@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +109 more potentially affected by unknown CVE via sequelize (>=4.0.0, <=4.44.3)

sequelize NPM version =4.0.0, =0.0.1, =4.0.2, =1.0.16, =1.0.20, =1.0.18, =1.0.10, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =1.0.6-2ef3451f-b17, =5.1.3, =1.6.7, =0.6.3, =0.6.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-FW4P-36J9-RRJ3...

nineone152 (>=1.1.9, <=1.1.11) potentially affected by unknown CVE via node-ftp (0.0.1-security)

node-ftp NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-ftp and may be impacted: - nineone152 =1.1.9, =1.1.11 Source cves: unknown CVE Source advisory: OSV:GHSA-5JGP-PG4F-Q8VJ...

adaptive-fs (>=1.1.0, <=1.3.2), ajato (0.0.1-wip) +1 more potentially affected by unknown CVE via mogoose (0.0.1-security)

mogoose NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mogoose and may be impacted: - adaptive-fs =1.1.0, =1.0.48, =1.1.26 Source cves: unknown CVE Source advisory: OSV:GHSA-5MM9-55C9-P5R7...

fd-dcc (>=1.0.0, <=2.1.4), test_sdk_aki (>=1.0.3, <=1.0.4) +1 more potentially affected by unknown CVE via axioss (0.0.1-security)

axioss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axioss and may be impacted: - fd-dcc =1.0.0, =1.0.3, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8W9J-6WG6-QV4F...

jl-wechat-sdk (>=1.0.0, <=1.2.3) potentially affected by unknown CVE via crpyto-js (0.0.1-security)

crpyto-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crpyto-js and may be impacted: - jl-wechat-sdk =1.0.0, =1.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-73C6-VWJH-G3QH...

mycoin (1.0.0), simple-blockchain-implement (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via crytpo-js (0.0.1-security)

crytpo-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin 1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-M4FQ-XH7W-JHFM...

euro-coin-collector (>=0.0.1, <=1.0.0), forex-news-downloader (>=0.0.2, <=0.5.13) +11 more potentially affected by unknown CVE via marsdb (>=0.4.4, <=0.6.11)

marsdb NPM version =0.4.4, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.6.0, =2.8.7 - piedpiper-middle-out 5.8.1 Source cves: unknown CVE Source advisory: OSV:GHSA-5MRR-RGP6-X4GR...

@mlshv/modern-koa-docs (3.0.2), bootstrap-mithril (>=1.0.4-alpha.0, <=1.0.5-alpha.0) +26 more potentially affected by unknown CVE via mithril (>=1.0.0, <=1.1.6)

mithril NPM version =1.0.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.1, =1.0.4-alpha.0, =0.6.0, =1.0.0-alpha.2, =1.0.0-alpha.2, =0.2.0, =0.1.0, =1.0.1-5, =0.3.0, =0.3.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C3PX-V9C7-M734...

mirtx (0.1.0), mithril-slider (1.1.2) potentially affected by unknown CVE via mithril (2.0.0-rc.4)

mithril NPM version 2.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on mithril and may be impacted: - mirtx 0.1.0 - mithril-slider 1.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-C3PX-V9C7-M734...

ezs (>=5.5.0, <=9.3.1), hoppel (0.4.0) +2 more potentially affected by unknown CVE via notevil (>=1.0.0, <=1.3.1)

notevil NPM version =1.0.0, =5.5.0, =1.0.0, =1.0.1 - piedpiper-middle-out 5.8.1 Source cves: unknown CVE Source advisory: OSV:GHSA-7R5F-7QR4-PF6Q...

@quarks/bpmn-extension (>=1.0.0, <=1.0.142) potentially affected by unknown CVE via cmmn-js-properties-panel (0.4.0)

cmmn-js-properties-panel NPM version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cmmn-js-properties-panel and may be impacted: - @quarks/bpmn-extension =1.0.0, =1.0.142 Source cves: unknown CVE Source advisory: OSV:GHSA-VMH4-322V-CFPC...

@dotgov/bpmn (>=0.0.1, <=0.0.29), @dotgov/z_bpmn (>=0.0.1, <=2.0.0) +19 more potentially affected by unknown CVE via bpmn-js-properties-panel (>=0.11.2, <=0.30.0)

bpmn-js-properties-panel NPM version =0.11.2, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =1.1.22, =1.0.97, =2.0.0, =1.0.14, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VPJ4-89Q8-RH38...

@alyzenpublic/craco (>=3.2.3-dev, <=3.2.3-dev2), @amory/core (>=2018.8.29-1, <=2018.8.31-0) +153 more potentially affected by unknown CVE via lodash.mergewith (>=4.0.3, <=4.6.1)

lodash.mergewith NPM version =4.0.3, =3.2.3-dev, =2018.8.29-1, =2018.8.29-0, =2018.8.31-0, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =1.0.0, =1.10.0, =1.10.1, =1.0.0, =1.0.0, =1.0.0, =5.0.0, =5.2.8, =6.2.0 and more Source cves: unknown CVE Source advisory:...

@anjuna/charts (>=1.0.0-preview.45, <=1.0.0-preview.47), @badgeup/badgeup-browser-client (>=0.3.0, <=3.0.0) +186 more potentially affected by unknown CVE via lodash.defaultsdeep (>=4.3.2, <=4.6.0)

lodash.defaultsdeep NPM version =4.3.2, =1.0.0-preview.45, =0.3.0, =0.1.0, =0.3.0, =6.0.2, =1.0.0-rc.1, =1.2.0, =1.0.0, =0.9.16, =0.0.1, =0.275.1-chore-update-deps.3894.0, =0.18.2-alpha.1, =3.0.0, =6.8.1, =7.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-46FH-8FC5-XCWX...

@blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1), @blackbaud/skyux-builder (>=1.10.1, <=1.31.0) +72 more potentially affected by unknown CVE via lodash.mergewith (>=4.0.3, <=4.6.0)

lodash.mergewith NPM version =4.0.3, =1.10.0, =1.10.1, =5.0.0, =5.2.8, =5.0.0, =5.0.0, =5.1.1, =1.3.0, =1.0.0-alpha.1, =1.0.4, =1.1.3, =1.0.0-alpha.4, =1.1.11, =1.0.3, =1.0.0-alpha.3, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5947-M4FG-XHQG...

@anjuna/charts (>=1.0.0-preview.45, <=1.0.0-preview.47), @badgeup/badgeup-browser-client (>=0.3.0, <=3.0.0) +186 more potentially affected by unknown CVE via lodash.defaultsdeep (>=4.3.2, <=4.6.0)

lodash.defaultsdeep NPM version =4.3.2, =1.0.0-preview.45, =0.3.0, =0.1.0, =0.3.0, =6.0.2, =1.0.0-rc.1, =1.2.0, =1.0.0, =0.9.16, =0.0.1, =0.275.1-chore-update-deps.3894.0, =0.18.2-alpha.1, =3.0.0, =6.8.1, =7.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H5MP-5Q4P-GGF5...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @cimpress/simple-auth-wrapper (>=3.1.0, <=6.4.7) +277 more potentially affected by unknown CVE via lodash.merge (>=4.0.1, <=4.6.0)

lodash.merge NPM version =4.0.1, =0.1.0-18, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =6.2.6, =1.1.2, =0.0.22, =0.0.4, =1.2.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2M96-9W4J-WGV7...

docpad-plugin-posteditor (>=2.0.0, <=2.1.2) potentially affected by unknown CVE via bleach (0.3.0)

bleach NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - docpad-plugin-posteditor =2.0.0, =2.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-5634-RV46-48JF...

@550w-tools/cli (>=0.0.14, <=0.0.16), @550w-tools/core (>=0.0.14, <=0.0.16) +539 more potentially affected by unknown CVE via safe-eval (>=0.2.0, <=0.4.1)

safe-eval NPM version =0.2.0, =0.0.14, =0.0.14, =0.0.13, =0.0.14, =0.0.15, =1.0.1, =1.0.2, =1.0.3, =1.1.2, =0.1.16-beta.1, =1.0.0-beta.4, =0.3.0-alpha.1, =0.20.0, =2.0.295, =2.0.315 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9PCF-H8Q9-63F6...

@27works/posto (2.0.2), @asephermann/capacitor-filechooser (0.0.1) +161 more potentially affected by unknown CVE via eco (>=1.0.3, <=1.1.0-rc-3)

eco NPM version =1.0.3, =0.0.9, =1.0.1, =0.0.1, =0.0.73, =0.0.1, =1.2.1, =0.0.1, =0.2.5, =1.0.0, =0.1.0, =0.2.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R32X-JHW5-G48P...