@teachoco-dev/cli (>=0.0.6, <=0.0.10), currency_converter_misbah193 (1.0.0) +6 more potentially affected by unknown CVE via chal (0.0.1-security.0)

chal NPM version 0.0.1-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on chal and may be impacted: - @teachoco-dev/cli =0.0.6, =1.0.0, =1.0.3 - rk-quiz-system-project-09 1.0.0 - sakinakhan-todo-items 1.0.0 Source cves: unknown CVE Source...

mg-start-node (>=1.0.1, <=1.0.5) potentially affected by unknown CVE via mongobd (0.0.1-security.0)

mongobd NPM version 0.0.1-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on mongobd and may be impacted: - mg-start-node =1.0.1, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4685...

@aem-vite/import-rewriter (5.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=1.0.0) +191 more potentially affected by CVE-2022-35204 via vite (>=2.0.0-beta.4, <=2.9.12)

vite NPM version =2.0.0-beta.4, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =1.0.16, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.16 and more Source cves: CVE-2022-35204 Source advisory:...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +443 more potentially affected by CVE-2022-35948 via undici (>=5.0.0, <=5.8.1)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-35948 Source advisory: OSV:GHSA-F772-66G8-Q5H3...

@atlantis-lab/actl (>=0.4.0, <=0.4.37), @atlantis-lab/actl-check (>=0.1.0, <=0.4.37) +62 more potentially affected by CVE-2022-35954 via @actions/core (>=1.0.0, <=1.9.0)

@actions/core NPM version =1.0.0, =0.4.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =2.3.0, =0.1.0, =0.0.0-canary.6527017, =0.0.0-d99f4ac.0, =0.0.5, =2.0.0, =3.5.2, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2022-35954 Source advisory: OSV:GHSA-7R3H-M5J6-3Q42...

@abacus-network/helloworld (>=0.2.1-alpha, <=0.2.1-beta2), @alt-research/orbit-sdk-avail (>=0.9.1, <=0.9.11) +108 more potentially affected by CVE-2022-35961 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.2.1-alpha, =0.9.1, =0.19.0-beta.0, =0.1.0-alpha, =0.24.2, =1.0.0-beta.1, =0.6.0-beta.0, =1.1.4-migration-beta.0, =1.0.0-beta.0, =1.0.0-upstream-0.19.0, =1.4.0, =1.5.0-beta.0 and more Source cves: CVE-2022-35961 Source advisory:...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1281 more potentially affected by CVE-2022-35961 via @openzeppelin/contracts (>=4.1.0, <=4.7.2)

@openzeppelin/contracts NPM version =4.1.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =1.0.0, =0.2.0, =4.14.3, =1.0.2, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =3.1.0 and more Source cves: CVE-2022-35961 Source advisory: OSV:GHSA-4H98-2769-GH6H...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +443 more potentially affected by CVE-2022-35949 via undici (>=5.0.0, <=5.8.1)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-35949 Source advisory: OSV:GHSA-8QR4-XGW6-WMR3...

@a11ywatch/a11ywatch (>=0.0.1, <=0.1.65), @a11ywatch/core (>=0.1.1, <=0.5.12) +32 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.10.0)

apollo-server-core NPM version =3.0.0-html.2, =0.0.1, =0.1.1, =1.0.1, =1.1.22, =1.1.19, =10.0.1, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =0.0.27, =0.0.11, =2.0.4, =4.9.0-beta.2, =9.0.0, =9.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2FVV-QXRQ-7JQ6...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1254 more potentially affected by CVE-2022-31198 via @openzeppelin/contracts (>=4.3.0, <=4.7.1)

@openzeppelin/contracts NPM version =4.3.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =1.0.0, =0.2.0, =4.14.3, =1.0.2, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =3.1.0 and more Source cves: CVE-2022-31198 Source advisory: OSV:GHSA-XRC4-737V-9Q75...

@abacus-network/helloworld (>=0.2.1-alpha, <=0.2.1-beta2), @alt-research/orbit-sdk-avail (>=0.9.1, <=0.9.11) +106 more potentially affected by CVE-2022-31198 via @openzeppelin/contracts-upgradeable (>=4.3.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =4.3.0, =0.2.1-alpha, =0.9.1, =0.19.0-beta.0, =0.1.0-alpha, =0.24.2, =1.0.0-beta.1, =0.6.0-beta.0, =1.1.4-migration-beta.0, =1.0.0-beta.0, =1.0.0-upstream-0.19.0, =1.4.0, =1.5.0-beta.0 and more Source cves: CVE-2022-31198 Source advisory:...

yfmw-utils (1.0.0) potentially affected by unknown CVE via lodash-utils (0.0.1-security)

lodash-utils NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash-utils and may be impacted: - yfmw-utils 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4358...

@aragon/core-contracts (>=0.3.0-alpha, <=3.0.0-alpha), @benddao/bend-downpayment (1.0.0) +21 more potentially affected by CVE-2022-35916 via @openzeppelin/contracts-upgradeable (>=4.6.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =4.6.0, =0.3.0-alpha, =1.2.0, =0.0.2, =0.1.0-rc-1, =0.1.6, =0.1.0, =0.2.0 and more Source cves: CVE-2022-35916 Source advisory: OSV:GHSA-9J3M-G383-29QR...

@0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5), @0xabcdefg/universal-router-sdk (>=1.0.0, <=1.0.2) +909 more potentially affected by CVE-2022-35916 via @openzeppelin/contracts (>=4.6.0, <=4.7.1)

@openzeppelin/contracts NPM version =4.6.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =1.0.0, =0.2.0, =4.14.3, =2.0.17, =0.0.1, =0.0.1, =0.0.1, =0.0.17 and more Source cves: CVE-2022-35916 Source advisory: OSV:GHSA-9J3M-G383-29QR...

@0xwen/core (>=0.0.1, <=0.0.3), @0xwen/core-v5 (>=0.0.1, <=0.0.3) +215 more potentially affected by CVE-2022-35915 via @openzeppelin/contracts-upgradeable (>=3.4.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =3.4.0, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =0.2.1-alpha, =0.9.1, =0.19.0-beta.0, =2.0.0-alpha.1, =3.0.0-alpha0, =2.0.0-alpha.0, =3.0.1-alpha, =0.1.0-alpha, =0.24.2, =1.0.0-beta.1, =0.6.0-beta.0, =0.26.0 and more Source cves: CVE-2022-35915 Source...

@acatalan/erc223-20-contracts (0.0.3), @adacash/liquidity-staker (0.0.1) +275 more potentially affected by CVE-2022-35915 via openzeppelin-solidity (>=2.0.0, <=3.4.2)

openzeppelin-solidity NPM version =2.0.0, =1.1.1, =0.3.0, =0.5.1, =0.3.2, =0.3.1, =0.3.1, =0.0.3, =0.1.0, =0.1.0, =2.2.1, =0.1.0, =0.1.4 and more Source cves: CVE-2022-35915 Source advisory: OSV:GHSA-7GRF-83VW-6F5X...

@centrifuge/ethereum-contracts (>=0.5.0, <=1.0.3-canary.4) potentially affected by CVE-2022-35915 via openzeppelin-eth (2.1.3)

openzeppelin-eth NPM version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on openzeppelin-eth and may be impacted: - @centrifuge/ethereum-contracts =0.5.0, =1.0.3-canary.4 Source cves: CVE-2022-35915 Source advisory: OSV:GHSA-7GRF-83VW-6F5X...

0x-hunter-core (>=1.0.0-33, <=1.0.0-38), 1155-to-20 (>=1.0.0, <=1.0.2) +3168 more potentially affected by CVE-2022-35915 via @openzeppelin/contracts (>=2.3.0, <=4.7.1)

@openzeppelin/contracts NPM version =2.3.0, =1.0.0-33, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.9.1, =3.24.7, =1.7.2, =3.10.3, =0.0.2, =1.4.1, =1.0.0, =1.0.0-alpha.0, =1.1.0-alpha.0 and more Source cves: CVE-2022-35915 Source advisory: OSV:GHSA-7GRF-83VW-6F5X...

abci-storage (0.0.3), arcon_backend (>=0.1.0, <=0.1.1) +138 more potentially affected by unknown CVE via rocksdb (>=0.1.1, <=0.18.0)

rocksdb CARGO version =0.1.1, =0.1.0, =0.2.0, =0.2.0, =0.1.1, =1.2.0-alpha-1, =0.6.0, =6.0.0, =0.1.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XPP3-XRFF-W6RH...

sqlite (>=0.19.7, <=0.21.1), sqlite3-sys (>=0.6.7, <=0.9.2) +3 more potentially affected by unknown CVE via temporary (0.5.1)

temporary CARGO version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on temporary and may be impacted: - sqlite =0.19.7, =0.6.7, =0.11.0, =0.2.6, =0.2.7 Source cves: unknown CVE Source advisory: OSV:GHSA-2JQ9-6XX7-3H29...

a2 (>=0.3.6, <=0.5.0-alpha.1), abci-storage (0.0.3) +1467 more potentially affected by unknown CVE via owning_ref (>=0.1.4, <=0.4.1)

owningref CARGO version =0.1.4, =0.3.6, =0.1.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9QXH-258V-666C...

@alloyify/anvil (>=1.1.2, <=1.1.4), @alloyify/devkit (>=1.1.2, <=1.1.4) +12 more potentially affected by CVE-2022-25907 via ts-deepmerge (2.0.1)

ts-deepmerge NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ts-deepmerge and may be impacted: - @alloyify/anvil =1.1.2, =1.1.2, =1.1.2, =1.1.2, =0.0.0-canary-20220330074435, =0.0.0-canary-20220330074435, =5.0.24, =11.1.27, =4.0.22,...

@fb24m/etc (>=1.0.0, <=1.2.0), pdf-exports (1.0.0) +1 more potentially affected by CVE-2022-21165 via font-converter (1.1.1)

font-converter NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on font-converter and may be impacted: - @fb24m/etc =1.0.0, =1.2.0 - pdf-exports 1.0.0 - pdf-img-exports 1.0.0 Source cves: CVE-2022-21165 Source advisory:...

@amirmarmul/waba-common (>=2.2.51, <=2.9.8), @aptana/multichannel-common (>=2.9.12, <=2.10.3) +14 more potentially affected by CVE-2022-25921 via morgan-json (1.1.0)

morgan-json NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on morgan-json and may be impacted: - @amirmarmul/waba-common =2.2.51, =2.9.12, =1.0.0, =1.1.3, =1.0.0, =1.0.3, =0.11.0, =2.0.0, =0.0.5, =1.0.0, =0.1.0, =1.1.0, =0.0.1, =2.1.5 a...

solana-base-app (0.1.5), solanapaydemo-cookies (>=1.0.0, <=1.2.0) potentially affected by CVE-2022-35917 via @solana/pay (0.1.3)

@solana/pay NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/pay and may be impacted: - solana-base-app 0.1.5 - solanapaydemo-cookies =1.0.0, =1.2.0 Source cves: CVE-2022-35917 Source advisory: OSV:GHSA-J47C-J42C-MWQQ...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2022-31186 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2022-31186 Source advisory: OSV:GHSA-P6MM-27GQ-9V3P...

@chirpy-dev/main-app (>=0.1.0, <=0.3.0), @elastic/docsmobile (>=1.9.9, <=1.12.0) +7 more potentially affected by CVE-2022-31186 via next-auth (>=4.0.0-beta.6, <=4.9.0)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.9, =4.0.0-alpha.11, =4.0.0-alpha.1, =4.0.0-alpha.6, =0.31.1, =1.42.1, =0.50.4, =0.78.15-alpha.2 - chirpy-dev 0.1.0 Source cves: CVE-2022-31186 Source advisory: OSV:GHSA-P6MM-27GQ-9V3P...

adsbx_browser (0.1.0), adsbx_screenshot (>=0.1.0, <=1.4.1) +92 more potentially affected by CVE-2022-35922 via websocket (>=0.9.5, <=0.24.0)

websocket CARGO version =0.9.5, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.0.6, =1.0.0, =0.1.0, =0.0.0, =0.1.0, =0.1.2, =0.3.3, =0.6.25, =0.0.3, =0.1.0, =0.1.1 and more Source cves: CVE-2022-35922 Source advisory: OSV:GHSA-QRJV-RF5Q-QPXC...

ilp-node (>=0.5.0, <=0.6.0), interledger (>=0.4.0, <=0.6.0) +14 more potentially affected by unknown CVE via interledger-packet (>=0.1.0, <=0.4.0)

interledger-packet CARGO version =0.1.0, =0.5.0, =0.4.0, =0.1.1-alpha.1, =0.1.0, =0.1.1-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1-alpha.1, =0.1.0, =0.2.0, =0.3.0, =0.1.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0050...

a3mo_lib (>=0.1.0, <=0.1.1), abacuz (0.1.1) +664 more potentially affected by CVE-2022-35737 via libsqlite3-sys (>=0.0.9, <=0.24.2)

libsqlite3-sys CARGO version =0.0.9, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.0.2, =0.2.11, =0.1.0, =1.0.0, =0.0.2-alpha, =0.1.0, =0.4.1 and more Source cves: CVE-2022-35737 Source advisory: OSV:GHSA-JW36-HF63-69R9...

a3mo_lib (>=0.1.0, <=0.1.1), abacuz (0.1.1) +664 more potentially affected by CVE-2022-35737 via libsqlite3-sys (>=0.0.9, <=0.24.2)

libsqlite3-sys CARGO version =0.0.9, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.0.2, =0.2.11, =0.1.0, =1.0.0, =0.0.2-alpha, =0.1.0, =0.4.1 and more Source cves: CVE-2022-35737 Source advisory: OSV:RUSTSEC-2022-0090...

@cyber-insight/cyber-scripts (>=1.7.9, <=6.0.0-alpha.4), @cyber.insight/cyber-scripts (>=1.0.0, <=1.0.2) +4 more potentially affected by CVE-2020-7795 via get-npm-package-version (1.0.6)

get-npm-package-version NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on get-npm-package-version and may be impacted: - @cyber-insight/cyber-scripts =1.7.9, =1.0.0, =5.0.20, =1.0.0, =1.0.7 - temp-test-scripts 0.0.30 Source cves:...

cv-letter (1.0.0), docogen (>=0.0.3, <=0.1.6) +4 more potentially affected by CVE-2020-28433 via node-latex-pdf (0.0.2)

node-latex-pdf NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-latex-pdf and may be impacted: - cv-letter 1.0.0 - docogen =0.0.3, =0.0.1, =0.0.7 - resume-builder-iitrpr 1.0.0 Source cves: CVE-2020-28433 Source advisory:...

ca-reservoir-status (1.0.0) potentially affected by CVE-2020-28425 via curljs (0.1.2)

curljs NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on curljs and may be impacted: - ca-reservoir-status 1.0.0 Source cves: CVE-2020-28425 Source advisory: OSV:GHSA-CQFC-9452-R36J...

npos-cli (>=0.0.5, <=0.0.6) potentially affected by CVE-2020-28453 via npos-tesseract (0.0.3)

npos-tesseract NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on npos-tesseract and may be impacted: - npos-cli =0.0.5, =0.0.6 Source cves: CVE-2020-28453 Source advisory: OSV:GHSA-MPWP-PF96-9G4R...

console-blame (>=1.0.0, <=1.1.1), grunt-lintblame (>=0.1.0, <=0.3.5) +2 more potentially affected by CVE-2020-28434 via gitblame (>=0.1.0, <=0.1.1)

gitblame NPM version =0.1.0, =1.0.0, =0.1.0, =0.2.5, =0.9.5 - tch-lint-jshint 0.0.1 Source cves: CVE-2020-28434 Source advisory: OSV:GHSA-3486-RVXC-HRRJ...

monorepo-publish (>=0.1.0, <=0.1.9) potentially affected by CVE-2020-28423 via monorepo-build (>=0.1.0, <=0.1.9)

monorepo-build NPM version =0.1.0, =0.1.0, =0.1.9 Source cves: CVE-2020-28423 Source advisory: OSV:GHSA-5VRC-7JFR-4642...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2022-35924 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2022-35924 Source advisory: OSV:GHSA-XV97-C62V-4587...

@chirpy-dev/main-app (>=0.1.0, <=0.3.0), @elastic/docsmobile (>=1.9.9, <=1.12.0) +7 more potentially affected by CVE-2022-35924 via next-auth (>=4.0.0-beta.6, <=4.9.0)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.9, =4.0.0-alpha.11, =4.0.0-alpha.1, =4.0.0-alpha.6, =0.31.1, =1.42.1, =0.50.4, =0.78.15-alpha.2 - chirpy-dev 0.1.0 Source cves: CVE-2022-35924 Source advisory: OSV:GHSA-XV97-C62V-4587...

3extensions (1.0.1), 4i18n-cli (>=0.0.2, <=0.0.7) +1271 more potentially affected by CVE-2022-2596 via node-fetch (>=3.0.0, <=3.2.9)

node-fetch NPM version =3.0.0, =0.0.2, =0.0.2, =0.0.4, =0.0.0-alpha.117, =0.0.0-alpha.117, =0.0.0-alpha.119, =1.2.1-dev.3, =1.2.1-dev.3, =1.2.1-dev.3, =0.0.1, =0.0.22 - @acneidert/devtools 0.0.6 and more Source cves: CVE-2022-2596 Source advisory: OSV:GHSA-VP56-6G26-6827...

adsbx_browser (0.1.0), adsbx_screenshot (>=0.1.0, <=1.4.1) +92 more potentially affected by CVE-2022-35922 via websocket (>=0.9.5, <=0.24.0)

websocket CARGO version =0.9.5, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.0.6, =1.0.0, =0.1.0, =0.0.0, =0.1.0, =0.1.2, =0.3.3, =0.6.25, =0.0.3, =0.1.0, =0.1.1 and more Source cves: CVE-2022-35922 Source advisory: OSV:RUSTSEC-2022-0035...

automaat-processor-git-clone (0.1.0), automaat-processor-http-request (0.1.0) +50 more potentially affected by CVE-2022-31173 via juniper (>=0.7.0, <=0.15.8)

juniper CARGO version =0.7.0, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-2 and more Source cves: CVE-2022-31173 Source advisory: OSV:GHSA-4RX6-G5VG-5F3J...

flipper-server (>=0.171.1, <=0.212.0), flipper-server-core (>=0.171.1, <=0.212.0) potentially affected by unknown CVE via flipper-server-companion (>=0.171.1, <=0.212.0)

flipper-server-companion NPM version =0.171.1, =0.171.1, =0.171.1, =0.212.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-3077...

jinghuan-cli (>=1.0.20, <=1.0.41), jinghuanjs (>=1.0.73, <=1.0.93) potentially affected by unknown CVE via jinghuan-jsb (1.0.16)

jinghuan-jsb NPM version 1.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on jinghuan-jsb and may be impacted: - jinghuan-cli =1.0.20, =1.0.73, =1.0.93 Source cves: unknown CVE Source advisory: SNYK:JS-JINGHUANJSB-2962984...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +137 more potentially affected by CVE-2022-2564 via mongoose (>=6.0.1, <=6.4.5)

mongoose NPM version =6.0.1, =1.2.3, =1.0.5, =1.0.9, =1.1.80, =0.0.1, =1.0.13, =1.0.0-rc.1.8.10, =1.0.2, =1.0.3, =0.4.3, =0.4.3, =0.4.3, =2.0.1, =2.0.2 and more Source cves: CVE-2022-2564 Source advisory: OSV:GHSA-F825-F98C-GJ3G...

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (>=0.3.5, <=0.17.9) +737 more potentially affected by CVE-2022-2564 via mongoose (>=5.0.0, <=5.13.14)

mongoose NPM version =5.0.0, =0.24.0, =0.3.5, =0.2.0, =3.7.0, =0.1.17, =1.0.0, =2.8.0, =0.0.1, =0.0.2, =0.7.0, =1.0.33, =2.1.3 and more Source cves: CVE-2022-2564 Source advisory: OSV:GHSA-F825-F98C-GJ3G...

automaat-processor-git-clone (0.1.0), automaat-processor-http-request (0.1.0) +50 more potentially affected by CVE-2022-31173 via juniper (>=0.7.0, <=0.15.8)

juniper CARGO version =0.7.0, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-2 and more Source cves: CVE-2022-31173 Source advisory: OSV:RUSTSEC-2022-0038...

hotg-rune-runtime (>=0.11.0, <=0.11.3), hotg-rune-wasm3-runtime (>=0.6.0, <=0.10.0) +7 more potentially affected by CVE-2022-34529 via wasm3 (>=0.1.3, <=0.3.1)

wasm3 CARGO version =0.1.3, =0.11.0, =0.6.0, =0.7.0, =0.4.0, =0.2.0, =0.0.1, =0.16.0, =0.15.0, =0.19.0 Source cves: CVE-2022-34529 Source advisory: OSV:GHSA-GQ4P-4HXV-5RG9...

@adabra/ui-libs-grapesjs-mjml (>=0.0.122, <=0.0.139), @ant-extensions/page-maker (>=0.0.1, <=0.0.5) +44 more potentially affected by CVE-2022-21802 via grapesjs (>=0.10.8, <=0.18.4)

grapesjs NPM version =0.10.8, =0.0.122, =0.0.1, =1.0.6, =0.0.12, =2.0.18, =0.8.1-esbuild, =0.0.1, =1.0.3, =0.10.4, =22.0.8, =0.10.4-custom.0, =0.0.19, =0.1.5, =0.10.17, =1.0.8 and more Source cves: CVE-2022-21802 Source advisory: OSV:GHSA-589F-C66P-HXR4...

chewb-server (>=0.0.1, <=0.0.20), video-dash-uploader (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2020-28436 via google-cloudstorage-commands (0.0.1)

google-cloudstorage-commands NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on google-cloudstorage-commands and may be impacted: - chewb-server =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2020-28436 Source advisory:...