@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1559 more potentially affected by CVE-2019-20922 via handlebars (>=4.0.0, <=4.4.3)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: CVE-2019-20922 Source advisory: OSV:GHSA-62GR-4QP9-H98F...

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1579 more potentially affected by CVE-2019-20920 via handlebars (>=4.0.0, <=4.5.2)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: CVE-2019-20920 Source advisory: OSV:GHSA-3CQR-58RM-57F8...

@behance/istanbul (0.3.17-sourcemap), @bigcommerce/stencil-paper (>=2.0.15, <=2.0.25) +220 more potentially affected by CVE-2019-20920 via handlebars (>=3.0.0, <=3.0.7)

handlebars NPM version =3.0.0, =2.0.15, =0.4.0, =0.0.60-IE, =1.3.1, =1.0.4, =0.11.0, =0.0.1, =0.0.5, =0.0.6, =1.2.0, =0.1.0, =0.4.9 and more Source cves: CVE-2019-20920 Source advisory: OSV:GHSA-3CQR-58RM-57F8...

cloudron-manifestformat (>=5.0.0, <=5.10.1) potentially affected by CVE-2020-7737 via safetydance (1.0.0)

safetydance NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on safetydance and may be impacted: - cloudron-manifestformat =5.0.0, =5.10.1 Source cves: CVE-2020-7737 Source advisory: OSV:GHSA-6M85-WVCR-PGW3...

config3 (1.1.0) potentially affected by CVE-2020-7751 via pathval (1.1.0)

pathval NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pathval and may be impacted: - config3 1.1.0 Source cves: CVE-2020-7751 Source advisory: OSV:GHSA-G6WW-V8XP-VMWG...

@jatahworx/bhive-core (>=6.2.0-beta.0, <=7.1.0), aext-scripts (>=0.23.1, <=1.0.7) +6 more potentially affected by CVE-2019-15609 via kill-port-process (2.1.0)

kill-port-process NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on kill-port-process and may be impacted: - @jatahworx/bhive-core =6.2.0-beta.0, =0.23.1, =0.0.1, =0.0.1-test.0, =0.0.30, =0.0.29, =0.0.1, =1.5.0 Source cves: CVE-2019-156...

@wulechuan/generate-html-via-markdown (>=3.0.0, <=3.0.1), norska (>=0.6.0, <=0.16.0) +3 more potentially affected by CVE-2020-7773 via markdown-it-highlightjs (>=3.0.0, <=3.3.0)

markdown-it-highlightjs NPM version =3.0.0, =3.0.0, =0.6.0, =0.6.0, =0.2.2, =0.2.4 Source cves: CVE-2020-7773 Source advisory: OSV:GHSA-F246-XRRJ-G8J6...

@amphro/streamer (>=0.0.0, <=1.0.1), @appirio/demo-scoped-pkg (>=2.4.1, <=2.8.0) +297 more potentially affected by CVE-2020-7777 via jsen (>=0.1.2, <=0.6.6)

jsen NPM version =0.1.2, =0.0.0, =2.4.1, =0.5.9, =0.1.0, =1.0.0, =0.6.9, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc5, =2.2.3, =0.0.1, =0.1.0, =0.0.7, =1.4.0, =13.6.18 and more Source cves: CVE-2020-7777 Source advisory: OSV:GHSA-VM64-CFQX-3698...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42426 more potentially affected by CVE-2022-0536 via follow-redirects (>=1.0.0, <=1.14.7)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0536 Source advisory: OSV:GHSA-PW2R-VQ6V-HR8C...

@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +25 more potentially affected by CVE-2020-7778 via systeminformation (>=4.0.9, <=4.27.11)

systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =1.2.3 - @hnordt/sysinfo 0.1.1 and more Source cves:...

@3yourmind/yoco (0.0.2-beta.3), @auto-canary/gh-pages (>=9.16.7-canary.0.b718636d.0, <=11.3.0--canary.2478.87bcf4d47797ed8cc7152538b86fd742d8d19462.0) +7 more potentially affected by CVE-2019-10803 via push-dir (0.4.1)

push-dir NPM version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on push-dir and may be impacted: - @3yourmind/yoco 0.0.2-beta.3 - @auto-canary/gh-pages =9.16.7-canary.0.b718636d.0, =9.17.0, =1.0.0, =0.0.16, =0.0.37, =0.0.1, =0.1.1, =0.7.12 Sour...

@6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2), @jamesbliss/react-flickity (>=1.0.0, <=1.4.0) +27 more potentially affected by CVE-2019-15608 via yarn (>=1.0.2, <=1.17.3)

yarn NPM version =1.0.2, =1.0.2-6river, =1.0.0, =1.9.9-1, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.0-semantic-release, =1.9.7, =5.0.0-ts.4, =0.0.4, =0.0.14 and more Source cves: CVE-2019-15608 Source advisory: OSV:GHSA-HJXC-462X-X77J...

@alma-oss/vite-plugin-spirit-icons (>=1.1.0, <=2.1.0), @camptocamp/closure-util (>=1.23.0, <=1.27.0) +132 more potentially affected by CVE-2020-7792 via mout (>=1.0.0, <=1.2.2)

mout NPM version =1.0.0, =1.1.0, =1.23.0, =0.12.2, =1.36.0, =0.0.1, =1.0.0, =0.1.1, =0.1.0, =2.94.2, =0.3.0, =0.3.6 and more Source cves: CVE-2020-7792 Source advisory: OSV:GHSA-PC58-WGMC-HFJR...

@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +395 more potentially affected by CVE-2020-7793 via ua-parser-js (>=0.6.2, <=0.7.22)

ua-parser-js NPM version =0.6.2, =1.4.0, =0.16.9, =2018.7.11-0, =2.0.1, =1.0.0-beta.11, =2.0.0-beta.1, =1.9.0, =1.9.0, =1.0.0, =5.0.0, =1.1.3, =2.6.6, =2.7.0 and more Source cves: CVE-2020-7793 Source advisory: OSV:GHSA-394C-5J6W-4XMX...

js-data-dao (1.0.0) potentially affected by CVE-2020-28442 via js-data (3.0.0-rc.5)

js-data NPM version 3.0.0-rc.5 is affected by a known vulnerability. The following packages have a transitive dependency on js-data and may be impacted: - js-data-dao 1.0.0 Source cves: CVE-2020-28442 Source advisory: OSV:GHSA-MQGV-67VX-G4M5...

@6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2), @jamesbliss/react-flickity (>=1.0.0, <=1.4.0) +33 more potentially affected by CVE-2020-8131 via yarn (>=1.0.2, <=1.21.1)

yarn NPM version =1.0.2, =1.0.2-6river, =1.0.0, =1.9.9-1, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.1, =0.0.0-semantic-release, =1.9.7, =1.1.0-beta.0, =11.0.1 and more Source cves: CVE-2020-8131 Source advisory: OSV:GHSA-8MFC-V7WV-P62G...

@ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=2.8.0), @apolitical/apis-client (>=1.0.0, <=1.1.5) +13 more potentially affected by unknown CVE via jsrsasign (>=10.0.0, <=10.1.13)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.2.0, =0.0.11, =9.21.5, =20.12.0, =1.0.11, =0.1.1, =0.1.10, =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-H87Q-G2WP-47PJ...

@zambezi/jsbin (3.40.4-ez-bin.5), pin-api (>=1.1.0, <=1.3.1) potentially affected by CVE-2019-10795 via undefsafe (>=2.0.0, <=2.0.1)

undefsafe NPM version =2.0.0, =1.1.0, =1.3.1 Source cves: CVE-2019-10795 Source advisory: OSV:GHSA-332Q-7FF2-57H2...

@nitro/app (>=4.14.2, <=5.2.0), @omneedia/template (>=1.0.0, <=1.0.10) +3 more potentially affected by CVE-2019-10793 via dot-object (>=2.0.0, <=2.1.2)

dot-object NPM version =2.0.0, =4.14.2, =1.0.0, =1.0.0, =1.4.8, =1.5.11 Source cves: CVE-2019-10793 Source advisory: OSV:GHSA-J9CF-PR2X-5273...

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1266 more potentially affected by CVE-2020-36048 via engine.io (>=3.1.0, <=3.5.0)

engine.io NPM version =3.1.0, =4.11.25, =8.25.29, =0.1.53, =5.1.0, =5.1.0, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-36048 Source advisory: OSV:GHSA-J4F2-536G-R55M...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 08cms (1.0.0) +17666 more potentially affected by CVE-2020-24025 via node-sass (>=2.0.0, <=6.0.1)

node-sass NPM version =2.0.0, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages 0.2.0 and more Source cves: CVE-2020-24025 Source advisory: OSV:GHSA-R8F7-9PFQ-MJMV...

@blitzjs/codemod (>=0.0.0-a78bd33-20230114151431, <=0.0.0-turbopack-20240403083540), @theapexlab/ra-data-blitz (0.0.1) +2 more potentially affected by CVE-2022-23631 via blitz (>=0.0.0-a78bd33-20230114151431, <=0.43.0)

blitz NPM version =0.0.0-a78bd33-20230114151431, =0.0.0-a78bd33-20230114151431, =1.0.1, =0.1.0, =0.1.5 Source cves: CVE-2022-23631 Source advisory: OSV:GHSA-5888-FFCR-R425...

@blitzjs/auth (>=2.0.0-alpha.1, <=2.0.0-danger.67), @blitzjs/cli (>=0.40.0-canary.6, <=0.41.2-canary.1) +14 more potentially affected by CVE-2022-23631 via superjson (>=1.1.0, <=1.8.0)

superjson NPM version =1.1.0, =2.0.0-alpha.1, =0.40.0-canary.6, =2.0.0-alpha.30, =0.17.1-canary.0, =0.38.1, =0.38.1, =2.0.0-alpha.1, =2.0.0-alpha.1, =0.17.1-canary.0, =0.0.0-canary-20217313014, =0.0.0-canary-20220114053526, =0.17.1-canary.0, =0.1.0, =0.1.5 and more Source cves: CVE-2022-23631...

@abp/aspnetcore.mvc.ui.theme.basic (>=0.2.1, <=9.1.3), @abp/aspnetcore.mvc.ui.theme.leptonxlite (>=1.0.0-beta.3, <=4.1.3) +425 more potentially affected by unknown CVE via toastr (>=2.0.4, <=2.1.4)

toastr NPM version =2.0.4, =0.2.1, =1.0.0-beta.3, =0.2.3, =4.4.0-rc.1, =0.3.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1-alpha.0, =1.0.9, =0.5.0, =0.0.1, =1.0.0, =1.0.6 - @bycore/aspnetcore.mvc.ui.theme.basic 3.0.5-beta - @bycore/aspnetcore.mvc.ui.theme.shared 3.0.5-beta and more Source cves: unknown CVE...

@aws-crypto/example-browser (>=2.2.0, <=3.1.0), @carlosvillu/tester (>=1.0.0-beta.1, <=1.0.0) +52 more potentially affected by CVE-2021-23495 via karma (>=6.1.1, <=6.3.14)

karma NPM version =6.1.1, =2.2.0, =1.0.0-beta.1, =1.0.0-beta.0, =22.0.0-beta.1, =13.0.0-beta.1, =430.0.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.6.4, =11.0.0-beta.9, =10.21.0, =4.18.0-beta.0, =0.0.0, =0.0.2 and more Source cves: CVE-2021-23495 Source advisory: SNYK:JS-KARMA-2396325...

a4 (>=0.0.2, <=0.0.4), aaa_csv_challenge (0.1.0) +3960 more potentially affected by unknown CVE via structopt (>=0.0.3, <=0.3.26)

structopt CARGO version =0.0.3, =0.0.2, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0104...

create-frourio-app (>=0.15.0, <=0.29.0) potentially affected by CVE-2022-23623 via frourio (>=0.18.2, <=0.25.1)

frourio NPM version =0.18.2, =0.15.0, =0.29.0 Source cves: CVE-2022-23623 Source advisory: OSV:GHSA-8XXM-H73R-GHFJ...

@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2020-8136 +1 more via fastify-multipart (>=5.2.1, <=5.3.0)

fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2020-8136, CVE-2021-23597 Source advisory: SNYK:JS-FASTIFYMULTIPART-2395480...

4pm-cli (>=0.0.1, <=0.0.5), 7ghost (>=4.11.0, <=4.11.46) +2954 more potentially affected by CVE-2022-21803 via nconf (>=0.1.14, <=0.11.3)

nconf NPM version =0.1.14, =0.0.1, =4.11.0, =0.0.1, =0.8.7, =3.6.0-beta.3, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =3.0.0, =1.1.0, =2.0.4, =1.0.0, =1.2.10 - @algtools/leetcode-cli 1.0.0 and more Source cves: CVE-2022-21803 Source advisory: SNYK:JS-NCONF-2395478...

@aws-crypto/example-browser (>=2.2.0, <=3.1.0), @carlosvillu/tester (>=1.0.0-beta.1, <=1.0.0) +51 more potentially affected by CVE-2022-0437 via karma (>=6.1.1, <=6.3.13)

karma NPM version =6.1.1, =2.2.0, =1.0.0-beta.1, =1.0.0-beta.0, =22.0.0-beta.1, =13.0.0-beta.1, =430.0.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.6.4, =11.0.0-beta.9, =10.21.0, =4.18.0-beta.0, =0.0.0, =0.0.2 and more Source cves: CVE-2022-0437 Source advisory: OSV:GHSA-7X7C-QM48-PQ9C...

a2 (>=0.2.0, <=0.5.0-alpha.7), abci (>=0.5.3, <=0.7.1) +5191 more potentially affected by CVE-2022-23639 via crossbeam-utils (>=0.1.0, <=0.7.2)

crossbeam-utils CARGO version =0.1.0, =0.2.0, =0.5.3, =0.4.0, =0.2.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.0, =0.4.0, =0.1.0, =0.1.1 and more Source cves: CVE-2022-23639 Source advisory: OSV:RUSTSEC-2022-0041...

4337-snap (>=0.1.0, <=0.1.1), @1inch/limit-order-protocol-contract (>=4.0.0-prerelease, <=4.3.3) +240 more potentially affected by CVE-2021-46320 +1 more via @openzeppelin/contracts (>=4.0.0, <=4.4.0)

@openzeppelin/contracts NPM version =4.0.0, =0.1.0, =4.0.0-prerelease, =4.0.1-alpha, =2.0.0-beta.1, =0.1.0, =0.3.0, =0.0.2, =0.0.1, =0.0.1, =1.0.0, =0.0.28, =0.4.1, =0.7.5 - @biconomy-devx/paymasters 1.0.0 and more Source cves: CVE-2021-46320, CVE-2022-39384 Source advisory: OSV:GHSA-88G8-F5MF-F5...

express-check-introspection-key (1.0.0), leapfin-exercise (>=1.0.0, <=1.1.1) +1 more potentially affected by CVE-2022-25872 via fast-string-search (1.4.4)

fast-string-search NPM version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-string-search and may be impacted: - express-check-introspection-key 1.0.0 - leapfin-exercise =1.0.0, =0.0.1, =0.0.2-beta.0 Source cves: CVE-2022-25872 Source...

express-check-introspection-key (1.0.0), leapfin-exercise (>=1.0.0, <=1.1.1) +1 more potentially affected by CVE-2022-22138 via fast-string-search (1.4.4)

fast-string-search NPM version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-string-search and may be impacted: - express-check-introspection-key 1.0.0 - leapfin-exercise =1.0.0, =0.0.1, =0.0.2-beta.0 Source cves: CVE-2022-22138 Source...

pg-native (>=1.0.0, <=1.7.2) potentially affected by CVE-2022-25852 via libpq (>=1.0.0, <=1.4.1)

libpq NPM version =1.0.0, =1.0.0, =1.7.2 Source cves: CVE-2022-25852 Source advisory: SNYK:JS-LIBPQ-2392366...

@abeai/job-consumer (>=3.5.0, <=3.7.0), @abeai/node-logging (>=7.5.0, <=7.10.0) +15 more potentially affected by CVE-2022-25852 via pg-native (3.0.0)

pg-native NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pg-native and may be impacted: - @abeai/job-consumer =3.5.0, =7.5.0, =6.3.0, =1.1.1, =0.0.1, =10.0.0, =10.0.0, =1.0.0, =1.0.0, =1.3.1, =1.0.0-alpha, =2.0.4, =3.0.5 and more...

@tutor/jailed-sandbox (>=0.2.0, <=0.2.1), @tutor/markdown2html (>=0.1.2, <=0.2.3) +4 more potentially affected by CVE-2022-23923 via jailed (>=0.2.0, <=0.3.1)

jailed NPM version =0.2.0, =0.2.0, =0.1.2, =1.0.0, =0.0.1, =0.1.13, =2.0.0, =3.1.9 Source cves: CVE-2022-23923 Source advisory: SNYK:JS-JAILED-2391490...

@mohamed.abdelall/omni-backend (>=1.0.0, <=1.1.53), generator-rest (0.2.0) +7 more potentially affected by CVE-2020-7600 +1 more via querymen (2.1.4)

querymen NPM version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on querymen and may be impacted: - @mohamed.abdelall/omni-backend =1.0.0, =0.0.1, =1.0.0, =1.0.0, =0.1.0, =1.0.14, =1.0.6, =1.4.10 - vulnogram 0.1.0-rc1 Source cves: CVE-2020-7600,...

a2kit (>=0.1.0, <=2.0.6), actions-github (>=0.0.2, <=0.1.0) +682 more potentially affected by unknown CVE via json (>=0.3.4, <=0.12.4)

json CARGO version =0.3.4, =0.1.0, =0.0.2, =0.0.1, =0.1.0, =7.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.9.0, =1.0.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0081...

bmoor-cache (>=0.3.0, <=0.6.0), bmoor-comm (>=0.0.1, <=0.6.0) +7 more potentially affected by CVE-2021-23558 via bmoor (>=0.0.5, <=0.9.8)

bmoor NPM version =0.0.5, =0.3.0, =0.0.1, =0.5.0, =0.2.0, =0.1.0, =0.0.4, =0.6.0, =0.6.43 Source cves: CVE-2021-23558 Source advisory: OSV:GHSA-4M8H-H59M-M34J...

@webiny/api-page-builder (>=0.0.0-mt-1, <=5.21.0), @webiny/api-page-builder-import-export (>=0.0.0-mt-1, <=5.21.0) +5 more potentially affected by CVE-2021-23484 via zip-local (0.3.4)

zip-local NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on zip-local and may be impacted: - @webiny/api-page-builder =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.1.0, =0.0.2, =0.0.7 Source cves: CVE-2021-23484...

entfrm-bpmn (>=8.6.2, <=8.6.6), entfrm-flowable-designer (>=1.0.0, <=1.2.6) +4 more potentially affected by CVE-2021-23460 via min-dash (3.5.2)

min-dash NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on min-dash and may be impacted: - entfrm-bpmn =8.6.2, =1.0.0, =2.2.0, =1.0.0, =1.1.3 Source cves: CVE-2021-23460 Source advisory: OSV:GHSA-2M53-83F3-562J...

7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +196 more potentially affected by CVE-2022-21227 via sqlite3 (>=5.0.0, <=5.0.2)

sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =0.1.3-alpha.0, =0.1.19-alpha.0, =0.1.11-alpha.0, =0.1.3-alpha.0, =7.0.0-alpha.18, =7.3.8 and more Source cves: CVE-2022-21227 Source advisory: SNYK:JS-SQLITE3-2388645...

1664 (>=0.2.1, <=0.2.3), @aeternity/aepp-sdk (0.25.0-0.1.0) +272 more potentially affected by CVE-2022-25324 via bignum (>=0.4.1, <=0.13.1)

bignum NPM version =0.4.1, =0.2.1, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =0.4.3, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.1.0 and more Source cves: CVE-2022-25324 Source advisory: SNYK:JS-BIGNUM-2388581...

123-x-ed-eied (>=1.0.5, <=1.0.6), @andrydharmawan/component-react (>=1.1.1, <=1.1.4) +111 more potentially affected by CVE-2022-21721 via next (>=12.0.0, <=12.0.8)

next NPM version =12.0.0, =1.0.5, =1.1.1, =0.0.41, =2.0.2, =2.0.1, =0.0.5, =1.9.6, =1.0.2, =0.0.0-34, =0.0.15, =1.1.0 and more Source cves: CVE-2022-21721 Source advisory: OSV:GHSA-WR66-VRWM-5G5X...

gemachain-bpf-loader-program (1.8.0), solana-bpf-loader-program (1.8.7) +1 more potentially affected by CVE-2021-46102 via solana_rbpf (>=0.2.14, <=0.2.16)

solanarbpf CARGO version =0.2.14, =0.1.8, =0.1.9 Source cves: CVE-2021-46102 Source advisory: OSV:GHSA-XWQR-XMGG-J69Q...

@garment/plugin-runner-publish (>=0.13.7, <=0.18.0), bower-npm-resolver (0.11.0) +4 more potentially affected by CVE-2022-0355 via simple-get (3.0.3)

simple-get NPM version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on simple-get and may be impacted: - @garment/plugin-runner-publish =0.13.7, =3.2.4, =2.0.3, =2.0.5 Source cves: CVE-2022-0355 Source advisory: OSV:GHSA-WPG7-2C88-R8XV...

high-availability-object-storage (0.1.8), saz-tools (>=0.0.10, <=0.0.17) potentially affected by CVE-2022-0355 via simple-get (4.0.0)

simple-get NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on simple-get and may be impacted: - high-availability-object-storage 0.1.8 - saz-tools =0.0.10, =0.0.17 Source cves: CVE-2022-0355 Source advisory: OSV:GHSA-WPG7-2C88-R8XV...

azure-msi-blob (0.0.1), cljsbuild (>=0.0.5, <=0.1.0) +13 more potentially affected by CVE-2022-0355 via simple-get (>=2.0.0, <=2.7.1)

simple-get NPM version =2.0.0, =0.0.5, =1.0.0, =0.5.0, =2.0.0, =0.2.1, =0.1.0, =1.0.0, =2.0.2 - strava-activities-stream 1.0.0 - strava-me 1.0.0 - strava-segment-efforts 1.0.0 - was-unpublished 1.0.1 Source cves: CVE-2022-0355 Source advisory: OSV:GHSA-WPG7-2C88-R8XV...

@yeepay/lowcode-engine (>=1.0.0-beta.1, <=2.3.12), @yeepay/lowcode-markdown (>=2.2.0-beta.0, <=2.6.4) potentially affected by CVE-2021-4103 via vditor (3.3.9)

vditor NPM version 3.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on vditor and may be impacted: - @yeepay/lowcode-engine =1.0.0-beta.1, =2.2.0-beta.0, =2.6.4 Source cves: CVE-2021-4103 Source advisory: OSV:GHSA-CXM3-V4MV-6MH8...