@dotgov/bpmn (>=0.0.1, <=0.0.29), @dotgov/z_bpmn (>=0.0.1, <=2.0.0) +19 more potentially affected by unknown CVE via bpmn-js-properties-panel (>=0.11.2, <=0.30.0)

bpmn-js-properties-panel NPM version =0.11.2, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =1.1.22, =1.0.97, =2.0.0, =1.0.14, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VPJ4-89Q8-RH38...

@alyzenpublic/craco (>=3.2.3-dev, <=3.2.3-dev2), @amory/core (>=2018.8.29-1, <=2018.8.31-0) +153 more potentially affected by unknown CVE via lodash.mergewith (>=4.0.3, <=4.6.1)

lodash.mergewith NPM version =4.0.3, =3.2.3-dev, =2018.8.29-1, =2018.8.29-0, =2018.8.31-0, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =1.0.0, =1.10.0, =1.10.1, =1.0.0, =1.0.0, =1.0.0, =5.0.0, =5.2.8, =6.2.0 and more Source cves: unknown CVE Source advisory:...

@anjuna/charts (>=1.0.0-preview.45, <=1.0.0-preview.47), @badgeup/badgeup-browser-client (>=0.3.0, <=3.0.0) +186 more potentially affected by unknown CVE via lodash.defaultsdeep (>=4.3.2, <=4.6.0)

lodash.defaultsdeep NPM version =4.3.2, =1.0.0-preview.45, =0.3.0, =0.1.0, =0.3.0, =6.0.2, =1.0.0-rc.1, =1.2.0, =1.0.0, =0.9.16, =0.0.1, =0.275.1-chore-update-deps.3894.0, =0.18.2-alpha.1, =3.0.0, =6.8.1, =7.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-46FH-8FC5-XCWX...

@blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1), @blackbaud/skyux-builder (>=1.10.1, <=1.31.0) +72 more potentially affected by unknown CVE via lodash.mergewith (>=4.0.3, <=4.6.0)

lodash.mergewith NPM version =4.0.3, =1.10.0, =1.10.1, =5.0.0, =5.2.8, =5.0.0, =5.0.0, =5.1.1, =1.3.0, =1.0.0-alpha.1, =1.0.4, =1.1.3, =1.0.0-alpha.4, =1.1.11, =1.0.3, =1.0.0-alpha.3, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5947-M4FG-XHQG...

@anjuna/charts (>=1.0.0-preview.45, <=1.0.0-preview.47), @badgeup/badgeup-browser-client (>=0.3.0, <=3.0.0) +186 more potentially affected by unknown CVE via lodash.defaultsdeep (>=4.3.2, <=4.6.0)

lodash.defaultsdeep NPM version =4.3.2, =1.0.0-preview.45, =0.3.0, =0.1.0, =0.3.0, =6.0.2, =1.0.0-rc.1, =1.2.0, =1.0.0, =0.9.16, =0.0.1, =0.275.1-chore-update-deps.3894.0, =0.18.2-alpha.1, =3.0.0, =6.8.1, =7.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H5MP-5Q4P-GGF5...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @cimpress/simple-auth-wrapper (>=3.1.0, <=6.4.7) +277 more potentially affected by unknown CVE via lodash.merge (>=4.0.1, <=4.6.0)

lodash.merge NPM version =4.0.1, =0.1.0-18, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =6.2.6, =1.1.2, =0.0.22, =0.0.4, =1.2.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2M96-9W4J-WGV7...

docpad-plugin-posteditor (>=2.0.0, <=2.1.2) potentially affected by unknown CVE via bleach (0.3.0)

bleach NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - docpad-plugin-posteditor =2.0.0, =2.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-5634-RV46-48JF...

@550w-tools/cli (>=0.0.14, <=0.0.16), @550w-tools/core (>=0.0.14, <=0.0.16) +540 more potentially affected by unknown CVE via safe-eval (>=0.2.0, <=0.4.1)

safe-eval NPM version =0.2.0, =0.0.14, =0.0.14, =0.0.13, =0.0.14, =0.0.15, =1.0.1, =1.0.2, =1.0.3, =1.1.2, =0.1.16-beta.1, =1.0.0-beta.4, =0.3.0-alpha.1, =0.20.0, =2.0.295, =2.0.315 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9PCF-H8Q9-63F6...

@27works/posto (2.0.2), @asephermann/capacitor-filechooser (0.0.1) +161 more potentially affected by unknown CVE via eco (>=1.0.3, <=1.1.0-rc-3)

eco NPM version =1.0.3, =0.0.9, =1.0.1, =0.0.1, =0.0.73, =0.0.1, =1.2.1, =0.0.1, =0.2.5, =1.0.0, =0.1.0, =0.2.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R32X-JHW5-G48P...

@dev-engage/engage-ionic (>=0.6.0, <=0.6.6), @ionic/angular (>=4.1.0-dev.201902122208.39fbc32, <=4.1.2) +2 more potentially affected by unknown CVE via @ionic/core (>=4.1.0, <=4.1.2-dev.201903141948.7d01207)

@ionic/core NPM version =4.1.0, =0.6.0, =4.1.0-dev.201902122208.39fbc32, =4.1.2 - @ionic/pwa-elements 1.0.2 - dos-wc-library 0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-R3XC-47QG-H929...

@ccrpc/tip (>=0.1.0, <=0.3.2), @ccrpc/webmapgl (>=0.10.0, <=0.13.0) +6 more potentially affected by unknown CVE via @ionic/core (4.2.0-dev.201904092340.3a643a3)

@ionic/core NPM version 4.2.0-dev.201904092340.3a643a3 is affected by a known vulnerability. The following packages have a transitive dependency on @ionic/core and may be impacted: - @ccrpc/tip =0.1.0, =0.10.0, =4.2.0, =4.2.0, =4.2.0-dev.201903262032.a8a48a4, =2.2.3-alpha.0, =0.9.0, =0.12.2 -...

@ionic/angular (>=4.3.0-dev.201904161617.4474974, <=4.3.0), dos-wc-library (>=0.7.7, <=0.7.21) potentially affected by unknown CVE via @ionic/core (4.3.0-dev.201904171418.07e739a)

@ionic/core NPM version 4.3.0-dev.201904171418.07e739a is affected by a known vulnerability. The following packages have a transitive dependency on @ionic/core and may be impacted: - @ionic/angular =4.3.0-dev.201904161617.4474974, =0.7.7, =0.7.21 Source cves: unknown CVE Source advisory:...

@uni-cli/cli (>=1.0.6, <=1.0.12), @uni-cli/init (1.0.12) +1 more potentially affected by unknown CVE via fs-extar (0.0.1-security)

fs-extar NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fs-extar and may be impacted: - @uni-cli/cli =1.0.6, =1.0.12 - @uni-cli/init 1.0.12 - hwsz-tools 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-435C-QCPM-WJW5...

@alesju/sphinxapi (1.2.2), @aquanomix/symodbus (1.0.3) +159 more potentially affected by unknown CVE via put (0.0.6)

put NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on put and may be impacted: - @alesju/sphinxapi 1.2.2 - @aquanomix/symodbus 1.0.3 - @aredridel/clockworkmod-tether =1.0.0, =1.5.16, =1.0.0, =3.3.3, =3.8.0, =0.0.0, =0.0.1, =0.0.0, =0.0....

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @atlasmap/atlasmap.data.mapper (>=1.32.0-SNAPSHOT.20180129121405, <=1.34.0-SNAPSHOT.20180420142818) +105 more potentially affected by unknown CVE via bootstrap-select (>=1.7.3, <=1.13.5)

bootstrap-select NPM version =1.7.3, =4.13.7-rc4, =1.32.0-SNAPSHOT.20180129121405, =1.0.0, =2.0.0, =1.0.0, =1.0.0, =3.2.13, =3.0.11, =3.0.1, =3.0.7, =3.2.17, =5.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9R7H-6639-V5MW...

1filecompiler (0.0.2), @adrian.u/adritoolbox (>=1.0.0, <=1.1.0) +801 more potentially affected by CVE-2020-8147 via utils-extend (1.0.8)

utils-extend NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on utils-extend and may be impacted: - 1filecompiler 0.0.2 - @adrian.u/adritoolbox =1.0.0, =0.1.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.0.1, =0.37.8, =1.0.1, =0.1.0, =1.0.2,...

@adhitiadarmawan/tmcomponents (0.0.1), @aothechbcn/frontend-idealbar--lib-idealbar (>=1.0.0, <=1.0.10) +17 more potentially affected by unknown CVE via htmr (>=0.4.10, <=0.7.0)

htmr NPM version =0.4.10, =1.0.0, =0.0.1-alpha.100, =1.0.0-beta.1, =1.0.0-beta.5, =1.12.0, =1.5.0, =2.2.0, =1.27.0, =1.1.0, =1.1.0, =5.17.0, =1.1.0, =1.0.0, =5.0.0, =5.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F8RQ-M28H-8HXJ...

norska (>=0.7.0, <=0.8.4), norska-frontend (>=0.7.4, <=0.9.11) +5 more potentially affected by unknown CVE via lazysizes (>=5.1.1, <=5.2.0)

lazysizes NPM version =5.1.1, =0.7.0, =0.7.4, =0.7.4, =2.1.4, =0.5.2, =0.5.2, =0.7.2 - sov 0.2.4 Source cves: unknown CVE Source advisory: OSV:GHSA-W4VP-3MQ7-7V82...

@rebelware/fibonacci-generator (0.0.3), react-oauth2-auth-code-flow (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via react-oauth-flow (1.2.0)

react-oauth-flow NPM version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-oauth-flow and may be impacted: - @rebelware/fibonacci-generator 0.0.3 - react-oauth2-auth-code-flow =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory:...

3nit-utils (0.24.0), @cloudinary/mediaflows-cli (>=0.0.23-beta, <=0.0.28) +29 more potentially affected by unknown CVE via @hapi/hapi (>=18.3.1, <=18.4.0)

@hapi/hapi NPM version =18.3.1, =0.0.23-beta, =7.4.0, =7.0.0, =8.5.0-snapshot, =0.1.0, =0.7.0, =2.12.6, =1.8.0, =1.8.0, =0.0.1, =1.0.0, =1.0.0, =2.0.0, =2.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-23VW-MHV5-GRV5...