@csnext/cs-timeline (>=0.0.101-beta.22, <=0.0.132-beta.446), @net7/components (>=3.0.2-rc.2, <=4.3.2) +4 more potentially affected by CVE-2020-28487 via vis-timeline (>=7.1.3, <=7.4.2)

vis-timeline NPM version =7.1.3, =0.0.101-beta.22, =3.0.2-rc.2, =2.0.0-alpha2, =1.3.0, =3.1.1-build1667201258, =3.1.2 Source cves: CVE-2020-28487 Source advisory: OSV:GHSA-9MRV-456V-PF22...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23344 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23344 Source advisory: OSV:GHSA-3WJ8-VP9H-RM6M...

1ib (>=1.0.9, <=1.0.11), 4front-cli (>=0.0.1, <=0.0.20) +375 more potentially affected by CVE-2021-23354 via printf (>=0.0.4, <=0.6.0)

printf NPM version =0.0.4, =1.0.9, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.5, =1.3.0-beta.0, =1.2.26, =1.2.31, =7.54.0 and more Source cves: CVE-2021-23354 Source advisory: OSV:GHSA-XFHP-GMH8-R8V2...

@frostoven/alkalurops (>=1.28.2, <=1.28.5), @h5web/app (>=0.1.0-beta.1, <=4.2.0-beta.1) +14 more potentially affected by unknown CVE via d3-color (3.0.1)

d3-color NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on d3-color and may be impacted: - @frostoven/alkalurops =1.28.2, =0.1.0-beta.1, =0.1.0-beta.0, =0.1.1, =1.0.1, =0.2.0, =0.1.6, =0.1.1, =0.2.0, =0.2.0, =0.0.2, =0.3.0, =0.1.0, =0.3...

@byhuz/huz-ui-sigma (>=1.0.19, <=1.0.27), @deliverybot/client (>=0.7.0, <=0.7.2) +30 more potentially affected by CVE-2021-23327 via apexcharts (>=3.2.0, <=3.23.1)

apexcharts NPM version =3.2.0, =1.0.19, =0.7.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =7.20.0-snapshot-1617172219791, =2.3.0, =1.0.3, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.15.0 and more Source cves: CVE-2021-23327 Source advisory: OSV:GHSA-W46J-8HM6-H8MM...

df-excel (>=0.1.0, <=0.1.8) potentially affected by unknown CVE via office (0.8.1)

office CARGO version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on office and may be impacted: - df-excel =0.1.0, =0.1.8 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0034...

@kumologica/pocdk (>=0.0.7-beta, <=0.0.8-beta), @kumologica/pocsdk (>=0.0.9-poc, <=0.0.33-poc) +6 more potentially affected by CVE-2020-26272 via electron (>=11.0.0, <=11.0.5)

electron NPM version =11.0.0, =0.0.7-beta, =0.0.9-poc, =3.0.0, =0.32.0-alpha.47, =2.0.9, =2.0.12 - simple-git-gui 3.5.4 Source cves: CVE-2020-26272 Source advisory: OSV:GHSA-HVF8-H2QH-37M9...

@3wks/gae-node-nestjs (>=2.1.1, <=6.0.0-rc.0), @8sistemas/design-system (>=0.6.0-alpha.1, <=1.0.5) +892 more potentially affected by CVE-2020-26289 via date-and-time (>=0.3.0, <=0.14.1)

date-and-time NPM version =0.3.0, =2.1.1, =0.6.0-alpha.1, =0.0.38, =1.1.8, =4.2.0, =0.0.6, =3.6.0, =1.0.0, =0.0.0, =1.1.68, =1.4.3, =0.1.3, =0.1.0-master.20191004191703, =1.4.1-atomist.a260p86nh.typescript-version.master.20190915212851, =2.0.0-master.20200715122321 and more Source cves:...

@mdslab/iotronic-lightning-rod (>=2.3.1, <=2.3.6), connection-test-table (>=0.1.0, <=0.1.3) +9 more potentially affected by CVE-2020-7781 via connection-tester (>=0.0.7, <=0.2.0)

connection-tester NPM version =0.0.7, =2.3.1, =0.1.0, =0.0.1, =0.0.1, =0.0.10, =1.1.3, =0.0.1, =0.0.1, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2020-7781 Source advisory: SNYK:JS-CONNECTIONTESTER-1048337...

a2 (>=0.2.0, <=0.5.3), a3mo_lib (>=0.1.0, <=0.1.1) +7030 more potentially affected by CVE-2020-26235 via time (>=0.1.25, <=0.1.45)

time CARGO version =0.1.25, =0.2.0, =0.1.0, =0.1.7, =0.2.0-beta.4, =0.5.0, =0.1.1, =0.0.3, =0.1.0, =0.0.1, =0.2.0 and more Source cves: CVE-2020-26235 Source advisory: OSV:RUSTSEC-2020-0071...

acheron (0.1.0), actix_web_metrics_mw (>=0.0.1, <=0.3.1) +81 more potentially affected by CVE-2020-36204 via im (>=12.3.4, <=15.0.0)

im CARGO version =12.3.4, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.1.1, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2020-36204 Source advisory: OSV:RUSTSEC-2020-0096...

@amc-technology/ui-library (1.0.10), @amilabs/pink-unicorn (>=1.2.3, <=1.3.6) +174 more potentially affected by CVE-2020-15262 via webpack-subresource-integrity (>=1.0.4, <=1.5.0)

webpack-subresource-integrity NPM version =1.0.4, =1.2.3, =9.0.0-beta.0, =0.8.8, =0.0.1-SNAPSHOT, =0.0.1-alpha.1, =1.2.2, =0.1.8, =0.0.0, =0.0.1, =0.0.1-alpha.2, =0.0.1, =0.0.1, =0.6.0-next.3, =1.1.0 and more Source cves: CVE-2020-15262 Source advisory: OSV:GHSA-4FC4-CHG7-H8GH...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q9-HQM5-MHMC...

@homenet/core (>=4.0.0-beta.15, <=4.0.0-beta.42), @jatahworx/bhive-core (>=1.0.76, <=3.3.1) +29 more potentially affected by unknown CVE via node-red (>=0.9.1, <=0.18.3)

node-red NPM version =0.9.1, =4.0.0-beta.15, =1.0.76, =2.5.0, =0.0.1, =0.0.4, =0.0.0, =0.0.1, =0.1.2, =0.1.0, =1.0.0, =0.9.0, =1.1.0, =1.0.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5G6J-8HV4-VFGJ...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VP93-GCX5-4W52...

@makeomatic/confidence (5.0.0), @makeomatic/deploy (>=10.0.1, <=10.2.1) +6 more potentially affected by unknown CVE via @hapi/hoek (9.0.2)

@hapi/hoek NPM version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/hoek and may be impacted: - @makeomatic/confidence 5.0.0 - @makeomatic/deploy =10.0.1, =6.0.0, =15.0.0, =10.0.0, =8.0.0, =14.0.0, =6.1.2, =6.8.3 Source cves: unknown CVE...

@alinex/checkup (>=0.7.0, <=1.2.2), @alinex/server (>=0.8.8, <=1.0.0) +52 more potentially affected by unknown CVE via unflatten (1.0.4)

unflatten NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on unflatten and may be impacted: - @alinex/checkup =0.7.0, =0.8.8, =1.2.0-alpha1, =0.1.0, =0.1.0, =0.0.1, =0.0.8, =1.0.13, =0.0.2, =0.0.3, =1.0.0, =1.0.1, =1.1.0, =1.1.0, =1.3.7...

@36node/template-service (0.3.5), @alexbp-ds/microservice-wrapper (1.1.8) +329 more potentially affected by unknown CVE via mongodb (>=3.0.0, <=3.1.12)

mongodb NPM version =3.0.0, =0.0.1, =3.2.9, =0.1.0, =1.0.0, =1.0.0, =0.0.1-rc.1, =0.0.2, =1.11.1, =0.0.2, =0.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MH5C-679W-HH4R...

fd-dcc (>=1.0.0, <=2.1.4), test_sdk_aki (>=1.0.3, <=1.0.4) +1 more potentially affected by unknown CVE via axioss (0.0.1-security)

axioss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axioss and may be impacted: - fd-dcc =1.0.0, =1.0.3, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8W9J-6WG6-QV4F...

@dotgov/bpmn (>=0.0.1, <=0.0.29), @dotgov/z_bpmn (>=0.0.1, <=2.0.0) +19 more potentially affected by unknown CVE via bpmn-js-properties-panel (>=0.11.2, <=0.30.0)

bpmn-js-properties-panel NPM version =0.11.2, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =1.1.22, =1.0.97, =2.0.0, =1.0.14, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VPJ4-89Q8-RH38...