3extensions (1.0.1), 4i18n-cli (>=0.0.2, <=0.0.7) +1268 more potentially affected by CVE-2022-2596 via node-fetch (>=3.0.0, <=3.2.9)

node-fetch NPM version =3.0.0, =0.0.2, =0.0.2, =0.0.4, =0.0.0-alpha.117, =0.0.0-alpha.117, =0.0.0-alpha.119, =1.2.1-dev.3, =1.2.1-dev.3, =1.2.1-dev.3, =0.0.1, =0.0.22 - @acneidert/devtools 0.0.6 and more Source cves: CVE-2022-2596 Source advisory: OSV:GHSA-VP56-6G26-6827...

adsbx_browser (0.1.0), adsbx_screenshot (>=0.1.0, <=1.4.1) +92 more potentially affected by CVE-2022-35922 via websocket (>=0.9.5, <=0.24.0)

websocket CARGO version =0.9.5, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.0.6, =1.0.0, =0.1.0, =0.0.0, =0.1.0, =0.1.2, =0.3.3, =0.6.25, =0.0.3, =0.1.0, =0.1.1 and more Source cves: CVE-2022-35922 Source advisory: OSV:RUSTSEC-2022-0035...

automaat-processor-git-clone (0.1.0), automaat-processor-http-request (0.1.0) +50 more potentially affected by CVE-2022-31173 via juniper (>=0.7.0, <=0.15.8)

juniper CARGO version =0.7.0, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-2 and more Source cves: CVE-2022-31173 Source advisory: OSV:GHSA-4RX6-G5VG-5F3J...

flipper-server (>=0.171.1, <=0.212.0), flipper-server-core (>=0.171.1, <=0.212.0) potentially affected by unknown CVE via flipper-server-companion (>=0.171.1, <=0.212.0)

flipper-server-companion NPM version =0.171.1, =0.171.1, =0.171.1, =0.212.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-3077...

jinghuan-cli (>=1.0.20, <=1.0.41), jinghuanjs (>=1.0.73, <=1.0.93) potentially affected by unknown CVE via jinghuan-jsb (1.0.16)

jinghuan-jsb NPM version 1.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on jinghuan-jsb and may be impacted: - jinghuan-cli =1.0.20, =1.0.73, =1.0.93 Source cves: unknown CVE Source advisory: SNYK:JS-JINGHUANJSB-2962984...

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (>=0.3.5, <=0.17.9) +737 more potentially affected by CVE-2022-2564 via mongoose (>=5.0.0, <=5.13.14)

mongoose NPM version =5.0.0, =0.24.0, =0.3.5, =0.2.0, =3.7.0, =0.1.17, =1.0.0, =2.8.0, =0.0.1, =0.0.2, =0.7.0, =1.0.33, =2.1.3 and more Source cves: CVE-2022-2564 Source advisory: OSV:GHSA-F825-F98C-GJ3G...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +137 more potentially affected by CVE-2022-2564 via mongoose (>=6.0.1, <=6.4.5)

mongoose NPM version =6.0.1, =1.2.3, =1.0.5, =1.0.9, =1.1.80, =0.0.1, =1.0.13, =1.0.0-rc.1.8.10, =1.0.2, =1.0.3, =0.4.3, =0.4.3, =0.4.3, =2.0.1, =2.0.2 and more Source cves: CVE-2022-2564 Source advisory: OSV:GHSA-F825-F98C-GJ3G...

automaat-processor-git-clone (0.1.0), automaat-processor-http-request (0.1.0) +50 more potentially affected by CVE-2022-31173 via juniper (>=0.7.0, <=0.15.8)

juniper CARGO version =0.7.0, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-2 and more Source cves: CVE-2022-31173 Source advisory: OSV:RUSTSEC-2022-0038...

hotg-rune-runtime (>=0.11.0, <=0.11.3), hotg-rune-wasm3-runtime (>=0.6.0, <=0.10.0) +7 more potentially affected by CVE-2022-34529 via wasm3 (>=0.1.3, <=0.3.1)

wasm3 CARGO version =0.1.3, =0.11.0, =0.6.0, =0.7.0, =0.4.0, =0.2.0, =0.0.1, =0.16.0, =0.15.0, =0.19.0 Source cves: CVE-2022-34529 Source advisory: OSV:GHSA-GQ4P-4HXV-5RG9...

@adabra/ui-libs-grapesjs-mjml (>=0.0.122, <=0.0.139), @ant-extensions/page-maker (>=0.0.1, <=0.0.5) +44 more potentially affected by CVE-2022-21802 via grapesjs (>=0.10.8, <=0.18.4)

grapesjs NPM version =0.10.8, =0.0.122, =0.0.1, =1.0.6, =0.0.12, =2.0.18, =0.8.1-esbuild, =0.0.1, =1.0.3, =0.10.4, =22.0.8, =0.10.4-custom.0, =0.0.19, =0.1.5, =0.10.17, =1.0.8 and more Source cves: CVE-2022-21802 Source advisory: OSV:GHSA-589F-C66P-HXR4...

lambda_pattern (>=0.0.15, <=0.0.31), push2cloud-cli (>=1.0.0, <=2.0.3) +3 more potentially affected by CVE-2020-28422 via git-archive (0.1.4)

git-archive NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on git-archive and may be impacted: - lambdapattern =0.0.15, =1.0.0, =1.0.0, =2.0.4 - push2cloud-compiler-rf 2.0.2 Source cves: CVE-2020-28422 Source advisory:...

chewb-server (>=0.0.1, <=0.0.20), video-dash-uploader (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2020-28436 via google-cloudstorage-commands (0.0.1)

google-cloudstorage-commands NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on google-cloudstorage-commands and may be impacted: - chewb-server =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2020-28436 Source advisory:...

bear (0.1.0), proud-badge (>=0.0.1, <=0.0.5) +1 more potentially affected by CVE-2020-28438 via deferred-exec (0.3.1)

deferred-exec NPM version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on deferred-exec and may be impacted: - bear 0.1.0 - proud-badge =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2020-28438 Source advisory: OSV:GHSA-54W4-2F2P-F48H...

@generates/cli (>=0.0.2, <=0.0.7), @generates/core (>=0.0.2, <=0.0.7) +19 more potentially affected by CVE-2021-23397 via @ianwalter/merge (9.0.1)

@ianwalter/merge NPM version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ianwalter/merge and may be impacted: - @generates/cli =0.0.2, =0.0.2, =0.0.40, =0.0.2, =0.0.2, =0.0.0, =9.10.0, =3.0.0, =5.0.0, =0.1.0, =0.0.1, =1.0.0, =0.0.2, =1.2.0 a...

@arnau/gatsby-transformer-toml (>=1.0.0, <=1.0.2) potentially affected by CVE-2020-28462 via ion-parser (0.5.2)

ion-parser NPM version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ion-parser and may be impacted: - @arnau/gatsby-transformer-toml =1.0.0, =1.0.2 Source cves: CVE-2020-28462 Source advisory: OSV:GHSA-7VRV-5M2H-RJW9...

@csn_chile/fuelgauge (1.0.1), @csn_chile/ol_ws (1.0.0) +8 more potentially affected by CVE-2020-7678 via node-import (>=0.1.9, <=0.9.2)

node-import NPM version =0.1.9, =1.0.0, =1.0.0, =0.0.2, =0.1.2, =1.1.2, =1.1.1, =1.4.2 Source cves: CVE-2020-7678 Source advisory: OSV:GHSA-PC62-CQ5X-3J5G...

@alloyify/anvil (>=1.1.2, <=1.1.4), @alloyify/devkit (>=1.1.2, <=1.1.4) +12 more potentially affected by CVE-2022-25907 via ts-deepmerge (2.0.1)

ts-deepmerge NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ts-deepmerge and may be impacted: - @alloyify/anvil =1.1.2, =1.1.2, =1.1.2, =1.1.2, =0.0.0-canary-20220330074435, =0.0.0-canary-20220330074435, =5.0.24, =11.1.27, =4.0.22,...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +42 more potentially affected by CVE-2022-25759 via convert-svg-core (>=0.3.3, <=0.5.0)

convert-svg-core NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =0.3.0, =0.3.0, =1.0.3, =1.2.1 and more Source cves: CVE-2022-25759 Source advisory: OSV:GHSA-5GXC-FXCR-9326...

dfx-core (0.0.1), ehsm (>=0.1.0, <=0.1.1) +5 more potentially affected by unknown CVE via pkcs11 (0.5.0)

pkcs11 CARGO version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pkcs11 and may be impacted: - dfx-core 0.0.1 - ehsm =0.1.0, =0.2.0, =0.1.0-alpha.0, =0.1.0, =0.0.1, =0.2.1 - tpm-change-pin 0.1.0 Source cves: unknown CVE Source advisory:...

slack-morphism-hyper (>=0.5.0, <=0.40.0), slack-paste (0.1.0) potentially affected by CVE-2022-31162 via slack-morphism (>=0.2.8, <=0.40.0)

slack-morphism CARGO version =0.2.8, =0.5.0, =0.40.0 - slack-paste 0.1.0 Source cves: CVE-2022-31162 Source advisory: OSV:RUSTSEC-2022-0086...

@compas/store (>=0.0.178, <=0.0.210), @flyacts/backend-media-management (2.1.1) +12 more potentially affected by CVE-2022-36313 via file-type (>=17.0.0, <=17.1.2)

file-type NPM version =17.0.0, =0.0.178, =0.6.14, =0.1.0, =0.2.15, =0.2.8, =0.0.207, =0.0.0-alpha.11, =4.5.3, =7.2.0, =7.2.2 Source cves: CVE-2022-36313 Source advisory: OSV:GHSA-MHXJ-85R3-2X55...

123yun-share (1.0.0), 1k-tasks (>=2.3.0, <=3.6.1) +813 more potentially affected by CVE-2022-36313 via file-type (>=13.0.3, <=16.5.3)

file-type NPM version =13.0.3, =2.3.0, =1.0.0, =0.0.2, =1.0.0, =1.0.6, =1.0.0-alpha.0, =1.0.0-alpha.1, =0.17.17, =0.1.41, =1.1.0, =0.1.3, =1.10.0 and more Source cves: CVE-2022-36313 Source advisory: OSV:GHSA-MHXJ-85R3-2X55...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +82 more potentially affected by CVE-2022-23636 +1 more via wasmtime (>=0.7.0, <=0.37.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0-pre, =0.4.0-pre, =0.0.0, =0.40.1, =0.45.0, =0.10.0, =0.1.0, =0.1.0, =0.3.0 - inkpad-executor 0.1.0 and more Source cves: CVE-2022-23636, CVE-2022-31169 Source advisory: OSV:GHSA-7F6X-JWH5-M9R4...

abstraps (0.1.8), aivm (>=0.2.0, <=0.3.0) +287 more potentially affected by CVE-2022-23636 +1 more via cranelift-codegen (>=0.14.0, <=0.84.0)

cranelift-codegen CARGO version =0.14.0, =0.2.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.2.9, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.26.1, =0.30.1 and more Source cves: CVE-2022-23636, CVE-2022-31169 Source advisory: OSV:GHSA-7F6X-JWH5-M9R4...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1279 more potentially affected by CVE-2022-31172 via @openzeppelin/contracts (>=4.1.0, <=4.7.0)

@openzeppelin/contracts NPM version =4.1.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =1.0.0, =0.2.0, =4.14.3, =1.0.2, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =3.1.0 and more Source cves: CVE-2022-31172 Source advisory: OSV:GHSA-4G63-C64M-25W9...

@abacus-network/helloworld (>=0.2.1-alpha, <=0.2.1-beta2), @alt-research/orbit-sdk-avail (>=0.9.1, <=0.9.11) +108 more potentially affected by CVE-2022-31172 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.2.1-alpha, =0.9.1, =0.19.0-beta.0, =0.1.0-alpha, =0.24.2, =1.0.0-beta.1, =0.6.0-beta.0, =1.1.4-migration-beta.0, =1.0.0-beta.0, =1.0.0-upstream-0.19.0, =1.4.0, =1.5.0-beta.0 and more Source cves: CVE-2022-31172 Source advisory:...

@abacus-network/helloworld (>=0.2.1-alpha, <=0.2.1-beta2), @alt-research/orbit-sdk-avail (>=0.9.1, <=0.9.11) +108 more potentially affected by CVE-2022-31170 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.7.0)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.2.1-alpha, =0.9.1, =0.19.0-beta.0, =0.1.0-alpha, =0.24.2, =1.0.0-beta.1, =0.6.0-beta.0, =1.1.4-migration-beta.0, =1.0.0-beta.0, =1.0.0-upstream-0.19.0, =1.4.0, =1.5.0-beta.0 and more Source cves: CVE-2022-31170 Source advisory:...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1281 more potentially affected by CVE-2022-31170 via @openzeppelin/contracts (>=4.0.0, <=4.7.0)

@openzeppelin/contracts NPM version =4.0.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =1.0.0, =0.2.0, =4.14.3, =1.0.2, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =3.1.0 and more Source cves: CVE-2022-31170 Source advisory: OSV:GHSA-QH9X-GCFH-PCRW...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +441 more potentially affected by CVE-2022-31151 +1 more via undici (>=5.0.0, <=5.7.0)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-31151, CVE-2023-45143 Source advisory: OSV:GHSA-Q768-X9M6-M9QP...

@akumzy/graphql-schema-generator (>=0.2.0, <=0.5.1), @appxdigital/appx-core (0.1.83) +441 more potentially affected by CVE-2022-31150 via undici (>=5.0.0, <=5.7.0)

undici NPM version =5.0.0, =0.2.0, =0.2.1, =0.2.11, =2.0.0, =1.6.0, =1.0.0, =0.2.0-beta.0, =1.0.0, =0.3.0, =0.3.21 and more Source cves: CVE-2022-31150 Source advisory: OSV:GHSA-3CVR-822R-RQCC...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +260 more potentially affected by CVE-2022-25887 via sanitize-html (>=2.1.0, <=2.7.0)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =1.3.0, =2.0.0-alpha.2, =1.2.152, =1.0.85, =1.0.140, =1.1.81, =1.0.36, =1.0.104, =1.0.43, =1.0.5, =1.1.3-u1, =1.1.3-u1, =1.1.3-u2 and more Source cves: CVE-2022-25887 Source advisory: SNYK:JS-SANITIZEHTML-2957526...

cranelift (0.84.0), cranelift-frontend (0.84.0) +19 more potentially affected by CVE-2022-31146 via cranelift-codegen (0.84.0)

cranelift-codegen CARGO version 0.84.0 is affected by a known vulnerability. The following packages have a transitive dependency on cranelift-codegen and may be impacted: - cranelift 0.84.0 - cranelift-frontend 0.84.0 - cranelift-interpreter 0.84.0 - cranelift-jit 0.84.0 - cranelift-module 0.84.0...

deterministic-wasi-ctx (0.1.3), enarx (>=0.5.0, <=0.5.1) +9 more potentially affected by CVE-2022-31146 via wasmtime (0.37.0)

wasmtime CARGO version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - deterministic-wasi-ctx 0.1.3 - enarx =0.5.0, =0.11.0, =0.12.14 - wasi-tokio 0.37.0 - wasmtime-cli-flags 0.37.0 - wasmtime-wasi 0.37.0 -...

slack-morphism-hyper (>=0.5.0, <=0.40.0), slack-paste (0.1.0) potentially affected by CVE-2022-31162 via slack-morphism (>=0.2.8, <=0.40.0)

slack-morphism CARGO version =0.2.8, =0.5.0, =0.40.0 - slack-paste 0.1.0 Source cves: CVE-2022-31162 Source advisory: OSV:GHSA-99J7-MHFH-W84P...

@adobe/aio-app-scripts (>=0.6.0, <=2.3.0), @adobe/aio-cli (>=2.1.0, <=4.0.0) +21 more potentially affected by CVE-2020-28471 via properties-reader (>=2.0.0, <=2.1.1)

properties-reader NPM version =2.0.0, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =1.7.0, =0.0.16, =2.0.0-alpha.0, =2.4.1-next.238, =2.0.0-RC1, =2.1.1-next.0, =2.1.1-next.0, =2.2.1-next.5, =2.1.1-next.0, =2.5.2-next.17 and more Source cves: CVE-2020-28471 Source advisory: OSV:GHSA-JXVF-M3X5-M...

@jamen/mdc (>=0.0.0, <=0.0.1), @namgoe/gcmsgen (>=0.0.3, <=0.0.11) +25 more potentially affected by CVE-2020-28459 via markdown-it-decorate (>=1.0.0, <=1.2.2)

markdown-it-decorate NPM version =1.0.0, =0.0.0, =0.0.3, =0.0.1, =0.0.0, =2.3.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =1.1.0, =0.1.0, =0.2.0, =1.0.1, =1.0.1, =1.0.17 and more Source cves: CVE-2020-28459 Source advisory: OSV:GHSA-RHF5-2378-3W3W...

@intlgadmin/skywalking-nodejs-prisma-plugin (1.0.0), logtube (>=2.3.0, <=2.4.0) +3 more potentially affected by CVE-2022-36127 via skywalking-backend-js (>=0.3.0, <=0.4.1)

skywalking-backend-js NPM version =0.3.0, =2.3.0, =1.2.144-2, =1.0.0, =1.0.4 Source cves: CVE-2022-36127 Source advisory: OSV:GHSA-8GPG-466C-5CPJ...

@accordproject/cicero-cli (>=0.2.48, <=0.8.0), @accordproject/cicero-common (>=0.2.50, <=0.3.17) +102 more potentially affected by CVE-2020-7677 via thenify (>=3.0.0, <=3.3.0)

thenify NPM version =3.0.0, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.0.37, =0.0.36, =0.0.37, =0.1.0, =0.1.0, =2.1.1, =0.1.0, =0.2.2 and more Source cves: CVE-2020-7677 Source advisory: OSV:GHSA-29XR-V42J-R956...

@atlassian/aui (>=8.2.4, <=9.5.1), @chinchilla-software/ng-date-time-picker (>=1.0.0, <=1.0.1) +135 more potentially affected by CVE-2022-31160 via jquery-ui (>=1.10.4, <=1.13.1)

jquery-ui NPM version =1.10.4, =8.2.4, =1.0.0, =1.0.0, =0.1.0, =2.3.2, =6.4.0, =1.1.42, =5.0.0-110, =0.0.0, =2.1.1, =4.0.0, =1.0.0-alpha.0, =11.0.0, =17.0.0-dev.3 and more Source cves: CVE-2022-31160 Source advisory: OSV:GHSA-H6GJ-6JJQ-H8G9...

@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)

glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory:...

grunt-git-describe (>=2.3.1, <=2.4.4), grunt-git-describe-plus (2.3.3-0) +3 more potentially affected by CVE-2020-7641 via grunt-util-property (0.0.2)

grunt-util-property NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on grunt-util-property and may be impacted: - grunt-git-describe =2.3.1, =0.1.5, =0.0.1, =0.0.4 Source cves: CVE-2020-7641 Source advisory: OSV:GHSA-4HQ8-JGR8-MW9J...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3309 more potentially affected by CVE-2022-25869 via angular (>=1.0.8, <=1.8.3)

angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25869 Source advisory: OSV:GHSA-PRC3-VJFX-VHM9...

3nit-utils (>=0.30.0, <=1.0.2), 6ix (0.0.0-canary.0) +1013 more potentially affected by CVE-2022-25858 via terser (>=4.0.0, <=4.8.0)

terser NPM version =4.0.0, =0.30.0, =0.0.0-canary.0, =0.0.1, =1.0.0-alpha.9, =1.0.0, =0.0.2, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.10 - @agilejs/cli 1.0.0 and more Source cves: CVE-2022-25858 Source advisory: OSV:GHSA-4WF5-VPHF-C2XC...

1k-tasks (>=2.3.0, <=3.6.1), @alitajs/remove_version (>=0.0.1, <=0.0.2) +408 more potentially affected by CVE-2022-25858 via terser (>=5.0.0, <=5.14.1)

terser NPM version =5.0.0, =2.3.0, =0.0.1, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.7.0-alpha.2, =2.7.0-alpha.1, =2.0.0-alpha.0, =2.8.0-canary.5, =10.0.0-beta.0, =0.1001.0-next.4, =1.6.3, =1.8.24 - @anyt/oro-webpack-config-builder 0.0.1 - @applegamer22/scr-web 1.0.0-alpha.24.3.1 and more Source cves:...

fastify-bearer-auth (6.3.0-rc.1) potentially affected by CVE-2022-31142 via @fastify/bearer-auth (7.0.0-rc.1)

@fastify/bearer-auth NPM version 7.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/bearer-auth and may be impacted: - fastify-bearer-auth 6.3.0-rc.1 Source cves: CVE-2022-31142 Source advisory: OSV:GHSA-376V-XGJX-7MFR...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3310 more potentially affected by CVE-2022-25869 via angular (>=0.0.1, <=1.8.3)

angular NPM version =0.0.1, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25869 Source advisory: SNYK:JS-ANGULAR-2949781...

@accordproject/cicero-cli (>=0.3.4, <=0.23.0-alpha.1), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.0-alpha.1) +41 more potentially affected by CVE-2019-10761 via vm2 (>=3.0.0, <=3.6.10)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2018.7.11-0, =2018.8.5-0, =4.5.201902251314, =5.0.201901071713,...

@chargeover/strapi (0.0.1-rc1.1), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3) +5 more potentially affected by CVE-2022-32114 via @strapi/strapi (>=4.0.0-beta.0, <=4.1.12)

@strapi/strapi NPM version =4.0.0-beta.0, =1.0.0-alpha.0, =0.9.0, =0.9.2 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0 Source cves: CVE-2022-32114 Source advisory: OSV:GHSA-4VM8-J95F-J6V5...

@03balogun/react-native-skeleton-content (1.0.25), @1023-ventures/serra-common (>=0.3.31, <=0.3.33) +174 more potentially affected by CVE-2022-24373 via react-native-reanimated (>=2.0.0, <=2.9.1)

react-native-reanimated NPM version =2.0.0, =0.3.31, =1.0.0-alpha.0, =0.0.1, =0.1.0, =0.0.0, =1.2.0, =3.0.0-alpha.1, =1.42.0, =0.1.4, =1.0.0, =1.7.3 - @dish/babel-preset 0.0.6 and more Source cves: CVE-2022-24373 Source advisory: SNYK:JS-REACTNATIVEREANIMATED-2949507...

@alexanderniebuhr/eslint-config (>=1.3.0, <=1.4.0), @alexanderniebuhr/style (>=1.1.0, <=1.3.0) +119 more potentially affected by CVE-2022-25875 via svelte (>=3.1.0, <=3.48.0)

svelte NPM version =3.1.0, =1.3.0, =1.1.0, =1.3.0, =0.7.7, =10.0.0, =7.1.4, =21.0.4, =8.0.4, =2.0.4, =1.0.1, =6.0.4, =5.0.2, =4.0.2, =1.0.1, =5.0.8, =12.0.48 and more Source cves: CVE-2022-25875 Source advisory: OSV:GHSA-WV8Q-R932-8HC7...