kinvey-angular-sdk (>=3.4.0, <=3.5.3), kinvey-angular2-sdk (>=3.4.1, <=3.5.2) +6 more potentially affected by CVE-2021-26505 via hellojs (>=1.13.1, <=1.14.1)

hellojs NPM version =1.13.1, =3.4.0, =3.4.1, =3.4.1, =3.4.0, =3.4.1, =3.4.0, =3.4.0, =3.4.1, =3.5.2 Source cves: CVE-2021-26505 Source advisory: OSV:GHSA-G3VF-47FV-8F3C...

@blockmatic/eosio-ship-reader (>=0.3.0, <=1.2.0), @kongkong21/eosio-ship-reader (>=1.3.0, <=1.3.1) +4 more potentially affected by CVE-2021-29057 via node-worker-threads-pool (1.4.3)

node-worker-threads-pool NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on node-worker-threads-pool and may be impacted: - @blockmatic/eosio-ship-reader =0.3.0, =1.3.0, =1.0.0, =0.0.2, =0.0.1, =1.0.53 Source cves: CVE-2021-29057 Source...

@ai-em/opentelemetry-nestjs (5.0.0), @amplication/opentelemetry-nestjs (>=1.0.0, <=4.2.1) +260 more potentially affected by unknown CVE via @opentelemetry/instrumentation (>=0.40.0, <=0.41.1)

@opentelemetry/instrumentation NPM version =0.40.0, =1.0.0, =1.0.14, =1.0.20, =3.0.1, =0.0.0-2023-07-27--11-15, =0.0.1, =0.0.0-alpha.20230501.1, =1.0.0-alpha.20230614.2, =0.1.2, =1.0.0, =2.3.95, =1.0.2-beta.0, =1.0.2-beta.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F8PQ-3926-8GX...

4337-snap (>=0.1.0, <=0.1.1), @0xpolygonid/snap-example (1.0.0-beta.9) +322 more potentially affected by CVE-2023-39532 via ses (>=0.18.4, <=0.18.5)

ses NPM version =0.18.4, =0.1.0, =1.0.1-beta.0, =1.0.0, =1.6.3, =0.2.3, =0.2.2, =0.3.3-20230923T000433-dev-63b1fb6.0, =0.4.3-20230923T000433-dev-63b1fb6.0, =0.10.4-20230923T000433-dev-63b1fb6.0, =0.16.3-20230923T000433-dev-63b1fb6.0, =0.10.4-mainnet1B-dev-b0c1f78.0, =0.16.2-mainnet1B-dev-b0c1f78....

ses-cjs (>=1.0.0, <=1.0.1) potentially affected by CVE-2023-39532 via ses (0.13.1)

ses NPM version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on ses and may be impacted: - ses-cjs =1.0.0, =1.0.1 Source cves: CVE-2023-39532 Source advisory: OSV:GHSA-9C4H-3F7H-322R...

@nguniversal/builders (>=16.1.0-next.0, <=16.1.1), @nguniversal/express-engine (>=16.1.0-next.0, <=16.1.1) potentially affected by unknown CVE via @nguniversal/common (>=16.1.0, <=16.1.1)

@nguniversal/common NPM version =16.1.0, =16.1.0-next.0, =16.1.0-next.0, =16.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-R3HF-Q8Q7-FV2P...

@ai-em/opentelemetry-nestjs (5.0.0), @amplication/opentelemetry-nestjs (>=1.0.0, <=4.2.1) +262 more potentially affected by CVE-2023-38704 via import-in-the-middle (>=1.3.5, <=1.4.1)

import-in-the-middle NPM version =1.3.5, =1.0.0, =1.0.14, =1.0.20, =3.0.1, =0.0.0-2023-07-27--11-15, =0.0.1, =0.0.0-alpha.20230501.1, =1.0.0-alpha.20230614.2, =0.1.2, =1.0.0, =2.3.95, =1.0.2-beta.0, =1.0.2-beta.1 and more Source cves: CVE-2023-38704 Source advisory: OSV:GHSA-5R27-RW8R-7967...

ahtx0 (>=0.1.0, <=0.1.4), all-is-cubes-desktop (0.4.0) +414 more potentially affected by unknown CVE via tui (>=0.1.3, <=0.19.0)

tui CARGO version =0.1.3, =0.1.0, =0.1.2, =0.1.6, =0.1.0, =0.1.0, =0.0.9, =0.0.1, =0.4.0, =11.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0049...

feembox (>=0.1.0, <=0.1.1), mail (>=0.6.0, <=0.7.0) +5 more potentially affected by unknown CVE via mail-internals (0.2.3)

mail-internals CARGO version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mail-internals and may be impacted: - feembox =0.1.0, =0.6.0, =0.6.0, =0.6.0-wip, =0.2.0, =0.6.0, =0.1.0, =0.1.2 Source cves: unknown CVE Source advisory:...

3gtel-frontend-platform (1.0.0), @achieve-all/v-element (1.0.0) +296 more potentially affected by CVE-2025-3197 via expand-object (>=0.2.3, <=0.4.2)

expand-object NPM version =0.2.3, =0.1.1, =1.0.0, =1.0.0, =2.0.0, =2.0.7, =0.1.0, =1.0.0, =1.0.8, =0.1.2, =1.0.3, =6.0.0-rc1, =1.0.0, =1.0.8 and more Source cves: CVE-2025-3197 Source advisory: SNYK:JS-EXPANDOBJECT-5821390...

matrix-appservice-irc (0.36.0) potentially affected by CVE-2023-38691 via matrix-appservice-bridge (6.0.0)

matrix-appservice-bridge NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-appservice-bridge and may be impacted: - matrix-appservice-irc 0.36.0 Source cves: CVE-2023-38691 Source advisory: OSV:GHSA-VC7J-H8XG-FV5X...

libdoh (>=0.9.0, <=0.9.4) potentially affected by CVE-2023-3766 via odoh-rs (1.0.0)

odoh-rs CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on odoh-rs and may be impacted: - libdoh =0.9.0, =0.9.4 Source cves: CVE-2023-3766 Source advisory: OSV:GHSA-GPCV-P28P-FV2P...

managed-component-to-cloudflare-worker (1.5.2) potentially affected by CVE-2023-3348 via wrangler (2.0.23)

wrangler NPM version 2.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on wrangler and may be impacted: - managed-component-to-cloudflare-worker 1.5.2 Source cves: CVE-2023-3348 Source advisory: OSV:GHSA-8C93-4HCH-XGXP...

armory_cli (>=0.3.3, <=0.3.28), armory_lib (>=0.1.0, <=0.3.28) +140 more potentially affected by CVE-2023-38497 via cargo (>=0.4.0, <=0.70.1)

cargo CARGO version =0.4.0, =0.3.3, =0.1.0, =0.10.0, =0.10.0, =0.1.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.6.0, =0.1.0, =0.1.2 and more Source cves: CVE-2023-38497 Source advisory: OSV:GHSA-J3XP-WFR4-HX87...

libdoh (>=0.9.0, <=0.9.4) potentially affected by CVE-2023-3766 via odoh-rs (1.0.0)

odoh-rs CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on odoh-rs and may be impacted: - libdoh =0.9.0, =0.9.4 Source cves: CVE-2023-3766 Source advisory: OSV:RUSTSEC-2023-0095...

@ansdomain/react-ans-address (>=0.0.31, <=0.0.32), @ansdomain/ui (>=3.8.0, <=3.8.771) +94 more potentially affected by CVE-2023-38698 via @ensdomains/ens-contracts (>=0.0.2, <=0.0.21)

@ensdomains/ens-contracts NPM version =0.0.2, =0.0.31, =3.8.0, =0.3.0-alpha, =1.2.0, =0.0.1, =0.0.1, =2.1.7, =3.4.2, =0.0.1, =3.4.5, =3.0.0-alpha.3, =2.2.2, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2023-38698 Source advisory: OSV:GHSA-RRXV-Q8M4-WCH3...

@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/macos-x64 (>=7.0.0, <=7.33.3)

@pnpm/macos-x64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/linux-x64 (>=8.0.0, <=8.6.7)

@pnpm/linux-x64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/win-x64 (>=8.0.0, <=8.6.7)

@pnpm/win-x64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/linux-x64 (>=7.0.0, <=7.33.3)

@pnpm/linux-x64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/macos-x64 (>=8.0.0, <=8.6.7)

@pnpm/macos-x64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

ynpm-tool (>=4.0.5-pnpm.15, <=5.5.11) potentially affected by CVE-2023-37478 via pnpm (>=7.2.1, <=7.5.1)

pnpm NPM version =7.2.1, =4.0.5-pnpm.15, =5.5.11 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/win-x64 (>=7.0.0, <=7.33.3)

@pnpm/win-x64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/linux-arm64 (>=7.0.0, <=7.33.3)

@pnpm/linux-arm64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/assert-project (>=0.0.0-20230605-20230605142810, <=2.3.28), @pnpm/assert-store (>=1.0.59, <=1.0.63) +41 more potentially affected by CVE-2023-37478 via @pnpm/cafs (>=7.0.0, <=7.0.4)

@pnpm/cafs NPM version =7.0.0, =0.0.0-20230605-20230605142810, =1.0.59, =2.0.0, =18.0.0, =0.0.0-20230605-20230605142810, =4.0.0, =12.0.0, =7.0.0, =6.0.0, =0.0.0-20230605-20230605142810, =0.0.0-20230605-20230605142810, =0.0.0-20230605-20230605142810, =0.0.0-20230605-20230605142810,...

@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/macos-arm64 (>=7.0.0, <=7.33.3)

@pnpm/macos-arm64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/macos-arm64 (>=8.0.0, <=8.6.7)

@pnpm/macos-arm64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/linux-arm64 (>=8.0.0, <=8.6.7)

@pnpm/linux-arm64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@ckies/cli (>=0.0.2, <=0.0.4), @crawless/utils (>=1.0.0, <=1.0.24) +82 more potentially affected by CVE-2023-26139 via underscore-keypath (>=0.0.15, <=0.9.3)

underscore-keypath NPM version =0.0.15, =0.0.2, =1.0.0, =0.1.1, =0.0.1, =1.0.1, =1.2.0, =1.0.2, =1.0.0, =1.457.521, =0.0.1, =0.0.1, =1.0.0 and more Source cves: CVE-2023-26139 Source advisory: OSV:GHSA-GPVC-MX6G-CCHV...

anchor-client (0.26.0), basejmp (0.1.0) +226 more potentially affected by unknown CVE via dlopen_derive (0.1.4)

dlopenderive CARGO version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dlopenderive and may be impacted: - anchor-client 0.26.0 - basejmp 0.1.0 - bonfida-test-utils 0.1.0 - bonfida-utils =0.2.3, =0.2.0, =0.14.0, =0.1.0, =0.1.0, =0.29.0, =0.1....

kyc3-sdk (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via ethersjs (0.0.1-security)

ethersjs NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ethersjs and may be impacted: - kyc3-sdk =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2023-315...

@christianhugo/mobile-builder (0.7.3-beta.3), @saltcorn/mobile-builder (>=0.7.2-beta.6, <=0.7.3-beta.3) potentially affected by unknown CVE via @saltcorn/cli (>=0.7.2, <=0.7.3-beta.3)

@saltcorn/cli NPM version =0.7.2, =0.7.2-beta.6, =0.7.3-beta.3 Source cves: unknown CVE Source advisory: OSV:GHSA-WXF3-4FVJ-VQQX...

sails-hook-api-version-accept (0.1.0), sails-hook-route (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-38504 via sails (>=1.0.1, <=1.0.3-2)

sails NPM version =1.0.1, =0.0.1, =0.0.4 Source cves: CVE-2023-38504 Source advisory: OSV:GHSA-GPW9-FWM8-7RX7...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +100 more potentially affected by CVE-2023-34235 via @strapi/utils (>=4.0.0, <=4.10.7)

@strapi/utils NPM version =4.0.0, =1.0.0, =1.3.0, =1.4.1 - @codeparticle/strapi-plugin-graphql 4.9.2 and more Source cves: CVE-2023-34235 Source advisory: OSV:GHSA-9XG4-3QFM-9W8F...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +43 more potentially affected by CVE-2023-34235 via @strapi/database (>=4.0.0, <=4.10.7)

@strapi/database NPM version =4.0.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-34235 Source advisory: OSV:GHSA-9XG4-3QFM-9W8F...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +100 more potentially affected by CVE-2023-34093 via @strapi/utils (>=4.0.0, <=4.10.7)

@strapi/utils NPM version =4.0.0, =1.0.0, =1.3.0, =1.4.1 - @codeparticle/strapi-plugin-graphql 4.9.2 and more Source cves: CVE-2023-34093 Source advisory: OSV:GHSA-CHMR-RG2F-9JMF...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +43 more potentially affected by CVE-2023-34093 via @strapi/database (>=4.0.0, <=4.10.7)

@strapi/database NPM version =4.0.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-34093 Source advisory: OSV:GHSA-CHMR-RG2F-9JMF...

@chargeover/strapi (0.0.1-rc1.1), @code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.5.1) +34 more potentially affected by CVE-2023-34093 via @strapi/strapi (>=4.0.0-beta.0, <=4.10.7)

@strapi/strapi NPM version =4.0.0-beta.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.9.2, =4.9.2, =1.0.5, =1.0.5, =1.0.0-alpha.0, =1.0.0-alpha.3 - @nexacarts/admin 2.0.9 and more Source cves: CVE-2023-34093 Source advisory: OSV:GHSA-CHMR-RG2F-9JMF...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +2 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (>=5.0.0-pre.9, <=5.0.5)

@feathersjs/transport-commons NPM version =5.0.0-pre.9, =0.4.11, =0.5.4, =0.5.8 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

@z1/lib-api-box-client (>=0.2.1, <=0.3.0), @z1/lib-api-box-client-core (>=0.2.0, <=0.3.0) +9 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (4.2.1)

@feathersjs/transport-commons NPM version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @z1/lib-api-box-client =0.2.1, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.52, =0.2.52...

@xr3ngine/client-core (>=0.2.15, <=0.2.18), @xr3ngine/client-ml (>=0.2.15, <=0.2.18) +1 more potentially affected by CVE-2023-37899 via @feathersjs/socketio (>=4.5.9, <=4.5.11)

@feathersjs/socketio NPM version =4.5.9, =0.2.15, =0.2.15, =0.2.18 - @xr3ngine/server-core 0.2.14 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

@snickbit/feathers-up (>=0.1.11, <=1.2.1), @snickbit/feathers-up-mongodb (>=0.0.1, <=0.0.34) +4 more potentially affected by CVE-2023-37899 via @feathersjs/socketio (>=5.0.0-pre.9, <=5.0.0-pre.26)

@feathersjs/socketio NPM version =5.0.0-pre.9, =0.1.11, =0.0.1, =0.0.1, =0.0.1, =0.4.11, =0.4.11, =0.4.13 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

bridge_lmdb (0.1.0), ithos (0.0.0) +3 more potentially affected by unknown CVE via lmdb-rs (0.7.6)

lmdb-rs CARGO version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on lmdb-rs and may be impacted: - bridgelmdb 0.1.0 - ithos 0.0.0 - sanakirja =1.0.0, =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-F9G6-FP84-FV92...

ostree-ext (>=0.1.0, <=0.9.1) potentially affected by CVE-2022-47085 via ostree (>=0.11.0, <=0.15.0)

ostree CARGO version =0.11.0, =0.1.0, =0.9.1 Source cves: CVE-2022-47085 Source advisory: OSV:GHSA-X96G-95FQ-4XV4...

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (>=0.3.5, <=0.17.9) +741 more potentially affected by CVE-2023-3696 via mongoose (>=5.0.0, <=5.13.17)

mongoose NPM version =5.0.0, =0.24.0, =0.3.5, =0.2.0, =3.7.0, =0.1.17, =1.0.0, =2.8.0, =0.0.1, =0.0.2, =0.7.0, =1.0.33, =2.1.3 and more Source cves: CVE-2023-3696 Source advisory: OSV:GHSA-9M93-W8W6-76HH...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +305 more potentially affected by CVE-2023-3696 via mongoose (>=6.0.1, <=6.11.2)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.0.1, =0.1.9 and more Source cves: CVE-2023-3696 Source advisory: OSV:GHSA-9M93-W8W6-76HH...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +46 more potentially affected by CVE-2023-3696 via mongoose (>=7.0.0, <=7.3.2)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =2.0.18, =0.3.0, =0.3.0, =0.3.0, =1.0.0, =0.1.33, =0.1.35 - @meniuapp/data 0.0.2 and more Source cves: CVE-2023-3696 Source advisory: OSV:GHSA-9M93-W8W6-76HH...

i-form-base (1.0.0) potentially affected by CVE-2023-3691 via layui (2.7.6)

layui NPM version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on layui and may be impacted: - i-form-base 1.0.0 Source cves: CVE-2023-3691 Source advisory: OSV:GHSA-HX4H-676R-J3QP...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2023-37466 via vm2 (>=3.0.0, <=3.9.19)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +280 more potentially affected by CVE-2023-37903 +1 more via vm2 (>=3.0.0, <=3.9.19)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =2.0.0-beta.0 and more Source cves:...