Lucene search
+L
VulnersosvRecent

10909 matches found

vulnersOsv
vulnersOsv
•added 2022/03/31 12:00 p.m.•2 views

wasmtime-cli (>=0.34.0, <=0.34.1) potentially affected by CVE-2022-24791 via wasmtime (>=0.34.0, <=0.34.1)

wasmtime CARGO version =0.34.0, =0.34.0, =0.34.1 Source cves: CVE-2022-24791 Source advisory: OSV:RUSTSEC-2022-0016...

9.8CVSS8.5AI score0.01179EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/28 12:00 p.m.•4 views

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +50 more potentially affected by CVE-2022-24791 via wasmtime (>=0.7.0, <=0.34.1)

wasmtime CARGO version =0.7.0, =0.1.0, =0.0.0, =0.40.1, =0.45.0, =0.10.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.3, =0.1.0, =0.4.1 and more Source cves: CVE-2022-24791 Source advisory: OSV:RUSTSEC-2022-0099...

9.8CVSS8.5AI score0.01179EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/28 12:00 p.m.•1 views

wasmtime-cli (>=0.35.0, <=0.35.1) potentially affected by CVE-2022-24791 via wasmtime (>=0.35.0, <=0.35.1)

wasmtime CARGO version =0.35.0, =0.35.0, =0.35.1 Source cves: CVE-2022-24791 Source advisory: OSV:RUSTSEC-2022-0099...

9.8CVSS8.5AI score0.01179EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/28 10:53 a.m.•3 views

@apsis/cli (0.5.0), @asmallstudio/utilities (>=0.2.2, <=0.3.3) +121 more potentially affected by CVE-2022-24376 via git-promise (>=0.2.0, <=1.0.0)

git-promise NPM version =0.2.0, =0.2.2, =1.1.8, =1.0.0, =2.0.0-beta.10, =1.0.13, =1.0.0, =0.0.8, =1.1.1 - @efox/eslint-config-react-prittier-ts 1.0.19 - @efox/pay 1.0.8 - @efox/plugin-babel-react 1.0.1 - @emfc/emfc-cli 1.1.0 and more Source cves: CVE-2022-24376 Source advisory:...

9.8CVSS8.6AI score0.03081EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/28 10:43 a.m.•2 views

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +13407 more potentially affected by CVE-2022-25900 via git-clone (>=0.0.2, <=0.2.0)

git-clone NPM version =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.11 and more Source cves: CVE-2022-25900 Source advisory: SNYK:JS-GITCLONE-2434308...

10CVSS8.6AI score0.03669EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/28 10:40 a.m.•2 views

@altostra/cli (>=5.15.0, <=5.15.2), @altostra/core (>=10.0.0-version-usage.0, <=10.2.0-support-aws-marketplace.2) +50 more potentially affected by CVE-2022-24066 +1 more via simple-git (>=3.0.3, <=3.4.0)

simple-git NPM version =3.0.3, =5.15.0, =10.0.0-version-usage.0, =1.1.12, =0.0.1, =1.1.1, =12.2.17, =18.2.13, =2.0.8, =1.0.3, =2.0.8, =2.0.0, =2.0.0, =1.0.3, =4.2.0 and more Source cves: CVE-2022-24066, CVE-2022-24433 Source advisory: SNYK:JS-SIMPLEGIT-2434306...

9.8CVSS8.3AI score0.03822EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/23 12:00 a.m.•4 views

@cerebroapp/cerebro-shell (>=1.0.0-alpha.1, <=1.0.0), @cerebroapp/cerebro-ui (>=2.0.0-alpha.3, <=2.0.0-alpha.4) +4 more potentially affected by CVE-2022-26260 via simple-plist (>=1.1.0, <=1.1.1)

simple-plist NPM version =1.1.0, =1.0.0-alpha.1, =2.0.0-alpha.3, =0.1.0, =1.0.143, =1.0.46, =4.0.0-beta.0 Source cves: CVE-2022-26260 Source advisory: OSV:GHSA-GFF7-G5R8-MG8M...

9.8CVSS8.6AI score0.01315EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/22 7:28 p.m.•1 views

116zm_atm (1.0.0), 11_mybank (1.0.0) +208 more potentially affected by unknown CVE via faker (6.6.6)

faker NPM version 6.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on faker and may be impacted: - 116zmatm 1.0.0 - 11mybank 1.0.0 - @acceleratxr/react-shared =1.1.0, =0.1.0, =1.0.0, =1.2.1, =1.1.0, =1.3.0, =1.0.0, =1.1.0, =1.2.0, =1.1.0, =1.2.0,...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/22 6:49 p.m.•2 views

@manniwatch/client-desktop (>=0.28.0, <=0.28.1), @yeti-dev/electroshot (>=1.4.3, <=1.4.6) +5 more potentially affected by CVE-2022-21718 via electron (>=15.0.0, <=15.3.2)

electron NPM version =15.0.0, =0.28.0, =1.4.3, =1.0.0, =2.0.53, =6.0.15, =6.1.2 - simple-git-gui 3.8.2 - xyz-ttooc-log-electron-windows 0.1.5 Source cves: CVE-2022-21718 Source advisory: OSV:GHSA-3P22-GHQ8-V749...

5CVSS5.4AI score0.00946EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/22 6:49 p.m.•2 views

@bbc/a11y (>=3.0.0-canary.1, <=3.0.0), @domoskanonos/nidoca-pwa (>=1.0.1, <=1.0.2) +11 more potentially affected by CVE-2022-21718 via electron (>=13.0.1, <=13.6.2)

electron NPM version =13.0.1, =3.0.0-canary.1, =1.0.1, =6.1.0-beta.20210707, =0.26.3, =0.0.8, =0.0.1, =3.0.2, =1.3.17, =0.0.7, =13.0.0, =2.0.29, =3.11.4, =5.4.2 - simple-git-gui 3.7.14 Source cves: CVE-2022-21718 Source advisory: OSV:GHSA-3P22-GHQ8-V749...

5CVSS5.4AI score0.00946EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/22 6:49 p.m.•1 views

@lanehub/app-plugin (>=1.0.0, <=1.0.87), @lanehub/biz-component (>=1.0.21, <=1.0.112) +9 more potentially affected by CVE-2022-21718 via electron (>=14.0.0, <=14.2.3)

electron NPM version =14.0.0, =1.0.0, =1.0.21, =1.0.19, =0.6.4, =0.7.0, =0.1.0-alpha.0, =2.0.48, =3.7.30, =3.8.0 Source cves: CVE-2022-21718 Source advisory: OSV:GHSA-3P22-GHQ8-V749...

5CVSS5.4AI score0.00946EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/22 6:49 p.m.•5 views

niconizer (>=2.0.56, <=2.0.60) potentially affected by CVE-2022-21718 via electron (>=16.0.2, <=16.0.5)

electron NPM version =16.0.2, =2.0.56, =2.0.60 Source cves: CVE-2022-21718 Source advisory: OSV:GHSA-3P22-GHQ8-V749...

5CVSS5.4AI score0.00946EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/22 12:00 p.m.•6 views

deno (>=0.35.0, <=1.3.0), diss (>=0.0.1, <=0.2.10) +8 more potentially affected by unknown CVE via pty (>=0.1.6, <=0.2.2)

pty CARGO version =0.1.6, =0.35.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.0, =0.1.0 - webterm-rs 0.1.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0015...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/22 12:00 a.m.•2 views

@phoenix-plugin-registry/hirse.ungit (0.8.3), hirse.ungit (>=0.4.1, <=0.8.3) potentially affected by CVE-2022-25766 via ungit (>=1.1.22, <=1.5.10)

ungit NPM version =1.1.22, =0.4.1, =0.8.3 Source cves: CVE-2022-25766 Source advisory: OSV:GHSA-HF8C-XR89-VFM5...

8.8CVSS8AI score0.34303EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/21 7:22 a.m.•1 views

@aqsc/form-making (>=0.0.22, <=0.0.39), @ariesate/are-components (1.0.1) +85 more potentially affected by CVE-2022-25646 via x-data-spreadsheet (>=1.1.4, <=1.1.9)

x-data-spreadsheet NPM version =1.1.4, =0.0.22, =1.1.0, =1.1.5, =0.0.1-alpha.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1, =1.1.6, =1.1.11 and more Source cves: CVE-2022-25646 Source advisory: SNYK:JS-XDATASPREADSHEET-2430381...

6.1CVSS6.2AI score0.00865EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/18 11:10 p.m.•1 views

@arkecosystem/core (>=3.1.0, <=3.2.0), @arkecosystem/core-forger (>=3.1.0, <=3.2.0) +35 more potentially affected by CVE-2022-24773 via node-forge (>=1.0.0, <=1.2.1)

node-forge NPM version =1.0.0, =3.1.0, =3.1.0, =3.1.0, =1.1.26, =1.0.0-jwt-supply-chain.62c7e930.0, =1.0.0 - @hyperledger/cactus-example-carbon-accounting-backend 1.0.0 - @hyperledger/cactus-example-supply-chain-backend 1.0.0 - @hyperledger/cactus-plugin-htlc-coordinator-besu 1.0.0 -...

5.3CVSS6.7AI score0.00918EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/18 11:10 p.m.•2 views

@arkecosystem/core (>=3.1.0, <=3.2.0), @arkecosystem/core-forger (>=3.1.0, <=3.2.0) +35 more potentially affected by CVE-2022-24772 via node-forge (>=1.0.0, <=1.2.1)

node-forge NPM version =1.0.0, =3.1.0, =3.1.0, =3.1.0, =1.1.26, =1.0.0-jwt-supply-chain.62c7e930.0, =1.0.0 - @hyperledger/cactus-example-carbon-accounting-backend 1.0.0 - @hyperledger/cactus-example-supply-chain-backend 1.0.0 - @hyperledger/cactus-plugin-htlc-coordinator-besu 1.0.0 -...

7.5CVSS6.8AI score0.01031EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/18 11:09 p.m.•1 views

@arkecosystem/core (>=3.1.0, <=3.2.0), @arkecosystem/core-forger (>=3.1.0, <=3.2.0) +35 more potentially affected by CVE-2022-24771 via node-forge (>=1.0.0, <=1.2.1)

node-forge NPM version =1.0.0, =3.1.0, =3.1.0, =3.1.0, =1.1.26, =1.0.0-jwt-supply-chain.62c7e930.0, =1.0.0 - @hyperledger/cactus-example-carbon-accounting-backend 1.0.0 - @hyperledger/cactus-example-supply-chain-backend 1.0.0 - @hyperledger/cactus-plugin-htlc-coordinator-besu 1.0.0 -...

7.5CVSS6.8AI score0.00728EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/18 6:57 p.m.•5 views

@chainsafe/lodestar (>=0.28.2-dev.9, <=0.29.3-dev.5), @chainsafe/lodestar-cli (>=0.28.2-dev.0, <=0.28.2-dev.18) potentially affected by CVE-2022-24759 via @chainsafe/libp2p-noise (4.1.0)

@chainsafe/libp2p-noise NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @chainsafe/libp2p-noise and may be impacted: - @chainsafe/lodestar =0.28.2-dev.9, =0.28.2-dev.0, =0.28.2-dev.18 Source cves: CVE-2022-24759 Source advisory:...

8.1CVSS7.6AI score0.00499EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/18 6:57 p.m.•2 views

@dcdn/client (0.0.1), @dcdn/cloudflare-worker (0.0.1) +5 more potentially affected by CVE-2022-24759 via @chainsafe/libp2p-noise (>=5.0.0, <=5.0.2)

@chainsafe/libp2p-noise NPM version =5.0.0, =1.85.0-next.40, =1.85.0-next.40, =1.85.0-next.40, =1.89.0-next.0 Source cves: CVE-2022-24759 Source advisory: OSV:GHSA-J3FF-XP6C-6GCC...

8.1CVSS7.6AI score0.00499EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/18 8:47 a.m.•4 views

@backstage/plugin-techdocs (>=0.0.0-nightly-20220504024625, <=1.1.1-next.2), @eui/deps-base (>=13.1.5-snapshot-1652433005121, <=14.0.4) potentially affected by unknown CVE via event-source-polyfill (1.0.26)

event-source-polyfill NPM version 1.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on event-source-polyfill and may be impacted: - @backstage/plugin-techdocs =0.0.0-nightly-20220504024625, =13.1.5-snapshot-1652433005121, =14.0.4 Source cves: unknown...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/18 12:01 a.m.•2 views

sails-hook-api-version-accept (0.1.0), sails-hook-route (>=0.0.1, <=0.0.4) potentially affected by CVE-2021-44908 via sails (>=1.0.1, <=1.0.3-2)

sails NPM version =1.0.1, =0.0.1, =0.0.4 Source cves: CVE-2021-44908 Source advisory: OSV:GHSA-8V3J-JFG3-V3FV...

9.8CVSS8.6AI score0.01827EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/18 12:01 a.m.•1 views

@kamilic-pkg/toolbox (>=1.0.0, <=1.1.0), @q7/cli (>=0.0.2, <=0.2.0) +8 more potentially affected by CVE-2022-0748 via post-loader (>=1.1.2, <=2.0.0)

post-loader NPM version =1.1.2, =1.0.0, =0.0.2, =0.0.2, =0.1.0, =0.0.4, =0.0.1, =2.6.21, =0.0.2, =0.0.4 Source cves: CVE-2022-0748 Source advisory: OSV:GHSA-66WW-999Q-MFFQ...

9.8CVSS8.6AI score0.02089EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/18 12:01 a.m.•3 views

10-24-dars (1.0.0), @alephdata/react-ftm (>=1.9.1, <=2.4.0-alpha.2) +205 more potentially affected by CVE-2021-23632 via git (0.1.5)

git NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on git and may be impacted: - 10-24-dars 1.0.0 - @alephdata/react-ftm =1.9.1, =1.5.2, =0.4.120, =1.0.0-alpha.0, =1.1.7, =1.0.1, =0.13.1, =1.12.2, =1.0.0, =2.1.1 -...

9.8CVSS8.6AI score0.0235EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/18 12:01 a.m.•3 views

@cisdi/code-editor (>=3.0.0, <=3.3.10), @cisdi/ui-engine-charts (>=3.2.0, <=3.2.4) +31 more potentially affected by CVE-2021-23771 via notevil (>=1.0.0, <=1.3.3)

notevil NPM version =1.0.0, =3.0.0, =3.2.0, =2.9.0, =1.0.1, =1.0.0, =1.0.0, =0.10.0, =1.5.24, =5.0.0, =3.0.0, =5.2.0, =0.0.1, =0.0.50 and more Source cves: CVE-2021-23771 Source advisory: OSV:GHSA-8G4M-CJM2-96WQ...

6.5CVSS6.4AI score0.01013EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/18 12:01 a.m.•1 views

generator-rest (0.2.0), nodejsamazingenerator (>=1.0.0, <=1.70.60-stable) potentially affected by CVE-2022-25296 via bodymen (1.1.1)

bodymen NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on bodymen and may be impacted: - generator-rest 0.2.0 - nodejsamazingenerator =1.0.0, =1.70.60-stable Source cves: CVE-2022-25296 Source advisory: OSV:GHSA-VHXC-FHM5-QCP9...

7.5CVSS7.4AI score0.00973EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/18 12:01 a.m.•3 views

@superdev-official/buffet-angular (1.0.11), apps-b-builder (>=0.1.0, <=0.4.3) +9 more potentially affected by CVE-2022-25760 via accesslog (0.0.2)

accesslog NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on accesslog and may be impacted: - @superdev-official/buffet-angular 1.0.11 - apps-b-builder =0.1.0, =0.6.0, =3.1.0, =0.1.0, =2.0.0, =0.4.0, =0.1.0, =0.4.1, =0.5.0 Source cves:...

10CVSS8.6AI score0.01639EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/18 12:01 a.m.•1 views

01-numacert (>=1.0.0, <=3.0.0), 06-tekbooks (0.1.0) +46670 more potentially affected by CVE-2021-44906 via minimist (>=0.0.2, <=0.2.1)

minimist NPM version =0.0.2, =1.0.0, =0.3.0, =0.0.15, =1.0.4, =1.0.0, =1.0.0, =1.0.1 - 20190403-utils 1.0.0 - 20231122-npm 1.0.0 and more Source cves: CVE-2021-44906 Source advisory: OSV:GHSA-XVCH-5GV4-984H...

9.8CVSS8.8AI score0.04581EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/18 12:01 a.m.•2 views

0.8.18-p11 (0.8.18-p12), 0.extends.wechat (>=1.0.51, <=1.0.65) +10285 more potentially affected by CVE-2021-44906 via minimist (>=1.0.0, <=1.2.5)

minimist NPM version =1.0.0, =1.0.51, =2.3.0, =0.0.1, =1.0.0, =1.0.0, =0.0.2, =0.3.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.14 and more Source cves: CVE-2021-44906 Source advisory: OSV:GHSA-XVCH-5GV4-984H...

9.8CVSS8.8AI score0.04581EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/17 12:00 a.m.•1 views

@agoric/cosmic-swingset (>=0.15.0, <=0.20.1), @agoric/swing-store-lmdb (>=0.2.0, <=0.3.6-dev.2) +42 more potentially affected by CVE-2022-21164 via node-lmdb (>=0.3.0, <=0.9.6)

node-lmdb NPM version =0.3.0, =0.15.0, =0.2.0, =0.0.7, =0.0.1, =0.2.0, =1.3.0, =0.1.1, =0.1.4, =0.6.2, =0.0.1, =0.1.0, =0.82.0, =0.0.7, =0.0.2, =0.4.2 and more Source cves: CVE-2022-21164 Source advisory: OSV:GHSA-32J9-6QQM-MQ9G...

7.5CVSS5.3AI score0.01321EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/16 11:54 p.m.•2 views

@douglara/n8n-nodes-discord (>=0.5.4, <=0.5.5), @dxos/gravity-agent (>=0.1.19, <=0.3.5-next.5910692) +42 more potentially affected by unknown CVE via node-ipc (11.1.0)

node-ipc NPM version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-ipc and may be impacted: - @douglara/n8n-nodes-discord =0.5.4, =0.1.19, =1.0.2, =0.5.2, =0.5.4-1, =0.5.0, =1.0.0-rc.1, =1.0.0-rc.1, =1.0.0-rc.1, =0.5.0, =0.1.0, =0.1.2 -...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/16 10:47 p.m.•1 views

ferris-rich-input (0.0.1) potentially affected by CVE-2022-24728 +1 more via ckeditor4 (4.14.0)

ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2022-24728, CVE-2022-24729 Source advisory: OSV:GHSA-4FC4-4P5G-6W89...

7.5CVSS6.6AI score0.02487EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/16 12:00 a.m.•4 views

roaring-landmask (0.4.0) potentially affected by CVE-2022-0778 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-0778 Source advisory: OSV:GHSA-X3MH-JVJW-3XWX...

7.5CVSS6.8AI score0.73188EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2022/03/15 1:56 p.m.•5 views

ai.h2o:h2o-clustering (>=3.32.1.1, <=3.44.0.2), ai.h2o:h2o-k8s (>=3.30.0.2, <=3.44.0.2) +216 more potentially affected by CVE-2022-21230 via org.nanohttpd:nanohttpd (>=2.2.0, <=2.3.1)

org.nanohttpd:nanohttpd MAVEN version =2.2.0, =3.32.1.1, =3.30.0.2, =3.34.0.3, =1.0.0, =1.0.0, =1.0.0, =3.8, =1.0, =1.1, =0.2.22, =0.2.22, =0.4.15 and more Source cves: CVE-2022-21230 Source advisory: SNYK:JAVA-ORGNANOHTTPD-2422798...

5.5CVSS5.7AI score0.00289EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/15 12:00 p.m.•3 views

roaring-landmask (0.4.0) potentially affected by CVE-2022-0778 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-0778 Source advisory: OSV:RUSTSEC-2022-0014...

7.5CVSS6.8AI score0.73188EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2022/03/15 12:01 a.m.•1 views

@yeepay/lowcode-engine (>=1.0.0-beta.1, <=2.3.12), @yeepay/lowcode-markdown (>=2.2.0-beta.0, <=2.6.4) potentially affected by CVE-2022-0341 via vditor (3.3.9)

vditor NPM version 3.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on vditor and may be impacted: - @yeepay/lowcode-engine =1.0.0-beta.1, =2.2.0-beta.0, =2.6.4 Source cves: CVE-2022-0341 Source advisory: OSV:GHSA-PQ37-4C4G-V38C...

6.6CVSS6AI score0.00471EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/14 11:22 p.m.•4 views

@hifi/amm (>=1.1.2, <=1.4.0), @hifi/flash-swap (>=1.0.1, <=1.3.1) +6 more potentially affected by unknown CVE via @openzeppelin/contracts-upgradeable (4.2.0)

@openzeppelin/contracts-upgradeable NPM version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/contracts-upgradeable and may be impacted: - @hifi/amm =1.1.2, =1.0.1, =1.1.2, =1.0.0, =0.8.1-pr-brioux-1333.92b26c3a.36, =1.0.5, =2.3.0...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/12 12:00 a.m.•2 views

@egomobile/http-server (>=0.18.0, <=0.23.0), @lyra-network/openapi-dev-tool (>=9.0.0, <=9.5.0) +1 more potentially affected by CVE-2021-46708 via swagger-ui-dist (>=4.0.0-beta.2, <=4.1.2)

swagger-ui-dist NPM version =4.0.0-beta.2, =0.18.0, =9.0.0, =1.3.0-moderate-vulnerability, =24.7.0-moderate-vulnerability Source cves: CVE-2021-46708 Source advisory: OSV:GHSA-6C9X-MJ3G-H47X...

6.1CVSS6.6AI score0.01495EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/12 12:00 a.m.•2 views

@goodrequest/express-joi-to-swagger (0.2.0), swagger-editor (>=4.0.0-beta.0, <=4.0.0-beta.2) potentially affected by CVE-2018-25031 via swagger-ui (>=4.0.0-beta.2, <=4.1.0)

swagger-ui NPM version =4.0.0-beta.2, =4.0.0-beta.0, =4.0.0-beta.2 Source cves: CVE-2018-25031 Source advisory: OSV:GHSA-CR3Q-PQGQ-M8C2...

4.3CVSS6.2AI score0.42326EPSS
SaveExploits4
vulnersOsv
vulnersOsv
•added 2022/03/12 12:00 a.m.•2 views

@cronapp/devops (>=0.0.1, <=0.0.63), @k186/cli-service (>=2.0.8, <=4.2.0) +36 more potentially affected by CVE-2022-24433 via simple-git (>=3.0.3, <=3.2.6)

simple-git NPM version =3.0.3, =0.0.1, =2.0.8, =1.0.3, =2.0.8, =2.0.0, =2.0.0, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.4, =1.0.7, =1.0.3, =1.0.3, =1.0.3, =4.2.0 and more Source cves: CVE-2022-24433 Source advisory: OSV:GHSA-3F95-R44V-8MRG...

9.8CVSS8.3AI score0.03444EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/11 10:58 a.m.•1 views

@fluentui/bundle-size (>=1.1.3, <=1.1.6), @georgs/beachball (2.22.0) +18 more potentially affected by CVE-2022-25865 via workspace-tools (>=0.3.3, <=0.16.2)

workspace-tools NPM version =0.3.3, =1.1.3, =0.0.2, =0.0.2, =1.3.0, =0.1.1, =1.2.0, =1.0.3, =0.1.2, =5.0.0-alpha.0, =5.0.0-alpha.0, =1.48.2, =0.3.0, =1.0.0, =1.0.21 and more Source cves: CVE-2022-25865 Source advisory: SNYK:JS-WORKSPACETOOLS-2421201...

9.8CVSS8.6AI score0.06995EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/11 10:47 a.m.•3 views

@cronapp/devops (>=0.0.1, <=0.0.63), @k186/cli-service (>=2.0.8, <=4.2.0) +36 more potentially affected by CVE-2022-24433 via simple-git (>=3.0.3, <=3.2.6)

simple-git NPM version =3.0.3, =0.0.1, =2.0.8, =1.0.3, =2.0.8, =2.0.0, =2.0.0, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.4, =1.0.7, =1.0.3, =1.0.3, =1.0.3, =4.2.0 and more Source cves: CVE-2022-24433 Source advisory: SNYK:JS-SIMPLEGIT-2421199...

9.8CVSS8.3AI score0.03444EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/08 8:00 p.m.•2 views

abi_stable_derive (>=0.7.0, <=0.8.4), abnf (>=0.10.0, <=0.11.3) +347 more potentially affected by CVE-2022-24713 via regex (>=1.0.2, <=1.5.4)

regex CARGO version =1.0.2, =0.7.0, =0.10.0, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.1, =0.10.0, =0.10.0, =0.1.0, =1.1.0, =1.6.0 and more Source cves: CVE-2022-24713 Source advisory: OSV:GHSA-M5PQ-GVJ9-9VR8...

7.5CVSS6.2AI score0.1446EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/08 12:00 p.m.•5 views

abi_stable_derive (>=0.7.0, <=0.8.4), abnf (>=0.10.0, <=0.11.3) +347 more potentially affected by CVE-2022-24713 via regex (>=1.0.2, <=1.5.4)

regex CARGO version =1.0.2, =0.7.0, =0.10.0, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.1, =0.10.0, =0.10.0, =0.1.0, =1.1.0, =1.6.0 and more Source cves: CVE-2022-24713 Source advisory: OSV:RUSTSEC-2022-0013...

7.5CVSS6.2AI score0.1446EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/07 12:00 a.m.•2 views

@accordproject/cicero-cli (>=0.3.4, <=0.22.3-20220309181854), @accordproject/cicero-common (>=0.3.4, <=0.3.12) +480 more potentially affected by CVE-2022-0868 via urijs (>=1.16.1, <=1.19.9)

urijs NPM version =1.16.1, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.4.5-20180705184508, =0.11.2-20190326183124, =0.10.2-20190213145246, =0.22.2-20210714131804, =0.0.5-20190507210024, =0.71.8-20190915045234, =0.80.2-20190926121100, =0.80.4-20191003231621, =0.61.2-20190916200303, =0.90.1-20200514190616,...

8CVSS6.9AI score0.00719EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/04 12:00 p.m.•4 views

bibjoin (>=0.2.2, <=0.3.0), idhash (0.1.3) +9 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.6.2)

arrow2 CARGO version =0.5.3, =0.2.2, =0.38.0, =0.38.0, =0.39.0 - polars 0.16.0 - polars-arrow 0.16.0 - polars-core 0.16.0 - polars-io 0.16.0 - polars-lazy 0.16.0 - rinfluxdb 0.2.0 - rinfluxdb-polars 0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0012...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/03 7:23 p.m.•1 views

@accordproject/cicero-cli (>=0.3.4, <=0.22.3-20220309181854), @accordproject/cicero-common (>=0.3.4, <=0.3.12) +479 more potentially affected by CVE-2022-24723 via urijs (>=1.16.1, <=1.19.8)

urijs NPM version =1.16.1, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.4.5-20180705184508, =0.11.2-20190326183124, =0.10.2-20190213145246, =0.22.2-20210714131804, =0.0.5-20190507210024, =0.71.8-20190915045234, =0.80.2-20190926121100, =0.80.4-20191003231621, =0.61.2-20190916200303, =0.90.1-20200514190616,...

5.3CVSS6.2AI score0.01995EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/02 1:46 p.m.•1 views

@phoenix-plugin-registry/hirse.ungit (0.8.3), hirse.ungit (>=0.4.1, <=0.8.3) potentially affected by CVE-2022-25766 via ungit (>=1.1.22, <=1.5.10)

ungit NPM version =1.1.22, =0.4.1, =0.8.3 Source cves: CVE-2022-25766 Source advisory: SNYK:JS-UNGIT-2414099...

8.8CVSS8AI score0.34303EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/02 12:00 a.m.•2 views

@asciidoctor/reveal.js (>=5.0.0-rc.1, <=5.0.1), hapi-reveal (4.0.0) +1 more potentially affected by CVE-2022-0776 via reveal.js (>=4.0.2, <=4.2.1)

reveal.js NPM version =4.0.2, =5.0.0-rc.1, =4.0.0-beta.0, =5.3.2 Source cves: CVE-2022-0776 Source advisory: OSV:GHSA-HHQJ-CFJX-VJ25...

6.1CVSS5.6AI score0.03679EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/01 10:09 p.m.•1 views

feling87-nodejs-libs (>=0.0.1, <=0.0.3) potentially affected by CVE-2022-24717 via @finastra/ssr-pages (0.1.3)

@finastra/ssr-pages NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @finastra/ssr-pages and may be impacted: - feling87-nodejs-libs =0.0.1, =0.0.3 Source cves: CVE-2022-24717 Source advisory: OSV:GHSA-7F63-H6G3-7CWM...

6.1CVSS6.2AI score0.00866EPSS
SaveExploits0
Total number of security vulnerabilities10909