1266 matches found
@mdslab/iotronic-lightning-rod (>=2.3.1, <=2.3.6), connection-test-table (>=0.1.0, <=0.1.3) +9 more potentially affected by CVE-2020-7781 via connection-tester (>=0.0.7, <=0.2.0)
connection-tester NPM version =0.0.7, =2.3.1, =0.1.0, =0.0.1, =0.0.1, =0.0.10, =1.1.3, =0.0.1, =0.0.1, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2020-7781 Source advisory: SNYK:JS-CONNECTIONTESTER-1048337...
a2 (>=0.2.0, <=0.5.3), a3mo_lib (>=0.1.0, <=0.1.1) +7033 more potentially affected by CVE-2020-26235 via time (>=0.1.25, <=0.1.45)
time CARGO version =0.1.25, =0.2.0, =0.1.0, =0.1.7, =0.2.0-beta.4, =0.5.0, =0.1.1, =0.0.3, =0.1.0, =0.0.1, =0.2.0 and more Source cves: CVE-2020-26235 Source advisory: OSV:RUSTSEC-2020-0071...
acheron (0.1.0), actix_web_metrics_mw (>=0.0.1, <=0.3.1) +81 more potentially affected by CVE-2020-36204 via im (>=12.3.4, <=15.0.0)
im CARGO version =12.3.4, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.1.1, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2020-36204 Source advisory: OSV:RUSTSEC-2020-0096...
@amc-technology/ui-library (1.0.10), @amilabs/pink-unicorn (>=1.2.3, <=1.3.6) +174 more potentially affected by CVE-2020-15262 via webpack-subresource-integrity (>=1.0.4, <=1.5.0)
webpack-subresource-integrity NPM version =1.0.4, =1.2.3, =9.0.0-beta.0, =0.8.8, =0.0.1-SNAPSHOT, =0.0.1-alpha.1, =1.2.2, =0.1.8, =0.0.0, =0.0.1, =0.0.1-alpha.2, =0.0.1, =0.0.1, =0.6.0-next.3, =1.1.0 and more Source cves: CVE-2020-15262 Source advisory: OSV:GHSA-4FC4-CHG7-H8GH...
@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)
swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q9-HQM5-MHMC...
@homenet/core (>=4.0.0-beta.15, <=4.0.0-beta.42), @jatahworx/bhive-core (>=1.0.76, <=3.3.1) +29 more potentially affected by unknown CVE via node-red (>=0.9.1, <=0.18.3)
node-red NPM version =0.9.1, =4.0.0-beta.15, =1.0.76, =2.5.0, =0.0.1, =0.0.4, =0.0.0, =0.0.1, =0.1.2, =0.1.0, =1.0.0, =0.9.0, =1.1.0, =1.0.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5G6J-8HV4-VFGJ...
@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)
swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VP93-GCX5-4W52...
@makeomatic/confidence (5.0.0), @makeomatic/deploy (>=10.0.1, <=10.2.1) +6 more potentially affected by unknown CVE via @hapi/hoek (9.0.2)
@hapi/hoek NPM version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/hoek and may be impacted: - @makeomatic/confidence 5.0.0 - @makeomatic/deploy =10.0.1, =6.0.0, =15.0.0, =10.0.0, =8.0.0, =14.0.0, =6.1.2, =6.8.3 Source cves: unknown CVE...
@alinex/checkup (>=0.7.0, <=1.2.2), @alinex/server (>=0.8.8, <=1.0.0) +52 more potentially affected by unknown CVE via unflatten (1.0.4)
unflatten NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on unflatten and may be impacted: - @alinex/checkup =0.7.0, =0.8.8, =1.2.0-alpha1, =0.1.0, =0.1.0, =0.0.1, =0.0.8, =1.0.13, =0.0.2, =0.0.3, =1.0.0, =1.0.1, =1.1.0, =1.1.0, =1.3.7...
@36node/template-service (0.3.5), @alexbp-ds/microservice-wrapper (1.1.8) +329 more potentially affected by unknown CVE via mongodb (>=3.0.0, <=3.1.12)
mongodb NPM version =3.0.0, =0.0.1, =3.2.9, =0.1.0, =1.0.0, =1.0.0, =0.0.1-rc.1, =0.0.2, =1.11.1, =0.0.2, =0.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MH5C-679W-HH4R...
fd-dcc (>=1.0.0, <=2.1.4), test_sdk_aki (>=1.0.3, <=1.0.4) +1 more potentially affected by unknown CVE via axioss (0.0.1-security)
axioss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axioss and may be impacted: - fd-dcc =1.0.0, =1.0.3, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8W9J-6WG6-QV4F...
@dotgov/bpmn (>=0.0.1, <=0.0.29), @dotgov/z_bpmn (>=0.0.1, <=2.0.0) +19 more potentially affected by unknown CVE via bpmn-js-properties-panel (>=0.11.2, <=0.30.0)
bpmn-js-properties-panel NPM version =0.11.2, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =1.1.22, =1.0.97, =2.0.0, =1.0.14, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VPJ4-89Q8-RH38...
@alessio.filippucci/admin-dashboard-core (0.0.0-development), @avoux/invoicing-manager (>=1.0.6, <=2.0.0) +114 more potentially affected by unknown CVE via quill (>=1.0.0, <=1.3.6)
quill NPM version =1.0.0, =1.0.6, =4.6.201905201249, =4.6.201907261001, =4.5.201903181201, =7.11.2-snapshot-1568934257537, =3.0.201812052008, =2.0.5-web, =1.0.9, =1.9.0, =28.3.0, =0.2.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-588M-9QG5-35PQ...
3nit-utils (>=0.11.1, <=0.23.0), @alinasoft/db (>=0.0.1, <=0.2.0) +698 more potentially affected by unknown CVE via content (>=4.0.3, <=4.0.6)
content NPM version =4.0.3, =0.11.1, =0.0.1, =0.9.0, =1.2.7, =0.0.1, =1.2.2-rc.0, =0.1.0, =2.2.0-alpha.6, =0.2.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =2.2.0-alpha.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5854-JVXX-2CG9...
@fanswoo/core (>=1.0.0, <=1.3.8), brws-upload (>=1.0.2, <=1.0.3) +4 more potentially affected by unknown CVE via jquery-mobile (>=1.4.1, <=1.5.0-alpha.1)
jquery-mobile NPM version =1.4.1, =1.0.0, =1.0.2, =1.0.0, =1.0.2, =2.0.0, =0.0.1, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-FJ93-7WM4-8X2G...
04-rsib_contact-numbers-menue_cli (>=1.0.0, <=1.0.1), advanture-game-by-sam (>=1.0.0, <=1.0.1) +2 more potentially affected by unknown CVE via chak (0.0.1-security)
chak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 1.0.0 Source cves: unknown CVE Source advisory:...
@colmena/api (0.1.0), @sp-temp/composer-rest-server (>=0.20.8, <=0.20.14) +9 more potentially affected by unknown CVE via loopback (>=3.0.0-alpha.2, <=3.18.2)
loopback NPM version =3.0.0-alpha.2, =0.20.8, =0.20.8, =0.13.0-beta.1, =0.13.2-20171004211143, =0.13.2-20171004211143, =0.0.1, =0.13.2-20171004211143, =1.0.0, =0.0.5, =0.0.39 Source cves: unknown CVE Source advisory: OSV:GHSA-8WGC-JJVV-CV6V...
@etherio/database (>=0.0.1, <=0.0.13), @gridnt/ngplus (1.0.3) +23 more potentially affected by unknown CVE via axois (0.0.1-security)
axois NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2-alpha.0, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE...
@cicctencent/tars-deploy (>=1.0.1, <=1.0.10), @conga/framework-profiler (>=2.0.0, <=2.0.5) +12 more potentially affected by CVE-2017-16034 via pidusage (>=1.0.1, <=1.1.4)
pidusage NPM version =1.0.1, =1.0.1, =2.0.0, =0.0.1, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =0.1.4-rc.1, =0.1.4 - shady-background 0.0.1 - shady-worker 0.0.4 - trek-status-monitor 0.3.3 - wf-pm2 1.1.3 Source cves: CVE-2017-16034 Source advisory: OSV:GHSA-HFQ9-RFPV-J8R8...
@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)
swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G336-C7WV-8HP3...