@belvoly-vue-aioa/tinymce (>=0.1.6, <=0.1.9), @enhavo/form (>=0.1.2, <=0.9.22) +37 more potentially affected by CVE-2020-12648 via tinymce (>=5.0.6, <=5.3.2)

tinymce NPM version =5.0.6, =0.1.6, =0.1.2, =0.8.4, =0.18.0, =0.0.1-alpha.9, =15.0.1, =1.2.2, =0.17.0, =0.0.46, =0.0.14, =1.0.11-beta.17, =1.0.0, =1.0.1, =1.0.0, =1.0.2 - en-buiness-model 1.0.0 and more Source cves: CVE-2020-12648 Source advisory: OSV:GHSA-VRV8-V4W8-F95H...

@0x18b2ee/parse-server (>=3.10.1, <=3.11.0), @adncorp/parse-server (>=2.0.0, <=2.10.4) +24 more potentially affected by unknown CVE via parse (>=2.0.1, <=2.8.0)

parse NPM version =2.0.1, =3.10.1, =2.0.0, =0.0.7, =1.0.5, =4.3.0-fast-roles, =4.3.0, =1.0.9, =1.0.0, =3.1.1, =3.10.0, =3.1.3, =3.1.6 - nex-parse-server 4.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WVH7-5P38-2QFC...

@cardgamesplay/klondike (>=0.1.0, <=0.1.1), @devexpress/analytics-core (>=18.2.7, <=19.1.1-alpha-19071-2010) +61 more potentially affected by CVE-2019-14862 via knockout (>=3.0.0, <=3.4.2)

knockout NPM version =3.0.0, =0.1.0, =18.2.7, =4.0.0, =0.1.0-zgx, =0.1.0, =1.0.0, =0.0.1, =0.2.20, =18.2.7, =17.2.2-beta, =18.2.7, =2.0.1-beta, =2.0.4-beta - dotnetify-path-fix 1.0.0-beta and more Source cves: CVE-2019-14862 Source advisory: OSV:GHSA-VCJJ-XF2R-MWVC...

brew-js (>=0.1.0-beta, <=0.1.8), buildr (>=0.2.0, <=0.8.7) +9 more potentially affected by CVE-2020-7604 via pulverizr (0.7.0)

pulverizr NPM version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pulverizr and may be impacted: - brew-js =0.1.0-beta, =0.2.0, =0.1.0, =0.0.1, =0.0.2, =1.0.0, =0.1.0, =0.0.11, =0.0.12 Source cves: CVE-2020-7604 Source advisory:...

ula-vp-controller (0.1.0) potentially affected by unknown CVE via vp-toolkit (0.1.1)

vp-toolkit NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vp-toolkit and may be impacted: - ula-vp-controller 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-P94W-42G3-F7H4...

@gsandf/react-native-oauth (>=2.1.16, <=2.2.2), react-native-oauth (>=1.1.0, <=2.2.0) +5 more potentially affected by CVE-2019-10805 via valib (2.0.0)

valib NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on valib and may be impacted: - @gsandf/react-native-oauth =2.1.16, =1.1.0, =2.1.16, =2.1.15, =0.1.0, =0.4.6 Source cves: CVE-2019-10805 Source advisory: SNYK:JS-VALIB-559015...

@careteam/mfe-init (0.0.8), @topfeed/topfeed (>=0.0.30, <=0.0.44) +69 more potentially affected by CVE-2019-10745 via assign-deep (>=0.1.2, <=0.4.7)

assign-deep NPM version =0.1.2, =0.0.30, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.2.0, =0.0.1, =1.0.0-alpha.5, =1.0.0-alpha.5, =0.0.1, =0.0.1, =1.0.0-alpha.5, =2.3.0 and more Source cves: CVE-2019-10745 Source advisory: SNYK:JS-ASSIGNDEEP-450211...

@abeai/node-sdk (>=6.2.1-rc1, <=7.3.1), @after-work.js/aw (>=6.0.0-dev.20190228.0, <=6.0.5) +62 more potentially affected by unknown CVE via handlebars (>=4.1.0, <=4.1.1)

handlebars NPM version =4.1.0, =6.2.1-rc1, =6.0.0-dev.20190228.0, =6.0.0-dev.20190228.0, =0.0.41, =0.9.9, =0.4.0, =1.0.4, =0.2.6, =1.2.0-17d3c29f-b3, =1.0.0-beta.2, =3.9.4, =1.5.3, =7.0.0, =7.0.21 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q42P-PG8M-CQH6...

macaca-android-dingtalk (1.0.30) potentially affected by CVE-2016-10586 via macaca-chromedriver (1.0.15)

macaca-chromedriver NPM version 1.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on macaca-chromedriver and may be impacted: - macaca-android-dingtalk 1.0.30 Source cves: CVE-2016-10586 Source advisory: OSV:GHSA-769C-QPHH-G3WM...

@absolunet/nwayo-cli (>=1.0.0, <=3.6.1), @absolunet/nwayo-workflow (>=3.3.0, <=3.6.1) +479 more potentially affected by CVE-2019-5484 via bower (>=1.1.2, <=1.8.4)

bower NPM version =1.1.2, =1.0.0, =3.3.0, =0.1.16-master.20181116180810, =0.1.2, =1.2.6, =1.0.1, =1.0.0, =0.2.44, =1.0.0, =1.1.1, =1.2.1 - @pattern-lab/uikit-workshop 1.0.0-alpha.7 - @pgswe/ics.js 0.1.3 - @pvsundarram/grunt-bower-task 0.4.2 - @rbrlortie/nwayo-cli 1.4.0 - @rbrlortie/nwayo-workflow...

@accordproject/cicero-cli (>=0.2.48, <=0.3.16), @accordproject/cicero-common (>=0.2.50, <=0.2.54) +114 more potentially affected by CVE-2018-3738 via protobufjs (>=6.1.0, <=6.8.5)

protobufjs NPM version =6.1.0, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.0.37, =0.0.36, =0.0.37, =0.1.0, =1.0.0, =2.2.0 - @ibmblockchain/composer-playground 0.16.2 and more Source cves: CVE-2018-3738 Source advisory: OSV:GHSA-762F-C2WG-M8C8...

@maxts/waterline-adapter-tests (1.0.3), driver-interface (1.0.2) +9 more potentially affected by CVE-2018-16487 +1 more via @sailshq/lodash (3.10.2)

@sailshq/lodash NPM version 3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sailshq/lodash and may be impacted: - @maxts/waterline-adapter-tests 1.0.3 - driver-interface 1.0.2 - machinepack-sockets =2.0.0, =5.2.0-0, =1.0.1, =0.9.1, =2.1.14,...

1ib (>=1.0.9, <=1.0.11), 20190403-utils (1.0.0) +10597 more potentially affected by CVE-2017-16137 via debug (>=4.0.0, <=4.3.0)

debug NPM version =4.0.0, =1.0.9, =1.0.1, =1.1.2, =1.0.0, =4.11.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0-alpha.19, =1.2.3 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...

10cartsharing (>=1.0.0, <=1.0.3), 1api (>=0.0.1, <=0.0.2) +7054 more potentially affected by CVE-2017-16113 via parsejson (>=0.0.1, <=0.0.3)

parsejson NPM version =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.0, =1.0.2, =1.0.1, =2.16.1, =1.0.0-RC.1, =0.1.0, =1.0.0, =1.3.2 - 88slot-ap 1.0.0 and more Source cves: CVE-2017-16113 Source advisory: OSV:GHSA-Q75G-2496-MXPP...

@finviet-jsrpt/jsrpt-electron-pdf (>=1.0.5, <=1.0.6), @infosupport/kc-cli (>=2.1.1, <=2.3.8) +25 more potentially affected by CVE-2018-1000006 via electron (>=1.6.0, <=1.6.15)

electron NPM version =1.6.0, =1.0.5, =2.1.1, =1.0.0, =4.1.0, =0.6.0, =0.0.2, =0.0.2, =1.1.3, =1.3.0, =1.6.0, =1.8.0 - electron-prebuilt-compile-jest 1.6.1 and more Source cves: CVE-2018-1000006 Source advisory: OSV:GHSA-W222-53C6-C86P...

10er10 (0.23.0), 10tcl (>=0.0.1, <=0.0.10) +4235 more potentially affected by CVE-2014-6394 via send (>=0.0.1, <=0.8.3)

send NPM version =0.0.1, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =1.0.6 - @axerunners/p2pool-scanner 0.0.2 - @azu/api-mock 1.0.0 and more Source cves: CVE-2014-6394 Source advisory: OSV:GHSA-XWG4-93C6-3H42...