9345 matches found
@gearedminds/tsed-api-support (2.0.0), @kabuce/api (0.0.1-alpha.42) +18 more potentially affected by CVE-2020-7748 via @tsed/core (>=5.0.1, <=5.65.6)
@tsed/core NPM version =5.0.1, =5.0.4, =5.0.4, =5.0.4, =5.34.2, =5.60.0, =5.0.4, =5.0.4, =5.34.2, =5.45.0, =5.60.0, =5.34.2, =5.0.4, =5.0.4, =5.47.0 and more Source cves: CVE-2020-7748 Source advisory: SNYK:JS-TSEDCORE-1019382...
0i0 (1.0.10), @1productaweek/react-stately (>=0.1.1, <=0.1.7) +1068 more potentially affected by CVE-2020-28477 via immer (>=7.0.0, <=8.0.0)
immer NPM version =7.0.0, =0.1.1, =0.1.0, =0.0.3-alpha.52, =0.0.10, =0.0.1, =0.1.0, =0.1.1, =0.97.1-20210526212817, =0.1.0, =2.3.1, =1.0.59, =4.4.2, =4.5.9 and more Source cves: CVE-2020-28477 Source advisory: SNYK:JS-IMMER-1019369...
@joshmccall/atomic-stories (>=0.0.0-semantically-released, <=1.9.5), abmcontent (0.1.0) +3 more potentially affected by CVE-2020-7787 via react-adal (>=0.3.15, <=0.4.24)
react-adal NPM version =0.3.15, =0.0.0-semantically-released, =0.1.0, =0.1.3 - widgettestcomponent 0.1.0 Source cves: CVE-2020-7787 Source advisory: SNYK:JS-REACTADAL-1018907...
@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +806 more potentially affected by CVE-2020-28500 via lodash-es (>=4.0.0, <=4.17.20)
lodash-es NPM version =4.0.0, =0.0.1-alpha.4, =0.1.10, =0.0.1, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =0.0.1, =3.2.1, =3.2.1, =0.1.0, =0.3.14, =0.4.42 and more Source cves: CVE-2020-28500 Source advisory: SNYK:JS-LODASHES-2434289...
10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +19162 more potentially affected by CVE-2020-28500 via lodash (>=4.0.0, <=4.17.20)
lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.0.2, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =4.11.20 and more Source cves: CVE-2020-28500 Source advisory: SNYK:JS-LODASH-1018905...
2cs-basecode (>=0.1.0, <=0.1.1), 8bit-ghost-ui (>=1.0.0-beta.1, <=1.0.0-beta.3) +345 more potentially affected by CVE-2020-7746 via chart.js (>=2.0.0, <=2.9.3)
chart.js NPM version =2.0.0, =0.1.0, =1.0.0-beta.1, =1.0.3, =1.0.0, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =1.0.0, =7.0.1, =0.0.1-alpha.3,...
aesni (>=0.7.0, <=0.9.0), aries-askar (0.1.2) +28 more potentially affected by unknown CVE via stream-cipher (>=0.4.1, <=0.7.1)
stream-cipher CARGO version =0.4.1, =0.7.0, =0.1.1, =0.1.1, =0.1.0, =0.4.0, =0.5.0, =0.2.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0-pre.1, =0.1.0, =0.3.1, =0.3.9 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0058...
02strich-markdown (>=1.0.0, <=1.0.2), 10secondsofcode-custom (1.0.0) +11512 more potentially affected by CVE-2020-7753 via trim (0.0.1)
trim NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on trim and may be impacted: - 02strich-markdown =1.0.0, =1.0.0, =0.0.2, =0.0.1, =4.11.0, =0.1.0, =0.0.2, =0.2.0, =1.0.16, =1.2.0, =1.2.2 and more Source cves: CVE-2020-7753 Source...
0.8.18-p11 (0.8.18-p12), 0hub (1.0.0-beta.2) +1394 more potentially affected by CVE-2020-7760 via codemirror (>=5.0.0, <=5.58.1)
codemirror NPM version =5.0.0, =4.13.7-rc4, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.19.1-rc.2, =0.19.1-rc.3, =0.1.1, =0.0.1, =0.1.0, =0.1.0, =1.0.2 and more Source cves: CVE-2020-7760 Source advisory: SNYK:JS-CODEMIRROR-1016937...
@blitzjs/server (>=0.16.5-canary.8, <=0.24.1), @brudi-toolbox/next (>=1.14.17-next.2, <=1.14.26) +30 more potentially affected by CVE-2020-15242 via next (>=9.5.0, <=9.5.3)
next NPM version =9.5.0, =0.16.5-canary.8, =1.14.17-next.2, =1.13.4, =0.1.8-alpha.1, =0.0.1-1, =0.16.0, =0.31.0-RC.1, =1.10.8, =1.0.0-alpha.1, =1.0.0-alpha.0, =0.16.5-canary.8, =0.20.0 - cna-template-material-tailwindcss-reduxtoolkit 0.1.0 and more Source cves: CVE-2020-15242 Source advisory:...
@coreui/coreui-datatables (1.0.0), @daai/sb-decloud (>=1.0.0, <=1.0.11) +38 more potentially affected by CVE-2020-28458 via datatables.net (>=1.10.12, <=1.10.22)
datatables.net NPM version =1.10.12, =1.0.0, =1.0.0, =3.0.0, =1.1.1, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =0.0.0, =0.1.56, =0.2.151 and more Source cves: CVE-2020-28458 Source advisory: SNYK:JS-DATATABLESNET-1016402...
@baic/yolk (>=1.0.0-alpha.2, <=1.0.0-alpha.43), @baic/yolk-miniapp (>=1.0.0-alpha.1, <=1.0.0-alpha.43) +4 more potentially affected by CVE-2020-7743 via mathjs (>=7.1.0, <=7.5.0)
mathjs NPM version =7.1.0, =1.0.0-alpha.2, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.3, =2.0.12, =2.2.25 Source cves: CVE-2020-7743 Source advisory: SNYK:JS-MATHJS-1016401...
@cycle-robot-drivers/run (>=0.0.0, <=1.0.27), @wannaby/wanna-model-viewer (>=0.0.1, <=0.0.10) +17 more potentially affected by CVE-2020-7755 via dat.gui (>=0.6.5, <=0.7.7)
dat.gui NPM version =0.6.5, =0.0.0, =0.0.1, =1.0.0, =3.0.0, =0.0.0, =0.0.0, =1.0.0, =0.6.0, =0.1.0, =0.3.2, =2.0.0, =0.0.7, =0.0.0, =0.0.7 and more Source cves: CVE-2020-7755 Source advisory: SNYK:JS-DATGUI-1016275...
@dojo/cli-build-app (>=8.0.0-alpha.1, <=8.0.1), hey-you (3.0.10) +2 more potentially affected by CVE-2020-15215 via electron (10.1.1)
electron NPM version 10.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - @dojo/cli-build-app =8.0.0-alpha.1, =2.0.1, =2.0.2 - sidewinder-viewer 0.6.1 Source cves: CVE-2020-15215 Source advisory: OSV:GHSA-56PC-6JQP-XQJ...
@capacitor-community/electron-core (>=0.0.2, <=1.0.1), @felixrieseberg/electron-prebuilt-compile (>=9.0.0-beta.1, <=9.3.0) +16 more potentially affected by CVE-2020-15215 via electron (>=9.0.0, <=9.3.0)
electron NPM version =9.0.0, =0.0.2, =9.0.0-beta.1, =5.0.0-1, =0.8.2, =0.1.1, =0.3.218, =0.2.9, =3.0.7, =9.0.0, =1.1.52, =3.2.13, =3.1.0, =3.1.10 and more Source cves: CVE-2020-15215 Source advisory: OSV:GHSA-56PC-6JQP-XQJ8...
@amazingcat/amazing-iohook (>=8.2.3, <=8.3.3), @donmahallem/trapeze-client-desktop (5.1.1) +15 more potentially affected by CVE-2020-15215 via electron (>=8.0.0, <=8.5.1)
electron NPM version =8.0.0, =8.2.3, =8.0.0-beta.1, =0.1.0, =4.0.0-beta.1, =1.0.1, =1.7.0, =1.0.3, =1.0.5, =0.0.1, =1.1.35, =1.1.51 and more Source cves: CVE-2020-15215 Source advisory: OSV:GHSA-56PC-6JQP-XQJ8...
@atlantis-lab/actl (>=0.4.0, <=0.4.37), @atlantis-lab/actl-check (>=0.1.0, <=0.4.18) +23 more potentially affected by CVE-2020-15228 via @actions/core (>=1.0.0, <=1.2.5)
@actions/core NPM version =1.0.0, =0.4.0, =0.1.0, =0.0.1, =0.1.0, =0.0.0-canary.6527017, =0.0.0-d99f4ac.0, =0.0.5, =3.5.2, =0.1.22, =0.1.1, =0.1.1, =0.1.1, =1.0.0, =1.4.3 - bugcatcher-github-action 0.1.0 and more Source cves: CVE-2020-15228 Source advisory: OSV:GHSA-MFWH-5M23-J46W...
@demandcluster/api-plugin-files (>=1.0.0, <=1.0.4), @goodcastle/api-plugin-epayco-cash (>=0.0.3, <=0.2.5) +28 more potentially affected by CVE-2020-7742 via simpl-schema (>=1.4.1, <=1.8.1)
simpl-schema NPM version =1.4.1, =1.0.0, =0.0.3, =1.0.8, =0.0.9, =1.0.5, =1.2.3, =1.0.3, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.0.1, =0.0.1, =0.0.7 - @idigi/reaction-plugin-newsletters 0.0.2 and more Source cves: CVE-2020-7742 Source advisory: SNYK:JS-SIMPLSCHEMA-1016157...
@amphro/streamer (>=0.0.0, <=1.0.1), @appirio/demo-scoped-pkg (>=2.4.1, <=2.8.0) +297 more potentially affected by CVE-2020-7777 via jsen (>=0.1.2, <=0.6.6)
jsen NPM version =0.1.2, =0.0.0, =2.4.1, =0.5.9, =0.1.0, =1.0.0, =0.6.9, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc5, =2.2.3, =0.0.1, =0.1.0, =0.0.7, =1.4.0, =13.6.18 and more Source cves: CVE-2020-7777 Source advisory: SNYK:JS-JSEN-1014670...
kinvey-angular-sdk (>=3.4.0, <=3.5.3), kinvey-angular2-sdk (>=3.4.1, <=3.5.2) +6 more potentially affected by CVE-2020-7741 via hellojs (>=1.13.1, <=1.14.1)
hellojs NPM version =1.13.1, =3.4.0, =3.4.1, =3.4.1, =3.4.0, =3.4.1, =3.4.0, =3.4.0, =3.4.1, =3.5.2 Source cves: CVE-2020-7741 Source advisory: SNYK:JS-HELLOJS-1014546...