960.css (1.0.0), @4site/engrid-styles (>=0.2.19, <=0.2.24) +120 more potentially affected by CVE-2021-23343 via path-parse (>=1.0.5, <=1.0.6)

path-parse NPM version =1.0.5, =0.2.19, =0.1.1, =7.0.0-2, =0.2.0, =0.17.0, =0.17.0, =0.19.0, =0.17.0, =0.23.0, =0.17.0, =0.17.0, =0.17.1 - @choerodon/issue 0.17.0 and more Source cves: CVE-2021-23343 Source advisory: SNYK:JS-PATHPARSE-1077067...

aiowrap (0.1.0), ambisonic (>=0.1.0, <=0.3.1) +147 more potentially affected by CVE-2021-29938 via slice-deque (>=0.1.16, <=0.3.0)

slice-deque CARGO version =0.1.16, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.8.0, =0.3.0, =0.6.0, =0.4.0, =0.8.0, =0.2.0, =0.6.0, =0.15.3 and more Source cves: CVE-2021-29938 Source advisory: OSV:RUSTSEC-2021-0047...

keeshond_editor (>=0.1.0, <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (0.2.4)

toodee CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:RUSTSEC-2021-0028...

@igames/ghost-cli (>=1.15.3, <=1.15.5), homebridge-ring (9.14.2) +1 more potentially affected by CVE-2021-21315 via systeminformation (>=5.0.6, <=5.1.2)

systeminformation NPM version =5.0.6, =1.15.3, =1.15.5 - homebridge-ring 9.14.2 - ring-client-api 9.14.2 Source cves: CVE-2021-21315 Source advisory: OSV:GHSA-2M8V-572M-FF2V...

@0soft/zero-material-ui (>=0.0.1, <=0.0.25), @abegalinov/backoffice-skeleton (>=0.1.0, <=0.4.9) +304 more potentially affected by CVE-2021-23353 via jspdf (>=2.0.0, <=2.3.0)

jspdf NPM version =2.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.0-nightly-202010102951, =0.0.0-nightly-202151822534, =0.0.0-nightly-202151023138, =0.0.0-nightly-202010102951, =0.0.0-nightly-202141023010, =0.0.0-nightly-202010102951, =0.0.0-nightly-202122521518, =0.0.0-nightly-202121722854,...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2021-21310 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2021-21310 Source advisory: OSV:GHSA-PG53-56CG-4M8Q...

@byhuz/huz-ui-sigma (>=1.0.19, <=1.0.27), @deliverybot/client (>=0.7.0, <=0.7.2) +30 more potentially affected by CVE-2021-23327 via apexcharts (>=3.2.0, <=3.23.1)

apexcharts NPM version =3.2.0, =1.0.19, =0.7.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =7.20.0-snapshot-1617172219791, =2.3.0, =1.0.3, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.15.0 and more Source cves: CVE-2021-23327 Source advisory: OSV:GHSA-W46J-8HM6-H8MM...

1ib (>=1.0.9, <=1.0.11), 4front-cli (>=0.0.1, <=0.0.20) +375 more potentially affected by CVE-2021-23354 via printf (>=0.0.4, <=0.6.0)

printf NPM version =0.0.4, =1.0.9, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.5, =1.3.0-beta.0, =1.2.26, =1.2.31, =7.54.0 and more Source cves: CVE-2021-23354 Source advisory: SNYK:JS-PRINTF-1072096...

@zpmc/zwd-server (>=0.0.14, <=0.0.21) potentially affected by CVE-2020-26299 via ftp-srv (4.1.0)

ftp-srv NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ftp-srv and may be impacted: - @zpmc/zwd-server =0.0.14, =0.0.21 Source cves: CVE-2020-26299 Source advisory: OSV:GHSA-PMW4-JGXX-PCQ9...

amiwo (>=0.0.1, <=0.2.3), geoshaper (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-29935 via rocket (>=0.1.6, <=0.2.11)

rocket CARGO version =0.1.6, =0.0.1, =0.1.0, =0.8.0, =0.15.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2021-29935 Source advisory: OSV:RUSTSEC-2021-0044...

2pg-oauth (>=1.0.0, <=1.0.1), 30s (>=1.5.0, <=1.5.23) +1872 more potentially affected by CVE-2021-21306 via marked (>=1.1.1, <=1.2.9)

marked NPM version =1.1.1, =1.0.0, =1.5.0, =4.11.16, =1.0.1, =0.0.1, =2.4.0, =0.12.4, =4.0.0, =0.1.1, =0.1.10, =0.0.1, =1.0.0, =2.0.0, =3.1.1 - @adonisjs/cli 4.0.13 and more Source cves: CVE-2021-21306 Source advisory: OSV:GHSA-4R62-V4VQ-HR96...

fintalk-pkg (>=2.3.20, <=2.3.22) potentially affected by CVE-2021-21304 via dynamoose (2.3.0)

dynamoose NPM version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on dynamoose and may be impacted: - fintalk-pkg =2.3.20, =2.3.22 Source cves: CVE-2021-21304 Source advisory: OSV:GHSA-RRQM-P222-8PH2...

3m5-coco (>=0.0.2, <=0.0.981), @24hr/sentry-logger-node (>=0.4.0, <=1.2.2) +278 more potentially affected by CVE-2021-25912 via dotty (>=0.0.1, <=0.1.0)

dotty NPM version =0.0.1, =0.0.2, =0.4.0, =1.1.4, =0.0.2, =1.15.3, =0.1.0, =0.1.6, =1.0.4, =0.1.6, =0.1.0, =1.0.0, =1.0.0, =1.0.7 - @kikiemz/komzpol 1.1.2 and more Source cves: CVE-2021-25912 Source advisory: OSV:GHSA-F5C9-X9J6-87QP...

@glossgenius/eslint-config (>=1.0.2, <=1.0.7), @halonext/nestjs-express-cassandra (>=7.0.0, <=7.1.0) +7 more potentially affected by CVE-2021-26707 via merge-deep (>=3.0.0, <=3.0.2)

merge-deep NPM version =3.0.0, =1.0.2, =7.0.0, =5.2.0, =6.0.1, =0.0.1, =0.1.0-rc0, =0.0.11, =1.0.0, =1.2.4 Source cves: CVE-2021-26707 Source advisory: SNYK:JS-MERGEDEEP-1070277...

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), anitable (0.1.0) +66 more potentially affected by CVE-2021-21299 via hyper (>=0.13.0-alpha.1, <=0.13.7)

hyper CARGO version =0.13.0-alpha.1, =0.5.0-alpha.6, =0.1.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.31.1 and more Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...

easy-http-request (>=0.0.5, <=0.1.0), epic-wallet-rust-python (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-21299 via hyper (>=0.12.12, <=0.12.19)

hyper CARGO version =0.12.12, =0.0.5, =0.1.0, =0.1.0, =3.3.2, =3.3.2, =3.3.2, =3.0.0, =3.0.0, =3.0.0, =3.0.5 Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...

optra (>=0.1.0, <=0.2.1) potentially affected by CVE-2021-45694 via rdiff (0.1.2)

rdiff CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on rdiff and may be impacted: - optra =0.1.0, =0.2.1 Source cves: CVE-2021-45694 Source advisory: OSV:RUSTSEC-2021-0094...

@lyngs/chain (>=0.5.0, <=0.5.1) potentially affected by unknown CVE via @lyngs/merge (1.0.9)

@lyngs/merge NPM version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on @lyngs/merge and may be impacted: - @lyngs/chain =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory: SNYK:JS-LYNGSMERGE-1069823...

airust (0.1.6), font (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2021-26953 via postscript (>=0.2.5, <=0.11.1)

postscript CARGO version =0.2.5, =0.0.2, =0.0.2, =0.1.0, =0.4.3, =0.1.0, =0.0.2, =0.0.4 Source cves: CVE-2021-26953 Source advisory: OSV:RUSTSEC-2021-0017...

@sap/grunt-sapui5-bestpractice-build (>=1.3.17, <=1.4.11), @sap/grunt-sapui5-bestpractice-test (>=0.0.1, <=2.0.3) +19 more potentially affected by CVE-2021-21316 via less-openui5 (>=0.1.0, <=0.9.0)

less-openui5 NPM version =0.1.0, =1.3.17, =0.0.1, =1.0.2, =0.0.12, =0.0.8, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =1.0.42, =0.1.0, =0.1.0, =1.0.0-beta.1, =1.2.0 and more Source cves: CVE-2021-21316 Source advisory: OSV:GHSA-3CRJ-W4F5-GWH4...