1tp (>=0.0.1, <=0.11.2), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +2801 more potentially affected by CVE-2020-28502 via xmlhttprequest-ssl (>=1.5.1, <=1.5.5)

xmlhttprequest-ssl NPM version =1.5.1, =0.0.1, =1.0.2, =4.11.25, =0.1.3, =0.0.15, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =0.2.9-dev-10, =0.13.0-alkemio, =0.17.0-alkemio-1 and more Source cves: CVE-2020-28502 Source advisory: OSV:GHSA-H4J5-C7CJ-74XG...

photo-cleanup (>=1.4.2, <=1.5.0) potentially affected by unknown CVE via exiftool-vendored (14.0.0)

exiftool-vendored NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on exiftool-vendored and may be impacted: - photo-cleanup =1.4.2, =1.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-4WHQ-R978-2X68...

atomic-server (>=0.10.0, <=0.22.3), basic-http-server (>=0.6.0, <=0.8.1) +44 more potentially affected by CVE-2021-38186 via comrak (>=0.1.9, <=0.9.1)

comrak CARGO version =0.1.9, =0.10.0, =0.6.0, =0.1.0, =0.1.5, =0.1.0, =0.0.1, =0.15.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.6 and more Source cves: CVE-2021-38186 Source advisory: OSV:RUSTSEC-2021-0063...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +928 more potentially affected by unknown CVE via aesni (>=0.9.0, <=0.10.0)

aesni CARGO version =0.9.0, =0.4.3-updated, =0.1.3, =0.1.0, =0.3.0, =0.3.0-alpha.1, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0059...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +51 more potentially affected by unknown CVE via aes-ctr (>=0.6.0, <=0.99.99)

aes-ctr CARGO version =0.6.0, =0.4.3-updated, =0.5.0, =0.1.0, =0.2.0, =0.1.0, =0.40.0, =0.40.0, =0.40.0, =0.40.0, =0.1.0, =0.1.0, =0.6.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0061...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +943 more potentially affected by unknown CVE via aes-soft (0.6.4)

aes-soft CARGO version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aes-soft and may be impacted: - actinium226-librespot 0.4.3 - actinium226-librespot-connect 0.4.3 - actinium226-librespot-playback =0.4.3-updated, =0.1.3, =0.1.0, =0.3.0,...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9375 more potentially affected by CVE-2021-23382 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23382 Source advisory: SNYK:JS-POSTCSS-1255640...

@100mslive/hms-video-react (>=0.3.27, <=0.3.125), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +544 more potentially affected by CVE-2021-23382 via postcss (>=8.0.0, <=8.2.12)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =12.0.0-rc.0 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 - @babytian/openinula-repl-next...

@cloudogu/dogu-integration-test-library (0.1.0-development), @clutch-sh/tools (>=1.0.0-beta.20210406113722, <=1.0.0-beta.20210427110621) +1 more potentially affected by unknown CVE via cypress (>=7.0.0, <=7.1.0)

cypress NPM version =7.0.0, =1.0.0-beta.20210406113722, =13.1.0, =13.1.4 Source cves: unknown CVE Source advisory: SNYK:JS-CYPRESS-1255446...

@abramltd/jwt-oauth2-middleware (0.1.0), @aerocorp/cli (7.0.5) +143 more potentially affected by CVE-2017-18924 via oauth2-server (>=3.0.0, <=3.1.1)

oauth2-server NPM version =3.0.0, =1.0.0, =0.0.1, =2.1.0, =3.0.0, =0.4.1, =0.1.0, =3.0.0, =3.0.0, =3.5.8 and more Source cves: CVE-2017-18924 Source advisory: OSV:GHSA-2FW4-MGQ9-39CX...

@dci-lint/cmd-api-server (>=0.3.0, <=0.4.0), @dci-lint/test-api-client (>=0.3.0, <=0.4.0) +29 more potentially affected by CVE-2021-29443 via jose (>=1.18.1, <=1.28.0)

jose NPM version =1.18.1, =0.3.0, =0.3.0, =0.3.0, =0.10.0-unstable.0042dcd, =2.0.0, =0.1.1-alpha.289, =0.4.0, =0.1.1-alpha.289, =0.5.0-alpha.0, =0.5.0-alpha.0, =0.5.0-alpha.0, =0.4.0, =0.1.1-alpha.289, =0.1.1-alpha.289, =0.1.1-alpha.289, =0.5.0 and more Source cves: CVE-2021-29443 Source advisory...

@decentralized-identity/ion-sdk (>=0.1.0, <=0.4.1), @tadashi/jwt (6.0.0) +19 more potentially affected by CVE-2021-29443 via jose (>=2.0.1, <=2.0.3)

jose NPM version =2.0.1, =0.1.0, =3.0.4, =3.0.4, =3.0.5, =3.0.4, =3.0.5, =3.0.4, =3.0.6, =3.0.3, =3.0.5, =3.1.0, =2.3.2, =0.1.0, =0.1.3 and more Source cves: CVE-2021-29443 Source advisory: OSV:GHSA-58F5-HFQC-JGCH...

@cdoor/core (>=0.0.1, <=0.0.3) potentially affected by CVE-2021-29443 via jose (3.7.0)

jose NPM version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on jose and may be impacted: - @cdoor/core =0.0.1, =0.0.3 Source cves: CVE-2021-29443 Source advisory: OSV:GHSA-58F5-HFQC-JGCH...

20-exceljs (>=4.5.7, <=4.5.9), 88slot-ap (1.0.0) +745 more potentially affected by CVE-2021-23413 via jszip (>=3.0.0, <=3.6.0)

jszip NPM version =3.0.0, =4.5.7, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.5-20190507210024, =0.0.37, =0.0.36, =0.0.37, =0.20.0-20191013002840, =16.14.0-100, =16.14.0-101 and more Source cves: CVE-2021-23413 Source advisory:...

@ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=2.8.0), @apolitical/apis-client (>=1.0.0, <=1.1.5) +13 more potentially affected by CVE-2021-30246 via jsrsasign (>=10.0.0, <=10.1.13)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.2.0, =0.0.11, =9.21.5, =20.12.0, =1.0.11, =0.1.1, =0.1.10, =0.2.0, =0.3.0 Source cves: CVE-2021-30246 Source advisory: OSV:GHSA-27FJ-MC8W-J9WG...

@convergence/jointjs-utils (0.4.0), aihub (>=1.0.1, <=1.0.2) +7 more potentially affected by CVE-2020-28479 via jointjs (>=3.1.0, <=3.2.0)

jointjs NPM version =3.1.0, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =0.9.0, =0.10.1 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2020-28479 Source advisory: OSV:GHSA-CQ8R-FC3Q-6HG2...

@scullyio/init (1.0.0-beta.4) potentially affected by CVE-2020-28470 via @scullyio/ng-lib (1.0.0-beta.1)

@scullyio/ng-lib NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on @scullyio/ng-lib and may be impacted: - @scullyio/init 1.0.0-beta.4 Source cves: CVE-2020-28470 Source advisory: OSV:GHSA-R96P-V3CR-GFV8...

0726react (0.1.1), 0x0.icu.anima (0.1.0) +13088 more potentially affected by CVE-2020-7693 via sockjs (>=0.0.4, <=0.3.19)

sockjs NPM version =0.0.4, =1.0.4, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.4.0, =1.4.1 and more Source cves: CVE-2020-7693 Source advisory: OSV:GHSA-C9G6-9335-X697...

diversion (>=0.2.0, <=0.4.6), push-it (>=0.1.0, <=0.1.4) +1 more potentially affected by CVE-2020-8823 via sockjs (>=0.0.4, <=0.2.1)

sockjs NPM version =0.0.4, =0.2.0, =0.1.0, =0.0.0pre25, =0.0.0pre31 Source cves: CVE-2020-8823 Source advisory: OSV:GHSA-HH8V-JMH3-9437...

eslint-plugin-mozilla (>=2.7.0, <=2.9.2), gatsby (>=2.24.6-telemetry-test.19, <=2.24.6-telemetry-test.20) +3 more potentially affected by CVE-2020-28460 via multi-ini (2.1.0)

multi-ini NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on multi-ini and may be impacted: - eslint-plugin-mozilla =2.7.0, =2.24.6-telemetry-test.19, =2.12.64-telemetry-test.19, =0.1.54-telemetry-test.19, =1.3.21-telemetry-test.19,...