@anandsuresh/smart-stream (>=1.0.1, <=1.1.0), @anandsuresh/smart_stream (1.0.0) +10 more potentially affected by CVE-2021-21368 via msgpack5 (>=4.0.2, <=4.4.0)

msgpack5 NPM version =4.0.2, =1.0.1, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =1.0.2, =1.2.9, =2.0.0-rc1, =0.5.6, =0.1.0, =0.1.3 Source cves: CVE-2021-21368 Source advisory: OSV:GHSA-GMJW-49P4-PCFM...

imapapi (>=1.4.6, <=1.4.9) potentially affected by CVE-2021-21368 via msgpack5 (>=5.0.0, <=5.2.0)

msgpack5 NPM version =5.0.0, =1.4.6, =1.4.9 Source cves: CVE-2021-21368 Source advisory: OSV:GHSA-GMJW-49P4-PCFM...

@solid/community-server (0.4.1) potentially affected by unknown CVE via @solid/identity-token-verifier (0.4.3)

@solid/identity-token-verifier NPM version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solid/identity-token-verifier and may be impacted: - @solid/community-server 0.4.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XMH9-RG6F-J3MR...

@0soft/zero-material-ui (>=0.0.1, <=0.0.25), @abegalinov/backoffice-skeleton (>=0.1.0, <=0.4.9) +302 more potentially affected by CVE-2021-23353 via jspdf (>=2.0.0, <=2.3.0)

jspdf NPM version =2.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.0-nightly-202010102951, =0.0.0-nightly-202151822534, =0.0.0-nightly-202151023138, =0.0.0-nightly-2020112923923, =0.0.0-nightly-202141023010, =0.0.0-nightly-202010102951, =0.0.0-nightly-202122521518, =0.0.0-nightly-202121722854,...

sn-cicd (>=4.6.12, <=4.6.17) potentially affected by CVE-2021-23372 via mongo-express (1.0.0-alpha.1)

mongo-express NPM version 1.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongo-express and may be impacted: - sn-cicd =4.6.12, =4.6.17 Source cves: CVE-2021-23372 Source advisory: SNYK:JS-MONGOEXPRESS-1085403...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +15394 more potentially affected by CVE-2021-24033 via react-dev-utils (>=0.4.0, <=11.0.3)

react-dev-utils NPM version =0.4.0, =1.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2, =1.0.3, =1.0.11 and more Source cves: CVE-2021-24033 Source advisory: OSV:GHSA-5Q6M-3H65-W53X...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +10864 more potentially affected by CVE-2021-21366 via xmldom (>=0.1.2, <=0.4.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.11.3-alpha.1660, =0.0.3, =0.0.9 and more Source cves: CVE-2021-21366 Source advisory: SNYK:JS-XMLDOM-1084960...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +4694 more potentially affected by CVE-2020-27223 via org.eclipse.jetty:jetty-server (>=9.4.6.v20170531, <=9.4.36.v20210114)

org.eclipse.jetty:jetty-server MAVEN version =9.4.6.v20170531, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.0.2, =0.1.0, =0.1.3-20210127.1838-76ab4fc -...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2021-21295 +1 more via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

3dcore-lib (0.17.9), @0xcert/client (>=1.0.0-beta, <=1.0.2) +1808 more potentially affected by CVE-2020-28498 via elliptic (>=6.0.2, <=6.5.3)

elliptic NPM version =6.0.2, =1.0.0-beta, =0.1.0, =0.0.0-alpha10, =2.0.0-alpha10, =2.0.0-alpha10, =1.0.0, =1.5.1, =2.0.0-alpha0, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =2.1.1 and more Source cves: CVE-2020-28498 Source advisory:...

botbuilder (>=4.10.0, <=4.10.2-rc0), botbuilder-azure (>=4.10.0, <=4.10.2-rc0) +2 more potentially affected by CVE-2021-1725 via botframework-connector (>=4.10.0, <=4.10.2-rc0)

botframework-connector NPM version =4.10.0, =4.10.0, =4.10.0, =4.10.0-preview, =4.10.2-rc0-preview - botkit-mock 4.10.0 Source cves: CVE-2021-1725 Source advisory: OSV:GHSA-FVCJ-HVFW-7F2V...

@conversationlearner/sdk (>=0.502.2, <=0.505.2), botbuilder (>=4.7.0, <=4.7.2) +4 more potentially affected by CVE-2021-1725 via botframework-connector (>=4.7.0, <=4.7.2)

botframework-connector NPM version =4.7.0, =0.502.2, =4.7.0, =4.7.0, =1.4.1, =0.505.1, =1.6.0, =1.6.2 Source cves: CVE-2021-1725 Source advisory: OSV:GHSA-FVCJ-HVFW-7F2V...

botbuilder (>=4.9.0, <=4.9.3), botbuilder-azure (>=4.9.0, <=4.9.3) +3 more potentially affected by CVE-2021-1725 via botframework-connector (>=4.9.0, <=4.9.3)

botframework-connector NPM version =4.9.0, =4.9.0, =4.9.0, =4.9.0-preview, =4.9.0-preview, =4.9.3-preview - botkit-mock 4.9.0 Source cves: CVE-2021-1725 Source advisory: OSV:GHSA-FVCJ-HVFW-7F2V...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: SNYK:JS-CHRONONODE-1083228...

booklibrs (>=0.1.0, <=1.0.4), fl2rust (0.3.1) +5 more potentially affected by CVE-2021-28306 +2 more via fltk (>=0.9.7, <=0.14.13)

fltk CARGO version =0.9.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.15 Source cves: CVE-2021-28306, CVE-2021-28307, CVE-2021-28308 Source advisory: OSV:RUSTSEC-2021-0038...

317-project (0.0.0), 4pm-cli (>=0.0.1, <=0.0.5) +1884 more potentially affected by CVE-2020-28502 via xmlhttprequest (>=1.2.2, <=1.6.0)

xmlhttprequest NPM version =1.2.2, =0.0.1, =0.1.16-master.20181116180810, =0.1.0, =1.1.1, =0.0.4, =1.0.399-main, =0.1.0, =0.1.2, =0.1.3 - @flexcodelabs/input 0.1.1 and more Source cves: CVE-2020-28502 Source advisory: SNYK:JS-XMLHTTPREQUEST-1082935...

1tp (>=0.0.1, <=0.11.2), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +2800 more potentially affected by CVE-2020-28502 via xmlhttprequest-ssl (>=1.5.1, <=1.5.5)

xmlhttprequest-ssl NPM version =1.5.1, =0.0.1, =1.0.2, =4.11.25, =0.1.3, =0.0.15, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =0.2.9-dev-10, =0.13.0-alkemio, =0.17.0-alkemio-1 and more Source cves: CVE-2020-28502 Source advisory: SNYK:JS-XMLHTTPREQUESTSSL-1082936...

diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)

diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:RUSTSEC-2021-0037...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2021-28037 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2021-28037 Source advisory: OSV:RUSTSEC-2021-0036...

vostok (>=1.4.0, <=1.5.5) potentially affected by CVE-2021-21322 via fastify-http-proxy (>=4.0.4, <=4.1.0)

fastify-http-proxy NPM version =4.0.4, =1.4.0, =1.5.5 Source cves: CVE-2021-21322 Source advisory: OSV:GHSA-C4QR-GMR9-V23W...