alexcrichton-cranelift-native (>=0.52.0, <=0.53.0), alexcrichton-cranelift-simplejit (0.53.0) +153 more potentially affected by CVE-2021-45687 via raw-cpuid (>=3.1.0, <=8.1.2)

raw-cpuid CARGO version =3.1.0, =0.52.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.26.1, =0.6.2, =0.5.0, =0.2.0, =0.5.1 and more Source cves: CVE-2021-45687 Source advisory: OSV:GHSA-W428-F65R-H4Q2...

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +280 more potentially affected by CVE-2021-45688 via ash (>=0.24.4, <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.2.0, =0.1.0, =0.1.3, =0.1.4 - aravis-utils 0.7.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:GHSA-64WV-8VWP-XGW2...

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +182 more potentially affected by CVE-2021-45689 via gfx-auxil (>=0.1.0, <=0.9.0)

gfx-auxil CARGO version =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3 and more Source cves: CVE-2021-45689 Source advisory: OSV:GHSA-FF2R-XPWQ-6WHJ...

airmash-protocol (>=0.2.0, <=0.3.0), altv-core (0.1.0) +246 more potentially affected by CVE-2021-45695 via mopa (0.2.2)

mopa CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on mopa and may be impacted: - airmash-protocol =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =0.6.0, =0.7.0, =0.15.3 and more Source cves:...

ckb-analyzer (0.39.2), ckb-app-config (>=0.37.0-pre, <=0.100.0-rc2) +57 more potentially affected by CVE-2021-45697 via molecule (>=0.2.5, <=0.7.1)

molecule CARGO version =0.2.5, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.40.0, =0.40.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.1.0, =0.37.0-pre, =0.39.1 and more Source cves: CVE-2021-45697 Source advisory: OSV:GHSA-6P3C-V8VC-C244...

tremor-language-server (>=0.7.3, <=0.7.4) potentially affected by CVE-2021-45701 +1 more via tremor-script (0.7.2)

tremor-script CARGO version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on tremor-script and may be impacted: - tremor-language-server =0.7.3, =0.7.4 Source cves: CVE-2021-45701, CVE-2021-45702 Source advisory: OSV:GHSA-Q2X5-6Q7Q-R872...

tremor-language-server (>=0.7.3, <=0.7.4) potentially affected by CVE-2021-45701 +1 more via tremor-script (0.7.2)

tremor-script CARGO version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on tremor-script and may be impacted: - tremor-language-server =0.7.3, =0.7.4 Source cves: CVE-2021-45701, CVE-2021-45702 Source advisory: OSV:GHSA-9QVW-46GF-4FV8...

boringdb (>=0.2.0, <=0.3.10), bp7 (>=0.7.0, <=0.8.1) +19 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)

nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - boringdb =0.2.0, =0.7.0, =0.13.0, =0.4.0, =0.10.0, =0.3.0, =0.3.14, =0.4.2, =0.4.1, =0.6.1, =0.1.0, =0.1.7, =0.2.1 and more Source cves:...

actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:GHSA-CWVC-87XQ-PC5M...

abomonation_derive (>=0.1.0, <=0.5.0), abomonation_derive_ng (0.1.0) +30 more potentially affected by CVE-2021-45708 via abomonation (>=0.4.6, <=0.7.3)

abomonation CARGO version =0.4.6, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.2, =0.1.0, =0.2.0, =0.3.1 and more Source cves: CVE-2021-45708 Source advisory: OSV:GHSA-5VWC-R48G-WJ6C...

acid-store (>=0.8.0, <=0.11.2), alsa (0.5.1) +13 more potentially affected by CVE-2021-45707 via nix (0.21.0)

nix CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on nix and may be impacted: - acid-store =0.8.0, =0.1.4, =0.1.4, =0.1.4, =4.0.0, =0.1.0-alpha.1, =0.1.2, =0.10.0, =1.4.10, =0.13.0-alpha.1, =0.0.8, =0.0.13 Source cves: CVE-2021-4570...

acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1253 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-76W9-P8MG-J927...

aes-keywrap-rs (>=0.1.0, <=0.2.0), shadowsocks (>=1.10.0, <=1.12.3) +1 more potentially affected by CVE-2021-45709 via crypto2 (0.1.2)

crypto2 CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on crypto2 and may be impacted: - aes-keywrap-rs =0.1.0, =1.10.0, =0.1.0, =0.2.5 Source cves: CVE-2021-45709 Source advisory: OSV:GHSA-9HFG-PXR6-Q4VP...

async-http-proxy (>=1.2.1, <=1.2.3), barc-cli (>=2.2.0, <=2.2.1) +9 more potentially affected by CVE-2021-45710 via tokio (>=1.9.0, <=1.12.0)

tokio CARGO version =1.9.0, =1.2.1, =2.2.0, =0.73.0, =2.2.0, =0.2.8, =0.0.1, =0.12.0, =0.13.0 Source cves: CVE-2021-45710 Source advisory: OSV:GHSA-FG7R-2G4J-5CGR...

a2 (>=0.2.0, <=0.5.3), aahc (0.1.0) +6617 more potentially affected by CVE-2021-45710 via tokio (>=0.1.16, <=1.8.1)

tokio CARGO version =0.1.16, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.3, =0.2.0, =0.5.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.2.0 and more Source cves: CVE-2021-45710 Source advisory: OSV:GHSA-FG7R-2G4J-5CGR...

js-data-dao (1.0.0) potentially affected by CVE-2021-23574 via js-data (3.0.0-rc.5)

js-data NPM version 3.0.0-rc.5 is affected by a known vulnerability. The following packages have a transitive dependency on js-data and may be impacted: - js-data-dao 1.0.0 Source cves: CVE-2021-23574 Source advisory: OSV:GHSA-C6H4-GC3F-HGJQ...

@hola.org/har-validator (2.0.6-hola.1), @hola.org/request (>=2.67.0-hola.5, <=2.67.0-hola.6) +46 more potentially affected by CVE-2018-1107 via is-my-json-valid (>=2.10.1, <=2.17.1)

is-my-json-valid NPM version =2.10.1, =2.67.0-hola.5, =2.67.0-lum.3, =1.0.1, =1.2.0, =1.0.0, =0.4.0, =1.0.0, =0.4.1, =0.0.1, =0.0.10 - fsa-creator 0.1.1 - geojsonvalidator 0.0.1 and more Source cves: CVE-2018-1107 Source advisory: OSV:GHSA-4HPF-3WQ7-5RPR...

@aws/nx-plugin (>=0.79.1, <=0.93.1), @gpx/dan (>=1.1.0, <=1.2.0) +34 more potentially affected by CVE-2020-28500 via lodash.trim (4.5.1)

lodash.trim NPM version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.trim and may be impacted: - @aws/nx-plugin =0.79.1, =1.1.0, =0.0.1, =1.6.1, =0.0.1, =1.4.6, =2.4.0, =1.2.0, =1.2.6, =1.5.7, =3.6.0, =7.0.3, =1.7.0, =1.9.6, =3.0.2 and...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +19162 more potentially affected by CVE-2020-28500 via lodash (>=4.0.0, <=4.17.20)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.0.2, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =4.11.20 and more Source cves: CVE-2020-28500 Source advisory: OSV:GHSA-29MW-WPGM-HMR9...

@epam/draft-rte (>=4.0.0--beta.10.0, <=5.7.4), @epam/edu-core-routing (>=3.48.0-beta.1, <=4.6.2-select-all-fix.1) +21 more potentially affected by CVE-2020-28500 via lodash.trimend (>=4.5.0, <=4.5.1)

lodash.trimend NPM version =4.5.0, =4.0.0--beta.10.0, =3.48.0-beta.1, =5.3.0-rc.0, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =4.6.0-alpha.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =5.0.0-alpha.2, =3.48.0-beta.1, =5.0.0-alpha.0, =5.6.23 and more Sourc...

@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +806 more potentially affected by CVE-2020-28500 via lodash-es (>=4.0.0, <=4.17.20)

lodash-es NPM version =4.0.0, =0.0.1-alpha.4, =0.1.10, =0.0.1, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =0.0.1, =3.2.1, =3.2.1, =0.1.0, =0.3.14, =0.4.42 and more Source cves: CVE-2020-28500 Source advisory: OSV:GHSA-29MW-WPGM-HMR9...

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +724 more potentially affected by CVE-2020-8124 via url-parse (>=0.1.5, <=1.4.4)

url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.1.1, =0.0.1, =0.1.0, =0.0.0-4, =0.0.1, =1.2.5, =1.5.0, =0.1.0, =0.1.7 and more Source cves: CVE-2020-8124 Source advisory: OSV:GHSA-46C4-8WRP-J99V...

contentful-import (5.0.2-beta1), http_bouncer_client (>=1.0.1, <=1.0.3) +1 more potentially affected by CVE-2019-10196 via http-proxy-agent (2.0.0)

http-proxy-agent NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy-agent and may be impacted: - contentful-import 5.0.2-beta1 - httpbouncerclient =1.0.1, =1.0.3 - request-light 0.2.2 Source cves: CVE-2019-10196 Source advisor...

@balena/jellyfish-chat-widget (>=0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, <=2.0.0-rendition-notifications-1f10048b0b56657415485386d8bdc09fa8b8ffb0), @balena/jellyfish-ui-components (>=0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, <=2.0.25-add-react-virtualised-to-infinite-list-4e291b52a55f3950254be3ce329926ed26ecc421) +23 more potentially affected by CVE-2021-43861 via mermaid (>=8.4.0, <=8.13.4)

mermaid NPM version =8.4.0, =0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, =0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, =2.0.0-alpha-3d22c22.0, =0.0.3, =0.0.2, =0.0.5, =0.0.29, =0.0.5, =0.8.0, =0.8.0, =0.5.11,...

@0x6368656174/wp-builder (>=1.0.8, <=1.2.1), @beezyinc/dr-svg-sprites-bz (>=0.9.33, <=1.0.4) +145 more potentially affected by CVE-2020-11887 via svg2png (>=4.0.0, <=4.1.1)

svg2png NPM version =4.0.0, =1.0.8, =0.9.33, =0.9.33, =0.0.1, =0.0.1-alpha.44, =0.0.1-alpha.117, =0.0.4, =1.0.0, =2.1.0, =0.0.2, =0.0.10, =2.0.0, =0.0.0-semantically-released, =1.0.7, =1.0.8 and more Source cves: CVE-2020-11887 Source advisory: OSV:GHSA-MPP5-2X55-49XW...

@danitt/analytics-next (1.33.4), @danitt/tsub (>=0.1.10, <=0.1.11) +4 more potentially affected by CVE-2022-25645 via dset (>=3.1.0, <=3.1.1)

dset NPM version =3.1.0, =0.1.10, =0.1.10, =0.8.0, =1.0.0, =1.3.0, =1.3.3 Source cves: CVE-2022-25645 Source advisory: SNYK:JS-DSET-2330881...

@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +11 more potentially affected by CVE-2021-23450 via dojo (>=1.7.11, <=1.16.4)

dojo NPM version =1.7.11, =1.0.0, =4.0.0-alpha.1, =0.0.29, =0.0.1, =1.7.11, =0.1.0, =1.8.13, =1.2.0, =0.3.0-alpha.1, =0.0.1, =0.1.1, =0.1.3 Source cves: CVE-2021-23450 Source advisory: OSV:GHSA-M8GW-HJPR-RJV7...

azoth (0.1.0), azoth-lmdb (>=0.1.0, <=0.2.5) +25 more potentially affected by unknown CVE via lmdb (>=0.7.2, <=0.8.0)

lmdb CARGO version =0.7.2, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.9.3, =0.1.0, =1.3.3, =0.1.0, =0.1.0, =0.5.0, =0.8.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0001...

accesskit_windows (>=0.1.0, <=0.3.0), acid_io (0.1.0) +300 more potentially affected by unknown CVE via windows (>=0.2.1, <=0.30.0)

windows CARGO version =0.2.1, =0.1.0, =0.1.5, =0.2.0, =0.1.0-alpha.1, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0008...

a3mo_lib (>=0.1.0, <=0.1.1), abra (0.0.1) +4423 more potentially affected by unknown CVE via rustc-serialize (>=0.1.5, <=0.3.25)

rustc-serialize CARGO version =0.1.5, =0.1.0, =0.1.7, =0.2.0-beta.4, =0.0.6, =0.1.0, =0.2.1, =0.1.4, =0.1.1, =0.1.0, =0.9.0, =0.1.0, =0.3.3, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0004...

@webiny/api-page-builder (>=0.0.0-mt-1, <=5.21.0), @webiny/api-page-builder-import-export (>=0.0.0-mt-1, <=5.21.0) +5 more potentially affected by CVE-2021-23484 via zip-local (0.3.4)

zip-local NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on zip-local and may be impacted: - @webiny/api-page-builder =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.1.0, =0.0.2, =0.0.7 Source cves: CVE-2021-23484...

adblock (>=0.1.0, <=0.1.18), addr (>=0.1.0, <=0.4.0) +144 more potentially affected by unknown CVE via rental (>=0.2.4, <=0.5.6)

rental CARGO version =0.2.4, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.2.0, =0.12.0, =0.5.0, =0.1.0, =0.7.0, =0.5.0, =0.6.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0134...

a14_cargo_io (0.1.0), abacuz (0.1.1) +1273 more potentially affected by unknown CVE via dotenv (>=0.4.0, <=0.15.0)

dotenv CARGO version =0.4.0, =0.1.0, =0.2.0-beta.4, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.4.0, =0.0.1, =0.1.1, =0.0.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0141...

adiscord (>=0.0.1, <=0.0.3), alpaca-data-api (>=0.1.0, <=0.1.2) +21 more potentially affected by unknown CVE via dotenv_codegen (>=0.7.2, <=0.15.0)

dotenvcodegen CARGO version =0.7.2, =0.0.1, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.2, =0.7.0, =0.1.0, =0.1.0, =0.3.0 - meep 1.0.1 - ncrsdk 0.1.0 - new-rawr 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0142...

5x5_uploader (>=1.0.0, <=1.2.2), @3t-transform/threeteeui (>=0.0.1, <=0.0.6) +249 more potentially affected by CVE-2022-25349 via materialize-css (>=0.96.1, <=1.0.0-rc.1)

materialize-css NPM version =0.96.1, =1.0.0, =0.0.1, =1.0.1, =1.0.3, =1.0.0, =6.1.3, =45.4.6, =0.0.3, =1.0.2, =0.0.4, =0.0.6, =1.0.0, =0.5.0, =0.7.0 and more Source cves: CVE-2022-25349 Source advisory: SNYK:JS-MATERIALIZECSS-2324800...

account-db (0.1.0), akita (>=0.1.0, <=0.4.3) +391 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)

lru CARGO version =0.1.17, =0.1.0, =0.3.0, =0.1.0, =0.1.1, =0.1.1, =2.0.0-alpha.22, =2.0.3, =2.0.3, =2.0.3, =0.28.2, =0.7.2, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-45720 Source advisory: OSV:RUSTSEC-2021-0130...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2022-25767 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.1 Source cves: CVE-2022-25767 Source advisory: SNYK:JAVA-COMBSTEKUREPORT-2322018...

acme-redirect (>=0.1.0, <=0.4.0), actix-auth (0.1.0) +387 more potentially affected by CVE-2020-36846 +1 more via brotli-sys (>=0.1.2, <=0.3.2)

brotli-sys CARGO version =0.1.2, =0.1.0, =0.1.3, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =0.3.0, =0.1.0-alpha.1, =0.1.0, =0.1.0-alpha.1, =3.0.0-beta.18 and more Source cves: CVE-2020-36846, CVE-2020-8927 Source advisory: OSV:RUSTSEC-2021-0131...

@gdyfe/tools (>=1.0.0, <=1.0.10), icetest-test (1.0.1) +6 more potentially affected by CVE-2021-23562 via plupload (>=2.3.2, <=2.3.6)

plupload NPM version =2.3.2, =1.0.0, =1.0.1, =1.0.0, =0.0.28, =0.2.4, =1.0.5, =0.0.0, =0.0.37 Source cves: CVE-2021-23562 Source advisory: OSV:GHSA-RP2C-JRGP-CVR8...

react-here-map-interactive (>=0.0.1, <=0.9.2) potentially affected by CVE-2021-23700 via merge-deep2 (3.0.6)

merge-deep2 NPM version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on merge-deep2 and may be impacted: - react-here-map-interactive =0.0.1, =0.9.2 Source cves: CVE-2021-23700 Source advisory: OSV:GHSA-J28Q-P8WW-CP87...

20190403-utils (1.0.0), @alex_xu/xdb (0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (1.0.0)

extend2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils 1.0.0 - @alexxu/xdb 0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0...

roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:GHSA-MMJF-F5JW-W72Q...

@0xwen/core (>=0.0.1, <=0.0.3), @0xwen/core-v5 (>=0.0.1, <=0.0.3) +128 more potentially affected by CVE-2021-46320 +1 more via @openzeppelin/contracts-upgradeable (>=3.4.0, <=4.3.3)

@openzeppelin/contracts-upgradeable NPM version =3.4.0, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =2.0.0-alpha.1, =3.0.0-alpha0, =2.0.0-alpha.0, =3.0.1-alpha, =1.0.0-beta.0, =1.0.0-beta.0, =1.0.0, =1.0.4 and more Source cves: CVE-2021-46320, CVE-2022-39384 Source advisory: OSV:GHSA-9C22-PWXW-P6HX...

0x-hunter-core (>=1.0.0-33, <=1.0.0-38), 1155-to-20 (>=1.0.0, <=1.0.2) +2816 more potentially affected by CVE-2021-46320 +1 more via @openzeppelin/contracts (>=3.2.0, <=4.4.0)

@openzeppelin/contracts NPM version =3.2.0, =1.0.0-33, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.9.1, =3.24.7, =1.7.2, =3.10.3, =0.0.2, =1.4.1, =1.0.0, =1.0.0-alpha.0, =1.1.0-alpha.0 and more Source cves: CVE-2021-46320, CVE-2022-39384 Source advisory: OSV:GHSA-9C22-PWXW-P6HX...

roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:RUSTSEC-2021-0129...

jsgui-node-file-metadata (0.3.8), jsgui-node-fs2-core (>=0.1.0, <=0.1.5) +7 more potentially affected by CVE-2022-25301 via jsgui-lang-essentials (>=0.3.8, <=0.4.3)

jsgui-lang-essentials NPM version =0.3.8, =0.1.0, =0.1.0, =0.1.0, =0.3.8, =0.3.8, =0.3.35 Source cves: CVE-2022-25301 Source advisory: SNYK:JS-JSGUILANGESSENTIALS-2316897...

norska (>=0.7.0, <=0.8.4), norska-frontend (>=0.7.4, <=0.9.11) +5 more potentially affected by CVE-2020-7642 via lazysizes (>=5.1.1, <=5.2.0)

lazysizes NPM version =5.1.1, =0.7.0, =0.7.4, =0.7.4, =2.1.4, =0.5.2, =0.5.2, =0.7.2 - sov 0.2.4 Source cves: CVE-2020-7642 Source advisory: OSV:GHSA-HG2P-2CVQ-4PPV...

dpd-paypal-ap (>=0.0.1, <=0.0.9), paypal-pay (0.1.1) potentially affected by CVE-2020-7643 via paypal-adaptive (>=0.1.1, <=0.4.2)

paypal-adaptive NPM version =0.1.1, =0.0.1, =0.0.9 - paypal-pay 0.1.1 Source cves: CVE-2020-7643 Source advisory: OSV:GHSA-V3R2-3FP4-RP46...

@fanatic/oracle (>=1.0.0, <=1.3.0), @ghg/amplifier (>=0.0.2, <=0.5.7) +8 more potentially affected by CVE-2020-7609 via node-rules (>=3.2.0, <=4.0.2)

node-rules NPM version =3.2.0, =1.0.0, =0.0.2, =0.0.2, =0.0.13, =0.0.1, =0.0.1, =0.2.7, =0.2.2, =0.2.3 Source cves: CVE-2020-7609 Source advisory: OSV:GHSA-F78F-353M-CF4J...

gossip-object (>=1.0.6, <=2.3.4), gossipdb (>=0.1.1, <=0.1.5) +2 more potentially affected by CVE-2020-7644 via fun-map (3.3.1)

fun-map NPM version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on fun-map and may be impacted: - gossip-object =1.0.6, =0.1.1, =0.0.0, =0.2.0, =1.0.0 Source cves: CVE-2020-7644 Source advisory: OSV:GHSA-P33M-7W7F-GMJ8...