brew-js (>=0.1.0 <=0.1.8), buildr (>=0.2.0 <=0.8.7) +9 more potentially affected by CVE-2020-7604 via pulverizr (=0.7.0)

pulverizr NPM version =0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pulverizr and may be impacted: - brew-js =0.1.0, =0.2.0, =0.1.0, =0.0.1, =0.0.2, =1.0.0, =0.1.0, =0.0.11, =0.0.12 Source cves: CVE-2020-7604 Source advisory:...

sulu-file-system-view-prompt-here (>=1.0.2 <=1.0.4) potentially affected by CVE-2020-7602 via node-prompt-here (=1.0.1)

node-prompt-here NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on node-prompt-here and may be impacted: - sulu-file-system-view-prompt-here =1.0.2, =1.0.4 Source cves: CVE-2020-7602 Source advisory: SNYK:JS-NODEPROMPTHERE-560115...

@absolunet/nwayo-workflow (>=3.2.0 <=3.3.6), @londondevstudio/gush (>=0.9.0 <=0.10.0) +53 more potentially affected by CVE-2020-7601 via gulp-scss-lint (>=0.1.12 <=1.0.0)

gulp-scss-lint NPM version =0.1.12, =3.2.0, =0.9.0, =1.0.0, =1.1.1, =0.0.27, =0.0.33, =1.0.34, =1.1.54 - fear-core-dev =1.3.2 and more Source cves: CVE-2020-7601 Source advisory: SNYK:JS-GULPSCSSLINT-560114...

@hpcc-js/dgrid-shim (>=0.1.10 <=0.1.12) potentially affected by CVE-2020-5259 via dojox (=1.13.0)

dojox NPM version =1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojox and may be impacted: - @hpcc-js/dgrid-shim =0.1.10, =0.1.12 Source cves: CVE-2020-5259 Source advisory: OSV:GHSA-3HW5-Q855-G6CW...

@hpcc-js/dgrid-shim (>=0.0.29 <=0.0.32), dijit (>=1.12.1 <=1.12.11) +1 more potentially affected by CVE-2020-5258 via dojo (>=1.12.1 <=1.12.7)

dojo NPM version =1.12.1, =0.0.29, =1.12.1, =1.12.1, =1.12.11 Source cves: CVE-2020-5258 Source advisory: OSV:GHSA-JXFH-8WGV-VFR2...

com.softwaremill.akka-http-session:jwt_2.13 (=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.13 (=0.5.10)

com.softwaremill.akka-http-session:core2.13 MAVEN version =0.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.softwaremill.akka-http-session:core2.13 and may be impacted: - com.softwaremill.akka-http-session:jwt2.13 =0.5.10 Source cves:...

com.codacy:codacy-seed-client-akka-http_2.12 (>=1.1.0-master.51.7b7549c_akka25Circe08 <=1.2.0_akka25Circe08), com.softwaremill.akka-http-session:jwt_2.12 (>=0.3.0 <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.12 (>=0.3.0 <=0.5.10)

com.softwaremill.akka-http-session:core2.12 MAVEN version =0.3.0, =1.1.0-master.51.7b7549cakka25Circe08, =0.3.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1046654...

com.codacy:codacy-seed-client-akka-http_2.11 (>=1.1.0-master.51.7b7549c_akka25Circe08 <=1.2.0_akka25Circe08), com.softwaremill.akka-http-session:jwt_2.11 (>=0.2.0 <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.11 (>=0.2.0 <=0.5.10)

com.softwaremill.akka-http-session:core2.11 MAVEN version =0.2.0, =1.1.0-master.51.7b7549cakka25Circe08, =0.2.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1046655...

gossip-object (>=0.1.0 <=2.3.4), gossipdb (>=0.1.1 <=0.1.5) +2 more potentially affected by CVE-2020-7640 via fun-map (>=2.0.1 <=3.3.1)

fun-map NPM version =2.0.1, =0.1.0, =0.1.1, =0.0.0, =0.2.0, =1.0.0 Source cves: CVE-2020-7640 Source advisory: SNYK:JS-FUNMAP-564436...

0.8.18-p11 (=0.8.18-p12), 0.extends.wechat (>=1.0.51 <=1.0.65) +9368 more potentially affected by CVE-2020-7598 via minimist (>=1.0.0 <=1.2.2)

minimist NPM version =1.0.0, =1.0.51, =0.0.1, =1.0.0, =0.0.2, =0.3.0, =0.1.0, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.1.2 and more Source cves: CVE-2020-7598 Source advisory: SNYK:JS-MINIMIST-559764...

ula-vp-controller (=0.1.0) potentially affected by unknown CVE via vp-toolkit (=0.1.1)

vp-toolkit NPM version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vp-toolkit and may be impacted: - ula-vp-controller =0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-P94W-42G3-F7H4...

ula-vp-controller (=0.1.0) potentially affected by unknown CVE via vp-toolkit (=0.1.1)

vp-toolkit NPM version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vp-toolkit and may be impacted: - ula-vp-controller =0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-FF5X-W9WG-H275...

alcali (>=2018.3.4 <=2019.2.4.post0), argus-server (>=1.0.0 <=1.1.1) +164 more potentially affected by CVE-2020-9402 via django (>=3.0.0 <=3.0.3)

django PYPI version =3.0.0, =2018.3.4, =1.0.0, =0.1.0, =0.1.3, =0.18.0, =0.3.0, =2.8.0, =0.1.1, =0.0.1, =0.1.3 - djangelo =0.1.4 - django-acsecure =0.1.3 - django-add-default-value =0.4.0 - django-admin-custom-filters =0.1.0 and more Source cves: CVE-2020-9402 Source advisory: OSV:PYSEC-2020-36...

libtool (>=0.0.2 <=1.1.0), pycellga (>=0.1.0 <=0.3.0) potentially affected by unknown CVE via markdown-editor (=1.0.7)

markdown-editor PYPI version =1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-editor and may be impacted: - libtool =0.0.2, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MARKDOWNEDITOR-559226...

dijit (>=1.16.0 <=1.16.1), dojox (>=1.16.0 <=1.16.1) potentially affected by CVE-2020-5258 via dojo (>=1.16.0 <=1.16.1)

dojo NPM version =1.16.0, =1.16.0, =1.16.0, =1.16.1 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

dijit (>=1.14.0 <=1.14.5), dojox (>=1.14.0 <=1.14.5) potentially affected by CVE-2020-5258 via dojo (>=1.14.0 <=1.14.5)

dojo NPM version =1.14.0, =1.14.0, =1.14.0, =1.14.5 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

@antv/chart-linter (>=1.1.5 <=1.1.6), @dljsbook/data (>=0.3.2 <=0.6.1) +50 more potentially affected by CVE-2019-10806 via vega-util (>=1.10.0 <=1.12.2)

vega-util NPM version =1.10.0, =1.1.5, =0.3.2, =0.6.0, =0.0.4, =1.0.0, =0.8.0, =1.0.0-alpha.4, =0.0.0-placeholder, =0.2.4, =0.4.3-dev9, =1.0.0, =1.4.0, =5.0.0, =6.0.2-alpha.0 and more Source cves: CVE-2019-10806 Source advisory: SNYK:JS-VEGAUTIL-559223...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8 <=0.1.12), ai.snips:play-mongo-bson_2.12 (>=0.5 <=0.5.1) +6328 more potentially affected by CVE-2020-8840 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0 <=2.8.11.4)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.5, =2.3.0, =1.5.6, =4.2.1, =4.4.1, =1.0.0.RELEASE, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.9 and more Source cves: CVE-2020-8840 Source advisory: OSV:GHSA-4W82-R329-3Q67...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8 <=0.1.12), ai.snips:play-mongo-bson_2.12 (>=0.5 <=0.5.1) +6328 more potentially affected by CVE-2019-20330 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0 <=2.8.11.4)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.5, =2.3.0, =1.5.6, =4.2.1, =4.4.1, =1.0.0.RELEASE, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.9 and more Source cves: CVE-2019-20330 Source advisory: OSV:GHSA-GWW7-P5W4-WRFV...

@gsandf/react-native-oauth (>=2.1.16 <=2.2.2), react-native-oauth (>=1.1.0 <=2.2.0) +5 more potentially affected by CVE-2019-10805 via valib (=2.0.0)

valib NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on valib and may be impacted: - @gsandf/react-native-oauth =2.1.16, =1.1.0, =2.1.16, =2.1.15, =0.1.0, =0.4.6 Source cves: CVE-2019-10805 Source advisory: SNYK:JS-VALIB-559015...