08cms (1.0.0), 192.168.0.172 (4.6.1) +3412 more potentially affected by unknown CVE via node-sass (>=3.3.0, <=4.13.0)

node-sass NPM version =3.3.0, =1.0.3, =1.0.0-alpha.8, =0.1.0, =1.0.0, =0.6.2, =1.1.0, =0.0.1, =7.0.1, =0.6.0-private.6, =0.6.0-private.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9V62-24CR-58CX...

@pixul/nodemailer-sparkpost (>=3.0.0, <=3.0.3), @pixul/sparkpost (>=3.0.0, <=3.0.1) +7 more potentially affected by unknown CVE via @hapi/hoek (>=8.3.2, <=8.5.0)

@hapi/hoek NPM version =8.3.2, =3.0.0, =3.0.0, =1.8.2, =1.8.2, =1.1.1, =2.2.0, =1.8.2, =1.5.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-22H7-7WWG-QMGG...

alinex-make (0.0.3), apifs2swagger (>=0.1.0, <=0.1.2) +72 more potentially affected by unknown CVE via getsetdeep (>=2.0.0, <=2.1.0)

getsetdeep NPM version =2.0.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0-beta, =0.8.3, =0.0.1, =0.2.4, =0.0.0, =6.20.0, =6.29.0 - docpad-plugin-cachr 2.1.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8J49-49JQ-VWCQ...

@behance/istanbul (0.3.17-sourcemap), @bigcommerce/stencil-paper (>=2.0.15, <=2.0.25) +220 more potentially affected by unknown CVE via handlebars (>=3.0.0, <=3.0.7)

handlebars NPM version =3.0.0, =2.0.15, =0.4.0, =0.0.60-IE, =1.3.1, =1.0.4, =0.11.0, =0.0.1, =0.0.5, =0.0.6, =1.2.0, =0.1.0, =0.4.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q2C6-C6PM-G3GH...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by unknown CVE via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H726-X36V-RX45...

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +9471 more potentially affected by CVE-2020-8244 via bl (>=1.0.0, <=1.2.1)

bl NPM version =1.0.0, =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on bl and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1....

@550w-tools/cli (>=0.0.14, <=0.0.16), @550w-tools/core (>=0.0.14, <=0.0.16) +539 more potentially affected by CVE-2020-7710 via safe-eval (>=0.2.0, <=0.4.1)

safe-eval NPM version =0.2.0, =0.0.14, =0.0.14, =0.0.13, =0.0.14, =0.0.15, =1.0.1, =1.0.2, =1.0.3, =1.1.2, =0.1.16-beta.1, =1.0.0-beta.4, =0.3.0-alpha.1, =0.20.0, =2.0.295, =2.0.315 and more Source cves: CVE-2020-7710 Source advisory: OSV:GHSA-HRPQ-R399-WHGW...

@vidispine/vdt-materialui (>=0.12.0-pre.1, <=26.2.0-pre.3) potentially affected by CVE-2020-8203 via lodash.updatewith (4.10.2)

lodash.updatewith NPM version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.updatewith and may be impacted: - @vidispine/vdt-materialui =0.12.0-pre.1, =26.2.0-pre.3 Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

nodejs:10 security update

nodejs 1:10.19.0-2 - Resolves: RHBZ1811498 1:10.19.0-1 - Rebase to 10.19.0 to fix CVE-2019-15604 to CVE-2019-15606 1:10.16.3-1 - Rebase to 10.16.3 to fix CVE-2019-9511 to CVE-2019-9518 1:10.14.1-1 - Resolves: RHBZ1644207 - fixes node-gyp permissions - rebase 1:10.11.0-2 - BuildRequire...

@cardgamesplay/klondike (>=0.1.0, <=0.1.1), @devexpress/analytics-core (>=18.2.7, <=19.1.1-alpha-19071-2010) +61 more potentially affected by CVE-2019-14862 via knockout (>=3.0.0, <=3.4.2)

knockout NPM version =3.0.0, =0.1.0, =18.2.7, =4.0.0, =0.1.0-zgx, =0.1.0, =1.0.0, =0.0.1, =0.2.20, =18.2.7, =17.2.2-beta, =18.2.7, =2.0.1-beta, =2.0.4-beta - dotnetify-path-fix 1.0.0-beta and more Source cves: CVE-2019-14862 Source advisory: OSV:GHSA-VCJJ-XF2R-MWVC...

brew-js (>=0.1.0-beta, <=0.1.8), buildr (>=0.2.0, <=0.8.7) +9 more potentially affected by CVE-2020-7604 via pulverizr (0.7.0)

pulverizr NPM version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pulverizr and may be impacted: - brew-js =0.1.0-beta, =0.2.0, =0.1.0, =0.0.1, =0.0.2, =1.0.0, =0.1.0, =0.0.11, =0.0.12 Source cves: CVE-2020-7604 Source advisory:...

@zambezi/jsbin (3.40.4-ez-bin.5), pin-api (>=1.1.0, <=1.3.1) potentially affected by CVE-2019-10795 via undefsafe (>=2.0.0, <=2.0.1)

undefsafe NPM version =2.0.0, =1.1.0, =1.3.1 Source cves: CVE-2019-10795 Source advisory: SNYK:JS-UNDEFSAFE-548940...

bryaktestgrid (>=0.0.1, <=0.0.6), dojo-rql (>=0.1.0, <=0.3.2) +1 more potentially affected by CVE-2019-10785 via dojox (1.11.2)

dojox NPM version 1.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on dojox and may be impacted: - bryaktestgrid =0.0.1, =0.1.0, =0.0.1, =0.5.24 Source cves: CVE-2019-10785 Source advisory: OSV:GHSA-PG97-WW7H-5MJR...

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1479 more potentially affected by CVE-2019-19919 via handlebars (>=4.0.0, <=4.2.2)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =5.0.0-alpha.1, =5.0.0-alpha.1, =6.0.10 and more Source cves: CVE-2019-19919 Source advisory: OSV:GHSA-W457-6Q6X-CGP9...

@absolunet/nwayo-cli (>=1.0.0, <=3.6.1), @absolunet/nwayo-workflow (>=3.3.0, <=3.6.1) +479 more potentially affected by CVE-2019-5484 via bower (>=1.1.2, <=1.8.4)

bower NPM version =1.1.2, =1.0.0, =3.3.0, =0.1.16-master.20181116180810, =0.1.2, =1.2.6, =1.0.1, =1.0.0, =0.2.44, =1.0.0, =1.1.1, =1.2.1 - @pattern-lab/uikit-workshop 1.0.0-alpha.7 - @pgswe/ics.js 0.1.3 - @pvsundarram/grunt-bower-task 0.4.2 - @rbrlortie/nwayo-cli 1.4.0 - @rbrlortie/nwayo-workflow...

@careteam/mfe-init (0.0.8), @topfeed/topfeed (>=0.0.30, <=0.0.44) +69 more potentially affected by CVE-2019-10745 via assign-deep (>=0.1.2, <=0.4.7)

assign-deep NPM version =0.1.2, =0.0.30, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.2.0, =0.0.1, =1.0.0-alpha.5, =1.0.0-alpha.5, =0.0.1, =0.0.1, =1.0.0-alpha.5, =2.3.0 and more Source cves: CVE-2019-10745 Source advisory: SNYK:JS-ASSIGNDEEP-450211...

@aabenoja/karma-phantomjs-launcher (0.2.1), @aabenoja/phantomjs (2.0.0) +183 more potentially affected by unknown CVE via npmconf (>=2.0.9, <=2.1.2)

npmconf NPM version =2.0.9, =0.1.28, =1.2.6, =2.7.2, =4.5.201902251314, =1.5.0-alpha.1, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =1.0.3, =2.0.0, =2.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-57CF-349J-352G...

@abeai/node-sdk (>=6.2.1-rc1, <=7.3.1), @after-work.js/aw (>=6.0.0-dev.20190228.0, <=6.0.5) +62 more potentially affected by unknown CVE via handlebars (>=4.1.0, <=4.1.1)

handlebars NPM version =4.1.0, =6.2.1-rc1, =6.0.0-dev.20190228.0, =6.0.0-dev.20190228.0, =0.0.41, =0.9.9, =0.4.0, =1.0.4, =0.2.6, =1.2.0-17d3c29f-b3, =1.0.0-beta.2, =3.9.4, =1.5.3, =7.0.0, =7.0.21 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q42P-PG8M-CQH6...

000demo (>=1.0.0, <=1.1.0), 03-npm-abc (>=1.0.0, <=1.1.0) +6203 more potentially affected by CVE-2019-11358 via jquery (>=1.5.1, <=3.3.1)

jquery NPM version =1.5.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.2.1, =0.1.75, =0.2.0 - 4.yarntest 1.0.3 - 4design 0.0.1 and more Source cves: CVE-2019-11358 Source advisory: OSV:GHSA-6C3J-C64M-QHGQ...

macaca-android-dingtalk (1.0.30) potentially affected by CVE-2016-10586 via macaca-chromedriver (1.0.15)

macaca-chromedriver NPM version 1.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on macaca-chromedriver and may be impacted: - macaca-android-dingtalk 1.0.30 Source cves: CVE-2016-10586 Source advisory: OSV:GHSA-769C-QPHH-G3WM...