@companydotcom/company-skynet-core (>=1.0.2, <=2.0.17), @companydotcom/micro-application-core (>=2.0.7, <=2.0.18-alpha.0) +10 more potentially affected by CVE-2022-42743 via deep-parse-json (>=1.0.1, <=1.0.2)

deep-parse-json NPM version =1.0.1, =1.0.2, =2.0.7, =0.0.1, =0.0.1, =0.0.19, =6.5.7-0, =5.3.0, =1.0.0, =0.0.6, =0.0.1, =0.0.13 - redux-persist-nedb-storage 0.1.0 Source cves: CVE-2022-42743 Source advisory: OSV:GHSA-FF9J-PWXG-Q5P2...

@a11ywatch/a11ywatch (>=0.0.1, <=0.1.65), @a11ywatch/core (>=0.1.1, <=0.5.158) +39 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.10.4)

apollo-server-core NPM version =3.0.0-html.2, =0.0.1, =0.1.1, =1.0.1, =1.1.22, =1.1.19, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =10.0.1, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =0.0.27, =0.0.64 and more Source cves: unknown CVE Source advisory:...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-39381 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-39381 Source advisory: OSV:GHSA-RCRX-FPJP-MFRW...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-39381 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-39381 Source advisory: OSV:GHSA-RCRX-FPJP-MFRW...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3602 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3602 Source advisory: OSV:GHSA-8RWR-X37P-MX23...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3786 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3786 Source advisory: OSV:GHSA-H8JM-2X53-XHP5...

@apexdevtools/apex-ls (>=3.1.0, <=3.2.0), @appium/fake-driver (>=3.2.3, <=3.2.4) +47 more potentially affected by CVE-2022-39353 via @xmldom/xmldom (>=0.7.0, <=0.7.6)

@xmldom/xmldom NPM version =0.7.0, =3.1.0, =3.2.3, =1.0.0-beta1, =15.1.0, =15.1.0, =15.1.0, =15.1.0, =0.1.0-beta.57, =0.1.5-beta.1, =1.0.0, =1.0.0, =1.0.0, =1.0.11 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11363 more potentially affected by CVE-2022-39353 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

@appium/fake-driver (>=3.2.5, <=4.2.2), @barchart/marketdata-api-js (>=5.16.2, <=5.27.0) +75 more potentially affected by CVE-2022-39353 via @xmldom/xmldom (>=0.8.0, <=0.8.3)

@xmldom/xmldom NPM version =0.8.0, =3.2.5, =5.16.2, =1.0.0, =0.2.1-beta.36, =10.1.1, =1.0.0-alpha1, =0.0.101-beta.22, =1.0.0, =10.1.1, =4.0.0-beta.0, =4.0.0-beta.0, =1.0.2, =0.0.1, =1.0.0, =1.0.1, =2.2.0 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

node-red-contrib-ale-rainbow (>=1.82.3, <=1.82.6) potentially affected by CVE-2022-3783 via node-red-dashboard (3.1.7)

node-red-dashboard NPM version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-red-dashboard and may be impacted: - node-red-contrib-ale-rainbow =1.82.3, =1.82.6 Source cves: CVE-2022-3783 Source advisory: OSV:GHSA-VRV9-3X3W-FFXW...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25892 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25892 Source advisory: OSV:GHSA-9CV5-4WQV-9W94...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25892 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25892 Source advisory: OSV:GHSA-9CV5-4WQV-9W94...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25885 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25885 Source advisory: OSV:GHSA-FRP9-2V6R-GJ97...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25885 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25885 Source advisory: OSV:GHSA-FRP9-2V6R-GJ97...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3602 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3602 Source advisory: OSV:RUSTSEC-2022-0064...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3786 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3786 Source advisory: OSV:RUSTSEC-2022-0065...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37623 via browserify-shim (>=3.1.5, <=3.8.14)

browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37623 Source advisory: OSV:GHSA-CFGR-75JX-H88G...

sentry-conduit (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-39294 via conduit-hyper (0.3.0)

conduit-hyper CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on conduit-hyper and may be impacted: - sentry-conduit =0.1.0, =0.3.0 Source cves: CVE-2022-39294 Source advisory: OSV:GHSA-9398-5GHF-7PR6...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25885 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25885 Source advisory: SNYK:JS-MUHAMMARA-3091137...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25885 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25885 Source advisory: SNYK:JS-HUMMUS-3091139...

nfprobe (0.0.1), terminus (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via elf_rs (>=0.1.1, <=0.1.3)

elfrs CARGO version =0.1.1, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0079...

com.bstek.uflo:uflo-console (>=2.0.0, <=2.1.5), com.syyai.spring.boot:uflo-spring-boot-starter (2.1.4) +1 more potentially affected by CVE-2022-25894 via com.bstek.uflo:uflo-core (>=2.0.0, <=2.1.5)

com.bstek.uflo:uflo-core MAVEN version =2.0.0, =2.0.0, =2.0, =2.5.1.v20220215 Source cves: CVE-2022-25894 Source advisory: SNYK:JAVA-COMBSTEKUFLO-3091112...

sentry-conduit (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-39294 via conduit-hyper (0.3.0)

conduit-hyper CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on conduit-hyper and may be impacted: - sentry-conduit =0.1.0, =0.3.0 Source cves: CVE-2022-39294 Source advisory: OSV:RUSTSEC-2022-0066...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37621 via browserify-shim (>=3.1.5, <=3.8.14)

browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37621 Source advisory: OSV:GHSA-R737-347M-WQC7...

@asigna/stx-core-sdk (0.0.1), @casper124578/use-socket.io (>=2.1.0, <=4.1.0) +133 more potentially affected by CVE-2022-2421 via socket.io-parser (4.1.2)

socket.io-parser NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @asigna/stx-core-sdk 0.0.1 - @casper124578/use-socket.io =2.1.0, =31.0.0, =34.0.0, =34.0.0, =1.0.0-theia1.27.0, =1.0.0, =1.0.1,...

@abcpros/bitcore-build (>=8.25.29, <=8.25.30), @acanto/october-scripts (3.2.2) +1122 more potentially affected by CVE-2022-2421 via socket.io-parser (>=3.1.1, <=3.3.0)

socket.io-parser NPM version =3.1.1, =8.25.29, =1.0.0, =2018.7.11-0, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =0.2.0, =1.0.10, =3.3.91, =3.3.114 and more Source cves: CVE-2022-2421 Source advisory: OSV:GHSA-QM95-PGCG-QQFQ...

@xrengine/analytics (>=0.4.11, <=5.0.0-beta3), @xrengine/server-core (>=0.4.11, <=5.0.0-beta3) potentially affected by CVE-2022-29823 via feathers-sequelize (6.3.2)

feathers-sequelize NPM version 6.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on feathers-sequelize and may be impacted: - @xrengine/analytics =0.4.11, =0.4.11, =5.0.0-beta3 Source cves: CVE-2022-29823 Source advisory: OSV:GHSA-P5M3-27VH-52J4...

@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0, <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0, <=33.0.0) +2 more potentially affected by CVE-2022-2421 via socket.io-parser (3.4.1)

socket.io-parser NPM version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2022-2421 Source...

@xrengine/analytics (>=0.4.11, <=5.0.0-beta3), @xrengine/server-core (>=0.4.11, <=5.0.0-beta3) potentially affected by CVE-2022-2422 via feathers-sequelize (6.3.2)

feathers-sequelize NPM version 6.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on feathers-sequelize and may be impacted: - @xrengine/analytics =0.4.11, =0.4.11, =5.0.0-beta3 Source cves: CVE-2022-2422 Source advisory: OSV:GHSA-QPV8-4PJQ-QQH7...

socket.io (>=3.0.0-rc1, <=3.0.0-rc4), socket.io-client (>=3.0.0-rc1, <=3.0.0-rc4) potentially affected by CVE-2022-2421 via socket.io-parser (>=4.0.1-rc1, <=4.0.1-rc3)

socket.io-parser NPM version =4.0.1-rc1, =3.0.0-rc1, =3.0.0-rc1, =3.0.0-rc4 Source cves: CVE-2022-2421 Source advisory: OSV:GHSA-QM95-PGCG-QQFQ...

@xrengine/analytics (>=0.4.11, <=5.0.0-beta3), @xrengine/server-core (>=0.4.11, <=5.0.0-beta3) potentially affected by CVE-2022-29822 via feathers-sequelize (6.3.2)

feathers-sequelize NPM version 6.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on feathers-sequelize and may be impacted: - @xrengine/analytics =0.4.11, =0.4.11, =5.0.0-beta3 Source cves: CVE-2022-29822 Source advisory: OSV:GHSA-5HQ7-J5WQ-P227...

etclient (0.3.0), eth-utils (>=0.1.1, <=0.2.0) +32 more potentially affected by CVE-2022-39354 via evm (>=0.7.1, <=0.33.1)

evm CARGO version =0.7.1, =0.1.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2022-39354 Source advisory: OSV:GHSA-HHC4-47RH-CR34...

etclient (0.3.0), eth-utils (>=0.1.1, <=0.2.0) +32 more potentially affected by CVE-2022-39354 via evm (>=0.7.1, <=0.33.1)

evm CARGO version =0.7.1, =0.1.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2022-39354 Source advisory: OSV:RUSTSEC-2022-0083...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25892 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25892 Source advisory: SNYK:JS-MUHAMMARA-3060320...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25892 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25892 Source advisory: SNYK:JS-HUMMUS-3091138...

@agoric/access-token (>=0.4.16-dev-23c942c.0, <=0.4.16-dev.0), @agoric/assert (>=0.1.0, <=0.3.15-dev.2) +100 more potentially affected by unknown CVE via ses (>=0.0.1, <=0.15.24)

ses NPM version =0.0.1, =0.4.16-dev-23c942c.0, =0.1.0, =1.2.0, =1.3.0, =0.1.0, =0.10.8-dev.0, =0.2.0, =1.5.1, =0.5.6-dev-f662032.0, =0.0.1, =0.1.1, =0.0.9, =0.1.1, =0.2.0, =0.5.30-dev-fe997f2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WHPX-Q3RQ-W8JC...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02.aula (1.0.0) +31632 more potentially affected by CVE-2022-3517 via minimatch (>=3.0.0, <=3.0.4)

minimatch NPM version =3.0.0, =1.0.1, =1.1.0 - 02.aula 1.0.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14933 more potentially affected by CVE-2022-37603 via loader-utils (>=1.0.0, <=1.4.1)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37603 Source advisory: OSV:GHSA-3RFM-JHWJ-7488...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8771 more potentially affected by CVE-2022-37603 via loader-utils (>=2.0.0, <=2.0.3)

loader-utils NPM version =2.0.0, =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

@alfresco/adf-testing (6.0.0-A.2-8258), @angular-architects/build-angular (14.2.0-next.0) +54 more potentially affected by CVE-2022-37603 via loader-utils (>=3.0.0, <=3.2.0)

loader-utils NPM version =3.0.0, =0.9.2, =13.0.0-rc.2, =1.0.0, =1.3.1, =13.0.0-rc.18, =3.9.0-beta.1, =13.0.0, =0.1.0, =1.7.4, =4.7.1-beta.0, =4.7.1-beta.0, =9.1.3-beta.1 and more Source cves: CVE-2022-37603 Source advisory: OSV:GHSA-3RFM-JHWJ-7488...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8763 more potentially affected by CVE-2022-37601 via loader-utils (>=2.0.0, <=2.0.2)

loader-utils NPM version =2.0.0, =2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14931 more potentially affected by CVE-2022-37601 via loader-utils (>=1.0.0, <=1.4.0)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37601 Source advisory: OSV:GHSA-76P3-8JX3-JPFQ...

czkawka_gui_orbtk (>=1.0.1, <=1.5.1), orbtk-simple-modal (0.1.0) +1 more potentially affected by unknown CVE via orbtk (>=0.1.9, <=0.3.1-alpha3)

orbtk CARGO version =0.1.9, =1.0.1, =0.1.0, =0.1.10 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0060...

hapi-saml2 (>=3.2.0, <=3.2.1), tensor-cloudnative-express-auth (>=1.0.69, <=2.0.6) potentially affected by CVE-2022-39299 via passport-saml (3.2.0)

passport-saml NPM version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on passport-saml and may be impacted: - hapi-saml2 =3.2.0, =1.0.69, =2.0.6 Source cves: CVE-2022-39299 Source advisory: OSV:GHSA-M974-647V-WHV7...

kit-deploymentizer (>=3.1.4, <=4.6.38) potentially affected by CVE-2022-37614 via mockery (2.0.0)

mockery NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mockery and may be impacted: - kit-deploymentizer =3.1.4, =4.6.38 Source cves: CVE-2022-37614 Source advisory: OSV:GHSA-GMWP-3PWC-3J3G...

@24hr/rawb-search (>=0.10.1, <=0.29.10), @aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3) +80 more potentially affected by unknown CVE via apollo-server (>=2.0.0, <=2.25.3)

apollo-server NPM version =2.0.0, =0.10.1, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.5.0-rc1, =0.3.0-SNAPSHOT1, =2018.8.29-0, =2018.8.28-0, =0.5.7, =1.0.0, =0.0.1-alpha.44, =0.4.0, =0.0.0-d99f4ac.0, =1.27.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2P3C-P3QW-69R4...

@alfresco/adf-testing (6.0.0-A.2-8258), @angular-architects/build-angular (14.2.0-next.0) +54 more potentially affected by CVE-2022-37599 via loader-utils (>=3.0.0, <=3.2.0)

loader-utils NPM version =3.0.0, =0.9.2, =13.0.0-rc.2, =1.0.0, =1.3.1, =13.0.0-rc.18, =3.9.0-beta.1, =13.0.0, =0.1.0, =1.7.4, =4.7.1-beta.0, =4.7.1-beta.0, =9.1.3-beta.1 and more Source cves: CVE-2022-37599 Source advisory: OSV:GHSA-HHQ3-FF78-JV3G...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8771 more potentially affected by CVE-2022-37599 via loader-utils (>=2.0.0, <=2.0.3)

loader-utils NPM version =2.0.0, =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14933 more potentially affected by CVE-2022-37599 via loader-utils (>=1.0.0, <=1.4.1)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37599 Source advisory: OSV:GHSA-HHQ3-FF78-JV3G...

-wlq-mxgrapheditor (0.0.0), @amccarthy/mxgraphng (0.1.1) +81 more potentially affected by CVE-2022-40440 via mxgraph (>=4.1.0, <=4.2.2)

mxgraph NPM version =4.1.0, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.1-ba-beta.2, =0.0.1, =0.0.16, =0.0.1, =0.0.3 and more Source cves: CVE-2022-40440 Source advisory: OSV:GHSA-J4RV-PR9G-Q8JV...