hashavshevet-mesh (>=0.0.2-alpha-20220915073207-1bb0680, <=0.0.4-alpha-20230313141007-4bdbab6) +11 more potentially affected by CVE-2025-27098 via @graphql-mesh/http (>=0.1.0, <=0.3.18-alpha-20230215130920-0b4a8cec6)

@graphql-mesh/http NPM version =0.1.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =0.2.0-alpha.24, =5.1.0-canary.3, =6.0.0-canary.20, =6.0.0-canary.20, =6.0.0-canary.20, =2.2.6-alpha-20220906004558-09c8599,...

@accounter-toolkit/green-invoice-graphql (>=0.0.2-alpha-20220914223128-d706aab, <=0.2.0-alpha-20230313141007-4bdbab6), @accounter-toolkit/hashavshevet-mesh (>=0.0.2-alpha-20220915073207-1bb0680, <=0.0.4-alpha-20230313141007-4bdbab6) +10 more potentially affected by CVE-2025-27098 via @graphql-mesh/cli (>=0.78.0, <=0.82.21)

@graphql-mesh/cli NPM version =0.78.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20220914223128-d706aab, =0.2.0-alpha.24, =5.1.0-canary.3, =6.0.0-canary.20, =6.0.0-canary.20, =6.0.0-canary.20, =2.2.6-alpha-20220906004558-09c8599,...

@24hr/content-next (>=1.0.0, <=2.1.17-alpha), @24hr/natswrapper (>=1.0.0, <=1.0.20) +274 more potentially affected by CVE-2023-22580 via sequelize (>=6.0.0-beta.4, <=6.28.0)

sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =1.0.0, =1.0.43, =0.13.0, =5.0.0-alpha.3, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =0.1.3-alpha.0, =0.1.3-alpha.0, =0.3.2 and more Source cves: CVE-2023-22580 Source advisory: OSV:GHSA-8C25-F3MJ-V6H8...

@silenteer/natsu-port-server (>=0.0.38, <=0.0.54), @wmfs/tymly-fastify-plugin (>=1.85.0, <=1.87.0) potentially affected by CVE-2023-25576 via @fastify/multipart (6.0.0)

@fastify/multipart NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/multipart and may be impacted: - @silenteer/natsu-port-server =0.0.38, =1.85.0, =1.87.0 Source cves: CVE-2023-25576 Source advisory: OSV:GHSA-HPP2-2CR5-PF6G...

@cromwell/cms (>=3.0.0-alpha.0, <=3.0.5), @cromwell/server (>=3.0.0-alpha.0, <=3.0.5) +4 more potentially affected by CVE-2023-25576 via @fastify/multipart (>=7.1.0, <=7.4.0)

@fastify/multipart NPM version =7.1.0, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.1.1, =2.42.0, =1.14.0, =0.50.5-test.0, =4.51.0-test.0 Source cves: CVE-2023-25576 Source advisory: OSV:GHSA-HPP2-2CR5-PF6G...

@janus-idp/backstage-plugin-keycloak-backend (1.0.0), @janus-idp/backstage-plugin-quay (>=1.0.0, <=1.2.1) +2 more potentially affected by CVE-2023-25571 via @backstage/catalog-model (>=1.0.0, <=1.1.5)

@backstage/catalog-model NPM version =1.0.0, =1.0.0, =1.2.6, =1.2.7 Source cves: CVE-2023-25571 Source advisory: OSV:GHSA-7HV8-3FR9-J2HV...

@janus-idp/backstage-plugin-keycloak-backend (1.0.0) potentially affected by CVE-2023-25571 via @backstage/plugin-catalog-backend (1.5.1)

@backstage/plugin-catalog-backend NPM version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-catalog-backend and may be impacted: - @janus-idp/backstage-plugin-keycloak-backend 1.0.0 Source cves: CVE-2023-25571 Source advisory:...

@adelosrios/plugin-dependencytrack (>=0.2.8, <=0.2.9), @anshulgarg.cse/plugin-backstage-code-star-prerelease (0.0.2) +245 more potentially affected by CVE-2023-25571 via @backstage/core-components (>=0.0.0-nightly-20220310022859, <=0.11.2)

@backstage/core-components NPM version =0.0.0-nightly-20220310022859, =0.2.8, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-2021101222132, =0.0.0-nightly-202010102951, =0.0.0-nightly-20220310022859, =0.1.1-alpha.7, =0.0.0-nightly-202010102951, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20240929023448...

a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.8.16, <=0.10.15) +2923 more potentially affected by unknown CVE via safemem (>=0.1.1, <=0.3.3)

safemem CARGO version =0.1.1, =0.1.0, =0.8.16, =0.2.0, =0.1.1, =0.1.13, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.9.2, =0.1.0, =0.1.0, =0.0.2, =0.7.4, =0.7.19 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0081...

@savvycodes/openstad-react-admin (>=0.31.1, <=0.40.1-alpha.3), muffin-admin (>=1.21.1, <=1.29.0) +4 more potentially affected by CVE-2023-25572 via react-admin (>=3.9.5, <=3.19.11)

react-admin NPM version =3.9.5, =0.31.1, =1.21.1, =0.1.0, =1.0.0, =1.0.3 Source cves: CVE-2023-25572 Source advisory: OSV:GHSA-5JCR-82FH-339V...

@api-platform/admin (3.0.0-rc.0) potentially affected by CVE-2023-25572 via react-admin (4.0.0-rc.0)

react-admin NPM version 4.0.0-rc.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-admin and may be impacted: - @api-platform/admin 3.0.0-rc.0 Source cves: CVE-2023-25572 Source advisory: OSV:GHSA-5JCR-82FH-339V...

openstad-react-admin (0.1.29) potentially affected by CVE-2023-25572 via ra-ui-materialui (3.9.5)

ra-ui-materialui NPM version 3.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on ra-ui-materialui and may be impacted: - openstad-react-admin 0.1.29 Source cves: CVE-2023-25572 Source advisory: OSV:GHSA-5JCR-82FH-339V...

@540deg/react-native-simple-markdown (>=1.1.1, <=1.1.2), @anzeblabla/react-native-markdown-editor (>=1.0.3, <=2.1.1) +29 more potentially affected by CVE-2019-25102 via simple-markdown (>=0.0.9, <=0.5.3)

simple-markdown NPM version =0.0.9, =1.1.1, =1.0.3, =1.3.0, =1.0.1, =1.1.1, =1.1.74, =1.0.8, =1.0.4, =2.3.0, =3.0.0, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2019-25102 Source advisory: OSV:GHSA-J533-2G8V-PMPG...

@540deg/react-native-simple-markdown (>=1.1.1, <=1.1.2), @anzeblabla/react-native-markdown-editor (>=1.0.3, <=2.1.1) +29 more potentially affected by CVE-2019-25103 via simple-markdown (>=0.0.9, <=0.4.4)

simple-markdown NPM version =0.0.9, =1.1.1, =1.0.3, =1.3.0, =1.0.1, =1.1.1, =1.1.74, =1.0.8, =1.0.4, =2.3.0, =3.0.0, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2019-25103 Source advisory: OSV:GHSA-GPVJ-GP8C-C7P2...

@arcblock/gatsby-theme-docs (>=5.7.0, <=7.34.5), @changeinc/components (>=1.0.4, <=1.0.20) +87 more potentially affected by CVE-2021-23433 +1 more via algoliasearch-helper (>=2.1.2, <=2.28.1)

algoliasearch-helper NPM version =2.1.2, =5.7.0, =1.0.4, =1.0.4, =1.0.0, =2.2.1-custom, =0.0.7, =0.1.2, =0.1.4, =0.2.3, =0.2.1, =0.0.1, =2.0.0, =0.0.0, =1.9.0, =1.0.0, =1.4.2 and more Source cves: CVE-2021-23433, CVE-2025-3193 Source advisory: SNYK:JS-ALGOLIASEARCHHELPER-3318396...

afterburn (4.1.0), aoaddons (>=0.1.1, <=0.1.6) +55 more potentially affected by unknown CVE via pnet_packet (>=0.20.0, <=0.26.0)

pnetpacket CARGO version =0.20.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CF4G-FCF8-3CR9...

fast2render (>=4.1.67, <=4.1.79) potentially affected by CVE-2023-25166 via @sideway/formula (3.0.0)

@sideway/formula NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @sideway/formula and may be impacted: - fast2render =4.1.67, =4.1.79 Source cves: CVE-2023-25166 Source advisory: OSV:GHSA-C2JC-4FPR-4VHG...

roaring-landmask (0.4.0) potentially affected by CVE-2022-4304 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4304 Source advisory: OSV:GHSA-P52G-CM5J-MJV4...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0215 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0215 Source advisory: OSV:GHSA-R7JW-WP68-3XCH...

roaring-landmask (0.4.0) potentially affected by CVE-2022-4203 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4203 Source advisory: OSV:GHSA-W67W-MW4J-8QRV...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0216 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0216 Source advisory: OSV:GHSA-29XX-HCV2-C4CP...

roaring-landmask (0.4.0) potentially affected by CVE-2022-4450 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4450 Source advisory: OSV:GHSA-V5W6-WCM8-JM4Q...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0217 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0217 Source advisory: OSV:GHSA-VXRH-CPG7-8VJR...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0401 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0401 Source advisory: OSV:GHSA-VRH7-X64V-7VXQ...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0286 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0286 Source advisory: OSV:GHSA-X4QR-2FVF-3MR5...

roaring-landmask (0.4.0) potentially affected by CVE-2022-4203 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4203 Source advisory: OSV:RUSTSEC-2023-0008...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0217 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0217 Source advisory: OSV:RUSTSEC-2023-0012...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0216 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0216 Source advisory: OSV:RUSTSEC-2023-0011...

roaring-landmask (0.4.0) potentially affected by CVE-2022-4304 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4304 Source advisory: OSV:RUSTSEC-2023-0007...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0215 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0215 Source advisory: OSV:RUSTSEC-2023-0009...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0286 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0286 Source advisory: OSV:RUSTSEC-2023-0006...

roaring-landmask (0.4.0) potentially affected by CVE-2023-0401 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0401 Source advisory: OSV:RUSTSEC-2023-0013...

roaring-landmask (0.4.0) potentially affected by CVE-2022-4450 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4450 Source advisory: OSV:RUSTSEC-2023-0010...

@byinti/printer-js (>=0.0.1, <=0.0.6), @dkaframework/printer (1.0.1) +18 more potentially affected by CVE-2023-26110 via node-bluetooth (1.2.6)

node-bluetooth NPM version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth and may be impacted: - @byinti/printer-js =0.0.1, =1.0.3, =1.2.11, =0.0.3, =2.5.0, =0.0.1-alpha.0, =0.1.0, =0.1.8, =1.0.3, =0.1.3, =0.1.5 - flexprinter 0.0....

iobroker.combustion-control (0.0.1), jcode-ble (0.0.1) +1 more potentially affected by CVE-2023-26109 via node-bluetooth-serial-port (2.2.7)

node-bluetooth-serial-port NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth-serial-port and may be impacted: - iobroker.combustion-control 0.0.1 - jcode-ble 0.0.1 - jcode-bluetooth =0.1.0, =0.9.2 Source cves:...

@braira/changelog (>=1.0.0, <=1.0.4), grunt-ivantage-svn-changelog (>=0.3.0, <=0.4.1) potentially affected by CVE-2022-25853 via semver-tags (>=0.1.5, <=0.4.10)

semver-tags NPM version =0.1.5, =1.0.0, =0.3.0, =0.4.1 Source cves: CVE-2022-25853 Source advisory: OSV:GHSA-8H3G-HCWP-6HXQ...

accesskit_consumer (>=0.1.0, <=0.7.1), accesskit_windows (>=0.1.0, <=0.8.0) +997 more potentially affected by unknown CVE via im (>=9.0.0, <=15.1.0)

im CARGO version =9.0.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =1.0.5, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.0.1, =0.0.1, =0.2.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0126...

@chenng/recognition (1.0.0), @evelaguti/uberocr (>=0.0.1, <=0.0.3) +62 more potentially affected by CVE-2018-25079 via is-url (>=1.0.0, <=1.2.2)

is-url NPM version =1.0.0, =0.0.1, =1.0.1, =0.4.0, =0.1.1, =0.1.0, =0.0.4, =0.0.1, =1.0.5, =0.1.0, =0.1.6, =0.0.3, =0.0.5 and more Source cves: CVE-2018-25079 Source advisory: OSV:GHSA-P9W8-2MPQ-49H9...

a2 (>=0.5.0-alpha.1, <=0.5.3), aahc (0.1.0) +4871 more potentially affected by unknown CVE via tokio (>=0.2.0-alpha.1, <=1.18.2)

tokio CARGO version =0.2.0-alpha.1, =0.5.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.5.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4Q83-7CQ4-P6WG...

askai (0.1.0), doh-client (3.1.2) +25 more potentially affected by unknown CVE via tokio (>=1.19.2, <=1.20.1)

tokio CARGO version =1.19.2, =2.3.0, =4.1.2, =1.4.0, =1.18.1, =0.2.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4Q83-7CQ4-P6WG...

deno_bench_util (>=0.73.0, <=0.79.0), deno_broadcast_channel (>=0.73.0, <=0.79.0) +37 more potentially affected by unknown CVE via tokio (>=1.21.1, <=1.24.0)

tokio CARGO version =1.21.1, =0.73.0, =0.73.0, =0.11.0, =0.161.0, =0.93.0, =0.102.0, =0.66.0, =0.15.0, =0.73.0, =0.71.0, =0.87.0, =0.79.0, =0.110.0, =0.80.0, =0.86.0 - denowebidl 0.85.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4Q83-7CQ4-P6WG...

1095h-cli (1.0.1), 5coder-pages (0.2.0) +547 more potentially affected by CVE-2023-25344 via swig-templates (>=2.0.2, <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0-beta.1, =0.0.1-alpha.0, =0.0.1 and more Source cves: CVE-2023-25344 Source advisory: SNYK:JS-SWIGTEMPLATES-3266806...

1095h-cli (1.0.1), 5coder-pages (0.2.0) +547 more potentially affected by CVE-2023-25345 via swig-templates (>=2.0.2, <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0-beta.1, =0.0.1-alpha.0, =0.0.1 and more Source cves: CVE-2023-25345 Source advisory: SNYK:JS-SWIGTEMPLATES-3266805...

grunt-yellowlabtools (>=1.1.3, <=1.2.0), yellowlabtools (>=1.10.0, <=1.12.3) potentially affected by CVE-2022-25906 via is-http2 (>=1.0.4, <=1.1.0)

is-http2 NPM version =1.0.4, =1.1.3, =1.10.0, =1.12.3 Source cves: CVE-2022-25906 Source advisory: OSV:GHSA-2275-RPF5-XV8H...

acme-dns-rust (>=1.0.0, <=1.0.6), acme2-slim (0.2.0) +163 more potentially affected by unknown CVE via warp (>=0.1.23, <=0.3.1)

warp CARGO version =0.1.23, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =1.0.0, =0.14.0, =0.4.0, =0.1.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8V4J-7JGF-5RG9...

@aaa-backend-stack/file-storage-local (>=1.16.0, <=2.4.4), @aaa-backend-stack/file-storage-s3 (>=1.16.0, <=2.4.4) +625 more potentially affected by unknown CVE via zxcvbn (>=2.0.1, <=4.4.2)

zxcvbn NPM version =2.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =1.0.0, =0.0.9, =1.7.7, =2.0.6, =0.0.5, =1.1.10, =1.16.136 and more Source cves: unknown CVE Source advisory: SNYK:JS-ZXCVBN-3257741...