bismagul_project08_quiz (>=1.0.0, <=1.0.1), cli-advanture-game (1.0.0) +5 more potentially affected by unknown CVE via calk (0.0.1-security)

calk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on calk and may be impacted: - bismagulproject08quiz =1.0.0, =1.0.0, =1.0.0, =1.0.1 - todoterminallist 1.0.0 - zhs-cli-advanture-game 1.0.0 Source cves: unknown CVE Source...

@planningcenter/icons (>=3.0.0-7, <=3.0.0-15), feathers-commands (>=0.0.1, <=0.1.4) +11 more potentially affected by unknown CVE via smart-extend (1.7.4)

smart-extend NPM version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on smart-extend and may be impacted: - @planningcenter/icons =3.0.0-7, =0.0.1, =1.0.4, =1.0.2, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =0.1.0, =1.0.1, =2.0.0, =3.0.5 Source cve...

@achingbrain/ngrok (0.2.2), @atomist/sdm-automation (>=0.1.16-master.20181116180810, <=0.1.59-master.20200611224542) +603 more potentially affected by unknown CVE via decompress-zip (>=0.0.2, <=0.2.0)

decompress-zip NPM version =0.0.2, =0.1.16-master.20181116180810, =14.0.5, =0.1.2, =1.2.6, =1.0.1, =1.0.0, =1.1.1, =5.0.1, =1.0.0, =5.2.1, =5.3.0 - @paulcbetts/squirrel-windows 1.2.1 - @pgswe/ics.js 0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-73V8-V6G4-VRPM...

@colmena/colmena-loopback (>=0.0.4, <=0.2.1), loopback-component-meta (1.0.0) +2 more potentially affected by unknown CVE via loopback (>=2.8.6, <=2.36.2)

loopback NPM version =2.8.6, =0.0.4, =0.2.1 - loopback-component-meta 1.0.0 - loopback-connector-couchbase 1.0.6 - loopback-connector-couchbase-mappingport 1.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-8WGC-JJVV-CV6V...

@colmena/api (0.1.0), @sp-temp/composer-rest-server (>=0.20.8, <=0.20.14) +9 more potentially affected by unknown CVE via loopback (>=3.0.0-alpha.2, <=3.18.2)

loopback NPM version =3.0.0-alpha.2, =0.20.8, =0.20.8, =0.13.0-beta.1, =0.13.2-20171004211143, =0.13.2-20171004211143, =0.0.1, =0.13.2-20171004211143, =1.0.0, =0.0.5, =0.0.39 Source cves: unknown CVE Source advisory: OSV:GHSA-8WGC-JJVV-CV6V...

@cpomelo/pomelo (2.2.7), @linix01/pomelo (2.2.9) +54 more potentially affected by unknown CVE via pomelo-monitor (>=0.3.5, <=0.3.7)

pomelo-monitor NPM version =0.3.5, =2.2.5, =1.0.0, =2.2.5, =0.0.1, =0.0.1, =1.0.1, =0.1.0, =2.2.6, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M5CH-GX8G-RG73...

sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)

md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-HGR5-82RC-P936...

@chris-sorrells/snowflakes (1.0.0), @haukeland-mgm/plateviewer (1.0.2) +25 more potentially affected by unknown CVE via buefy (>=0.3.2, <=0.7.1)

buefy NPM version =0.3.2, =0.1.47, =0.0.1, =1.2.0, =3.2.160, =1.0.13, =1.0.0, =1.0.0, =0.6.0, =1.0.1, =1.0.0, =0.0.2, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XWQW-RF2Q-XMHF...

@cicctencent/tars-deploy (>=1.0.1, <=1.0.10), @conga/framework-profiler (>=2.0.0, <=2.0.5) +12 more potentially affected by CVE-2017-16034 via pidusage (>=1.0.1, <=1.1.4)

pidusage NPM version =1.0.1, =1.0.1, =2.0.0, =0.0.1, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =0.1.4-rc.1, =0.1.4 - shady-background 0.0.1 - shady-worker 0.0.4 - trek-status-monitor 0.3.3 - wf-pm2 1.1.3 Source cves: CVE-2017-16034 Source advisory: OSV:GHSA-HFQ9-RFPV-J8R8...

acme-compilers (>=0.2.2, <=0.2.4), actix-governor (>=0.2.6, <=0.4.1) +1420 more potentially affected by unknown CVE via mach (>=0.0.3, <=0.3.2)

mach CARGO version =0.0.3, =0.2.2, =0.2.6, =0.1.0-beta.8, =0.23.0, =0.23.0, =0.1.0, =0.1.0, =0.0.2, =0.2.0, =0.1.4, =1.1.0, =1.2.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0168...

@10yun/cv-mobile-ui (0.3.20), @accordproject/cicero-cli (>=0.3.4, <=0.8.0) +496 more potentially affected by CVE-2020-14966 via jsrsasign (>=4.8.2, <=8.0.18)

jsrsasign NPM version =4.8.2, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.0.61-20180603194157, =0.0.61-20180603194157, =0.0.61-20180603194157, =0.14.7, =2.0.1-alpha.0, =1.0.0-beta.0, =1.0.0-beta.0, =2.0.1-alpha.0, =1.0.0-beta.0, =1.2.1-alpha.0 and more Source cves: CVE-2020-14966 Source advisory:...

acari-lib (>=0.1.1, <=0.1.8), accepted (>=0.2.0, <=0.3.2) +1862 more potentially affected by CVE-2020-35881 via traitobject (>=0.0.1, <=0.1.1)

traitobject CARGO version =0.0.1, =0.1.1, =0.2.0, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.2 - aigcapi 5.1.2 - aigcchain 5.1.2 - aigcconfig 5.1.2 and more Source cves: CVE-2020-35881 Source advisory: OSV:RUSTSEC-2020-0027...

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), azure_sdk_auth_aad (>=0.30.0, <=0.35.0) +19 more potentially affected by CVE-2020-35875 via tokio-rustls (>=0.12.0-alpha.1, <=0.12.0-alpha.8)

tokio-rustls CARGO version =0.12.0-alpha.1, =0.5.0-alpha.6, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.1.0-alpha.1, =0.1.0, =0.30.0, =3.2.2, =3.4.2 and more Source cves: CVE-2020-35875 Source advisory: OSV:RUSTSEC-2020-0019...

@neuraflash/einstein-lang (1.0.0), @safwanuk/sk-npm-hello-world (>=6.0.1, <=6.0.2) +38 more potentially affected by CVE-2020-7646 via curlrequest (1.0.1)

curlrequest NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on curlrequest and may be impacted: - @neuraflash/einstein-lang 1.0.0 - @safwanuk/sk-npm-hello-world =6.0.1, =1.0.2, =0.0.1, =1.0.0, =1.0.25, =0.0.1, =0.4.1, =1.0.0, =0.0.1,...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5, <=4.4.3)

bigint CARGO version =1.0.5, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:RUSTSEC-2020-0025...

a2d (>=0.1.0, <=0.1.11), aart (>=0.1.0, <=0.1.1) +558 more potentially affected by unknown CVE via stb_truetype (>=0.1.2, <=0.3.1)

stbtruetype CARGO version =0.1.2, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.4.0, =0.3.0, =0.1.0, =0.3.0 - airkit 0.1.0 - airsim 0.2.0 - aitsar 0.1.1 - alacritty 0.5.0 - ale 0.1.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0020...

ula-vp-controller (0.1.0) potentially affected by unknown CVE via vp-toolkit (0.1.1)

vp-toolkit NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vp-toolkit and may be impacted: - ula-vp-controller 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-P94W-42G3-F7H4...

@colmena/api (0.1.0), @colmena/colmena-loopback (>=0.0.4, <=0.2.1) +57 more potentially affected by CVE-2019-15597 via node-df (>=0.1.1, <=0.1.4)

node-df NPM version =0.1.1, =0.0.4, =0.0.1, =1.1.0, =3.0.0-alpha.8, =3.0.0-alpha.1, =3.0.0-alpha.0, =0.1.0, =1.0.0, =1.30.0, =0.0.1, =1.0.0, =1.0.0, =1.1.3 and more Source cves: CVE-2019-15597 Source advisory: OSV:GHSA-WP7M-MRVF-599C...

annatar (>=0.4.3, <=0.5.8), ansi2png-rs (>=0.1.0, <=0.1.1) +96 more potentially affected by unknown CVE via rulinalg (>=0.1.0, <=0.4.2)

rulinalg CARGO version =0.1.0, =0.4.3, =0.1.0, =0.2.9, =14.1.0, =0.1.5, =0.1.0, =0.1.0, =0.4.0, =1.0.0, =0.3.2, =0.3.3 - dali 0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0147...

aart (>=0.1.0, <=0.1.1), advancedresearch-higher_order_point (>=0.1.0, <=0.3.0) +684 more potentially affected by unknown CVE via lzw (>=0.5.0, <=0.10.0)

lzw CARGO version =0.5.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0144...