1405-authtokens (>=1.0.1, <=1.0.5), 2048.io (0.0.1) +1308 more potentially affected by CVE-2015-1164 via serve-static (>=1.0.1, <=1.7.1)

serve-static NPM version =1.0.1, =1.0.1, =0.2.0, =1.0.37, =7.0.0, =0.0.2, =1.0.0, =0.0.1, =0.13.7, =0.0.5-SNAPSHOT.11, =3.14.2 and more Source cves: CVE-2015-1164 Source advisory: OSV:GHSA-C3X7-GJMX-R2FF...

@hytong-yarn/cli (1.4.0), @yym-yarn/cli (1.0.0) +10 more potentially affected by CVE-2013-6393 via libyaml (>=0.0.2, <=0.2.2)

libyaml NPM version =0.0.2, =0.3.0, =1.0.24, =2.0.8, =0.0.1, =0.1.2, =0.0.10, =0.0.4, =0.0.5 Source cves: CVE-2013-6393 Source advisory: OSV:GHSA-M75H-CGHQ-C8H5...

@aqsi/ui (>=3.22.0-rc.0, <=4.15.1), @ausbom/charts (>=0.1.0, <=0.1.2) +6 more potentially affected by unknown CVE via highcharts (>=8.0.0, <=8.1.0)

highcharts NPM version =8.0.0, =3.22.0-rc.0, =0.1.0, =0.0.0, =1.3.0, =7.0.0-alpha1, =16.8.1, =1.2.8, =1.0.6, =1.0.7 Source cves: unknown CVE Source advisory: OSV:GHSA-GR4J-R575-G665...

@0x18b2ee/parse-server (>=3.10.1, <=3.11.0), @adncorp/parse-server (>=2.0.0, <=2.10.4) +24 more potentially affected by unknown CVE via parse (>=2.0.1, <=2.8.0)

parse NPM version =2.0.1, =3.10.1, =2.0.0, =0.0.7, =1.0.5, =4.3.0-fast-roles, =4.3.0, =1.0.9, =1.0.0, =3.1.1, =3.10.0, =3.1.3, =3.1.6 - nex-parse-server 4.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WVH7-5P38-2QFC...

0.workspace (>=0.1.0, <=0.1.1), 00ld8nuivn (2.1.0) +60339 more potentially affected by CVE-2020-8203 via lodash (>=3.7.0, <=4.17.18)

lodash NPM version =3.7.0, =0.1.0, =1.0.0, =1.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 - 0850u4lkpu 1.1.0 - 08cms 1.0.0 and more Source cves: CVE-2020-8203 Source advisory:...

@amazingcat/amazing-iohook (>=7.1.4, <=8.1.1), @barajs/electron (>=1.0.0, <=1.0.2) +30 more potentially affected by CVE-2020-4075 via electron (>=7.0.0, <=7.2.3)

electron NPM version =7.0.0, =7.1.4, =1.0.0, =0.0.3, =0.3.0, =4.0.0-alpha.3, =7.0.0-alpha.3, =4.0.0-alpha.1, =0.0.1, =7.0.0-alpha.7, =1.7.0, =7.0.0-beta.1, =8.0.0-pre, =0.31.0-alpha.2, =0.31.0-alpha.33 and more Source cves: CVE-2020-4075 Source advisory: OSV:GHSA-F9MQ-JPH6-9MHM...

@ardier16/node-lb (>=1.0.0, <=2.0.0), @economist/backstopjs (>=0.0.1, <=0.0.3) +138 more potentially affected by CVE-2020-7679 via casperjs (>=1.1.0-beta3, <=1.1.4)

casperjs NPM version =1.1.0-beta3, =1.0.0, =0.0.1, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =1.2.0, =0.4.0, =0.1.0, =0.0.2, =3.40.4-ez-bin.7, =0.0.1, =0.0.2, =0.0.3 - autocallinjs 1.0.0 and more Source cves: CVE-2020-7679 Source advisory: SNYK:JS-CASPERJS-572803...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5, <=4.4.3)

bigint CARGO version =1.0.5, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:RUSTSEC-2020-0025...

abacuz (>=0.1.0, <=0.1.1), acick (>=0.1.0-alpha.0, <=0.2.0) +2667 more potentially affected by unknown CVE via stdweb (>=0.1.3, <=0.4.20)

stdweb CARGO version =0.1.3, =0.1.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.1-alpha.0, =1.0.0, =0.8.0, =0.8.0, =0.1.0, =0.1.41, =0.4.0, =0.4.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0056...

@sap/ui5-builder-webide-extension (1.0.1), @sersap/ui5-build-tasks (>=0.0.8, <=0.0.13) +7 more potentially affected by CVE-2019-10778 via devcert-sanscache (0.4.6)

devcert-sanscache NPM version 0.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on devcert-sanscache and may be impacted: - @sap/ui5-builder-webide-extension 1.0.1 - @sersap/ui5-build-tasks =0.0.8, =1.0.0, =1.1.0, =1.0.0, =1.0.0-beta.1, =2.0.0, =1.0.0...

berkano:berkano-bookmarks (>=dev-20050722, <=20050901-2), br.com.thiagomoreira.bancodobrasil:credit-card-report-converter (>=0.1, <=1.0.0) +213 more potentially affected by unknown CVE via freemarker:freemarker (>=2.3.1, <=2.3.9)

freemarker:freemarker MAVEN version =2.3.1, =dev-20050722, =0.1, =1.7.0, =0.1, =0.1.3, =2.0.4, =1.0.0.release, =9.00.2110.07.220316, =9.00.2112.03.220528 - com.github.youribonnaffe.gradle.format:com.github.youribonnaffe.gradle.format.gradle.plugin 1.2 - com.gnizr:gnizr-robot 2.4.0-m4 -...

@accordproject/cicero-cli (>=0.13.1-20190706002451, <=0.13.5-20190807130647), @accordproject/cicero-core (>=0.13.1-20190706002451, <=0.13.5-20190807130647) +43 more potentially affected by unknown CVE via acorn (>=5.5.0, <=5.7.3)

acorn NPM version =5.5.0, =0.13.1-20190706002451, =0.13.1-20190706002451, =0.13.1-20190706002451, =0.13.1-20190706002451, =0.13.1-20190706002451, =0.13.8-pre.6, =0.5.0-alpha.2, =0.0.10, =2.0.1-pr.0, =12.0.0, =1.2.2, =0.6.0, =1.1.1, =5.0.1 - @devsnicket/eunice-analyzer 0.36.0 and more Source cves:...

Denial Of Service (DoS) Through Infinite Loop

github.com/appc/docker2aci is vulnerable to denial of service DoS attacks. A local attacker could cause an infinite loop with a crafted image due to lack of essential checks in the cyclic dependency chain in getAncestry function resulting in an application crash...

@aliyun-sls/sql (>=0.2.9-dev-10, <=0.3.10-dev-9), @dpjayasekara/tscore (>=0.0.1, <=0.1.1) +29 more potentially affected by CVE-2020-7596 +1 more via codecov (>=3.0.0, <=3.6.1)

codecov NPM version =3.0.0, =0.2.9-dev-10, =0.0.1, =0.0.29, =1.0.10, =1.0.18, =1.0.0, =1.7.0, =1.0.1, =1.0.8, =0.1.1, =0.1.6, =0.1.1, =0.0.1, =1.17.0, =1.22.16 and more Source cves: CVE-2020-7596, CVE-2020-7597 Source advisory: SNYK:JS-CODECOV-548879...

@hpcc-js/dgrid-shim (>=0.1.10, <=0.1.12), bryaktestgrid (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2019-10785 via dojox (>=1.11.2, <=1.13.0)

dojox NPM version =1.11.2, =0.1.10, =0.0.1, =0.1.0, =0.0.1, =0.5.24 Source cves: CVE-2019-10785 Source advisory: SNYK:JS-DOJOX-548257...

bincrypt (>=0.3.0, <=0.3.1), fcp_cryptoauth (>=0.1.0, <=0.4.0) +12 more potentially affected by unknown CVE via rust_sodium (>=0.1.2, <=0.10.2)

rustsodium CARGO version =0.1.2, =0.3.0, =0.1.0, =0.0.1-alpha1, =0.1.0, =0.1.0, =1.0.0, =0.4.0, =0.7.0, =0.2.0, =0.10.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0003...

@aliyun-sls/sql (>=0.2.9-dev-10, <=0.3.10-dev-9), @dpjayasekara/tscore (>=0.0.1, <=0.1.1) +29 more potentially affected by CVE-2020-7596 via codecov (>=3.0.0, <=3.6.1)

codecov NPM version =3.0.0, =0.2.9-dev-10, =0.0.1, =0.0.29, =1.0.10, =1.0.18, =1.0.0, =1.7.0, =1.0.1, =1.0.8, =0.1.1, =0.1.6, =0.1.1, =0.0.1, =1.17.0, =1.22.16 and more Source cves: CVE-2020-7596 Source advisory: SNYK:JS-CODECOV-543183...

@choiceform/ui-foundation (>=0.16.3, <=0.16.6), @gulpjs/update-template (0.1.0) +15 more potentially affected by CVE-2019-10776 via git-diff-apply (>=0.0.5, <=0.22.1)

git-diff-apply NPM version =0.0.5, =0.16.3, =0.1.0, =0.1.0, =0.8.0, =0.1.9, =0.0.1, =0.7.1, =0.2.2, =0.2.3 - ember-precondition 0.2.0 - ember-promise-helpers 1.0.8 and more Source cves: CVE-2019-10776 Source advisory: SNYK:JS-GITDIFFAPPLY-540774...

@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +81 more potentially affected by CVE-2019-16777 via npm (>=6.0.0, <=6.13.2)

npm NPM version =6.0.0, =0.0.1, =0.1.2, =0.4.3, =1.0.0-beta.0, =1.0.0-beta.15, =1.1.58, =3.2.2, =2.0.0, =0.0.1, =3.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2019-16777 Source advisory: OSV:GHSA-4328-8HGF-7WJR...

generator-jhipster-grpc (>=0.19.0, <=0.19.1), generator-jhipster-kotlin (>=0.8.0, <=1.1.0) +6 more potentially affected by unknown CVE via generator-jhipster (>=6.0.1, <=6.3.0)

generator-jhipster NPM version =6.0.1, =0.19.0, =0.8.0, =2.0.0, =2.1.5, =0.0.2, =1.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-MC84-XR9P-938R...