@aviationpast/niotest (>=1.0.1, <=1.0.17) potentially affected by unknown CVE via 4equest (0.0.1-security)

4equest NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on 4equest and may be impacted: - @aviationpast/niotest =1.0.1, =1.0.17 Source cves: unknown CVE Source advisory: OSV:GHSA-P33Q-W45H-2HCJ...

@absa-subatomic/openshift-api (>=0.0.1, <=0.0.2), @atomist-seeds/automation-client (>=1.0.0-atomist-update-1.0.0-M.5a-1538147067873.20180928150441, <=1.0.0-master.20180928151025) +40 more potentially affected by unknown CVE via graphql-code-generator (>=0.5.5, <=0.17.0)

graphql-code-generator NPM version =0.5.5, =0.0.1, =1.0.0-atomist-update-1.0.0-M.5a-1538147067873.20180928150441, =1.0.0-atomist-update-1.0.0-M.5a-1538146868055.20180928150114, =1.0.0-atomist-update-1.0.0-M.5a-1538147121196.20180928150530, =0.1.0-master.20181019173228,...

@argdown/image-export (>=1.5.0, <=1.7.5), @automattic/wordpress-external-dependencies-plugin (1.0.0-alpha.0) +243 more potentially affected by CVE-2019-5786 via puppeteer (>=1.0.0, <=1.12.2)

puppeteer NPM version =1.0.0, =1.5.0, =0.190.0, =0.0.36, =0.0.1, =0.0.18, =0.0.1, =1.0.3, =1.3.4, =0.1.0, =0.0.10, =4.0.0-alpha.3, =8.0.1 and more Source cves: CVE-2019-5786 Source advisory: OSV:GHSA-C2GP-86P4-5935...

@carnesen/mathjs-app (>=0.0.2, <=0.0.5), @ia-cloud/node-red-contrib-ia-cloud-fds-raspberry-pi (>=0.1.0, <=0.1.1) +37 more potentially affected by CVE-2017-1001004 via typed-function (>=0.10.3, <=0.10.5)

typed-function NPM version =0.10.3, =0.0.2, =0.1.0, =1.0.0-beta.1, =1.19.0, =1.13.0, =1.1.8, =0.5.1, =0.1.22, =0.5.1, =3.10.0, =0.0.3, =0.1.18 and more Source cves: CVE-2017-1001004 Source advisory: OSV:GHSA-3QH4-R86R-GRVM...

@planningcenter/icons (>=3.0.0-7, <=3.0.0-15), feathers-commands (>=0.0.1, <=0.1.4) +11 more potentially affected by unknown CVE via smart-extend (1.7.4)

smart-extend NPM version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on smart-extend and may be impacted: - @planningcenter/icons =3.0.0-7, =0.0.1, =1.0.4, =1.0.2, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =0.1.0, =1.0.1, =2.0.0, =3.0.5 Source cve...

@achingbrain/ngrok (0.2.2), @atomist/sdm-automation (>=0.1.16-master.20181116180810, <=0.1.59-master.20200611224542) +603 more potentially affected by unknown CVE via decompress-zip (>=0.0.2, <=0.2.0)

decompress-zip NPM version =0.0.2, =0.1.16-master.20181116180810, =14.0.5, =0.1.2, =1.2.6, =1.0.1, =1.0.0, =1.1.1, =5.0.1, =1.0.0, =5.2.1, =5.3.0 - @paulcbetts/squirrel-windows 1.2.1 - @pgswe/ics.js 0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-73V8-V6G4-VRPM...

@colmena/colmena-loopback (>=0.0.4, <=0.2.1), loopback-component-meta (1.0.0) +2 more potentially affected by unknown CVE via loopback (>=2.8.6, <=2.36.2)

loopback NPM version =2.8.6, =0.0.4, =0.2.1 - loopback-component-meta 1.0.0 - loopback-connector-couchbase 1.0.6 - loopback-connector-couchbase-mappingport 1.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-8WGC-JJVV-CV6V...

@colmena/api (0.1.0), agneta-platform (>=0.13.0-beta.1, <=0.13.0-beta.9) +1 more potentially affected by unknown CVE via loopback-connector-mongodb (>=3.1.0, <=3.2.1)

loopback-connector-mongodb NPM version =3.1.0, =0.13.0-beta.1, =0.13.0-beta.9 - scheduler-service-api 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-HXWC-5VW9-2W4W...

@autorest/common (>=1.0.0, <=1.5.2), @autorest/configuration (>=1.1.0-dev.2, <=1.9.2) +56 more potentially affected by unknown CVE via static-eval (2.0.0)

static-eval NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on static-eval and may be impacted: - @autorest/common =1.0.0, =1.1.0-dev.2, =3.0.6371, =4.0.2, =2.0.4, =0.2.0-dev.1, =4.0.149, =3.0.129, =4.0.174, =1.2.5, =1.5.0, =1.0.0, =1.2....

favana-docx (>=1.0.28, <=1.0.47), web-commons-export (1.2.10) potentially affected by unknown CVE via office-converter (1.0.2)

office-converter NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on office-converter and may be impacted: - favana-docx =1.0.28, =1.0.47 - web-commons-export 1.2.10 Source cves: unknown CVE Source advisory: OSV:GHSA-9P64-H5Q4-PHPM...

@cpomelo/pomelo (2.2.7), @linix01/pomelo (2.2.9) +54 more potentially affected by unknown CVE via pomelo-monitor (>=0.3.5, <=0.3.7)

pomelo-monitor NPM version =0.3.5, =2.2.5, =1.0.0, =2.2.5, =0.0.1, =0.0.1, =1.0.1, =0.1.0, =2.2.6, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M5CH-GX8G-RG73...

@here/harp-leaflet (>=0.2.4, <=0.2.5) potentially affected by CVE-2020-8244 via bl (4.0.2)

bl NPM version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on bl and may be impacted: - @here/harp-leaflet =0.2.4, =0.2.5 Source cves: CVE-2020-8244 Source advisory: OSV:GHSA-PP7H-53GX-MX7R...

@adobe/aem-site-template-builder (>=0.1.7, <=0.1.8), vulnerable-js (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via bestzip (2.1.6)

bestzip NPM version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on bestzip and may be impacted: - @adobe/aem-site-template-builder =0.1.7, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-4QQC-MP5F-CCV4...

@akashic/engine-files-reftest (>=3.3.20, <=3.4.1), @astound/appium-xcuitest-driver (2.67.1) +66 more potentially affected by unknown CVE via node-idevice (0.1.6)

node-idevice NPM version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-idevice and may be impacted: - @akashic/engine-files-reftest =3.3.20, =0.1.0, =0.1.0-alpha.0, =0.8.0, =1.9.2-beta2.15, =0.1.5, =0.0.34, =5.7.8, =0.0.0-fake.230, =0.0.1,...

@aconex/styleguide (>=2.0.1, <=2.2.0) potentially affected by unknown CVE via markdown-it-toc-and-anchor (4.1.2)

markdown-it-toc-and-anchor NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-toc-and-anchor and may be impacted: - @aconex/styleguide =2.0.1, =2.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X6M6-5HRF-FH6R...

sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)

md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-HGR5-82RC-P936...

@chris-sorrells/snowflakes (1.0.0), @haukeland-mgm/plateviewer (1.0.2) +25 more potentially affected by unknown CVE via buefy (>=0.3.2, <=0.7.1)

buefy NPM version =0.3.2, =0.1.47, =0.0.1, =1.2.0, =3.2.160, =1.0.13, =1.0.0, =1.0.0, =0.6.0, =1.0.1, =1.0.0, =0.0.2, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XWQW-RF2Q-XMHF...

homestar-samsung-smart-tv (>=0.0.1, <=0.0.19), node-red-contrib-samsungtv (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via samsung-remote (1.2.5)

samsung-remote NPM version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on samsung-remote and may be impacted: - homestar-samsung-smart-tv =0.0.1, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XHJX-MFR6-9RR4...

ryosukesuzuki (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via ascii-art (1.4.3)

ascii-art NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on ascii-art and may be impacted: - ryosukesuzuki =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-9HQJ-38J2-5JGM...

brocode (>=1.0.0, <=2.0.0-pre4), browserify-lazy-server (>=0.0.0-beta.0, <=0.0.0-beta.1) +10 more potentially affected by CVE-2018-14730 via browserify-hmr (0.3.7)

browserify-hmr NPM version 0.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on browserify-hmr and may be impacted: - brocode =1.0.0, =0.0.0-beta.0, =0.2.0, =3.5.0, =1.0.0, =0.0.3, =2.3.0, =0.1.0, =1.0.0, =0.1.0, =0.0.11, =0.0.13 Source cves:...