10909 matches found
nadesiko3php (0.0.10) potentially affected by CVE-2022-41777 via nadesiko3 (3.2.52)
nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-41777 Source advisory: OSV:GHSA-X2JX-W3WM-9P3P...
nadesiko3php (0.0.10) potentially affected by CVE-2022-42496 via nadesiko3 (3.2.52)
nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-42496 Source advisory: OSV:GHSA-7249-8X22-4RG4...
nadesiko3php (0.0.10) potentially affected by CVE-2022-41642 via nadesiko3 (3.2.52)
nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-41642 Source advisory: OSV:GHSA-M8R5-7WF4-63MW...
auditor (>=0.0.1, <=0.0.2), avrisp (0.3.0) +29 more potentially affected by unknown CVE via claim (>=0.3.1, <=0.5.0)
claim CARGO version =0.3.1, =0.0.1, =0.1.0, =0.3.0, =0.1.0, =0.2.0, =0.1.1, =2.0.0, =0.1.0, =0.0.1, =0.0.2, =0.9.0, =0.8.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0077...
agnes (>=0.3.0, <=0.3.2), agpm_interactions (0.0.1) +408 more potentially affected by unknown CVE via prettytable-rs (>=0.5.2, <=0.9.0)
prettytable-rs CARGO version =0.5.2, =0.3.0, =0.1.0, =0.2.3, =1.0.0, =0.1.0, =0.1.1, =3.1.3, =0.2.0, =0.2.0, =0.5.1, =0.1.0, =0.2.0, =0.3.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0074...
@adobe/git-server (>=1.0.1, <=1.0.5), @adobe/helix-cli (>=5.7.7, <=6.1.0) +34 more potentially affected by CVE-2022-22984 via snyk-gradle-plugin (>=3.1.0, <=3.24.2)
snyk-gradle-plugin NPM version =3.1.0, =1.0.1, =5.7.7, =2.16.1, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =0.2.0-a1, =1.20.0-alpha.11736.3, =1.24.0-alpha.1 and more Source cves: CVE-2022-22984 Source advisory: OSV:GHSA-4X6G-3CMX-W76R...
@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +84 more potentially affected by CVE-2022-22984 via snyk (>=1.1.1, <=1.954.0)
snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =1.6.0, =1.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2022-22984 Source advisory: OSV:GHSA-4X6G-3CMX-W76R...
@candrewsintegralblue/snyk (0.0.4), @commerce-apps/raml-toolkit (>=0.5.8, <=0.5.10) +2 more potentially affected by CVE-2022-22984 via @snyk/snyk-hex-plugin (>=1.0.0, <=1.1.4)
@snyk/snyk-hex-plugin NPM version =1.0.0, =0.5.8, =3.0.3-beta.1, =1.520.0, =1.684.0 Source cves: CVE-2022-22984 Source advisory: OSV:GHSA-4X6G-3CMX-W76R...
@adobe/git-server (>=0.9.17-pre.6, <=1.0.0), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=5.7.6) +65 more potentially affected by CVE-2022-22984 via snyk-python-plugin (>=1.0.0, <=1.24.0)
snyk-python-plugin NPM version =1.0.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.11, =1.0.1 and more Source cves: CVE-2022-22984 Source advisory: OSV:GHSA-4X6G-3CMX-W76R...
@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +56 more potentially affected by CVE-2022-22984 via snyk-sbt-plugin (>=2.0.0, <=2.15.0)
snyk-sbt-plugin NPM version =2.0.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 - @ericblade/quagga2-redux-middleware 1.0.1 and more Source cves: CVE-2022-22984 Source advisory:...
@adobe/git-server (>=1.0.3, <=1.0.5), @adobe/helix-cli (>=5.9.3, <=6.1.0) +30 more potentially affected by CVE-2022-22984 via @snyk/snyk-cocoapods-plugin (>=2.0.1, <=2.5.2)
@snyk/snyk-cocoapods-plugin NPM version =2.0.1, =1.0.3, =5.9.3, =2.17.2, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.5.8, =3.2.4, =0.0.2, =0.0.8, =0.2.0-a1, =1.20.0-alpha.11736.3, =1.24.0-alpha.1 and more Source cves: CVE-2022-22984 Source advisory: OSV:GHSA-4X6G-3CMX-W76R...
@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +56 more potentially affected by CVE-2022-22984 via snyk-mvn-plugin (>=2.0.0, <=2.31.2)
snyk-mvn-plugin NPM version =2.0.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 - @ericblade/quagga2-redux-middleware 1.0.1 and more Source cves: CVE-2022-22984 Source advisory:...
abstract-boot (>=0.2.0-beta.4, <=0.2.0-beta.7), agora (>=0.0.5, <=0.1.2) +440 more potentially affected by unknown CVE via secp256k1 (>=0.15.3, <=0.21.3)
secp256k1 CARGO version =0.15.3, =0.2.0-beta.4, =0.0.5, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.0.1, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0070...
abci-storage (0.0.3), bench-trie (>=0.12.0, <=0.12.2) +293 more potentially affected by unknown CVE via parity-util-mem (>=0.1.0, <=0.12.0)
parity-util-mem CARGO version =0.1.0, =0.12.0, =0.7.0, =0.8.8, =1.0.0, =2.0.0, =0.0.7, =0.1.0, =1.0.0 - edge-signaling 1.0.0 - edge-treasury-reward 1.0.0 - edge-voting 1.0.0 - edgeware-primitives 3.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0080...
bioyino-metric (>=0.1.0, <=0.2.0), cafs (0.0.1) +29 more potentially affected by CVE-2022-46149 via capnp (>=0.0.1, <=0.12.4)
capnp CARGO version =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.5.0, =0.1.6, =0.2.8, =0.2.0, =0.17.0, =0.2.2, =0.6.0, =0.7.0 and more Source cves: CVE-2022-46149 Source advisory: OSV:RUSTSEC-2022-0068...
@candlelabs/sdk (>=1.0.1, <=1.0.2), @infobiotech/js-error (>=0.1.0, <=0.1.6) +12 more potentially affected by CVE-2022-38900 via decode-uri-component (0.2.0)
decode-uri-component NPM version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on decode-uri-component and may be impacted: - @candlelabs/sdk =1.0.1, =0.1.0, =0.22.0-alpha.20, =0.22.0-alpha.0, =0.32.1, =0.32.3, =2.3.5, =1.0.0, =0.3.0,...
192.168.0.172 (4.6.1), 3nit-utils (>=0.13.0, <=1.0.2) +3318 more potentially affected by CVE-2022-25901 via cookiejar (>=2.0.1, <=2.1.2)
cookiejar NPM version =2.0.1, =0.13.0, =0.2.2, =1.3.1, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.16.0, =0.1.1, =1.0.0, =1.0.0, =1.1.2 and more Source cves: CVE-2022-25901 Source advisory: SNYK:JS-COOKIEJAR-3149984...
@alexktzk/cz-customizable (>=1.0.0, <=1.1.0), @algolia/coquille (>=0.0.2, <=0.0.13) +378 more potentially affected by CVE-2023-26115 via word-wrap (>=1.0.3, <=1.2.3)
word-wrap NPM version =1.0.3, =1.0.0, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.4.2, =0.0.0, =1.0.0, =0.1.0-preview, =0.1.0-preview, =6.0.0-alpha.16.20220105.1, =0.1.3, =0.1.17 and more Source cves: CVE-2023-26115 Source advisory: SNYK:JS-WORDWRAP-3149973...
277snippet-cli (>=1.0.0, <=1.0.2), 40au-isteven-angular-multiselect (4.0.0) +740 more potentially affected by CVE-2023-26111 via node-static (>=0.5.6, <=0.7.11)
node-static NPM version =0.5.6, =1.0.0, =1.0.5, =0.0.5, =0.0.1, =0.0.1, =17.0.6 and more Source cves: CVE-2023-26111 Source advisory: SNYK:JS-NODESTATIC-3149928...
20190403-utils (1.0.0), 4cs-cli (>=0.0.28, <=0.0.36) +3312 more potentially affected by CVE-2022-24999 via qs (>=6.7.0, <=6.7.2)
qs NPM version =6.7.0, =0.0.28, =1.0.8, =4.11.0, =2.0.1, =0.0.1, =3.10.1, =1.0.0, =1.0.0, =1.0.1, =3.3.4, =1.0.1, =1.0.39 - @abdulameen962/react-snap 1.23.0 - @aconex/styleguide 2.2.1 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...
@1023-ventures/serra-common (>=0.3.31, <=0.3.33), @2bad/bitrix (2.3.1) +717 more potentially affected by CVE-2022-24999 via qs (>=6.9.0, <=6.9.6)
qs NPM version =6.9.0, =0.3.31, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =14.4.6, =5.0.4, =1.3.1, =0.4.0-next.8, =0.1.7-alpha.1, =0.2.4-alpha.1, =0.1.9-alpha.3, =0.3.0-alpha.1, =0.4.7-alpha.4 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...
@airyrooms/nerve (0.1.1), @akeating-redhat/fh-mbaas-api (7.0.1) +868 more potentially affected by CVE-2022-24999 via qs (6.4.0)
qs NPM version 6.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on qs and may be impacted: - @airyrooms/nerve 0.1.1 - @akeating-redhat/fh-mbaas-api 7.0.1 - @allenbrowntech/lemon =1.0.0, =1.0.1, =1.0.0, =0.0.1, =0.17.5, =0.0.3, =1.10.0, =1.10.1,...
01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +3849 more potentially affected by CVE-2022-24999 via qs (>=6.5.0, <=6.5.2)
qs NPM version =6.5.0, =1.0.0, =0.2.0, =0.1.0, =1.0.0, =1.0.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.0, =12.1.0, =6.0.0, =7.12.0 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...
@211la/search-client (>=0.1.0, <=0.5.0), @2bad/bitrix (>=2.0.0, <=2.3.0) +15 more potentially affected by CVE-2022-24999 via qs (6.8.0)
qs NPM version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on qs and may be impacted: - @211la/search-client =0.1.0, =2.0.0, =0.0.0-GO-1036-new-endpoint-to-download-bulk-details.3, =9.1.23-alpha2.60, =0.6.4, =2.1.1, =0.1.0, =3.4.5, =1.0.0, =0.1....
22ndtech-angular-lib (>=0.0.7, <=0.0.57), 3loc (>=0.2.0, <=0.4.0) +2962 more potentially affected by CVE-2022-24999 via qs (>=6.0.0, <=6.2.3)
qs NPM version =6.0.0, =0.0.7, =0.2.0, =0.1.53, =5.1.0, =2.0.1, =1.1.0, =0.1.0, =0.3.1, =5.1.0, =0.0.0, =2.1.0, =2018.7.11-0, =2018.10.8-2 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...
@2bad/bitrix (2.4.0), @6qiongtao/catalyst-node-commons (>=0.1.0, <=1.0.4) +257 more potentially affected by CVE-2022-24999 via qs (>=6.10.0, <=6.10.2)
qs NPM version =6.10.0, =0.1.0, =3.7.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =1.5.2, =1.3.5-beta, =2.6.0-xiaomi, =1.1.0, =1.0.2, =1.1.4 - @byteluck-fe/runtime-mobile-controls 1.1.0 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...
@bouzuya/mr-jums (>=0.2.0, <=0.9.1), @deansel/latte (0.1.2-beta.1) +77 more potentially affected by CVE-2022-24999 via qs (>=6.3.0, <=6.3.1)
qs NPM version =6.3.0, =0.2.0, =1.0.0-alpha.7, =0.0.1-alpha.1, =0.0.1-dev.0, =4.0.0-beta.6, =3.0.0, =0.20.5, =0.20.5, =0.20.8, =0.1.5, =0.6.5, =0.13.0, =0.15.0 - app-decorators 0.8.206 and more Source cves: CVE-2022-24999 Source advisory: OSV:GHSA-HRPP-H998-J3PP...
@aothechbcn/frontend-idealbar--lib-idealbar (>=1.0.0, <=1.0.10), @brigad/redux-rest-easy (>=3.0.0, <=3.0.3) +54 more potentially affected by CVE-2022-24999 via qs (6.6.0)
qs NPM version 6.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on qs and may be impacted: - @aothechbcn/frontend-idealbar--lib-idealbar =1.0.0, =3.0.0, =0.92.0, =1.0.1, =1.0.0, =5.1.0, =13.1.1-5e9b77d, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 -...
@cerebroapp/cerebro-basic-apps (>=1.0.0-alpha.0, <=1.0.0-alpha.1), @finsemble/finsemble-core (>=1.0.0-beta-3, <=8.0.2) +11 more potentially affected by CVE-2022-4135 via electron (>=19.0.0, <=19.0.17)
electron NPM version =19.0.0, =1.0.0-alpha.0, =1.0.0-beta-3, =1.0.0-beta-3, =3.0.9, =0.36.0-canary.17, =0.0.32, =2.0.74, =2.0.90 - simple-git-gui 3.8.31 Source cves: CVE-2022-4135 Source advisory: OSV:GHSA-995F-9X5R-2RCJ...
@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +624 more potentially affected by unknown CVE via sweetalert2 (>=8.19.1, <=11.22.3)
sweetalert2 NPM version =8.19.1, =0.0.0, =0.0.0, =0.1.0, =2.31.0, =0.0.1-beta.1, =0.1.1, =1.0.1, =1.0.0, =1.0.0, =0.0.9, =0.0.1, =0.3.73, =0.3.198 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8JH9-WQPF-Q52C...
@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +326 more potentially affected by unknown CVE via sweetalert2 (>=9.17.4, <=11.22.3)
sweetalert2 NPM version =9.17.4, =0.0.0, =0.0.0, =2.31.0, =0.0.1-beta.1, =0.1.1, =1.0.1, =1.0.0, =0.0.9, =0.0.1, =0.3.73, =0.0.4, =0.0.4, =1.0.0, =1.0.17, =1.2.31 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PG98-6V7F-2XFV...
@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +194 more potentially affected by unknown CVE via sweetalert2 (>=10.16.11, <=11.22.3)
sweetalert2 NPM version =10.16.11, =0.0.0, =0.0.0, =2.31.0, =1.0.0, =0.0.1, =0.3.73, =0.0.4, =0.0.4, =1.0.0, =1.0.17, =0.0.0-20240903040200, =1.3.0, =1.10.0, =1.0.1, =1.1.333 and more Source cves: unknown CVE Source advisory: OSV:GHSA-457R-CQC8-9VJ9...
@bcwdev/quickvue (1.0.15), @bnsights-test/test-admin-portal (>=0.0.4, <=0.0.147) +41 more potentially affected by unknown CVE via sweetalert2 (>=11.4.14, <=11.22.3)
sweetalert2 NPM version =11.4.14, =0.0.4, =0.0.4, =1.0.0, =1.0.110, =0.0.0-20240903040200, =1.10.0, =15.2.16, =1.2.29, =1.8.94, =3.0.0, =3.0.30, =1.0.1, =1.0.1, =1.1.16, =1.6.22 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QQ6H-5G6J-Q3CM...
difftastic (>=0.29.1, <=0.52.0), difftastic-lib (>=0.0.1, <=0.0.2) +4 more potentially affected by unknown CVE via mimalloc (>=0.1.28, <=0.1.37)
mimalloc CARGO version =0.1.28, =0.29.1, =0.0.1, =0.1.6, =0.17.0-alpha.4, =0.15.0, =0.16.0-alpha.3, =0.18.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0094...
0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +1530 more potentially affected by CVE-2022-41940 via engine.io (>=4.0.6, <=6.1.3)
engine.io NPM version =4.0.6, =1.0.49, =1.0.0, =0.0.28, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =1.2.1, =1.0.1, =1.0.2 - @aaronconway7/create-gatsby-app 1.0.0 - @accio-cms/gatsby-starter-accio 0.0.1 - @achilleskal/awesome-blog 1.0.0 and more Source cves: CVE-2022-41940 Source advisory:...
7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1267 more potentially affected by CVE-2022-41940 via engine.io (>=3.1.0, <=3.5.0)
engine.io NPM version =3.1.0, =4.11.25, =8.25.29, =0.1.53, =5.1.0, =5.1.0, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2022-41940 Source advisory: OSV:GHSA-R7QP-CFHV-P84W...
@aeppic/install-build-server (>=1.2.0, <=1.9.8), @aeppic/install-repository-server (>=1.2.2, <=2.0.2) +145 more potentially affected by CVE-2022-41919 via fastify (>=3.0.0, <=3.29.3)
fastify NPM version =3.0.0, =1.2.0, =1.2.2, =0.0.46, =0.0.5, =1.0.0, =2.0.0, =1.1.1, =1.0.0, =1.0.0, =1.0.0, =4.23.1, =2.7.0, =1.0.0, =1.3.0 - @bronosorg/graph-indexer-service 1.0.0 and more Source cves: CVE-2022-41919 Source advisory: OSV:GHSA-3FJJ-P79J-C9HH...
@aicore/cocodb (>=1.0.1, <=1.0.6), @athenna/artisan (>=1.6.0, <=1.6.4) +92 more potentially affected by CVE-2022-41919 via fastify (>=4.0.2, <=4.10.0)
fastify NPM version =4.0.2, =1.0.1, =1.6.0, =1.3.1, =1.0.2, =1.2.1, =2.0.6, =1.4.6, =1.7.1, =1.3.0, =1.3.8, =1.0.1, =1.3.9, =4.33.5, =0.0.65, =1.1.1, =1.1.3 and more Source cves: CVE-2022-41919 Source advisory: OSV:GHSA-3FJJ-P79J-C9HH...
@redwoodjs/auth-dbauth-setup (0.0.2), @redwoodjs/auth-providers-setup (0.0.1) +12 more potentially affected by unknown CVE via @redwoodjs/api (>=3.0.0, <=3.3.0)
@redwoodjs/api NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3QMC-2R76-4RQP...
@flightpkg/create-redwood-app (1.0.0), @layer0/redwood (>=4.7.1-next-1639602777-e3c518e56.0, <=4.7.1-next-1639605987-6c7a0e965.0) +10 more potentially affected by unknown CVE via @redwoodjs/api (>=0.38.0, <=2.2.4)
@redwoodjs/api NPM version =0.38.0, =4.7.1-next-1639602777-e3c518e56.0, =0.38.0-rc.69, =0.38.0-rc.69, =0.39.0-rc.83, =0.38.0-rc.69, =0.38.0-rc.69, =0.38.0-rc.69, =0.38.0-rc.69, =0.0.1, =0.38.0-rc.69, =0.38.0-rc.69, =2.2.4 Source cves: unknown CVE Source advisory: OSV:GHSA-3QMC-2R76-4RQP...
@abstraktor/actordemo (>=0.0.0-ad-beta.1, <=0.0.0-ad-beta.2), @abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.6) +175 more potentially affected by CVE-2022-24066 +1 more via simple-git (>=3.0.3, <=3.14.1)
simple-git NPM version =3.0.3, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =1.4.0, =5.15.0, =10.0.0-version-usage.0, =1.0.1, =2.0.0, =1.1.0, =1.1.0, =0.0.0-semantic-release, =1.1.12, =0.0.1, =0.0.63 - @custis/file-adapter-front 1.1.1 and more Source cves: CVE-2022-24066, CVE-2022-25912 Source advisory:...
@ultra-node/electron-engine (>=0.1.1, <=0.1.14) potentially affected by CVE-2022-36077 via electron (20.0.0)
electron NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - @ultra-node/electron-engine =0.1.1, =0.1.14 Source cves: CVE-2022-36077 Source advisory: OSV:GHSA-P2JH-44QJ-PF2V...
@ascua/electron (0.0.228), @jessezzhang/motion-core (>=0.0.1, <=0.0.5) +9 more potentially affected by CVE-2022-36077 via electron (>=18.0.0, <=18.3.2)
electron NPM version =18.0.0, =0.0.1, =0.0.21, =1.2.1, =2.0.72, =3.15.3, =0.0.0, =18.0.0, =1.0.0, =1.0.1 Source cves: CVE-2022-36077 Source advisory: OSV:GHSA-P2JH-44QJ-PF2V...
@cerebroapp/cerebro-basic-apps (>=1.0.0-alpha.0, <=1.0.0-alpha.1), @finsemble/finsemble-core (>=1.0.0-beta-3, <=8.0.2) +7 more potentially affected by CVE-2022-36077 via electron (>=19.0.0, <=19.0.10)
electron NPM version =19.0.0, =1.0.0-alpha.0, =1.0.0-beta-3, =1.0.0-beta-3, =3.0.9, =0.36.0-canary.17, =2.0.74, =2.0.83 - simple-git-gui 3.8.31 Source cves: CVE-2022-36077 Source advisory: OSV:GHSA-P2JH-44QJ-PF2V...
@kyedoesdev/lente-cli (>=0.1.0, <=0.1.1), @kyedoesdev/lente-core (0.1.0) potentially affected by CVE-2022-39386 via @fastify/websocket (5.0.0)
@fastify/websocket NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/websocket and may be impacted: - @kyedoesdev/lente-cli =0.1.0, =0.1.1 - @kyedoesdev/lente-core 0.1.0 Source cves: CVE-2022-39386 Source advisory:...
@0x77/ccpack (>=0.0.0, <=0.1.5), @aio-server/core (>=0.0.1, <=0.0.1001) +27 more potentially affected by CVE-2022-39386 via fastify-websocket (>=4.0.0, <=4.2.2)
fastify-websocket NPM version =4.0.0, =0.0.0, =0.0.1, =0.0.1, =4.3.0-depup.0, =0.2.42, =2.0.3, =9.1.1, =1.8.0, =1.0.0-pre.3, =2.0.0-alpha, =1.0.0, =0.0.1, =1.0.1, =0.0.10, =0.0.40 and more Source cves: CVE-2022-39386 Source advisory: OSV:GHSA-4PCG-WR6C-H9CQ...
@frontify/frontify-cli (5.0.1), @my-healthcare/kankan-services (1.0.0) +8 more potentially affected by CVE-2022-39386 via @fastify/websocket (6.0.1)
@fastify/websocket NPM version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/websocket and may be impacted: - @frontify/frontify-cli 5.0.1 - @my-healthcare/kankan-services 1.0.0 - @ts4/hc =1.0.19, =1.0.2, =1.0.66, =0.0.1, =0.6.0,...
webappfind (0.1.1) potentially affected by unknown CVE via addon-kit (0.0.1-security)
addon-kit NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on addon-kit and may be impacted: - webappfind 0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-852...
@dstanesc/shared-property-map (>=0.0.9, <=0.0.11), @fluid-experimental/partial-checkout (>=0.51.0-43124, <=2.0.0-internal.2.0.4) +10 more potentially affected by CVE-2022-41714 via fastest-json-copy (1.0.1)
fastest-json-copy NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastest-json-copy and may be impacted: - @dstanesc/shared-property-map =0.0.9, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124,...
@backland/accounts (>=0.1.3-alpha.2022.11.25.20.14.44.0, <=0.1.3-alpha.20221123222206.0), @backland/entity (>=0.1.3-alpha.2022.11.25.20.14.44.0, <=0.1.3-alpha.20221101T193006-0300.54) +29 more potentially affected by CVE-2022-41713 via deep-object-diff (1.1.7)
deep-object-diff NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on deep-object-diff and may be impacted: - @backland/accounts =0.1.3-alpha.2022.11.25.20.14.44.0, =0.1.3-alpha.2022.11.25.20.14.44.0, =0.1.3-alpha.2022.11.25.20.14.44.0,...