@here/cli (>=1.5.0, <=1.6.1), @node-amazon/mws (>=0.0.2, <=0.0.3) +10 more potentially affected by CVE-2020-26256 via @fast-csv/parse (>=4.1.4, <=4.3.3)

@fast-csv/parse NPM version =4.1.4, =1.5.0, =0.0.2, =2.1.0-rc, =1.0.0, =1.2.127, =1.2.135, =1.2.111, =6.42.0, =4.1.4, =0.0.1, =0.0.6 Source cves: CVE-2020-26256 Source advisory: OSV:GHSA-8CV5-P934-3HWP...

37fis (>=1.0.0, <=1.0.2), 3loc (>=0.2.0, <=0.4.0) +1851 more potentially affected by CVE-2020-7788 via ini (>=1.0.0, <=1.3.5)

ini NPM version =1.0.0, =1.0.0, =0.2.0, =0.13.31, =0.0.17, =1.0.0, =1.0.0, =6.1.3, =1.0.99, =0.0.1-beta.2, =0.0.1-beta.2, =0.0.1-beta.2, =6.2.9, =1.0.3, =0.2.333, =0.2.346 and more Source cves: CVE-2020-7788 Source advisory: SNYK:JS-INI-1048974...

async-coap-tokio (0.1.0) potentially affected by CVE-2020-36444 via async-coap (0.1.0)

async-coap CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on async-coap and may be impacted: - async-coap-tokio 0.1.0 Source cves: CVE-2020-36444 Source advisory: OSV:RUSTSEC-2020-0124...

timeout_io (>=0.2.0, <=0.2.7) potentially affected by CVE-2020-36438 via tiny_future (0.3.2)

tinyfuture CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tinyfuture and may be impacted: - timeoutio =0.2.0, =0.2.7 Source cves: CVE-2020-36438 Source advisory: OSV:RUSTSEC-2020-0118...

safe_dns (0.3.0), safe_launcher (0.1.0) +1 more potentially affected by unknown CVE via safe_core (0.3.0)

safecore CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on safecore and may be impacted: - safedns 0.3.0 - safelauncher 0.1.0 - safenfs 0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0086...

adi (>=0.4.0, <=0.6.0), adi_screen (>=0.3.0, <=0.7.0) +119 more potentially affected by CVE-2020-35923 via ordered-float (>=0.2.3, <=1.0.2)

ordered-float CARGO version =0.2.3, =0.4.0, =0.3.0, =0.7.5, =0.2.0, =3.1.3, =0.1.1, =0.9.0, =0.0.10, =0.1.2, =0.0.2, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-35923 Source advisory: OSV:RUSTSEC-2020-0082...

@alisowski/homebridge-samsungtv-control (2.0.2), @dustinblackman/homebridge-samsungtv-control (>=2.0.1, <=2.0.2) +2 more potentially affected by CVE-2020-7786 via macfromip (1.1.1)

macfromip NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on macfromip and may be impacted: - @alisowski/homebridge-samsungtv-control 2.0.2 - @dustinblackman/homebridge-samsungtv-control =2.0.1, =2.0.0-alpha.1, =0.0.5, =0.2.7 Source cves...

@servable/server (>=1.0.0, <=1.14.0), dockertools (1.8.2) +5 more potentially affected by CVE-2020-7785 via node-ps (0.0.2)

node-ps NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-ps and may be impacted: - @servable/server =1.0.0, =1.0.0, =1.5.1, =0.2.1, =0.0.3, =0.0.4 - servable-publishable 1.1.0 Source cves: CVE-2020-7785 Source advisory:...

20mk-utils (>=1.0.0, <=1.0.3), 2o3t-icon-font (0.0.11) +8833 more potentially affected by unknown CVE via highlight.js (>=9.0.0, <=10.4.0)

highlight.js NPM version =9.0.0, =1.0.0, =0.0.1, =0.1.3, =1.0.0, =0.0.2, =0.3.0-alpha.22-10p, =0.1.56, =1.0.0, =1.3.0, =0.1.4, =11.0.1, =11.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7WWV-VH3V-89CQ...

a2d (>=0.1.0, <=0.1.11), acrylic-wayland (>=0.1.23, <=0.2.1) +1312 more potentially affected by unknown CVE via memmap (>=0.1.0, <=0.7.0)

memmap CARGO version =0.1.0, =0.1.0, =0.1.23, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.13, =0.5.2, =0.6.10 - aigcapi 5.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0077...

@fengshangwuqi/appkit (>=1.0.22, <=1.0.29), @koj/strapi (>=1.4.1, <=1.4.3) +30 more potentially affected by CVE-2021-23362 via hosted-git-info (>=3.0.0, <=3.0.7)

hosted-git-info NPM version =3.0.0, =1.0.22, =1.4.1, =0.1.0, =4.0.0, =1.0.0, =3.0.0, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.1.0, =0.1.10 and more Source cves: CVE-2021-23362 Source advisory:...

421752593pro (5.6.0), @concisejs/docz-theme-ext (>=0.0.1, <=0.0.3) +81 more potentially affected by CVE-2021-23362 via hosted-git-info (>=2.1.5, <=2.8.8)

hosted-git-info NPM version =2.1.5, =0.0.1, =0.1.0, =1.3.13, =3.0.0, =2.0.0, =1.16.0, =0.0.2, =2.3.1, =1.0.0, =1.0.0, =1.3.0, =1.3.16 and more Source cves: CVE-2021-23362 Source advisory: SNYK:JS-HOSTEDGITINFO-1088355...

@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +25 more potentially affected by CVE-2020-26245 via systeminformation (>=4.0.9, <=4.27.11)

systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =1.2.3 - @hnordt/sysinfo 0.1.1 and more Source cves:...

@dash4/plugin-readme (>=0.8.3, <=0.8.5), @dellasera/plugdo-mvc (>=1.0.12, <=1.2.11) +28 more potentially affected by CVE-2020-26237 via highlight.js (>=10.0.0, <=10.1.1)

highlight.js NPM version =10.0.0, =0.8.3, =1.0.12, =1.0.1, =0.2.0, =1.0.0-pre1, =1.0.0-pre10, =1.0.0-pre10, =3.0.0, =3.0.0, =0.2.9, =3.1.7, =3.1.11 and more Source cves: CVE-2020-26237 Source advisory: OSV:GHSA-VFRC-7R7C-W9MX...

@21epub/resource-lib (>=1.0.0, <=1.0.3), @2fn/helpers (>=1.0.0, <=1.0.1) +2861 more potentially affected by CVE-2020-26237 via highlight.js (>=9.0.0, <=9.18.1)

highlight.js NPM version =9.0.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =2.0.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @adebawo-damilare/esm-reports-app 5.2.0 - @admin-bro/design-system 1.4.0 and more Source cves: CVE-2020-26237 Source advisory...

@jamen/mdc (>=0.0.0, <=0.0.1), @namgoe/gcmsgen (>=0.0.3, <=0.0.11) +25 more potentially affected by CVE-2020-28459 via markdown-it-decorate (>=1.0.0, <=1.2.2)

markdown-it-decorate NPM version =1.0.0, =0.0.0, =0.0.3, =0.0.1, =0.0.0, =2.3.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =1.1.0, =0.1.0, =0.2.0, =1.0.1, =1.0.1, =1.0.17 and more Source cves: CVE-2020-28459 Source advisory: SNYK:JS-MARKDOWNITDECORATE-1044068...

@bigab/gulp-testee (>=0.0.1, <=0.0.2), books-fe-polymer-dev-sample (1.0.0) +13 more potentially affected by CVE-2021-23330 via launchpad (>=0.2.1, <=0.7.5)

launchpad NPM version =0.2.1, =0.0.1, =0.3.1, =0.0.1, =0.0.1, =1.0.1, =0.2.0, =0.0.1, =0.0.5, =2.0.15, =1.0.1, =2.0.3, =3.4.2 Source cves: CVE-2021-23330 Source advisory: SNYK:JS-LAUNCHPAD-1044065...

@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +25 more potentially affected by CVE-2020-26245 +1 more via systeminformation (>=4.0.9, <=4.27.11)

systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =1.2.3 - @hnordt/sysinfo 0.1.1 and more Source cves:...

@amaspace-editor/builder (>=0.0.52, <=0.0.522), @instacart/eslint-config (0.3.0) +13 more potentially affected by CVE-2020-28499 via merge (2.1.0)

merge NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on merge and may be impacted: - @amaspace-editor/builder =0.0.52, =1.4.2, =4.0.19, =1.0.21, =4.0.30, =1.0.34, =2.0.25, =3.0.17, =1.0.19, =4.0.21, =4.0.26 Source cves: CVE-2020-28499...

@arbetsmyra/semantic-release-config (>=1.0.2, <=1.1.4), @crystal-ball/semantic-release-base (>=2.13.0, <=2.22.0) +17 more potentially affected by CVE-2020-26226 via semantic-release (>=17.0.1, <=17.2.2)

semantic-release NPM version =17.0.1, =1.0.2, =2.13.0, =1.63.0, =2.0.0, =10.1.2, =1.2.0, =1.0.0, =1.4.0, =4.0.19, =8.0.0, =2.4.9, =10.0.0, =11.0.0 and more Source cves: CVE-2020-26226 Source advisory: OSV:GHSA-R2J6-P67H-Q639...