0.8.18-p11 (0.8.18-p12), 0.extends.wechat (>=1.0.51, <=1.0.65) +9386 more potentially affected by CVE-2020-7598 via minimist (>=1.0.0, <=1.2.2)

minimist NPM version =1.0.0, =1.0.51, =0.0.1, =1.0.0, =0.0.2, =0.3.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =2.0.2 and more Source cves: CVE-2020-7598 Source advisory: SNYK:JS-MINIMIST-559764...

ula-vp-controller (0.1.0) potentially affected by unknown CVE via vp-toolkit (0.1.1)

vp-toolkit NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vp-toolkit and may be impacted: - ula-vp-controller 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-FF5X-W9WG-H275...

libtool (>=0.0.2, <=1.1.0), pycellga (>=0.1.0, <=0.3.0) potentially affected by unknown CVE via markdown-editor (1.0.7)

markdown-editor PYPI version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-editor and may be impacted: - libtool =0.0.2, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MARKDOWNEDITOR-559226...

@hpcc-js/dgrid-shim (>=0.1.10, <=0.1.12) potentially affected by CVE-2020-5259 via dojox (1.13.0)

dojox NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojox and may be impacted: - @hpcc-js/dgrid-shim =0.1.10, =0.1.12 Source cves: CVE-2020-5259 Source advisory: SNYK:JS-DOJOX-559225...

@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +3 more potentially affected by CVE-2020-5258 via dojo (>=1.13.0, <=1.13.6)

dojo NPM version =1.13.0, =1.0.0, =4.0.0-alpha.1, =0.1.10, =1.13.0, =1.13.0, =1.13.6 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

dijit (>=1.15.0, <=1.15.2), dojox (>=1.15.0, <=1.15.2) potentially affected by CVE-2020-5258 via dojo (>=1.15.0, <=1.15.2)

dojo NPM version =1.15.0, =1.15.0, =1.15.0, =1.15.2 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

dijit (>=1.12.1, <=1.12.7), dojox (>=1.12.1, <=1.12.7) potentially affected by CVE-2020-5258 via dojo (>=1.12.1, <=1.12.7)

dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.7 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

@antv/chart-linter (>=1.1.5, <=1.1.6), @dljsbook/data (>=0.3.2, <=0.6.1) +59 more potentially affected by CVE-2019-10806 via vega-util (>=1.1.4, <=1.12.2)

vega-util NPM version =1.1.4, =1.1.5, =0.3.2, =0.6.0, =0.0.4, =1.0.0, =0.8.0, =1.0.0-alpha.4, =0.0.0-placeholder, =0.2.4-beta.1, =0.4.3-dev10, =1.0.0, =1.4.0, =5.0.0, =6.0.2-alpha.0 and more Source cves: CVE-2019-10806 Source advisory: SNYK:JS-VEGAUTIL-559223...

actyxos_data_flow (0.1.0), bb8-tiberius (0.1.0) potentially affected by unknown CVE via tiberius (0.3.2)

tiberius CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tiberius and may be impacted: - actyxosdataflow 0.1.0 - bb8-tiberius 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0010...

@concepto/eb (>=1.1.7, <=1.1.95), @concepto/nuxt (1.9.427) +11 more potentially affected by CVE-2019-10804 via serial-number (>=0.3.0, <=1.3.0)

serial-number NPM version =0.3.0, =1.1.7, =0.0.1, =1.9.35, =1.1.0, =1.1.1, =0.2.1, =0.1.4, =0.1.1, =0.1.24, =2.5.0, =3.1.1 Source cves: CVE-2019-10804 Source advisory: SNYK:JS-SERIALNUMBER-559010...

@3yourmind/yoco (0.0.2-beta.3), @auto-canary/gh-pages (>=9.16.7-canary.0.b718636d.0, <=11.3.0--canary.2478.87bcf4d47797ed8cc7152538b86fd742d8d19462.0) +7 more potentially affected by CVE-2019-10803 via push-dir (0.4.1)

push-dir NPM version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on push-dir and may be impacted: - @3yourmind/yoco 0.0.2-beta.3 - @auto-canary/gh-pages =9.16.7-canary.0.b718636d.0, =9.17.0, =1.0.0, =0.0.16, =0.0.37, =0.0.1, =0.1.1, =0.7.12 Sour...

@luantm/strapi (1.0.1), @mikermcneil/kit (>=1.1.2, <=1.3.12) +53 more potentially affected by CVE-2019-10801 via enpeem (>=0.1.1, <=2.2.0)

enpeem NPM version =0.1.1, =1.1.2, =0.10.2, =0.0.2, =0.0.1, =0.1.1, =0.6.3, =1.0.0, =0.0.10, =0.0.5, =0.0.19 and more Source cves: CVE-2019-10801 Source advisory: SNYK:JS-ENPEEM-559007...

@550w-tools/cli (>=0.0.14, <=0.0.16), @550w-tools/core (>=0.0.14, <=0.0.16) +539 more potentially affected by CVE-2020-7710 via safe-eval (>=0.2.0, <=0.4.1)

safe-eval NPM version =0.2.0, =0.0.14, =0.0.14, =0.0.13, =0.0.14, =0.0.15, =1.0.1, =1.0.2, =1.0.3, =1.1.2, =0.1.16-beta.1, =1.0.0-beta.4, =0.3.0-alpha.1, =0.20.0, =2.0.295, =2.0.315 and more Source cves: CVE-2020-7710 Source advisory: SNYK:JS-SAFEEVAL-608076...

Insecure version of Spring Web MVC used in Confluence Analytics

Hello! A transitive dependency issue has been found in Confluence Analytics: https://atlassian.sourceclear.io/workspaces/Paaina7/issues/vulnerabilities/26465610 Confluence Analytics has a transitive dependency on the Spring Web MVC library, which has a security bug. The issue can be fixed by...

@aliyun-sls/sql (>=0.2.9-dev-10, <=0.3.10-dev-9), @dpjayasekara/tscore (>=0.0.1, <=0.1.1) +29 more potentially affected by CVE-2020-15123 +1 more via codecov (>=3.0.0, <=3.6.1)

codecov NPM version =3.0.0, =0.2.9-dev-10, =0.0.1, =0.0.29, =1.0.10, =1.0.18, =1.0.0, =1.7.0, =1.0.1, =1.0.8, =0.1.1, =0.1.6, =0.1.1, =0.0.1, =1.17.0, =1.22.16 and more Source cves: CVE-2020-15123, CVE-2020-7597 Source advisory: OSV:GHSA-5Q88-CJFQ-G2MH...

08cms (1.0.0), 102f (>=1.0.0, <=1.0.1) +2203 more potentially affected by CVE-2019-10790 via taffydb (>=2.6.2, <=2.7.3)

taffydb NPM version =2.6.2, =1.0.0, =0.0.5, =1.0.0, =1.0.1-beta2, =1.0.40, =2.0.0-alpha.1, =1.6.0, =1.0.0, =1.0.1, =0.3.0, =1.0.2, =0.1.2, =0.2.0 - @adrian-alu0101024363/spread 0.1.3 and more Source cves: CVE-2019-10790 Source advisory: OSV:GHSA-MXHP-79QH-MCX6...

@zambezi/jsbin (3.40.4-ez-bin.5), pin-api (>=1.1.0, <=1.3.1) potentially affected by CVE-2019-10795 via undefsafe (>=2.0.0, <=2.0.1)

undefsafe NPM version =2.0.0, =1.1.0, =1.3.1 Source cves: CVE-2019-10795 Source advisory: SNYK:JS-UNDEFSAFE-548940...

byways (>=1.2.0, <=1.5.2), component-build (>=1.0.0, <=1.2.2) +17 more potentially affected by CVE-2019-10794 via component-flatten (>=0.0.1, <=1.0.1)

component-flatten NPM version =0.0.1, =1.2.0, =1.0.0, =1.0.0, =1.3.0, =0.0.3, =0.1.0, =1.0.0, =1.0.0, =0.2.0, =1.0.0, =1.2.0, =0.0.1, =0.0.1, =0.0.4 - faiton-builder 1.1.10 and more Source cves: CVE-2019-10794 Source advisory: SNYK:JS-COMPONENTFLATTEN-548907...

@philipplgh/electron-app-manager (>=0.12.0, <=0.56.0), electron-app-manager (>=0.56.0, <=0.57.1) +4 more potentially affected by unknown CVE via electron-updater (>=4.0.0, <=4.1.2)

electron-updater NPM version =4.0.0, =0.12.0, =0.56.0, =0.0.2, =4.0.3, =1.0.0, =1.3.1 Source cves: unknown CVE Source advisory: SNYK:JS-ELECTRONUPDATER-561421...

@aliyun-sls/sql (>=0.2.9-dev-10, <=0.3.10-dev-9), @dpjayasekara/tscore (>=0.0.1, <=0.1.1) +29 more potentially affected by CVE-2020-7596 +1 more via codecov (>=3.0.0, <=3.6.1)

codecov NPM version =3.0.0, =0.2.9-dev-10, =0.0.1, =0.0.29, =1.0.10, =1.0.18, =1.0.0, =1.7.0, =1.0.1, =1.0.8, =0.1.1, =0.1.6, =0.1.1, =0.0.1, =1.17.0, =1.22.16 and more Source cves: CVE-2020-7596, CVE-2020-7597 Source advisory: SNYK:JS-CODECOV-548879...