at.molindo.social:spring-social-security (=1.1.0.RELEASE), cn.jhc:spring-social-qq (>=0.0.2 <=0.0.5) +496 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (>=3.2.0.RELEASE <=3.2.4.RELEASE)

org.springframework.security:spring-security-core MAVEN version =3.2.0.RELEASE, =0.0.2, =1.0-RELEASE, =1.0.1, =1.1.2, =1.2.0, =1.2.5 and more Source cves: CVE-2014-3527 Source advisory: OSV:GHSA-WMV4-5W76-VP9G...

@cenk1cenk2/renovate-config (>=1.0.9 <=1.4.15) potentially affected by unknown CVE via renovate (>=21.33.15 <=22.25.6)

renovate NPM version =21.33.15, =1.0.9, =1.4.15 Source cves: unknown CVE Source advisory: OSV:GHSA-36RH-GGPR-J3GJ...

untitled-js (>=1.0.0 <=1.0.9) potentially affected by unknown CVE via untitled-model (=1.0.5)

untitled-model NPM version =1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on untitled-model and may be impacted: - untitled-js =1.0.0, =1.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-HQ8G-QQ57-5275...

@cqingwang/react-native-update (>=14.0.5 <=15.0.3), @mervinzhu/react-native-update-pod (>=5.0.1 <=5.0.3) +23 more potentially affected by unknown CVE via entitlements (>=1.0.0 <=1.2.0)

entitlements NPM version =1.0.0, =14.0.5, =5.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.2, =1.0.0, =1.0.0, =1.4.1, =1.0.2, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G8VP-6HV4-M67C...

@csltech/strong-nginx-controller (>=1.0.2 <=1.0.3), @csltech/strong-pm (>=7.0.0 <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.17 <=2.1.8-M1)

swagger-ui NPM version =2.0.17, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VP93-GCX5-4W52...

@5minds/node-red-dashboard-2-processcube-dynamic-form (>=1.0.25-poc-for-using-dynamic-ui-from-app-sdk-4a73f4-m2ok3vom <=1.0.25-poc-for-using-dynamic-ui-from-app-sdk-d41e60-m2oo8xvq), @5minds/processcube_app_sdk (>=5.1.0-feature-1c1233-lsdsso3l <=8.6.2) +352 more potentially affected by unknown CVE via diagram-js (>=0.18.4 <=1.4.0)

diagram-js NPM version =0.18.4, =1.0.25-poc-for-using-dynamic-ui-from-app-sdk-4a73f4-m2ok3vom, =5.1.0-feature-1c1233-lsdsso3l, =1.2.0, =0.1.0-package-6ccc4e-lyitv9ph, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =1.0.98, =0.0.25, =0.3.0, =1.0.0, =0.0.1-alpha.0, =0.3.0 - @bptlab/openbpt-modeler-bpmn =1.0.0 and...

@ieremeev/app (>=3.0.1 <=3.2.4), xtal-test (>=0.0.1 <=0.0.10) potentially affected by unknown CVE via serve (=10.0.0)

serve NPM version =10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on serve and may be impacted: - @ieremeev/app =3.0.1, =0.0.1, =0.0.10 Source cves: unknown CVE Source advisory: OSV:GHSA-XW79-HHV6-578C...

react-endless (>=1.0.4 <=1.0.6), react-templet (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via epress (=0.0.1-security)

epress NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-VF8Q-PW7H-R2X2...

@ctx-core/auth0 (>=25.0.2 <=28.0.23), @ctx-core/auth0-lock (>=12.0.2 <=13.0.9) +55 more potentially affected by CVE-2020-15168 via node-fetch (>=3.0.0-beta.10 <=3.0.0-beta.8)

node-fetch NPM version =3.0.0-beta.10, =25.0.2, =12.0.2, =6.0.2, =1.0.1, =10.0.2, =11.0.2, =9.0.2, =1.0.0, =11.0.16, =0.0.1, =7.0.0, =5.0.0, =6.0.0, =8.0.2, =0.0.1, =0.0.6 and more Source cves: CVE-2020-15168 Source advisory: OSV:GHSA-W7RC-RWVF-8Q5R...

20190403-utils (=1.0.0), 3nit-utils (>=0.24.0 <=1.0.2) +4758 more potentially affected by CVE-2020-15168 via node-fetch (>=2.0.0 <=2.6.0)

node-fetch NPM version =2.0.0, =0.24.0, =0.0.0-alpha.1, =1.0.43, =0.0.80, =1.0.0-beta.1, =0.0.0-canary.0, =0.0.1, =2.0.0, =1.0.0, =0.1.0, =2.0.0, =2.0.3 and more Source cves: CVE-2020-15168 Source advisory: OSV:GHSA-W7RC-RWVF-8Q5R...

node-lemonldap-ng-handler (=0.4.0) potentially affected by CVE-2020-24660 via lemonldap-ng-handler (=0.4.0)

lemonldap-ng-handler NPM version =0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on lemonldap-ng-handler and may be impacted: - node-lemonldap-ng-handler =0.4.0 Source cves: CVE-2020-24660 Source advisory: OSV:GHSA-X44X-R84W-8V67...

@ist-group/skolid-client-components (>=0.7.0 <=0.10.2) potentially affected by unknown CVE via personnummer (=2.1.1)

personnummer NPM version =2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on personnummer and may be impacted: - @ist-group/skolid-client-components =0.7.0, =0.10.2 Source cves: unknown CVE Source advisory: OSV:GHSA-VPGC-7H78-GX8F...

@brettparkhurst/kinetic (>=2.0.0 <=2.0.17), appworks-js (>=16.0.0 <=16.0.1) +8 more potentially affected by CVE-2019-0219 via cordova-plugin-inappbrowser (>=1.7.2 <=3.0.0)

cordova-plugin-inappbrowser NPM version =1.7.2, =2.0.0, =16.0.0, =1.2.0, =0.0.1, =1.0.13, =0.3.2, =1.0.0, =1.2.4 Source cves: CVE-2019-0219 Source advisory: OSV:GHSA-C6PW-Q7F2-97HV...

meta (>=1.0.0 <=1.0.3), ownmeta (=0.0.4) potentially affected by unknown CVE via meta-git (>=0.0.0 <=1.1.3)

meta-git NPM version =0.0.0, =1.0.0, =1.0.3 - ownmeta =0.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-QCFF-FFX3-M25C...

@mongodb-js/compass-aggregations (>=0.0.20 <=4.1.0), @mongodb-js/compass-export-to-language (>=2.2.22 <=2.2.24) +4 more potentially affected by unknown CVE via mongodb-query-parser (>=0.0.1 <=1.5.0)

mongodb-query-parser NPM version =0.0.1, =0.0.20, =2.2.22, =0.0.3, =3.0.0, =1.0.3, =0.0.1, =0.4.2 Source cves: unknown CVE Source advisory: OSV:GHSA-97MG-3CR6-3X4C...

@zpmc/zwd-server (>=0.0.14 <=0.0.21) potentially affected by unknown CVE via ftp-srv (=4.1.0)

ftp-srv NPM version =4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ftp-srv and may be impacted: - @zpmc/zwd-server =0.0.14, =0.0.21 Source cves: unknown CVE Source advisory: OSV:GHSA-R4M5-47CQ-6QG8...

matlab-array-utils (>=1.0.1 <=1.0.2), react-plotter (=0.0.1) potentially affected by unknown CVE via plotter (=0.5.0)

plotter NPM version =0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on plotter and may be impacted: - matlab-array-utils =1.0.1, =1.0.2 - react-plotter =0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-65XX-C85X-WG76...

@toolspack/ttd-common (>=0.1.0 <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0 <=0.1.4) potentially affected by unknown CVE via babel-laoder (=0.0.1-security)

babel-laoder NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-QP6M-JQFR-2F7V...

3a-server (>=0.7.41 <=0.9.10), 3a-server-mongo (>=0.1.0-beta.1 <=1.0.0-beta.1) +11 more potentially affected by unknown CVE via html-pdf-chrome (>=0.2.0 <=0.5.0)

html-pdf-chrome NPM version =0.2.0, =0.7.41, =0.1.0-beta.1, =0.1.3, =0.2.0, =1.0.0, =1.1.0, =1.0.0, =0.1.0, =1.0.3, =0.0.0, =0.5.12 Source cves: unknown CVE Source advisory: OSV:GHSA-5P98-WPC9-G498...

dredd (>=0.5.1 <=5.4.6), dredd-bench (>=0.1.0 <=0.2.1) potentially affected by unknown CVE via pitboss-ng (=0.3.3)

pitboss-ng NPM version =0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pitboss-ng and may be impacted: - dredd =0.5.1, =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-3GPC-W23C-W59W...