@absolunet/nwayo-workflow (>=3.2.0 <=3.3.6), @londondevstudio/gush (>=0.9.0 <=0.10.0) +53 more potentially affected by CVE-2020-7601 via gulp-scss-lint (>=0.1.12 <=1.0.0)

gulp-scss-lint NPM version =0.1.12, =3.2.0, =0.9.0, =1.0.0, =1.1.1, =0.0.27, =0.0.33, =1.0.34, =1.1.54 - fear-core-dev =1.3.2 and more Source cves: CVE-2020-7601 Source advisory: OSV:GHSA-G4HJ-R7R3-9RWV...

@ioup/mia-bot (=0.0.1) potentially affected by CVE-2021-23378 via picotts (=0.1.1)

picotts NPM version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on picotts and may be impacted: - @ioup/mia-bot =0.0.1 Source cves: CVE-2021-23378 Source advisory: OSV:GHSA-WQ7Q-5V6J-XFV6...

2fa (=0.0.1), @chgibb/ngplasmid (>=0.0.21 <=0.0.29) +312 more potentially affected by CVE-2020-8215 via canvas (>=0.10.0 <=1.6.10)

canvas NPM version =0.10.0, =0.0.21, =0.99.5-beta.0, =0.0.1, =1.0.0, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =1.0.3, =3.2.2, =0.0.5, =0.0.6 and more Source cves: CVE-2020-8215 Source advisory: OSV:GHSA-73RG-X683-M3QW...

ai.grakn.kgms:client (=1.4.3), ai.grakn:client-java (>=1.4.1 <=1.4.3) +157 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=3.11.0 <=3.11.7)

org.apache.cassandra:cassandra-all MAVEN version =3.11.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2020-13946 Source advisory: OSV:GHSA-24WW-MC5X-XC43...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c2.2 (>=2.2.0 <=2.6.0), com.github.haifengl:unicorn-cassandra_2.11 (>=2.0.0 <=2.1.1) +40 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=2.2.0 <=2.2.16)

org.apache.cassandra:cassandra-all MAVEN version =2.2.0, =2.2.0, =2.0.0, =0.6.0, =0.6.0, =2.2.10.0, =1.2.2, =2.2.0, =2.2.0, =1.0.17.Final, =1.1.2.Final - org.hawkular.accounts:hawkular-accounts-sample-websocket-backend =1.0.17.Final - org.hawkular.accounts:hawkular-accounts-sample-websocket-secur...

com.datastax.spark:kafka-streaming_2.10 (>=1.1.0-beta2 <=1.1.0-rc3), com.datastax.spark:simple-demos_2.10 (>=1.1.0-beta2 <=1.1.0-rc3) +14 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=2.1.0 <=2.1.11)

org.apache.cassandra:cassandra-all MAVEN version =2.1.0, =1.1.0-beta2, =1.1.0-beta2, =1.1.0-alpha2, =1.1.0-alpha2, =0.80, =0.1.0, =2.1.10.0, =2.11.0, =0.6.2, =0.3.1, =0.3.1, =0.2.6, =0.2.6, =0.2.7 and more Source cves: CVE-2020-13946 Source advisory: OSV:GHSA-24WW-MC5X-XC43...

io.stargate.db.cassandra:persistence-cassandra-4.0 (>=0.0.2 <=1.0.1) potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (=4.0-beta1)

org.apache.cassandra:cassandra-all MAVEN version =4.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - io.stargate.db.cassandra:persistence-cassandra-4.0 =0.0.2, =1.0.1 Source cves:...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316 <=9.00.2112.03.220528) potentially affected by CVE-2020-25020 via net.sf.mpxj:mpxj (=7.4.3)

net.sf.mpxj:mpxj MAVEN version =7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: CVE-2020-25020 Source...

be.fluid-it.guice.extensions:guice-multi-shiro-realms (=0.1-1), be.fluid-it.shiro.jee:shiro-jee-authc (>=0.1-1 <=0.1-3) +2748 more potentially affected by CVE-2020-11989 via org.apache.shiro:shiro-core (>=1.0.0-incubating <=1.5.2)

org.apache.shiro:shiro-core MAVEN version =1.0.0-incubating, =0.1-1, =4.0.0-RC2, =1.0.0, =1.0.0, =0.0.2, =0.0.21, =0.0.2, =0.0.1, =1.0.0, =0.1, =0.1, =0.1, =0.2 and more Source cves: CVE-2020-11989 Source advisory: OSV:GHSA-72W9-FCJ5-3FCG...

org.odata4j:odata4j-cxf (>=0.6.0 <=0.7.0), org.odata4j:odata4j-dist (>=0.6.0 <=0.7.0) +2 more potentially affected by CVE-2016-11023 via org.odata4j:odata4j-core (>=0.6.0 <=0.7.0)

org.odata4j:odata4j-core MAVEN version =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.7.0 Source cves: CVE-2016-11023 Source advisory: OSV:GHSA-2382-QX5H-RVQH...

ABC-ECS (>=0.1.0 <=0.2.1), ABC_Game_Engine (>=0.1.0 <=0.1.2) +311 more potentially affected by CVE-2021-38187 via anymap (>=0.10.3 <=1.0.0-beta.2)

anymap CARGO version =0.10.3, =0.1.0, =0.1.0, =0.0.1, =1.0.0-alpha.1, =0.1.6, =0.1.0-alpha.2, =0.8.0, =0.1.0, =5.0.0, =5.2.2, =0.0.1-alpha+3, =0.1.1, =0.1.1, =0.1.0, =0.1.2 and more Source cves: CVE-2021-38187 Source advisory: OSV:RUSTSEC-2021-0065...

ag-llama-api (>=0.0.1 <=0.0.31), ag-llama-api-s (>=0.0.4 <=0.0.12) +403 more potentially affected by CVE-2020-25032 via flask-cors (>=1.1.2 <=3.0.8)

flask-cors PYPI version =1.1.2, =0.0.1, =0.0.4, =0.0.13, =1.0.2, =2.5.0, =2.5.0, =0.1.0b2696.post0.dev1, =0.1.8, =0.0.1, =1.0.2, =0.4.0, =0.1.0, =1.0.1, =0.14.0, =0.15.3 - amundsen-databuilder =5.1.0 and more Source cves: CVE-2020-25032 Source advisory: OSV:GHSA-XC3P-FF3M-F46V...

worksmith_etcd (>=0.0.1 <=0.2.1) potentially affected by CVE-2020-7725 via worksmith (>=0.0.22 <=0.1.8)

worksmith NPM version =0.0.22, =0.0.1, =0.2.1 Source cves: CVE-2020-7725 Source advisory: OSV:GHSA-9829-JJ5P-J6HF...

@1337lawyers/design (>=0.1.0 <=0.12.14), @1337lawyers/gatsby-theme-1337 (=0.0.1) +1448 more potentially affected by CVE-2020-7707 via property-expr (>=1.0.1 <=2.0.2)

property-expr NPM version =1.0.1, =0.1.0, =1.0.0, =0.0.1-alpha.82, =1.0.0, =1.0.12-alpha.0, =1.0.12-alpha.0, =1.0.0, =1.1.0, =1.3.24-alpha.0, =0.0.1-alpha.1, =2.149.0, =2.152.0 - @amorist/gatsby-theme-antd =1.0.0 - @andersonbarros/strapi-plugin-content-type-builder =3.0.0-beta.16.8-0 and more...

@irrelon/nextstate (=5.0.0), @irrelon/schema (>=3.0.0 <=3.3.0) +2 more potentially affected by CVE-2020-7708 via @irrelon/path (>=2.3.5 <=3.1.1)

@irrelon/path NPM version =2.3.5, =3.0.0, =0.0.10, =4.1.0, =4.2.1 Source cves: CVE-2020-7708 Source advisory: OSV:GHSA-J7CG-H9V9-6VQP...

nis-model (>=0.6.0 <=0.6.22), nis-view (>=0.1.1 <=0.1.8) potentially affected by CVE-2020-7703 via nis-utils (=0.6.10)

nis-utils NPM version =0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nis-utils and may be impacted: - nis-model =0.6.0, =0.1.1, =0.1.8 Source cves: CVE-2020-7703 Source advisory: OSV:GHSA-GR58-J5WH-M333...

@keep2zero/light (>=0.0.1 <=0.0.10), @logique/fastify-adapter (>=0.0.1 <=0.0.3-alpha.4) +9 more potentially affected by CVE-2020-8136 via fastify-multipart (>=0.2.0 <=0.8.2)

fastify-multipart NPM version =0.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.10, =1.0.20, =4.1.0, =9.0.0, =0.1.0, =5.4.1, =5.4.10 - nestjs-test =5.4.1 Source cves: CVE-2020-8136 Source advisory: OSV:GHSA-P9F8-GQJF-M75J...

@pl-test/c (>=1.1.0 <=1.1.1), @pl-test/e (=1.1.0) potentially affected by CVE-2020-17479 via jpv (=2.0.1)

jpv NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on jpv and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e =1.1.0 Source cves: CVE-2020-17479 Source advisory: OSV:GHSA-VH6R-G38F-Q3W8...

@acanto/october-scripts (=3.2.2), @acanto/workflow (=5.1.0) +271 more potentially affected by CVE-2021-27292 via ua-parser-js (>=0.7.14 <=0.7.23)

ua-parser-js NPM version =0.7.14, =1.4.0, =0.16.9, =2018.7.11-0, =2.0.1, =1.9.0, =1.9.0, =1.0.0, =5.0.0, =1.1.3, =2.6.6, =1.0.0, =6.6.0, =7.5.3 and more Source cves: CVE-2021-27292 Source advisory: OSV:GHSA-78CJ-FXPH-M83P...

@cobalt-engine/co-validator (>=1.0.0 <=1.1.2), @cobalt-engine/ctl (=1.0.0) +23 more potentially affected by CVE-2021-23337 via lodash-template (=1.0.0)

lodash-template NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on lodash-template and may be impacted: - @cobalt-engine/co-validator =1.0.0, =4.5.3, =3.0.0, =1.0.0, =0.1.10, =1.0.0, =0.1.3, =0.0.0, =0.1.0, =1.10.0, =1.13.4 and more...