svelte-forms-lib (>=1.1.1, <=1.3.2) potentially affected by CVE-2020-7707 via property-expr (2.0.2)

property-expr NPM version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on property-expr and may be impacted: - svelte-forms-lib =1.1.1, =1.3.2 Source cves: CVE-2020-7707 Source advisory: OSV:GHSA-6FW4-HR69-G3RV...

app-context-connie (>=0.0.1, <=1.1.0), app-context-connie-firebase (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2020-7706 via connie-lang (>=0.0.1, <=0.1.0)

connie-lang NPM version =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.2.1 Source cves: CVE-2020-7706 Source advisory: OSV:GHSA-8VV3-JXM8-F4VF...

@blueprintjs/docs (>=1.0.0, <=1.3.1), @frctl/twig (>=1.0.0-alpha.0, <=1.0.0-beta.2) +98 more potentially affected by CVE-2020-7700 via phpjs (>=1.0.2, <=1.3.2)

phpjs NPM version =1.0.2, =1.0.0, =1.0.0-alpha.0, =0.3.16, =1.2.7, =0.1.3, =1.0.1, =1.0.0, =0.7.0, =0.0.1, =0.0.1-alpha.1, =0.0.1, =0.0.7 and more Source cves: CVE-2020-7700 Source advisory: OSV:GHSA-M428-JQC4-2P5J...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2020-17479 via jpv (2.0.1)

jpv NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on jpv and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2020-17479 Source advisory: OSV:GHSA-VH6R-G38F-Q3W8...

@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +271 more potentially affected by CVE-2021-27292 via ua-parser-js (>=0.7.14, <=0.7.23)

ua-parser-js NPM version =0.7.14, =1.4.0, =0.16.9, =2018.7.11-0, =2.0.1, =1.9.0, =1.9.0, =1.0.0, =5.0.0, =1.1.3, =2.6.6, =1.0.0, =6.6.0, =7.5.3 and more Source cves: CVE-2021-27292 Source advisory: OSV:GHSA-78CJ-FXPH-M83P...

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4508 more potentially affected by CVE-2021-27515 via url-parse (>=0.1.5, <=1.4.7)

url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2021-27515 Source advisory: OSV:GHSA-9M6J-FCG5-2442...

@fengshangwuqi/appkit (>=1.0.22, <=1.0.29), @koj/strapi (>=1.4.1, <=1.4.3) +30 more potentially affected by CVE-2021-23362 via hosted-git-info (>=3.0.0, <=3.0.7)

hosted-git-info NPM version =3.0.0, =1.0.22, =1.4.1, =0.1.0, =4.0.0, =1.0.0, =3.0.0, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.1.0, =0.1.10 and more Source cves: CVE-2021-23362 Source advisory:...

421752593pro (5.6.0), @concisejs/docz-theme-ext (>=0.0.1, <=0.0.3) +81 more potentially affected by CVE-2021-23362 via hosted-git-info (>=2.1.5, <=2.8.8)

hosted-git-info NPM version =2.1.5, =0.0.1, =0.1.0, =1.3.13, =3.0.0, =2.0.0, =1.16.0, =0.0.2, =2.3.1, =1.0.0, =1.0.0, =1.3.0, =1.3.16 and more Source cves: CVE-2021-23362 Source advisory: OSV:GHSA-43F8-2H32-F4CJ...

@codious/core (>=1.0.6, <=1.2.6), @koj/strapi (>=1.4.1, <=1.4.3) +6 more potentially affected by CVE-2021-26540 via sanitize-html (>=2.1.0, <=2.3.1)

sanitize-html NPM version =2.1.0, =1.0.6, =1.4.1, =3.37.0, =2.1.56, =2.0.58, =0.12.0, =3.2.5, =3.5.2 Source cves: CVE-2021-26540 Source advisory: OSV:GHSA-MJXR-4V3X-Q3M4...

08cms (1.0.0), 0xweb (>=0.9.9, <=0.10.93) +29786 more potentially affected by CVE-2021-23358 via underscore (>=1.3.2, <=1.12.0)

underscore NPM version =1.3.2, =0.9.9, =0.1.1, =0.1.0, =1.0.0, =0.0.1-alpha, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =0.0.2, =0.2.2, =0.1.0, =1.5.3 and more Source cves: CVE-2021-23358 Source advisory: OSV:GHSA-CF4H-3JHX-XVHQ...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +19162 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.17.20)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.0.2, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =4.11.20 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

09-nodejs (1.0.0), 11.17r (1.0.0) +337 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.4.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.1.0, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.0.0, =1.0.0-alpha.0, =1.1.0, =0.0.79, =0.0.120-2 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +806 more potentially affected by CVE-2021-23337 +1 more via lodash-es (>=4.0.0, <=4.17.20)

lodash-es NPM version =4.0.0, =0.0.1-alpha.4, =0.1.10, =0.0.1, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =0.0.1, =3.2.1, =3.2.1, =0.1.0, =0.3.14, =0.4.42 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: OSV:GHSA-HPMR-G4PQ-JHGP...

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +2021 more potentially affected by CVE-2021-23369 via handlebars (>=4.0.0, <=4.7.6)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.2-alpha.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-23369 Source advisory: OSV:GHSA-F2JV-R9RF-7988...

@1studio/ui (>=1.0.7, <=2.83.0), @clickview/player (>=1.24.1-dev.0, <=100.101.0-rc.1) +52 more potentially affected by CVE-2021-31712 via react-draft-wysiwyg (>=1.10.0, <=1.14.5)

react-draft-wysiwyg NPM version =1.10.0, =1.0.7, =1.24.1-dev.0, =0.0.2, =2.1.15, =0.1.0, =1.0.0, =1.0.0-rc.1.0.0, =0.1.1, =0.1.5, =0.8.6, =0.0.15, =2.1.19, =1.0.0, =0.10.5, =0.10.6 and more Source cves: CVE-2021-31712 Source advisory: OSV:GHSA-QCG2-H349-VWM3...

@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by CVE-2021-28860 +1 more via mixme (>=0.0.1, <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: CVE-2021-28860, CVE-2021-29491 Source advisory: OSV:GHSA-79JW-6WG7-R9G4...

actix-broker (>=0.1.3, <=0.1.7), actix-diesel (>=0.1.0, <=0.3.0) +896 more potentially affected by unknown CVE via cpuid-bool (>=0.1.2, <=0.2.0)

cpuid-bool CARGO version =0.1.2, =0.1.3, =0.1.0, =0.3.0, =0.3.0-alpha.1, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0064...

@amaspace-editor/builder (>=0.0.52, <=0.0.522), @instacart/eslint-config (0.3.0) +13 more potentially affected by CVE-2020-28499 via merge (2.1.0)

merge NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on merge and may be impacted: - @amaspace-editor/builder =0.0.52, =1.4.2, =4.0.19, =1.0.21, =4.0.30, =1.0.34, =2.0.25, =3.0.17, =1.0.19, =4.0.21, =4.0.26 Source cves: CVE-2020-28499...

317-project (0.0.0), 4pm-cli (>=0.0.1, <=0.0.5) +1887 more potentially affected by CVE-2020-28502 via xmlhttprequest (>=1.2.2, <=1.6.0)

xmlhttprequest NPM version =1.2.2, =0.0.1, =0.1.16-master.20181116180810, =0.1.0, =1.1.1, =0.0.4, =0.0.53, =0.0.42, =1.0.399-main, =0.1.0, =0.1.1 and more Source cves: CVE-2020-28502 Source advisory: OSV:GHSA-H4J5-C7CJ-74XG...