detherjs (>=4.2.3 <=4.2.15), secure-cookies-js (>=1.0.0 <=1.1.1) +1 more potentially affected by unknown CVE via simple-crypto-js (>=1.1.0 <=1.1.1)

simple-crypto-js NPM version =1.1.0, =4.2.3, =1.0.0, =0.1.1, =0.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-5V7R-JG9R-VQ44...

@formicarium/tanajura (>=0.0.2 <=1.10.3), starbucket (>=0.9.1 <=1.1.1) +2 more potentially affected by unknown CVE via node-git-server (>=0.0.1 <=0.4.3)

node-git-server NPM version =0.0.1, =0.0.2, =0.9.1, =0.1.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-CV3V-7846-6PXM...

hexo-wustxiao-blog (=1.1.1) potentially affected by unknown CVE via hexo-admin (=2.3.0)

hexo-admin NPM version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hexo-admin and may be impacted: - hexo-wustxiao-blog =1.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PHPH-XPJ4-WVCV...

@mehrdafon/n8n-nodes-ibm-db2 (=0.4.9), @zowe/db2 (>=3.0.1 <=3.0.2-alpha.201907121346) +19 more potentially affected by unknown CVE via ibm_db (>=0.0.1 <=2.5.0)

ibmdb NPM version =0.0.1, =3.0.1, =4.0.0, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =2.0.0, =1.0.1, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =5.0.0, =7.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-P77H-HV6G-FMFP...

1405_logging (=1.0.0), @2o3t-core/plugin-common (>=0.0.1 <=0.0.52) +2311 more potentially affected by unknown CVE via helmet-csp (>=1.2.2 <=2.9.0)

helmet-csp NPM version =1.2.2, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.3.5, =1.0.0, =1.2.1, =0.1.2, =0.0.2, =11.1.0, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C3M8-X3CG-QM2C...

fleek-response (>=0.4.2 <=0.4.3), fleek-router (>=0.4.2 <=1.2.3) potentially affected by unknown CVE via swagger-injector (>=1.2.0 <=2.0.9)

swagger-injector NPM version =1.2.0, =0.4.2, =0.4.2, =1.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-V4X8-GW49-7HV4...

@ardibos/taekbos (=1.1.4), @conlan2/cmpt315as2 (>=1.0.0 <=1.0.1) +8 more potentially affected by unknown CVE via public (=0.1.5)

public NPM version =0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on public and may be impacted: - @ardibos/taekbos =1.1.4 - @conlan2/cmpt315as2 =1.0.0, =1.0.8, =0.1.0, =0.1.2 - weektwoabc =1.0.0 - wjwrk9 =1.0.1 - yyjchhym =1.0.0 Source cves:...

nineone152 (>=1.1.9 <=1.1.11) potentially affected by unknown CVE via node-ftp (=0.0.1-security)

node-ftp NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-ftp and may be impacted: - nineone152 =1.1.9, =1.1.11 Source cves: unknown CVE Source advisory: OSV:GHSA-5JGP-PG4F-Q8VJ...

adaptive-fs (>=1.1.0 <=1.3.2), ajato (=0.0.1-wip) +1 more potentially affected by unknown CVE via mogoose (=0.0.1-security)

mogoose NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mogoose and may be impacted: - adaptive-fs =1.1.0, =1.0.48, =1.1.26 Source cves: unknown CVE Source advisory: OSV:GHSA-5MM9-55C9-P5R7...

fd-dcc (>=1.0.0 <=2.1.4), test_sdk_aki (>=1.0.3 <=1.0.4) +1 more potentially affected by unknown CVE via axioss (=0.0.1-security)

axioss NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axioss and may be impacted: - fd-dcc =1.0.0, =1.0.3, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8W9J-6WG6-QV4F...

jl-wechat-sdk (>=1.0.0 <=1.2.3) potentially affected by unknown CVE via crpyto-js (=0.0.1-security)

crpyto-js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crpyto-js and may be impacted: - jl-wechat-sdk =1.0.0, =1.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-73C6-VWJH-G3QH...

mycoin (=1.0.0), simple-blockchain-implement (>=1.0.0 <=1.0.4) potentially affected by unknown CVE via crytpo-js (=0.0.1-security)

crytpo-js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin =1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-M4FQ-XH7W-JHFM...

@mlshv/modern-koa-docs (=3.0.2), app-state-inspector (>=0.1.0 <=0.1.2) +106 more potentially affected by unknown CVE via mithril (>=0.1.24 <=1.1.6)

mithril NPM version =0.1.24, =0.1.0, =0.0.4, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.1, =1.0.4-alpha.0, =1.0.51, =1.0.0, =0.1.1, =0.6.0, =1.0.0-alpha.2, =1.0.0-alpha.2, =1.0.0-alpha.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C3PX-V9C7-M734...

ezs (>=5.5.0 <=9.3.1), hoppel (=0.4.0) +3 more potentially affected by unknown CVE via notevil (>=0.8.1 <=1.3.1)

notevil NPM version =0.8.1, =5.5.0, =1.0.0, =0.1.0, =0.2.0 - piedpiper-middle-out =5.8.1 Source cves: unknown CVE Source advisory: OSV:GHSA-7R5F-7QR4-PF6Q...

@adamvr/mongration (>=1.0.1 <=1.1.1), @aemcloud/aemcloud-cli (>=0.1.1 <=0.10.8) +2146 more potentially affected by unknown CVE via lodash.merge (>=2.2.1 <=4.6.0)

lodash.merge NPM version =2.2.1, =1.0.1, =0.1.1, =0.70.1, =1.0.1, =2.2.3, =1.3.5, =1.2.2, =0.1.0-18, =1.0.0, =0.0.9, =4.0.0, =1.0.0, =1.0.0-dev-152fa896b5f3eb24fb8b97a28b89f0a83ea5da0f, =1.0.0-dev-a5e815fb69787bead6cfece07fba686b91ed3d3a and more Source cves: unknown CVE Source advisory:...

docpad-plugin-posteditor (>=2.0.0 <=2.1.2) potentially affected by unknown CVE via bleach (=0.3.0)

bleach NPM version =0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - docpad-plugin-posteditor =2.0.0, =2.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-5634-RV46-48JF...

@27works/posto (=2.0.2), @asephermann/capacitor-filechooser (=0.0.1) +161 more potentially affected by unknown CVE via eco (>=1.0.3 <=1.1.0-rc-3)

eco NPM version =1.0.3, =0.0.9, =1.0.1, =0.0.1, =0.0.73, =0.0.1, =1.2.1, =0.0.1, =0.2.5, =1.0.0, =0.1.0, =0.2.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R32X-JHW5-G48P...

@dev-engage/engage-ionic (>=0.6.0 <=0.6.6), @ionic/angular (>=4.1.0 <=4.1.3-dev.201903261530.1ecfcd1) +2 more potentially affected by unknown CVE via @ionic/core (>=4.1.0 <=4.1.3-dev.201903261530.1ecfcd1)

@ionic/core NPM version =4.1.0, =0.6.0, =4.1.0, =4.1.3-dev.201903261530.1ecfcd1 - @ionic/pwa-elements =1.0.2 - dos-wc-library =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-R3XC-47QG-H929...

@ionic/angular (>=4.3.0 <=4.3.1-dev.201904231448.eb3cbe4), dos-wc-library (>=0.7.7 <=0.7.21) potentially affected by unknown CVE via @ionic/core (>=4.3.0 <=4.3.1-dev.201904231448.eb3cbe4)

@ionic/core NPM version =4.3.0, =4.3.0, =0.7.7, =0.7.21 Source cves: unknown CVE Source advisory: OSV:GHSA-R3XC-47QG-H929...

@uni-cli/cli (>=1.0.6 <=1.0.12), @uni-cli/init (=1.0.12) +1 more potentially affected by unknown CVE via fs-extar (=0.0.1-security)

fs-extar NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fs-extar and may be impacted: - @uni-cli/cli =1.0.6, =1.0.12 - @uni-cli/init =1.0.12 - hwsz-tools =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-435C-QCPM-W...