08cms (1.0.0), 102f (>=1.0.0, <=1.0.1) +2203 more potentially affected by CVE-2019-10790 via taffydb (>=2.6.2, <=2.7.3)

taffydb NPM version =2.6.2, =1.0.0, =0.0.5, =1.0.0, =1.0.1-beta2, =1.0.40, =2.0.0-alpha.1, =1.6.0, =1.0.0, =1.0.1, =0.3.0, =1.0.2, =0.1.2, =0.2.0 - @adrian-alu0101024363/spread 0.1.3 and more Source cves: CVE-2019-10790 Source advisory: SNYK:JS-TAFFYDB-2992450...

ffmpeg-promise-peaks (>=0.6.0, <=0.7.6) potentially affected by CVE-2019-10791 via promise-probe (0.1.12)

promise-probe NPM version 0.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on promise-probe and may be impacted: - ffmpeg-promise-peaks =0.6.0, =0.7.6 Source cves: CVE-2019-10791 Source advisory: SNYK:JS-PROMISEPROBE-546816...

@brudi-toolbox/id (>=1.4.5-next.1, <=1.11.4-next.7), @cimpress/simple-auth-wrapper (>=3.0.0, <=3.1.6) +4 more potentially affected by CVE-2019-20174 via auth0-lock (>=11.0.1, <=11.20.4)

auth0-lock NPM version =11.0.1, =1.4.5-next.1, =3.0.0, =0.0.1, =1.0.42, =0.11.0, =0.17.1 Source cves: CVE-2019-20174 Source advisory: OSV:GHSA-W2PF-G6R8-PG22...

@archanova/contracts (>=1.0.0-beta.1, <=1.0.0-beta.3), @archanova/solidity (>=0.0.7, <=0.0.10) +13 more potentially affected by CVE-2020-5232 via @ensdomains/ens (>=0.1.1, <=0.3.11)

@ensdomains/ens NPM version =0.1.1, =1.0.0-beta.1, =0.0.7, =0.0.3, =0.0.3, =1.0.0, =0.0.2, =1.0.11, =1.1.1, =1.0.0, =3.1.0-ens-events.0, =0.6.1, =0.6.0, =0.0.8, =0.0.45 - ethregistrar 1.0.0 Source cves: CVE-2020-5232 Source advisory: OSV:GHSA-8F9F-PC5V-9R5H...

@enhavo/form (>=0.1.2, <=0.8.5), @enhavo/translation (>=0.8.4, <=0.8.5) +14 more potentially affected by CVE-2020-17480 via tinymce (>=5.0.6, <=5.1.0)

tinymce NPM version =5.0.6, =0.1.2, =0.8.4, =0.18.0, =15.0.1, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =2.4.3, =1.0.0, =2.14.3, =1.2.3, =2.2.81 and more Source cves: CVE-2020-17480 Source advisory: OSV:GHSA-27GM-GHR9-4V95...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @ec.components/tinymce (>=0.5.7, <=0.6.0) +37 more potentially affected by CVE-2020-17480 via tinymce (>=4.5.1, <=4.9.5)

tinymce NPM version =4.5.1, =1.0.0, =0.5.7, =0.1.1, =0.0.13, =1.3.0, =8.0.0, =0.8.8, =0.6.3, =1.2.0, =1.0.0-alpha.0, =1.1.0, =2.2.0 - common-library 0.0.0 - connectwise-manager 10.0.0 and more Source cves: CVE-2020-17480 Source advisory: OSV:GHSA-27GM-GHR9-4V95...

@homenet/core (>=4.0.0-beta.15, <=4.0.0-beta.42), @jatahworx/bhive-core (>=1.0.76, <=6.2.1) +42 more potentially affected by CVE-2019-15607 via node-red (>=0.9.1, <=0.20.7)

node-red NPM version =0.9.1, =4.0.0-beta.15, =1.0.76, =1.0.0, =2.5.0, =0.0.1, =0.0.4, =0.0.0, =0.0.1, =0.0.0, =0.1.2, =0.1.0, =1.0.0, =2.1.0 - matsample 1.0.0 and more Source cves: CVE-2019-15607 Source advisory: OSV:GHSA-8W65-XJC5-9W79...

acme-redirect (>=0.1.0, <=0.4.0), actix (>=0.8.0-alpha.2, <=0.9.0) +324 more potentially affected by CVE-2020-35902 via actix-codec (>=0.1.2, <=0.2.0)

actix-codec CARGO version =0.1.2, =0.1.0, =0.8.0-alpha.2, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.2.2 and more Source cves: CVE-2020-35902 Source advisory: OSV:RUSTSEC-2020-0049...

@mdslab/iotronic-lightning-rod (>=2.3.1, <=2.3.6), @servicenow/cli-archetype-dev (>=17.0.2, <=24.0.1) +14 more potentially affected by CVE-2019-10783 via lsof (0.1.0)

lsof NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on lsof and may be impacted: - @mdslab/iotronic-lightning-rod =2.3.1, =17.0.2, =17.0.2, =17.0.2, =0.1.0, =0.0.2, =0.0.1, =0.2.2, =0.11.0, =0.3.5, =0.0.1, =2.0.9, =2.0.12 and more Sourc...

opendocx-node (>=0.2.2-alpha, <=2.0.3), yatte (>=1.4.0-beta.12, <=3.0.0-alpha.1) potentially affected by CVE-2020-5219 via angular-expressions (1.0.0)

angular-expressions NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on angular-expressions and may be impacted: - opendocx-node =0.2.2-alpha, =1.4.0-beta.12, =3.0.0-alpha.1 Source cves: CVE-2020-5219 Source advisory: OSV:GHSA-HXHM-96PP-2...

bincrypt (>=0.3.0, <=0.3.1), fcp_cryptoauth (>=0.1.0, <=0.4.0) +12 more potentially affected by unknown CVE via rust_sodium (>=0.1.2, <=0.10.2)

rustsodium CARGO version =0.1.2, =0.3.0, =0.1.0, =0.0.1-alpha1, =0.1.0, =0.1.0, =1.0.0, =0.4.0, =0.7.0, =0.2.0, =0.10.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0003...

@sap/ui5-builder-webide-extension (1.0.1), @sersap/ui5-build-tasks (>=0.0.8, <=0.0.13) +7 more potentially affected by CVE-2019-10778 via devcert-sanscache (0.4.6)

devcert-sanscache NPM version 0.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on devcert-sanscache and may be impacted: - @sap/ui5-builder-webide-extension 1.0.1 - @sersap/ui5-build-tasks =0.0.8, =1.0.0, =1.1.0, =1.0.0, =1.0.0-beta.1, =2.0.0, =1.0.0...

10er10 (0.23.0), 1405-authtokens (>=1.0.1, <=1.0.5) +3112 more potentially affected by CVE-2016-1000236 via cookie-signature (>=1.0.0, <=1.0.3)

cookie-signature NPM version =1.0.0, =1.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =1.0.6 - @axerunners/p2pool-scanner 0.0.2 - @azu/api-mock 1.0.0 - @bear-fe/dbl 1.0.8 and more Source cves: CVE-2016-1000236 Source advisory: OSV:GHSA-92VM-WFM5-MXVV...

netlify-plugin-cypress (>=1.0.2, <=1.3.3) potentially affected by CVE-2019-10775 via ecstatic (4.1.2)

ecstatic NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on ecstatic and may be impacted: - netlify-plugin-cypress =1.0.2, =1.3.3 Source cves: CVE-2019-10775 Source advisory: SNYK:JS-ECSTATIC-540354...

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1476 more potentially affected by CVE-2019-19919 via handlebars (>=4.0.0, <=4.2.2)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =5.0.0-alpha.1, =5.0.0-alpha.1, =6.0.10 and more Source cves: CVE-2019-19919 Source advisory: OSV:GHSA-W457-6Q6X-CGP9...

@behance/istanbul (0.3.17-sourcemap), @bigcommerce/stencil-paper (>=2.0.15, <=2.0.25) +220 more potentially affected by CVE-2019-19919 via handlebars (>=3.0.0, <=3.0.7)

handlebars NPM version =3.0.0, =2.0.15, =0.4.0, =0.0.60-IE, =1.3.1, =1.0.4, =0.11.0, =0.0.1, =0.0.5, =0.0.6, =1.2.0, =0.1.0, =0.4.9 and more Source cves: CVE-2019-19919 Source advisory: OSV:GHSA-W457-6Q6X-CGP9...

@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +81 more potentially affected by CVE-2019-16777 via npm (>=6.0.0, <=6.13.2)

npm NPM version =6.0.0, =0.0.1, =0.1.2, =0.4.3, =1.0.0-beta.0, =1.0.0-beta.15, =1.1.58, =3.2.2, =2.0.0, =0.0.1, =3.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2019-16777 Source advisory: OSV:GHSA-4328-8HGF-7WJR...

@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +81 more potentially affected by CVE-2019-16776 via npm (>=6.0.0, <=6.13.2)

npm NPM version =6.0.0, =0.0.1, =0.1.2, =0.4.3, =1.0.0-beta.0, =1.0.0-beta.15, =1.1.58, =3.2.2, =2.0.0, =0.0.1, =3.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2019-16776 Source advisory: OSV:GHSA-X8QC-RRCW-4R46...

@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +81 more potentially affected by CVE-2019-16775 via npm (>=6.0.0, <=6.13.2)

npm NPM version =6.0.0, =0.0.1, =0.1.2, =0.4.3, =1.0.0-beta.0, =1.0.0-beta.15, =1.1.58, =3.2.2, =2.0.0, =0.0.1, =3.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2019-16775 Source advisory: OSV:GHSA-M6CX-G6QM-P2CX...

@pnpm/headless (>=8.0.0, <=10.0.4), @pnpm/modules-cleaner (>=5.0.0, <=7.0.3) +4 more potentially affected by CVE-2019-10773 via @pnpm/package-bins (4.0.0)

@pnpm/package-bins NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @pnpm/package-bins and may be impacted: - @pnpm/headless =8.0.0, =5.0.0, =0.1.0, =0.1.0, =0.1.0, =0.35.0, =0.36.6 Source cves: CVE-2019-10773 Source advisory:...