9538 matches found
arupex (>=0.4.0, <=0.4.4), captain-ahab (1.0.0) +11 more potentially affected by unknown CVE via deep-setter (1.0.2)
deep-setter NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on deep-setter and may be impacted: - arupex =0.4.0, =2.3.4, =3.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.18, =0.0.7, =0.0.1, =0.0.6 Source cves: unknown CVE Source advisory:...
1st_test_yamineo (0.1.0), @akaterra.co/apidog (>=0.0.4, <=0.0.5) +885 more potentially affected by unknown CVE via markdown (>=0.1.2, <=0.5.0)
markdown NPM version =0.1.2, =0.0.4, =0.0.102, =0.1.0, =0.4.0, =0.0.5, =2.1.1, =2.0.0, =0.0.2, =2.1.1, =2.1.1, =2.1.1, =2.1.1, =2.9.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WX77-RP39-C6VG...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1579 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.5.2)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q2C6-C6PM-G3GH...
@behance/istanbul (0.3.17-sourcemap), @bigcommerce/stencil-paper (>=2.0.15, <=2.0.25) +220 more potentially affected by unknown CVE via handlebars (>=3.0.0, <=3.0.7)
handlebars NPM version =3.0.0, =2.0.15, =0.4.0, =0.0.60-IE, =1.3.1, =1.0.4, =0.11.0, =0.0.1, =0.0.5, =0.0.6, =1.2.0, =0.1.0, =0.4.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q2C6-C6PM-G3GH...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1579 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.5.2)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G9R4-XPMJ-MJ65...
@behance/istanbul (0.3.17-sourcemap), @bigcommerce/stencil-paper (>=2.0.15, <=2.0.25) +220 more potentially affected by unknown CVE via handlebars (>=3.0.0, <=3.0.7)
handlebars NPM version =3.0.0, =2.0.15, =0.4.0, =0.0.60-IE, =1.3.1, =1.0.4, =0.11.0, =0.0.1, =0.0.5, =0.0.6, =1.2.0, =0.1.0, =0.4.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G9R4-XPMJ-MJ65...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1573 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.5.1)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2CF5-4W76-R9QV...
@behance/istanbul (0.3.17-sourcemap), @bigcommerce/stencil-paper (>=2.0.15, <=2.0.25) +220 more potentially affected by unknown CVE via handlebars (>=3.0.0, <=3.0.7)
handlebars NPM version =3.0.0, =2.0.15, =0.4.0, =0.0.60-IE, =1.3.1, =1.0.4, =0.11.0, =0.0.1, =0.0.5, =0.0.6, =1.2.0, =0.1.0, =0.4.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2CF5-4W76-R9QV...
@draftbit/airtable-graphql (2.0.0), @draftbit/hapi-airtable-authentication-plugin (>=1.0.0, <=1.1.0) +34 more potentially affected by unknown CVE via airtable (>=0.4.5, <=0.6.0)
airtable NPM version =0.4.5, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.3, =0.0.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =1.0.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-JRJ9-5QP6-2V8Q...
@cloudmosaic/quickstarts (>=1.0.0-rc.0, <=1.0.0-rc.1), @cooptest/quickstarts (>=1.0.0, <=1.0.12) +113 more potentially affected by unknown CVE via showdown (>=1.0.0-alpha.2, <=1.9.0)
showdown NPM version =1.0.0-alpha.2, =1.0.0-rc.0, =1.0.0, =1.0.0-alpha.1, =2.0.0-beta.5, =0.4.0-1, =1.6.3, =5.2.1, =0.0.11, =0.0.9, =0.0.2, =1.0.0-rc.2, =1.0.1, =0.0.0-beta.1, =0.0.0-beta.24 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H6MQ-3CJ6-H738...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1559 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.4.3)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F52G-6JHX-586P...
@adpt/testutils (>=0.0.2-next.4, <=0.1.0-next.1), @elliemae/pui-cli (>=0.0.1, <=0.0.2-beta.7) +10 more potentially affected by unknown CVE via dompurify (>=2.0.0, <=2.0.5)
dompurify NPM version =2.0.0, =0.0.2-next.4, =0.0.1, =4.3.1-test1, =6.3.5, =8.1.1, =2.4.13-dev-verdaccio.1070, =0.0.1, =0.1.0, =0.0.1, =2.0.0, =2.1.0, =3.13.0, =4.3.3 Source cves: unknown CVE Source advisory: OSV:GHSA-MJJQ-C88Q-QHR6...
@achil/parcel-bundler (>=1.11.1, <=1.12.34), @acies/core (>=1.2.89, <=1.2.215) +133 more potentially affected by unknown CVE via safer-eval (>=1.2.3, <=1.3.6)
safer-eval NPM version =1.2.3, =1.11.1, =1.2.89, =0.1.0, =4.0.0, =4.1.0, =4.1.2, =0.9.2-pre.41, =2.0.2-pre.3, =1.0.0, =1.9.3-ext.1, =0.3.0, =1.12.3, =1.0.0, =0.0.1, =3.4.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-876R-HJ45-FW7G...
@codecademy/gamut (>=1.10.10-alpha.7c13cf.0, <=1.15.2), @contentful/field-editor-markdown (>=0.1.0, <=0.4.0) +18 more potentially affected by unknown CVE via markdown-to-jsx (>=6.4.1, <=6.11.1)
markdown-to-jsx NPM version =6.4.1, =1.10.10-alpha.7c13cf.0, =0.1.0, =0.1.0, =0.0.9, =7.1.0, =0.10.0, =1.0.0, =0.2.0, =0.1.0, =5.11.3, =5.8.9, =6.0.1, =1.0.0, =3.3.1-feather.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CCRP-C664-8P4J...
@adobe/helix-cli (>=0.10.6-pre.2, <=4.3.0), @c8y/cli (9.15.0) +123 more potentially affected by CVE-2020-12265 via decompress (>=4.0.0, <=4.2.0)
decompress NPM version =4.0.0, =0.10.6-pre.2, =1.1.4, =4.0.2-rc.0, =1.9.9-1, =1.0.1, =5.0.3-beta, =6.12.0, =0.9.1, =0.9.0, =0.10.5, =3.0.0-rc.0, =3.0.0-alpha.1, =0.0.1, =0.0.1-canary-publish-10b14e980f40c7d15fe9aa4b2b8dacd099133853, =3.60.0 and more Source cves: CVE-2020-12265 Source advisory:...
@aoboxinda/budget (>=0.1.155, <=0.1.186), @coobo/skeleton (>=1.0.0-a, <=1.0.0) +5 more potentially affected by unknown CVE via express-fileupload (>=1.0.0, <=1.1.5)
express-fileupload NPM version =1.0.0, =0.1.155, =1.0.0-a, =0.0.1-alpha.151, =0.0.1-alpha.44, =1.1.0, =1.0.0, =1.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-Q3W9-G74Q-VP5F...
hexo-wustxiao-blog (1.1.1) potentially affected by unknown CVE via hexo-admin (2.3.0)
hexo-admin NPM version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hexo-admin and may be impacted: - hexo-wustxiao-blog 1.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PHPH-XPJ4-WVCV...
@36node/template-service (0.3.5), @alexbp-ds/microservice-wrapper (1.1.8) +329 more potentially affected by unknown CVE via mongodb (>=3.0.0, <=3.1.12)
mongodb NPM version =3.0.0, =0.0.1, =3.2.9, =0.1.0, =1.0.0, =1.0.0, =0.0.1-rc.1, =0.0.2, =1.11.1, =0.0.2, =0.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MH5C-679W-HH4R...
6_0901 (1.0.0), @alu0101227610/gh-repo-rename (>=1.2.0, <=1.2.1) +27 more potentially affected by unknown CVE via comander (0.0.1-security)
comander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on comander and may be impacted: - 60901 1.0.0 - @alu0101227610/gh-repo-rename =1.2.0, =1.1.1, =1.2.0, =0.0.2, =1.0.0, =1.2.2, =1.0.1, =1.0.5 - hager1 1.0.0 and more Sourc...
@zowe/db2 (>=3.0.1-alpha.201904091134, <=3.0.2), @zowe/db2-for-zowe-cli (>=4.0.0, <=4.0.1) +4 more potentially affected by unknown CVE via ibm_db (>=2.0.0, <=2.5.0)
ibmdb NPM version =2.0.0, =3.0.1-alpha.201904091134, =4.0.0, =0.0.1, =7.0.0, =0.0.4, =0.0.5 - node-red-contrib-deebeetwoforzed 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-P77H-HV6G-FMFP...