jsreport (>=2.0.0 <=2.1.0), jsreport-keycloak-auth (>=0.0.1 <=0.0.2) potentially affected by CVE-2020-7762 via jsreport-chrome-pdf (>=1.0.0 <=1.0.2)

jsreport-chrome-pdf NPM version =1.0.0, =2.0.0, =0.0.1, =0.0.2 Source cves: CVE-2020-7762 Source advisory: OSV:GHSA-934W-HVJ4-7FR6...

@attraqt/activity (>=0.0.1 <=1.3.0-alpha.3), @attraqt/xo-js (=0.0.1) +4 more potentially affected by CVE-2020-28464 via djv (>=0.1.4 <=2.1.3-alpha.0)

djv NPM version =0.1.4, =0.0.1, =1.1.8, =1.0.3, =0.4.0, =1.0.1, =1.0.1-beta.1 Source cves: CVE-2020-28464 Source advisory: OSV:GHSA-4HV7-3Q38-97M8...

@ubleipzig/autoconfig (>=2.1.0 <=2.3.1), cardinalkeeper (>=0.0.2 <=0.0.5) +11 more potentially affected by CVE-2020-28448 via multi-ini (>=0.4.1 <=2.1.0)

multi-ini NPM version =0.4.1, =2.1.0, =0.0.2, =2.7.0, =1.0.0, =2.24.6-telemetry-test.19, =2.12.64-telemetry-test.19, =0.1.54-telemetry-test.19, =1.3.21-telemetry-test.19, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =1.0.7 Source cves: CVE-2020-28448 Source advisory: OSV:GHSA-G78F-549W-C354...

@codinger/build-helper (=1.0.2-rc.1), @onepointfour-npm/pollyfiller (>=1.0.10 <=1.2.3) potentially affected by CVE-2019-10799 via compile-sass (=0.1.4)

compile-sass NPM version =0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on compile-sass and may be impacted: - @codinger/build-helper =1.0.2-rc.1 - @onepointfour-npm/pollyfiller =1.0.10, =1.2.3 Source cves: CVE-2019-10799 Source advisory:...

@codeanywhere/theia-plugin-ext (>=1.11.0 <=1.11.4), @devworkspace-theia/webviews (>=0.0.1-alpha.1 <=0.0.2) +49 more potentially affected by CVE-2021-28161 via @theia/console (>=0.10.0-next.a2cdb337 <=1.8.0-next.632a67a5)

@theia/console NPM version =0.10.0-next.a2cdb337, =1.11.0, =0.0.1-alpha.1, =0.8.1-alpha.1, =0.0.1-1583345065, =0.0.2, =1.58.6, =1.64.0, =1.73.0-next.2, =0.1.0-next.4b3e6c8a, =0.1.0-next.4b3e6c8a, =0.3.16, =0.3.14, =0.16.0-next.f114ded2 and more Source cves: CVE-2021-28161 Source advisory:...

chhyun-utils (>=1.0.12 <=1.0.39), jotunheimr (>=1.11.0 <=1.12.1) +4 more potentially affected by CVE-2019-10787 via im-resize (>=2.0.2 <=2.3.2)

im-resize NPM version =2.0.2, =1.0.12, =1.11.0, =1.0.0, =0.0.1, =2.0.2, =2.0.3 - wn-s3-uploader =1.0.0 Source cves: CVE-2019-10787 Source advisory: OSV:GHSA-R9VM-RHMF-7HXX...

@alisowski/homebridge-samsungtv-control (=2.0.2), @dustinblackman/homebridge-samsungtv-control (>=2.0.1 <=2.0.2) +2 more potentially affected by CVE-2020-7786 via macfromip (=1.1.1)

macfromip NPM version =1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on macfromip and may be impacted: - @alisowski/homebridge-samsungtv-control =2.0.2 - @dustinblackman/homebridge-samsungtv-control =2.0.1, =2.0.0, =0.0.5, =0.2.7 Source cves:...

atila-vue (>=0.1.3 <=0.1.3.5), contrail (>=0.3.0 <=1.0.2) +28 more potentially affected by CVE-2021-28658 via django (>=3.0.0 <=3.0.11)

django PYPI version =3.0.0, =0.1.3, =0.3.0, =0.1.1, =0.0.1, =0.0.1, =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.4 and more Source cves: CVE-2021-28658 Source advisory: OSV:GHSA-XGXC-V2QG-CHMH...

aimmo (>=0.61.9 <=0.69.1b348), ambition-edc (>=0.3.68 <=0.3.72) +61 more potentially affected by CVE-2021-28658 via django (>=2.2.0 <=2.2.2)

django PYPI version =2.2.0, =0.61.9, =0.3.68, =0.14.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =2.0.0, =2.2.0 - django-country-filter =0.0.1 and more Source cves: CVE-2021-28658 Source advisory: OSV:GHSA-XGXC-V2QG-CHMH...

plone-app-z3cform (>=4.0.0a1 <=4.0.0a10) potentially affected by CVE-2020-28735 via plone-app-dexterity (=2.5.2)

plone-app-dexterity PYPI version =2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-dexterity and may be impacted: - plone-app-z3cform =4.0.0a1, =4.0.0a10 Source cves: CVE-2020-28735 Source advisory: OSV:GHSA-X7WF-5MJC-6X76...

plone-app-portlets (>=5.0.0a3 <=5.0.0a4) potentially affected by CVE-2020-28735 via plone-app-event (=3.2.1)

plone-app-event PYPI version =3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-event and may be impacted: - plone-app-portlets =5.0.0a3, =5.0.0a4 Source cves: CVE-2020-28735 Source advisory: OSV:GHSA-X7WF-5MJC-6X76...

@ajay-testing/cli (>=0.6.0 <=0.12.0), @ajay-testing/forge-cli (=0.5.0) +32 more potentially affected by CVE-2021-21413 via isolated-vm (>=0.1.6 <=3.3.7)

isolated-vm NPM version =0.1.6, =0.6.0, =1.0.2, =0.0.1, =0.3.2, =0.48.0, =0.55.0, =0.42.0, =0.4.1, =0.0.27, =0.0.0-experimental-4dc04e6, =1.0.2-next.4 and more Source cves: CVE-2021-21413 Source advisory: OSV:GHSA-MMHJ-4W6J-76H7...

@100mslive/hms-video-react (>=0.3.27 <=0.3.59), @aagames-fe/google-translate (>=0.0.2 <=0.0.14) +371 more potentially affected by CVE-2021-23368 via postcss (>=8.0.0 <=8.2.1)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.1101.0-next.0, =0.30.7-danger.689b7beb.20, =0.33.2-danger.94e2a1914.37, =0.25.0, =0.2.19, =2.0.174, =2.0.174, =2.0.174, =2.6.25 and more Source cves: CVE-2021-23368 Source advisory: SNYK:JS-POSTCSS-1090595...

com.netflix.priam:priam-dse-extensions (>=2.0.16 <=3.11.108), com.netflix.priam:priam-web (>=2.0.16 <=2.6.0) potentially affected by CVE-2021-28100 via com.netflix.priam:priam (>=2.0.16 <=3.1.104)

com.netflix.priam:priam MAVEN version =2.0.16, =2.0.16, =2.0.16, =2.6.0 Source cves: CVE-2021-28100 Source advisory: OSV:GHSA-F4JH-WW96-9H9J...

com.barchart.http:barchart-http-handlers (>=1.0.6 <=1.0.7), com.barchart.http:barchart-http-server (>=1.0.6 <=1.0.7) +14 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (>=4.0.0.Alpha1 <=4.0.0.Alpha8)

io.netty:netty MAVEN version =4.0.0.Alpha1, =1.0.6, =1.0.6, =0.3, =0.3, =0.2, =1.3.0, =1.0.0.Alpha1, =1.0.0.Alpha2 and more Source cves: CVE-2021-21295, CVE-2021-21409 Source advisory: OSV:GHSA-F256-J965-7F32...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +26855 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.60.Final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.Beta4, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

com.github.igorperikov:hollow-maven-plugin (>=0.1.1 <=1.0.1), com.netflix.hollow:hollow-diff-ui (>=2.0.0 <=6.1.0) +8 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (>=2.0.0 <=6.1.0)

com.netflix.hollow:hollow MAVEN version =2.0.0, =0.1.1, =2.0.0, =2.5.0, =2.0.0, =4.3.0, =2.16.0, =2.5.0, =2.0.0, =0.1.0, =0.1.0, =2.0.0 Source cves: CVE-2021-28099 Source advisory: OSV:GHSA-9295-MHF3-V33M...

@agneta/cli (>=0.14.7 <=0.14.15), @servisbot/servisbot-cli (>=9.4.0 <=10.3.2) +3 more potentially affected by CVE-2020-7774 via y18n (=4.0.0)

y18n NPM version =4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on y18n and may be impacted: - @agneta/cli =0.14.7, =9.4.0, =0.14.4, =1.0.0-rc.1, =1.0.0-rc.7 Source cves: CVE-2020-7774 Source advisory: OSV:GHSA-C4W7-XM78-47VH...

@codedungeon/gunner (>=0.0.1 <=0.80.1), @codedungeon/laravel-versions-cli (>=0.0.3 <=0.1.0) +74 more potentially affected by CVE-2020-8298 via fs-path (>=0.0.22 <=0.0.24)

fs-path NPM version =0.0.22, =0.0.1, =0.0.3, =0.0.9, =1.0.2, =1.0.1, =0.0.1, =1.0.0, =1.0.0, =0.0.40, =1.0.1, =0.0.1, =1.0.1, =0.1.0, =1.0.0, =1.0.2 and more Source cves: CVE-2020-8298 Source advisory: OSV:GHSA-8MRF-64FW-2X75...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.24), ai.hyacinth.framework:core-service-discovery-server (>=0.5.0 <=0.5.24) +5662 more potentially affected by CVE-2021-21351 via com.thoughtworks.xstream:xstream (>=1.1.1 <=1.4.15)

com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =Finchley.SR4, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =0.3.3, =0.4.0, =0.4.2 and more Source cves: CVE-2021-21351 Source advisory: OSV:GHSA-HRCP-8F3Q-4W2C...