@flightpkg/create-redwood-app (1.0.0), @layer0/redwood (>=4.7.1-next-1639602777-e3c518e56.0, <=4.7.1-next-1639605987-6c7a0e965.0) +10 more potentially affected by unknown CVE via @redwoodjs/api (>=0.38.0, <=2.2.4)

@redwoodjs/api NPM version =0.38.0, =4.7.1-next-1639602777-e3c518e56.0, =0.38.0-rc.69, =0.38.0-rc.69, =0.39.0-rc.83, =0.38.0-rc.69, =0.38.0-rc.69, =0.38.0-rc.69, =0.38.0-rc.69, =0.0.1, =0.38.0-rc.69, =0.38.0-rc.69, =2.2.4 Source cves: unknown CVE Source advisory: OSV:GHSA-3QMC-2R76-4RQP...

@abstraktor/actordemo (>=0.0.0-ad-beta.1, <=0.0.0-ad-beta.2), @abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.6) +175 more potentially affected by CVE-2022-24066 +1 more via simple-git (>=3.0.3, <=3.14.1)

simple-git NPM version =3.0.3, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =1.4.0, =5.15.0, =10.0.0-version-usage.0, =1.0.1, =2.0.0, =1.1.0, =1.1.0, =0.0.0-semantic-release, =1.1.12, =0.0.1, =0.0.63 - @custis/file-adapter-front 1.1.1 and more Source cves: CVE-2022-24066, CVE-2022-25912 Source advisory:...

@ultra-node/electron-engine (>=0.1.1, <=0.1.14) potentially affected by CVE-2022-36077 via electron (20.0.0)

electron NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - @ultra-node/electron-engine =0.1.1, =0.1.14 Source cves: CVE-2022-36077 Source advisory: OSV:GHSA-P2JH-44QJ-PF2V...

@ascua/electron (0.0.228), @jessezzhang/motion-core (>=0.0.1, <=0.0.5) +9 more potentially affected by CVE-2022-36077 via electron (>=18.0.0, <=18.3.2)

electron NPM version =18.0.0, =0.0.1, =0.0.21, =1.2.1, =2.0.72, =3.15.3, =0.0.0, =18.0.0, =1.0.0, =1.0.1 Source cves: CVE-2022-36077 Source advisory: OSV:GHSA-P2JH-44QJ-PF2V...

@cerebroapp/cerebro-basic-apps (>=1.0.0-alpha.0, <=1.0.0-alpha.1), @finsemble/finsemble-core (>=1.0.0-beta-3, <=8.0.2) +7 more potentially affected by CVE-2022-36077 via electron (>=19.0.0, <=19.0.10)

electron NPM version =19.0.0, =1.0.0-alpha.0, =1.0.0-beta-3, =1.0.0-beta-3, =3.0.9, =0.36.0-canary.17, =2.0.74, =2.0.83 - simple-git-gui 3.8.31 Source cves: CVE-2022-36077 Source advisory: OSV:GHSA-P2JH-44QJ-PF2V...

@kyedoesdev/lente-cli (>=0.1.0, <=0.1.1), @kyedoesdev/lente-core (0.1.0) potentially affected by CVE-2022-39386 via @fastify/websocket (5.0.0)

@fastify/websocket NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/websocket and may be impacted: - @kyedoesdev/lente-cli =0.1.0, =0.1.1 - @kyedoesdev/lente-core 0.1.0 Source cves: CVE-2022-39386 Source advisory:...

@0x77/ccpack (>=0.0.0, <=0.1.5), @aio-server/core (>=0.0.1, <=0.0.1001) +27 more potentially affected by CVE-2022-39386 via fastify-websocket (>=4.0.0, <=4.2.2)

fastify-websocket NPM version =4.0.0, =0.0.0, =0.0.1, =0.0.1, =4.3.0-depup.0, =0.2.42, =2.0.3, =9.1.1, =1.8.0, =1.0.0-pre.3, =2.0.0-alpha, =1.0.0, =0.0.1, =1.0.1, =0.0.10, =0.0.40 and more Source cves: CVE-2022-39386 Source advisory: OSV:GHSA-4PCG-WR6C-H9CQ...

@frontify/frontify-cli (5.0.1), @my-healthcare/kankan-services (1.0.0) +8 more potentially affected by CVE-2022-39386 via @fastify/websocket (6.0.1)

@fastify/websocket NPM version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/websocket and may be impacted: - @frontify/frontify-cli 5.0.1 - @my-healthcare/kankan-services 1.0.0 - @ts4/hc =1.0.19, =1.0.2, =1.0.66, =0.0.1, =0.6.0,...

webappfind (0.1.1) potentially affected by unknown CVE via addon-kit (0.0.1-security)

addon-kit NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on addon-kit and may be impacted: - webappfind 0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-852...

@dstanesc/shared-property-map (>=0.0.9, <=0.0.11), @fluid-experimental/partial-checkout (>=0.51.0-43124, <=2.0.0-internal.2.0.4) +10 more potentially affected by CVE-2022-41714 via fastest-json-copy (1.0.1)

fastest-json-copy NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastest-json-copy and may be impacted: - @dstanesc/shared-property-map =0.0.9, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124, =0.51.0-43124,...

@companydotcom/company-skynet-core (>=1.0.2, <=2.0.17), @companydotcom/micro-application-core (>=2.0.7, <=2.0.18-alpha.0) +10 more potentially affected by CVE-2022-42743 via deep-parse-json (>=1.0.1, <=1.0.2)

deep-parse-json NPM version =1.0.1, =1.0.2, =2.0.7, =0.0.1, =0.0.1, =0.0.19, =6.5.7-0, =5.3.0, =1.0.0, =0.0.6, =0.0.1, =0.0.13 - redux-persist-nedb-storage 0.1.0 Source cves: CVE-2022-42743 Source advisory: OSV:GHSA-FF9J-PWXG-Q5P2...

@backland/accounts (>=0.1.3-alpha.2022.11.25.20.14.44.0, <=0.1.3-alpha.20221123222206.0), @backland/entity (>=0.1.3-alpha.2022.11.25.20.14.44.0, <=0.1.3-alpha.20221101T193006-0300.54) +29 more potentially affected by CVE-2022-41713 via deep-object-diff (1.1.7)

deep-object-diff NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on deep-object-diff and may be impacted: - @backland/accounts =0.1.3-alpha.2022.11.25.20.14.44.0, =0.1.3-alpha.2022.11.25.20.14.44.0, =0.1.3-alpha.2022.11.25.20.14.44.0,...

@a11ywatch/a11ywatch (>=0.0.1, <=0.1.65), @a11ywatch/core (>=0.1.1, <=0.5.158) +39 more potentially affected by unknown CVE via apollo-server-core (>=3.0.0-html.2, <=3.10.4)

apollo-server-core NPM version =3.0.0-html.2, =0.0.1, =0.1.1, =1.0.1, =1.1.22, =1.1.19, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =10.0.1, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =0.0.27, =0.0.64 and more Source cves: unknown CVE Source advisory:...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-39381 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-39381 Source advisory: OSV:GHSA-RCRX-FPJP-MFRW...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-39381 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-39381 Source advisory: OSV:GHSA-RCRX-FPJP-MFRW...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3602 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3602 Source advisory: OSV:GHSA-8RWR-X37P-MX23...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3786 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3786 Source advisory: OSV:GHSA-H8JM-2X53-XHP5...

@apexdevtools/apex-ls (>=3.1.0, <=3.2.0), @appium/fake-driver (>=3.2.3, <=3.2.4) +47 more potentially affected by CVE-2022-39353 via @xmldom/xmldom (>=0.7.0, <=0.7.6)

@xmldom/xmldom NPM version =0.7.0, =3.1.0, =3.2.3, =1.0.0-beta1, =15.1.0, =15.1.0, =15.1.0, =15.1.0, =0.1.0-beta.57, =0.1.5-beta.1, =1.0.0, =1.0.0, =1.0.0, =1.0.11 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11363 more potentially affected by CVE-2022-39353 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

@appium/fake-driver (>=3.2.5, <=4.2.2), @barchart/marketdata-api-js (>=5.16.2, <=5.27.0) +76 more potentially affected by CVE-2022-39353 via @xmldom/xmldom (>=0.8.0, <=0.8.3)

@xmldom/xmldom NPM version =0.8.0, =3.2.5, =5.16.2, =1.0.0, =0.2.1-beta.36, =10.1.1, =1.0.0-alpha1, =0.0.101-beta.22, =1.0.0, =10.1.1, =4.0.0-beta.0, =4.0.0-beta.0, =1.0.2, =0.0.1, =1.0.0, =1.0.1, =2.2.0 and more Source cves: CVE-2022-39353 Source advisory: OSV:GHSA-CRH6-FP67-6883...

node-red-contrib-ale-rainbow (>=1.82.0, <=1.82.6) potentially affected by CVE-2022-3783 via node-red-dashboard (3.1.7)

node-red-dashboard NPM version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-red-dashboard and may be impacted: - node-red-contrib-ale-rainbow =1.82.0, =1.82.6 Source cves: CVE-2022-3783 Source advisory: OSV:GHSA-VRV9-3X3W-FFXW...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25892 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25892 Source advisory: OSV:GHSA-9CV5-4WQV-9W94...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25892 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25892 Source advisory: OSV:GHSA-9CV5-4WQV-9W94...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25885 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25885 Source advisory: OSV:GHSA-FRP9-2V6R-GJ97...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25885 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25885 Source advisory: OSV:GHSA-FRP9-2V6R-GJ97...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3602 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3602 Source advisory: OSV:RUSTSEC-2022-0064...

roaring-landmask (0.4.0) potentially affected by CVE-2022-3786 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3786 Source advisory: OSV:RUSTSEC-2022-0065...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37623 via browserify-shim (>=3.1.5, <=3.8.14)

browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37623 Source advisory: OSV:GHSA-CFGR-75JX-H88G...

sentry-conduit (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-39294 via conduit-hyper (0.3.0)

conduit-hyper CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on conduit-hyper and may be impacted: - sentry-conduit =0.1.0, =0.3.0 Source cves: CVE-2022-39294 Source advisory: OSV:GHSA-9398-5GHF-7PR6...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25885 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25885 Source advisory: SNYK:JS-MUHAMMARA-3091137...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25885 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25885 Source advisory: SNYK:JS-HUMMUS-3091139...

nfprobe (0.0.1), terminus (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via elf_rs (>=0.1.1, <=0.1.3)

elfrs CARGO version =0.1.1, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0079...

com.bstek.uflo:uflo-console (>=2.0.0, <=2.1.5), com.syyai.spring.boot:uflo-spring-boot-starter (2.1.4) +1 more potentially affected by CVE-2022-25894 via com.bstek.uflo:uflo-core (>=2.0.0, <=2.1.5)

com.bstek.uflo:uflo-core MAVEN version =2.0.0, =2.0.0, =2.0, =2.5.1.v20220215 Source cves: CVE-2022-25894 Source advisory: SNYK:JAVA-COMBSTEKUFLO-3091112...

sentry-conduit (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-39294 via conduit-hyper (0.3.0)

conduit-hyper CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on conduit-hyper and may be impacted: - sentry-conduit =0.1.0, =0.3.0 Source cves: CVE-2022-39294 Source advisory: OSV:RUSTSEC-2022-0066...

@abstraktor/actorjs (>=0.0.0-aj-alpha.9, <=0.0.0-aj-beta.2), @deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7) +44 more potentially affected by CVE-2022-37621 via browserify-shim (>=3.1.5, <=3.8.14)

browserify-shim NPM version =3.1.5, =0.0.0-aj-alpha.9, =0.1.2-beta.1, =1.0.0, =1.0.2, =4.0.0-beta.6, =0.6.0, =0.1.5, =0.1.2, =0.19.0, =0.0.1, =0.2.5, =2.19.0, =4.0.0-beta and more Source cves: CVE-2022-37621 Source advisory: OSV:GHSA-R737-347M-WQC7...

@abcpros/bitcore-build (>=8.25.29, <=8.25.30), @acanto/october-scripts (3.2.2) +1121 more potentially affected by CVE-2022-2421 via socket.io-parser (>=3.1.1, <=3.3.0)

socket.io-parser NPM version =3.1.1, =8.25.29, =1.0.0, =2018.7.11-0, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =0.2.0, =1.0.10, =3.3.91, =3.3.114 and more Source cves: CVE-2022-2421 Source advisory: OSV:GHSA-QM95-PGCG-QQFQ...

@asigna/stx-core-sdk (0.0.1), @casper124578/use-socket.io (>=2.1.0, <=4.1.0) +133 more potentially affected by CVE-2022-2421 via socket.io-parser (4.1.2)

socket.io-parser NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @asigna/stx-core-sdk 0.0.1 - @casper124578/use-socket.io =2.1.0, =31.0.0, =34.0.0, =34.0.0, =1.0.0-theia1.27.0, =1.0.0, =1.0.1,...

@xrengine/analytics (>=0.4.11, <=5.0.0-beta3), @xrengine/server-core (>=0.4.11, <=5.0.0-beta3) potentially affected by CVE-2022-29823 via feathers-sequelize (6.3.2)

feathers-sequelize NPM version 6.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on feathers-sequelize and may be impacted: - @xrengine/analytics =0.4.11, =0.4.11, =5.0.0-beta3 Source cves: CVE-2022-29823 Source advisory: OSV:GHSA-P5M3-27VH-52J4...

@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0, <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0, <=33.0.0) +2 more potentially affected by CVE-2022-2421 via socket.io-parser (3.4.1)

socket.io-parser NPM version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2022-2421 Source...

@xrengine/analytics (>=0.4.11, <=5.0.0-beta3), @xrengine/server-core (>=0.4.11, <=5.0.0-beta3) potentially affected by CVE-2022-29822 via feathers-sequelize (6.3.2)

feathers-sequelize NPM version 6.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on feathers-sequelize and may be impacted: - @xrengine/analytics =0.4.11, =0.4.11, =5.0.0-beta3 Source cves: CVE-2022-29822 Source advisory: OSV:GHSA-5HQ7-J5WQ-P227...

@xrengine/analytics (>=0.4.11, <=5.0.0-beta3), @xrengine/server-core (>=0.4.11, <=5.0.0-beta3) potentially affected by CVE-2022-2422 via feathers-sequelize (6.3.2)

feathers-sequelize NPM version 6.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on feathers-sequelize and may be impacted: - @xrengine/analytics =0.4.11, =0.4.11, =5.0.0-beta3 Source cves: CVE-2022-2422 Source advisory: OSV:GHSA-QPV8-4PJQ-QQH7...

socket.io (>=3.0.0-rc1, <=3.0.0-rc4), socket.io-client (>=3.0.0-rc1, <=3.0.0-rc4) potentially affected by CVE-2022-2421 via socket.io-parser (>=4.0.1-rc1, <=4.0.1-rc3)

socket.io-parser NPM version =4.0.1-rc1, =3.0.0-rc1, =3.0.0-rc1, =3.0.0-rc4 Source cves: CVE-2022-2421 Source advisory: OSV:GHSA-QM95-PGCG-QQFQ...

etclient (0.3.0), eth-utils (>=0.1.1, <=0.2.0) +32 more potentially affected by CVE-2022-39354 via evm (>=0.7.1, <=0.33.1)

evm CARGO version =0.7.1, =0.1.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2022-39354 Source advisory: OSV:GHSA-HHC4-47RH-CR34...

etclient (0.3.0), eth-utils (>=0.1.1, <=0.2.0) +32 more potentially affected by CVE-2022-39354 via evm (>=0.7.1, <=0.33.1)

evm CARGO version =0.7.1, =0.1.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2022-39354 Source advisory: OSV:RUSTSEC-2022-0083...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25892 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25892 Source advisory: SNYK:JS-MUHAMMARA-3060320...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25892 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25892 Source advisory: SNYK:JS-HUMMUS-3091138...

@agoric/access-token (>=0.4.16-dev-23c942c.0, <=0.4.16-dev.0), @agoric/assert (>=0.1.0, <=0.3.15-dev.2) +100 more potentially affected by unknown CVE via ses (>=0.0.1, <=0.15.24)

ses NPM version =0.0.1, =0.4.16-dev-23c942c.0, =0.1.0, =1.2.0, =1.3.0, =0.1.0, =0.10.8-dev.0, =0.2.0, =1.5.1, =0.5.6-dev-f662032.0, =0.0.1, =0.1.1, =0.0.9, =0.1.1, =0.2.0, =0.5.30-dev-fe997f2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WHPX-Q3RQ-W8JC...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02.aula (1.0.0) +31619 more potentially affected by CVE-2022-3517 via minimatch (>=3.0.0, <=3.0.4)

minimatch NPM version =3.0.0, =1.0.1, =1.1.0 - 02.aula 1.0.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14937 more potentially affected by CVE-2022-37603 via loader-utils (>=1.0.0, <=1.4.1)

loader-utils NPM version =1.0.0, =1.0.1, =1.0.5, =0.1.0, =0.1.0, =1.0.3, =0.1.0, =0.1.2, =0.0.2, =0.3.0, =0.1.4, =0.1.6 and more Source cves: CVE-2022-37603 Source advisory: OSV:GHSA-3RFM-JHWJ-7488...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8767 more potentially affected by CVE-2022-37603 via loader-utils (>=2.0.0, <=2.0.3)

loader-utils NPM version =2.0.0, =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...