@6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2), @jamesbliss/react-flickity (>=1.0.0, <=1.4.0) +27 more potentially affected by CVE-2019-15608 via yarn (>=1.0.2, <=1.17.3)

yarn NPM version =1.0.2, =1.0.2-6river, =1.0.0, =1.9.9-1, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.0-semantic-release, =1.9.7, =5.0.0-ts.4, =0.0.4, =0.0.14 and more Source cves: CVE-2019-15608 Source advisory: OSV:GHSA-HJXC-462X-X77J...

@alma-oss/vite-plugin-spirit-icons (>=1.1.0, <=2.1.0), @camptocamp/closure-util (>=1.23.0, <=1.27.0) +132 more potentially affected by CVE-2020-7792 via mout (>=1.0.0, <=1.2.2)

mout NPM version =1.0.0, =1.1.0, =1.23.0, =0.12.2, =1.36.0, =0.0.1, =1.0.0, =0.1.1, =0.1.0, =2.94.2, =0.3.0, =0.3.6 and more Source cves: CVE-2020-7792 Source advisory: OSV:GHSA-PC58-WGMC-HFJR...

@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +396 more potentially affected by CVE-2020-7793 via ua-parser-js (>=0.6.2, <=0.7.22)

ua-parser-js NPM version =0.6.2, =1.4.0, =0.16.9, =2018.7.11-0, =2.0.1, =1.0.0-beta.11, =2.0.0-beta.1, =1.9.0, =1.9.0, =1.0.0, =5.0.0, =1.1.3, =2.6.6, =2.7.0 and more Source cves: CVE-2020-7793 Source advisory: OSV:GHSA-394C-5J6W-4XMX...

js-data-dao (1.0.0) potentially affected by CVE-2020-28442 via js-data (3.0.0-rc.5)

js-data NPM version 3.0.0-rc.5 is affected by a known vulnerability. The following packages have a transitive dependency on js-data and may be impacted: - js-data-dao 1.0.0 Source cves: CVE-2020-28442 Source advisory: OSV:GHSA-MQGV-67VX-G4M5...

@6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2), @jamesbliss/react-flickity (>=1.0.0, <=1.4.0) +33 more potentially affected by CVE-2020-8131 via yarn (>=1.0.2, <=1.21.1)

yarn NPM version =1.0.2, =1.0.2-6river, =1.0.0, =1.9.9-1, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.1, =0.0.0-semantic-release, =1.9.7, =1.1.0-beta.0, =11.0.1 and more Source cves: CVE-2020-8131 Source advisory: OSV:GHSA-8MFC-V7WV-P62G...

@ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=2.8.0), @apolitical/apis-client (>=1.0.0, <=1.1.5) +14 more potentially affected by unknown CVE via jsrsasign (>=10.0.0, <=10.1.13)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.2.0, =0.0.11, =9.21.5, =20.12.0, =20.12.0, =1.0.11, =0.1.1, =0.1.10, =0.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H87Q-G2WP-47PJ...

@zambezi/jsbin (3.40.4-ez-bin.5), pin-api (>=1.1.0, <=1.3.1) potentially affected by CVE-2019-10795 via undefsafe (>=2.0.0, <=2.0.1)

undefsafe NPM version =2.0.0, =1.1.0, =1.3.1 Source cves: CVE-2019-10795 Source advisory: OSV:GHSA-332Q-7FF2-57H2...

@nitro/app (>=4.14.2, <=5.2.0), @omneedia/template (>=1.0.0, <=1.0.10) +3 more potentially affected by CVE-2019-10793 via dot-object (>=2.0.0, <=2.1.2)

dot-object NPM version =2.0.0, =4.14.2, =1.0.0, =1.0.0, =1.4.8, =1.5.11 Source cves: CVE-2019-10793 Source advisory: OSV:GHSA-J9CF-PR2X-5273...

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1267 more potentially affected by CVE-2020-36048 via engine.io (>=3.1.0, <=3.5.0)

engine.io NPM version =3.1.0, =4.11.25, =8.25.29, =0.1.53, =5.1.0, =5.1.0, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-36048 Source advisory: OSV:GHSA-J4F2-536G-R55M...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 08cms (1.0.0) +17680 more potentially affected by CVE-2020-24025 via node-sass (>=2.0.0, <=6.0.1)

node-sass NPM version =2.0.0, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages 0.2.0 and more Source cves: CVE-2020-24025 Source advisory: OSV:GHSA-R8F7-9PFQ-MJMV...

@blitzjs/codemod (>=0.0.0-a78bd33-20230114151431, <=0.0.0-turbopack-20240403083540), @theapexlab/ra-data-blitz (0.0.1) +2 more potentially affected by CVE-2022-23631 via blitz (>=0.0.0-a78bd33-20230114151431, <=0.43.0)

blitz NPM version =0.0.0-a78bd33-20230114151431, =0.0.0-a78bd33-20230114151431, =1.0.1, =0.1.0, =0.1.5 Source cves: CVE-2022-23631 Source advisory: OSV:GHSA-5888-FFCR-R425...

@blitzjs/auth (>=2.0.0-alpha.1, <=2.0.0-danger.67), @blitzjs/cli (>=0.40.0-canary.6, <=0.41.2-canary.1) +14 more potentially affected by CVE-2022-23631 via superjson (>=1.1.0, <=1.8.0)

superjson NPM version =1.1.0, =2.0.0-alpha.1, =0.40.0-canary.6, =2.0.0-alpha.30, =0.17.1-canary.0, =0.38.1, =0.38.1, =2.0.0-alpha.1, =2.0.0-alpha.1, =0.17.1-canary.0, =0.0.0-canary-20217313014, =0.0.0-canary-20220114053526, =0.17.1-canary.0, =0.1.0, =0.1.5 and more Source cves: CVE-2022-23631...

@abp/aspnetcore.mvc.ui.theme.basic (>=0.2.1, <=9.1.3), @abp/aspnetcore.mvc.ui.theme.leptonxlite (>=1.0.0-beta.3, <=4.1.3) +425 more potentially affected by unknown CVE via toastr (>=2.0.4, <=2.1.4)

toastr NPM version =2.0.4, =0.2.1, =1.0.0-beta.3, =0.2.3, =4.4.0-rc.1, =0.3.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1-alpha.0, =1.0.9, =0.5.0, =0.0.1, =1.0.0, =1.0.6 - @bycore/aspnetcore.mvc.ui.theme.basic 3.0.5-beta - @bycore/aspnetcore.mvc.ui.theme.shared 3.0.5-beta and more Source cves: unknown CVE...

@aws-crypto/example-browser (>=2.2.0, <=3.1.0), @carlosvillu/tester (>=1.0.0-beta.1, <=1.0.0) +52 more potentially affected by CVE-2021-23495 via karma (>=6.1.1, <=6.3.14)

karma NPM version =6.1.1, =2.2.0, =1.0.0-beta.1, =1.0.0-beta.0, =22.0.0-beta.1, =13.0.0-beta.1, =430.0.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.6.4, =11.0.0-beta.9, =10.21.0, =4.18.0-beta.0, =0.0.0, =0.0.2 and more Source cves: CVE-2021-23495 Source advisory: SNYK:JS-KARMA-2396325...

a4 (>=0.0.2, <=0.0.4), aaa_csv_challenge (0.1.0) +3960 more potentially affected by unknown CVE via structopt (>=0.0.3, <=0.3.26)

structopt CARGO version =0.0.3, =0.0.2, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0104...

create-frourio-app (>=0.15.0, <=0.29.0) potentially affected by CVE-2022-23623 via frourio (>=0.18.2, <=0.25.1)

frourio NPM version =0.18.2, =0.15.0, =0.29.0 Source cves: CVE-2022-23623 Source advisory: OSV:GHSA-8XXM-H73R-GHFJ...

@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2020-8136 +1 more via fastify-multipart (>=5.2.1, <=5.3.0)

fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2020-8136, CVE-2021-23597 Source advisory: SNYK:JS-FASTIFYMULTIPART-2395480...

4pm-cli (>=0.0.1, <=0.0.5), 7ghost (>=4.11.0, <=4.11.46) +2954 more potentially affected by CVE-2022-21803 via nconf (>=0.1.14, <=0.11.3)

nconf NPM version =0.1.14, =0.0.1, =4.11.0, =0.0.1, =0.8.7, =3.6.0-beta.3, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =3.0.0, =1.1.0, =2.0.4, =1.0.0, =1.2.10 - @algtools/leetcode-cli 1.0.0 and more Source cves: CVE-2022-21803 Source advisory: SNYK:JS-NCONF-2395478...

@aws-crypto/example-browser (>=2.2.0, <=3.1.0), @carlosvillu/tester (>=1.0.0-beta.1, <=1.0.0) +51 more potentially affected by CVE-2022-0437 via karma (>=6.1.1, <=6.3.13)

karma NPM version =6.1.1, =2.2.0, =1.0.0-beta.1, =1.0.0-beta.0, =22.0.0-beta.1, =13.0.0-beta.1, =430.0.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.6.4, =11.0.0-beta.9, =10.21.0, =4.18.0-beta.0, =0.0.0, =0.0.2 and more Source cves: CVE-2022-0437 Source advisory: OSV:GHSA-7X7C-QM48-PQ9C...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +5191 more potentially affected by CVE-2022-23639 via crossbeam-utils (>=0.1.0, <=0.7.2)

crossbeam-utils CARGO version =0.1.0, =0.2.0, =0.5.3, =0.4.0, =0.2.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.1 and more Source cves: CVE-2022-23639 Source advisory: OSV:RUSTSEC-2022-0041...

4337-snap (>=0.1.0, <=0.1.1), @1inch/limit-order-protocol-contract (>=4.0.0-prerelease, <=4.3.3) +240 more potentially affected by CVE-2021-46320 +1 more via @openzeppelin/contracts (>=4.0.0, <=4.4.0)

@openzeppelin/contracts NPM version =4.0.0, =0.1.0, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =0.1.0, =0.3.0, =0.0.2, =0.0.1, =0.0.1, =1.0.0, =0.0.28, =0.4.1, =0.7.5 - @biconomy-devx/paymasters 1.0.0 and more Source cves: CVE-2021-46320, CVE-2022-39384 Source advisory: OSV:GHSA-88G8-F5MF-F5...

express-check-introspection-key (1.0.0), leapfin-exercise (>=1.0.0, <=1.1.1) +1 more potentially affected by CVE-2022-25872 via fast-string-search (1.4.4)

fast-string-search NPM version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-string-search and may be impacted: - express-check-introspection-key 1.0.0 - leapfin-exercise =1.0.0, =0.0.1, =0.0.2-beta.0 Source cves: CVE-2022-25872 Source...

express-check-introspection-key (1.0.0), leapfin-exercise (>=1.0.0, <=1.1.1) +1 more potentially affected by CVE-2022-22138 via fast-string-search (1.4.4)

fast-string-search NPM version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-string-search and may be impacted: - express-check-introspection-key 1.0.0 - leapfin-exercise =1.0.0, =0.0.1, =0.0.2-beta.0 Source cves: CVE-2022-22138 Source...

@abeai/job-consumer (>=3.5.0, <=3.7.0), @abeai/node-logging (>=7.5.0, <=7.10.0) +15 more potentially affected by CVE-2022-25852 via pg-native (3.0.0)

pg-native NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pg-native and may be impacted: - @abeai/job-consumer =3.5.0, =7.5.0, =6.3.0, =1.1.1, =0.0.1, =10.0.0, =10.0.0, =1.0.0, =1.0.0, =1.3.1, =1.0.0-alpha, =2.0.4, =3.0.5 and more...

pg-native (>=1.0.0, <=1.7.2) potentially affected by CVE-2022-25852 via libpq (>=1.0.0, <=1.4.1)

libpq NPM version =1.0.0, =1.0.0, =1.7.2 Source cves: CVE-2022-25852 Source advisory: SNYK:JS-LIBPQ-2392366...

@tutor/jailed-sandbox (>=0.2.0, <=0.2.1), @tutor/markdown2html (>=0.1.2, <=0.2.3) +4 more potentially affected by CVE-2022-23923 via jailed (>=0.2.0, <=0.3.1)

jailed NPM version =0.2.0, =0.2.0, =0.1.2, =1.0.0, =0.0.1, =0.1.13, =2.0.0, =3.1.9 Source cves: CVE-2022-23923 Source advisory: SNYK:JS-JAILED-2391490...

@mohamed.abdelall/omni-backend (>=1.0.0, <=1.1.53), generator-rest (0.2.0) +7 more potentially affected by CVE-2020-7600 +1 more via querymen (2.1.4)

querymen NPM version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on querymen and may be impacted: - @mohamed.abdelall/omni-backend =1.0.0, =0.0.1, =1.0.0, =1.0.0, =0.1.0, =1.0.14, =1.0.6, =1.4.10 - vulnogram 0.1.0-rc1 Source cves: CVE-2020-7600,...

a2kit (>=0.1.0, <=2.0.6), actions-github (>=0.0.2, <=0.1.0) +683 more potentially affected by unknown CVE via json (>=0.3.4, <=0.12.4)

json CARGO version =0.3.4, =0.1.0, =0.0.2, =0.0.1, =0.1.0, =7.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.9.0, =1.0.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0081...

bmoor-cache (>=0.3.0, <=0.6.0), bmoor-comm (>=0.0.1, <=0.6.0) +7 more potentially affected by CVE-2021-23558 via bmoor (>=0.0.5, <=0.9.8)

bmoor NPM version =0.0.5, =0.3.0, =0.0.1, =0.5.0, =0.2.0, =0.1.0, =0.0.4, =0.6.0, =0.6.43 Source cves: CVE-2021-23558 Source advisory: OSV:GHSA-4M8H-H59M-M34J...

@webiny/api-page-builder (>=0.0.0-mt-1, <=5.21.0), @webiny/api-page-builder-import-export (>=0.0.0-mt-1, <=5.21.0) +5 more potentially affected by CVE-2021-23484 via zip-local (0.3.4)

zip-local NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on zip-local and may be impacted: - @webiny/api-page-builder =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.1.0, =0.0.2, =0.0.7 Source cves: CVE-2021-23484...

entfrm-bpmn (>=8.6.2, <=8.6.6), entfrm-flowable-designer (>=1.0.0, <=1.2.6) +4 more potentially affected by CVE-2021-23460 via min-dash (3.5.2)

min-dash NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on min-dash and may be impacted: - entfrm-bpmn =8.6.2, =1.0.0, =2.2.0, =1.0.0, =1.1.3 Source cves: CVE-2021-23460 Source advisory: OSV:GHSA-2M53-83F3-562J...

7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +196 more potentially affected by CVE-2022-21227 via sqlite3 (>=5.0.0, <=5.0.2)

sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =0.1.3-alpha.0, =0.1.19-alpha.0, =0.1.11-alpha.0, =0.1.3-alpha.0, =7.0.0-alpha.18, =7.3.8 and more Source cves: CVE-2022-21227 Source advisory: SNYK:JS-SQLITE3-2388645...

1664 (>=0.2.1, <=0.2.3), @aeternity/aepp-sdk (0.25.0-0.1.0) +272 more potentially affected by CVE-2022-25324 via bignum (>=0.4.1, <=0.13.1)

bignum NPM version =0.4.1, =0.2.1, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =0.4.3, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.1.0 and more Source cves: CVE-2022-25324 Source advisory: SNYK:JS-BIGNUM-2388581...

123-x-ed-eied (>=1.0.5, <=1.0.6), @andrydharmawan/component-react (>=1.1.1, <=1.1.4) +111 more potentially affected by CVE-2022-21721 via next (>=12.0.0, <=12.0.8)

next NPM version =12.0.0, =1.0.5, =1.1.1, =0.0.41, =2.0.2, =2.0.1, =0.0.5, =1.9.6, =1.0.2, =0.0.0-34, =0.0.15, =1.1.0 and more Source cves: CVE-2022-21721 Source advisory: OSV:GHSA-WR66-VRWM-5G5X...

gemachain-bpf-loader-program (1.8.0), solana-bpf-loader-program (1.8.7) +1 more potentially affected by CVE-2021-46102 via solana_rbpf (>=0.2.14, <=0.2.16)

solanarbpf CARGO version =0.2.14, =0.1.8, =0.1.9 Source cves: CVE-2021-46102 Source advisory: OSV:GHSA-XWQR-XMGG-J69Q...

@garment/plugin-runner-publish (>=0.13.7, <=0.18.0), bower-npm-resolver (0.11.0) +4 more potentially affected by CVE-2022-0355 via simple-get (3.0.3)

simple-get NPM version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on simple-get and may be impacted: - @garment/plugin-runner-publish =0.13.7, =3.2.4, =2.0.3, =2.0.5 Source cves: CVE-2022-0355 Source advisory: OSV:GHSA-WPG7-2C88-R8XV...

high-availability-object-storage (0.1.8), saz-tools (>=0.0.10, <=0.0.17) potentially affected by CVE-2022-0355 via simple-get (4.0.0)

simple-get NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on simple-get and may be impacted: - high-availability-object-storage 0.1.8 - saz-tools =0.0.10, =0.0.17 Source cves: CVE-2022-0355 Source advisory: OSV:GHSA-WPG7-2C88-R8XV...

azure-msi-blob (0.0.1), cljsbuild (>=0.0.5, <=0.1.0) +13 more potentially affected by CVE-2022-0355 via simple-get (>=2.0.0, <=2.7.1)

simple-get NPM version =2.0.0, =0.0.5, =1.0.0, =0.5.0, =2.0.0, =0.2.1, =0.1.0, =1.0.0, =2.0.2 - strava-activities-stream 1.0.0 - strava-me 1.0.0 - strava-segment-efforts 1.0.0 - was-unpublished 1.0.1 Source cves: CVE-2022-0355 Source advisory: OSV:GHSA-WPG7-2C88-R8XV...

@yeepay/lowcode-engine (>=1.0.0-beta.1, <=2.3.12), @yeepay/lowcode-markdown (>=2.2.0-beta.0, <=2.6.4) potentially affected by CVE-2021-4103 via vditor (3.3.9)

vditor NPM version 3.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on vditor and may be impacted: - @yeepay/lowcode-engine =1.0.0-beta.1, =2.2.0-beta.0, =2.6.4 Source cves: CVE-2021-4103 Source advisory: OSV:GHSA-CXM3-V4MV-6MH8...

@cisdi/code-editor (>=3.0.0, <=3.3.10), @cisdi/ui-engine-charts (>=3.2.0, <=3.2.4) +32 more potentially affected by CVE-2021-23771 via notevil (>=0.8.1, <=1.3.3)

notevil NPM version =0.8.1, =3.0.0, =3.2.0, =2.9.0, =1.0.1, =1.0.0, =1.0.0, =0.10.0, =1.5.24, =5.0.0, =3.0.0, =5.2.0, =0.0.1, =0.0.50 and more Source cves: CVE-2021-23771 Source advisory: SNYK:JS-NOTEVIL-2385946...

colorcat (>=0.0.2, <=0.2.10), karg (0.1.2) +10 more potentially affected by CVE-2020-7618 +1 more via sds (>=1.14.1, <=4.4.0)

sds NPM version =1.14.1, =0.0.2, =0.2.2, =0.55.1, =1.0.0, =0.0.1, =0.1.1, =0.0.1, =1.0.3, =0.4.16, =0.1.1, =1.0.1, =1.0.2 Source cves: CVE-2020-7618, CVE-2022-25862 Source advisory: SNYK:JS-SDS-2385944...

@stackstorm/st2-build (>=2.3.1, <=2.4.3), ccxt-without-theocean (1.18.151) +3 more potentially affected by CVE-2021-23518 via cached-path-relative (1.0.2)

cached-path-relative NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cached-path-relative and may be impacted: - @stackstorm/st2-build =2.3.1, =1.0.0, =1.18.173, =1.18.242 Source cves: CVE-2021-23518 Source advisory:...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +11 more potentially affected by CVE-2021-23631 via convert-svg-to-png (>=0.3.3, <=0.4.0)

convert-svg-to-png NPM version =0.3.3, =0.0.1, =0.0.18, =0.1.6, =0.0.1, =1.0.3, =0.0.1, =0.0.3, =1.0.0, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.2 - xd2svg 0.8.0 Source cves: CVE-2021-23631 Source advisory: OSV:GHSA-JV7G-9G6Q-CXVW...

brander (>=0.1.6, <=0.1.9), chin-plugin-convert-svg (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2021-23631 via convert-svg-to-jpeg (>=0.3.3, <=0.4.0)

convert-svg-to-jpeg NPM version =0.3.3, =0.1.6, =0.0.1, =0.0.3, =1.1.3 - xd2svg 0.8.0 Source cves: CVE-2021-23631 Source advisory: OSV:GHSA-JV7G-9G6Q-CXVW...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +13 more potentially affected by CVE-2021-23631 via convert-svg-core (>=0.3.3, <=0.4.0)

convert-svg-core NPM version =0.3.3, =0.0.1, =0.0.18, =0.1.6, =0.0.1, =0.3.0, =0.3.0, =1.0.3, =0.0.1, =0.0.3, =1.0.0, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.2 - xd2svg 0.8.0 Source cves: CVE-2021-23631 Source advisory: OSV:GHSA-JV7G-9G6Q-CXVW...

a2 (>=0.3.6, <=0.5.0-alpha.1), abci-storage (0.0.3) +1467 more potentially affected by unknown CVE via owning_ref (>=0.1.4, <=0.4.1)

owningref CARGO version =0.1.4, =0.3.6, =0.1.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0040...

buster (0.1.0), glog (0.1.0) +4 more potentially affected by unknown CVE via thread_local (1.0.1)

threadlocal CARGO version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on threadlocal and may be impacted: - buster 0.1.0 - glog 0.1.0 - simconnect 0.1.4 - skia-bindings =0.37.0, =0.37.0, =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory:...

bme280-multibus (>=0.1.0, <=0.2.1), eeprom25aa02e48 (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via ftd2xx-embedded-hal (>=0.1.0, <=0.9.1)

ftd2xx-embedded-hal CARGO version =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0005...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +2002 more potentially affected by CVE-2021-23566 via nanoid (>=3.0.0, <=3.1.30)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.3, =1.0.0, =0.1.1-alpha.51, =0.0.20, =1.0.1, =0.0.1, =0.4.2, =0.4.11 - @agrippa-io/node-connection-manager 1.0.0 and more Source cves: CVE-2021-23566 Source advisory: OSV:GHSA-QRPM-P2H7-HRV2...

4i18n-cli (>=0.0.2, <=0.0.7), @2060.io/credo-ts-didcomm-media-sharing (>=0.0.2, <=0.0.3) +1091 more potentially affected by CVE-2022-0235 via node-fetch (>=3.0.0, <=3.1.0)

node-fetch NPM version =3.0.0, =0.0.2, =0.0.2, =0.0.4, =0.0.0-alpha.117, =0.0.0-alpha.117, =0.0.0-alpha.119, =1.2.1-dev.3, =1.2.1-dev.3, =1.2.1-dev.3, =1.0.0, =2.0.0-beta.0, =2.0.0-beta.1 and more Source cves: CVE-2022-0235 Source advisory: OSV:GHSA-R683-J2X4-V87G...