9542 matches found
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1579 more potentially affected by CVE-2019-20920 via handlebars (>=4.0.0, <=4.5.2)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: CVE-2019-20920 Source advisory: OSV:GHSA-3CQR-58RM-57F8...
cloudron-manifestformat (>=5.0.0, <=5.10.1) potentially affected by CVE-2020-7737 via safetydance (1.0.0)
safetydance NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on safetydance and may be impacted: - cloudron-manifestformat =5.0.0, =5.10.1 Source cves: CVE-2020-7737 Source advisory: OSV:GHSA-6M85-WVCR-PGW3...
@wulechuan/generate-html-via-markdown (>=3.0.0, <=3.0.1), norska (>=0.6.0, <=0.16.0) +3 more potentially affected by CVE-2020-7773 via markdown-it-highlightjs (>=3.0.0, <=3.3.0)
markdown-it-highlightjs NPM version =3.0.0, =3.0.0, =0.6.0, =0.6.0, =0.2.2, =0.2.4 Source cves: CVE-2020-7773 Source advisory: OSV:GHSA-F246-XRRJ-G8J6...
@amphro/streamer (>=0.0.0, <=1.0.1), @appirio/demo-scoped-pkg (>=2.4.1, <=2.8.0) +297 more potentially affected by CVE-2020-7777 via jsen (>=0.1.2, <=0.6.6)
jsen NPM version =0.1.2, =0.0.0, =2.4.1, =0.5.9, =0.1.0, =1.0.0, =0.6.9, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc5, =2.2.3, =0.0.1, =0.1.0, =0.0.7, =1.4.0, =13.6.18 and more Source cves: CVE-2020-7777 Source advisory: OSV:GHSA-VM64-CFQX-3698...
-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42426 more potentially affected by CVE-2022-0536 via follow-redirects (>=1.0.0, <=1.14.7)
follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0536 Source advisory: OSV:GHSA-PW2R-VQ6V-HR8C...
@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +25 more potentially affected by CVE-2020-7778 via systeminformation (>=4.0.9, <=4.27.11)
systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =1.2.3 - @hnordt/sysinfo 0.1.1 and more Source cves:...
@alma-oss/vite-plugin-spirit-icons (>=1.1.0, <=2.1.0), @camptocamp/closure-util (>=1.23.0, <=1.27.0) +132 more potentially affected by CVE-2020-7792 via mout (>=1.0.0, <=1.2.2)
mout NPM version =1.0.0, =1.1.0, =1.23.0, =0.12.2, =1.36.0, =0.0.1, =1.0.0, =0.1.1, =0.1.0, =2.94.2, =0.3.0, =0.3.6 and more Source cves: CVE-2020-7792 Source advisory: OSV:GHSA-PC58-WGMC-HFJR...
@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +395 more potentially affected by CVE-2020-7793 via ua-parser-js (>=0.6.2, <=0.7.22)
ua-parser-js NPM version =0.6.2, =1.4.0, =0.16.9, =2018.7.11-0, =2.0.1, =1.0.0-beta.11, =2.0.0-beta.1, =1.9.0, =1.9.0, =1.0.0, =5.0.0, =1.1.3, =2.6.6, =2.7.0 and more Source cves: CVE-2020-7793 Source advisory: OSV:GHSA-394C-5J6W-4XMX...
js-data-dao (1.0.0) potentially affected by CVE-2020-28442 via js-data (3.0.0-rc.5)
js-data NPM version 3.0.0-rc.5 is affected by a known vulnerability. The following packages have a transitive dependency on js-data and may be impacted: - js-data-dao 1.0.0 Source cves: CVE-2020-28442 Source advisory: OSV:GHSA-MQGV-67VX-G4M5...
@6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2), @jamesbliss/react-flickity (>=1.0.0, <=1.4.0) +33 more potentially affected by CVE-2020-8131 via yarn (>=1.0.2, <=1.21.1)
yarn NPM version =1.0.2, =1.0.2-6river, =1.0.0, =1.9.9-1, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.1, =0.0.0-semantic-release, =1.9.7, =1.1.0-beta.0, =11.0.1 and more Source cves: CVE-2020-8131 Source advisory: OSV:GHSA-8MFC-V7WV-P62G...
@ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=2.8.0), @apolitical/apis-client (>=1.0.0, <=1.1.5) +13 more potentially affected by unknown CVE via jsrsasign (>=10.0.0, <=10.1.13)
jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.2.0, =0.0.11, =9.21.5, =20.12.0, =1.0.11, =0.1.1, =0.1.10, =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-H87Q-G2WP-47PJ...
@nitro/app (>=4.14.2, <=5.2.0), @omneedia/template (>=1.0.0, <=1.0.10) +3 more potentially affected by CVE-2019-10793 via dot-object (>=2.0.0, <=2.1.2)
dot-object NPM version =2.0.0, =4.14.2, =1.0.0, =1.0.0, =1.4.8, =1.5.11 Source cves: CVE-2019-10793 Source advisory: OSV:GHSA-J9CF-PR2X-5273...
7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1266 more potentially affected by CVE-2020-36048 via engine.io (>=3.1.0, <=3.5.0)
engine.io NPM version =3.1.0, =4.11.25, =8.25.29, =0.1.53, =5.1.0, =5.1.0, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-36048 Source advisory: OSV:GHSA-J4F2-536G-R55M...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 08cms (1.0.0) +17666 more potentially affected by CVE-2020-24025 via node-sass (>=2.0.0, <=6.0.1)
node-sass NPM version =2.0.0, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages 0.2.0 and more Source cves: CVE-2020-24025 Source advisory: OSV:GHSA-R8F7-9PFQ-MJMV...
@blitzjs/codemod (>=0.0.0-a78bd33-20230114151431, <=0.0.0-turbopack-20240403083540), @theapexlab/ra-data-blitz (0.0.1) +2 more potentially affected by CVE-2022-23631 via blitz (>=0.0.0-a78bd33-20230114151431, <=0.43.0)
blitz NPM version =0.0.0-a78bd33-20230114151431, =0.0.0-a78bd33-20230114151431, =1.0.1, =0.1.0, =0.1.5 Source cves: CVE-2022-23631 Source advisory: OSV:GHSA-5888-FFCR-R425...
@blitzjs/auth (>=2.0.0-alpha.1, <=2.0.0-danger.67), @blitzjs/cli (>=0.40.0-canary.6, <=0.41.2-canary.1) +14 more potentially affected by CVE-2022-23631 via superjson (>=1.1.0, <=1.8.0)
superjson NPM version =1.1.0, =2.0.0-alpha.1, =0.40.0-canary.6, =2.0.0-alpha.30, =0.17.1-canary.0, =0.38.1, =0.38.1, =2.0.0-alpha.1, =2.0.0-alpha.1, =0.17.1-canary.0, =0.0.0-canary-20217313014, =0.0.0-canary-20220114053526, =0.17.1-canary.0, =0.1.0, =0.1.5 and more Source cves: CVE-2022-23631...
@abp/aspnetcore.mvc.ui.theme.basic (>=0.2.1, <=9.1.3), @abp/aspnetcore.mvc.ui.theme.leptonxlite (>=1.0.0-beta.3, <=4.1.3) +425 more potentially affected by unknown CVE via toastr (>=2.0.4, <=2.1.4)
toastr NPM version =2.0.4, =0.2.1, =1.0.0-beta.3, =0.2.3, =4.4.0-rc.1, =0.3.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1-alpha.0, =1.0.9, =0.5.0, =0.0.1, =1.0.0, =1.0.6 - @bycore/aspnetcore.mvc.ui.theme.basic 3.0.5-beta - @bycore/aspnetcore.mvc.ui.theme.shared 3.0.5-beta and more Source cves: unknown CVE...
@aws-crypto/example-browser (>=2.2.0, <=3.1.0), @carlosvillu/tester (>=1.0.0-beta.1, <=1.0.0) +52 more potentially affected by CVE-2021-23495 via karma (>=6.1.1, <=6.3.14)
karma NPM version =6.1.1, =2.2.0, =1.0.0-beta.1, =1.0.0-beta.0, =22.0.0-beta.1, =13.0.0-beta.1, =430.0.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.6.4, =11.0.0-beta.9, =10.21.0, =4.18.0-beta.0, =0.0.0, =0.0.2 and more Source cves: CVE-2021-23495 Source advisory: SNYK:JS-KARMA-2396325...
a4 (>=0.0.2, <=0.0.4), aaa_csv_challenge (0.1.0) +3960 more potentially affected by unknown CVE via structopt (>=0.0.3, <=0.3.26)
structopt CARGO version =0.0.3, =0.0.2, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0104...
create-frourio-app (>=0.15.0, <=0.29.0) potentially affected by CVE-2022-23623 via frourio (>=0.18.2, <=0.25.1)
frourio NPM version =0.18.2, =0.15.0, =0.29.0 Source cves: CVE-2022-23623 Source advisory: OSV:GHSA-8XXM-H73R-GHFJ...