@auto-canary/all-contributors (>=9.16.1-canary.undefined.13449.0, <=9.34.2-canary.1241.15885.0), @auto-canary/auto (>=9.16.1-canary.undefined.13449.0, <=9.34.2-canary.1241.15885.0) +23 more potentially affected by CVE-2021-23412 via gitlogplus (3.1.7)

gitlogplus NPM version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on gitlogplus and may be impacted: - @auto-canary/all-contributors =9.16.1-canary.undefined.13449.0, =9.16.1-canary.undefined.13449.0, =9.23.0-canary.1099.14362.0,...

clarity-repl (>=0.12.3, <=0.13.3) potentially affected by CVE-2021-38191 via tokio (1.6.1)

tokio CARGO version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on tokio and may be impacted: - clarity-repl =0.12.3, =0.13.3 Source cves: CVE-2021-38191 Source advisory: OSV:RUSTSEC-2021-0072...

justy-entity (>=1.0.0, <=1.3.7) potentially affected by CVE-2021-23388 via forms (1.1.4)

forms NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on forms and may be impacted: - justy-entity =1.0.0, =1.3.7 Source cves: CVE-2021-23388 Source advisory: OSV:GHSA-C56F-GRV3-GPFR...

gulp-controlled-merge-json (0.2.1) potentially affected by CVE-2020-28268 via controlled-merge (1.1.0)

controlled-merge NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on controlled-merge and may be impacted: - gulp-controlled-merge-json 0.2.1 Source cves: CVE-2020-28268 Source advisory: OSV:GHSA-5PG7-V24C-9RP9...

@amaspace-editor/builder (>=0.0.52, <=0.0.522), @instacart/eslint-config (0.3.0) +13 more potentially affected by CVE-2020-28499 via merge (2.1.0)

merge NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on merge and may be impacted: - @amaspace-editor/builder =0.0.52, =1.4.2, =4.0.19, =1.0.21, =4.0.30, =1.0.34, =2.0.25, =3.0.17, =1.0.19, =4.0.21, =4.0.26 Source cves: CVE-2020-28499...

7ghost (>=4.11.0, <=4.11.46), @100k/type-graphql-filter-mikroorm (>=0.0.1, <=0.3.5) +843 more potentially affected by unknown CVE via validator (>=13.0.0, <=13.5.2)

validator NPM version =13.0.0, =4.11.0, =0.0.1, =1.1.0, =1.2.336, =1.0.0, =1.3.6, =0.0.1, =0.0.7, =0.13.3, =0.13.3, =0.13.2, =0.13.3, =0.1.5, =0.1.16, =0.13.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-VALIDATOR-1090601...

eslint-plugin-mozilla (>=2.7.0, <=2.9.2), gatsby (>=2.24.6-telemetry-test.19, <=2.24.6-telemetry-test.20) +3 more potentially affected by CVE-2020-28448 +1 more via multi-ini (2.1.0)

multi-ini NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on multi-ini and may be impacted: - eslint-plugin-mozilla =2.7.0, =2.24.6-telemetry-test.19, =2.12.64-telemetry-test.19, =0.1.54-telemetry-test.19, =1.3.21-telemetry-test.19,...

safe-transfers (0.1.0), sn_transfers (0.2.0) potentially affected by unknown CVE via safe-nd (>=0.9.0, <=0.11.7)

safe-nd CARGO version =0.9.0, =0.11.7 is affected by a known vulnerability. The following packages have a transitive dependency on safe-nd and may be impacted: - safe-transfers 0.1.0 - sntransfers 0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0063...

alfred-material-manager (>=1.0.0, <=1.0.5) potentially affected by unknown CVE via alfred-workflow-nodejs (2.0.4)

alfred-workflow-nodejs NPM version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on alfred-workflow-nodejs and may be impacted: - alfred-material-manager =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: SNYK:JS-ALFREDWORKFLOWNODEJS-608975...

bch-wallet-plugin-postoffice (>=1.0.0, <=1.0.8), bitcoin-wallet-api (>=0.0.5, <=0.1.6) potentially affected by CVE-2020-15130 via slpjs (>=0.22.5, <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-15130 Source advisory: OSV:GHSA-CC2P-4JHR-XHHX...

actix (>=0.5.0, <=0.7.7), actix-ogn (0.1.0) +259 more potentially affected by CVE-2019-15553 via memoffset (>=0.1.0, <=0.2.1)

memoffset CARGO version =0.1.0, =0.5.0, =0.7.5, =0.2.5, =0.4.0, =0.11.0, =0.2.0, =0.6.0, =0.5.0, =0.4.0, =0.5.0, =0.6.0, =0.3.0, =0.5.0 and more Source cves: CVE-2019-15553 Source advisory: OSV:RUSTSEC-2019-0011...

09-nodejs (1.0.0), 11.17r (1.0.0) +1753 more potentially affected by unknown CVE via concat-stream (>=1.5.0, <=1.5.1)

concat-stream NPM version =1.5.0, =0.0.1, =0.0.2, =0.0.1, =0.1.0, =0.1.0, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.0.0, =1.0.0-alpha.0, =1.0.0-alpha.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G74R-FFVR-5Q9F...

CVE-2019-11405

CVE-2019-11405 affects OpenAPI Tools OpenAPI Generator prior to 4.0.0-20190419.052012-560. The described vulnerability arises because the project uses http:// URLs in build.gradle, build.gradle.mustache, and build.sbt files, enabling insecurely resolved dependencies. This exposes potential Man-in...

20231122-npm (1.0.0), 2048.io (0.0.1) +4911 more potentially affected by CVE-2019-5413 via morgan (>=1.0.0, <=1.9.0)

morgan NPM version =1.0.0, =1.0.2, =1.0.0, =0.2.0, =0.0.1, =0.0.1, =0.0.0, =2.0.1, =0.20.0, =0.21.1 and more Source cves: CVE-2019-5413 Source advisory: OSV:GHSA-GWG9-RGVJ-4H5J...

@49ing/ngx-videogular (5.0.1), @akashic/akashic-cli-commons (0.1.3) +52 more potentially affected by CVE-2016-3956 via npm (>=3.1.0, <=3.7.5)

npm NPM version =3.1.0, =0.1.2, =0.0.3, =0.0.3, =0.1.0, =1.0.0-open-source.0, =0.0.1, =0.1.0 and more Source cves: CVE-2016-3956 Source advisory: OSV:GHSA-M5H6-HR3Q-22H5...

@maxts/waterline-adapter-tests (1.0.3), driver-interface (1.0.2) +9 more potentially affected by CVE-2018-3721 via @sailshq/lodash (3.10.2)

@sailshq/lodash NPM version 3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sailshq/lodash and may be impacted: - @maxts/waterline-adapter-tests 1.0.3 - driver-interface 1.0.2 - machinepack-sockets =2.0.0, =5.2.0-0, =1.0.1, =0.9.1, =2.1.14,...