@adobe/aem-site-template-builder (>=0.1.7 <=0.1.8), vulnerable-js (>=1.0.0 <=1.0.2) potentially affected by CVE-2020-7730 via bestzip (=2.1.6)

bestzip NPM version =2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on bestzip and may be impacted: - @adobe/aem-site-template-builder =0.1.7, =1.0.0, =1.0.2 Source cves: CVE-2020-7730 Source advisory: SNYK:JS-BESTZIP-609371...

@aconex/styleguide (>=2.0.1 <=2.2.0), alinex-report (>=1.0.2 <=1.3.14) potentially affected by unknown CVE via markdown-it-toc-and-anchor (>=2.0.0 <=4.1.2)

markdown-it-toc-and-anchor NPM version =2.0.0, =2.0.1, =1.0.2, =1.3.14 Source cves: unknown CVE Source advisory: OSV:GHSA-X6M6-5HRF-FH6R...

sign_project (=1.0.0) potentially affected by unknown CVE via md-data-table (=2.2.0)

md-data-table NPM version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-HGR5-82RC-P936...

homestar-samsung-smart-tv (>=0.0.1 <=0.0.19), node-red-contrib-samsungtv (>=0.1.0 <=0.1.1) potentially affected by unknown CVE via samsung-remote (=1.2.5)

samsung-remote NPM version =1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on samsung-remote and may be impacted: - homestar-samsung-smart-tv =0.0.1, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XHJX-MFR6-9RR4...

brocode (>=1.0.0 <=2.0.0-pre4), browserify-lazy-server (>=0.0.0-beta.0 <=0.0.0-beta.1) +10 more potentially affected by CVE-2018-14730 via browserify-hmr (=0.3.7)

browserify-hmr NPM version =0.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on browserify-hmr and may be impacted: - brocode =1.0.0, =0.0.0-beta.0, =0.2.0, =3.5.0, =1.0.0, =0.0.3, =2.3.0, =0.1.0, =1.0.0, =0.1.0, =0.0.11, =0.0.13 Source cves:...

snsadmin (=1.0.0) potentially affected by unknown CVE via soket.io (=0.0.1-security)

soket.io NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-WP2P-Q35G-3RJJ...

@adobe-commerce/aio-services-kit (>=1.0.0 <=1.0.1), @adobe-commerce/aio-toolkit (>=1.0.0 <=1.2.6) +64 more potentially affected by unknown CVE via openwhisk (>=1.0.1 <=3.21.9)

openwhisk NPM version =1.0.1, =1.0.0, =1.0.0, =0.6.0, =2.1.0, =8.3.0-pre.2022-06-22.sha-42703caf, =1.0.0, =0.3.1, =0.1.0, =1.0.3, =0.6.0, =1.0.0, =0.0.3, =0.2.0, =0.12.0, =0.0.2, =7.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-53MJ-MC38-Q894...

react-cms-editor (=0.1.71) potentially affected by CVE-2017-16080 via nodesass (=0.0.2-security)

nodesass NPM version =0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on nodesass and may be impacted: - react-cms-editor =0.1.71 Source cves: CVE-2017-16080 Source advisory: OSV:GHSA-XFMW-2VMM-579C...

graph.generator20 (>=1.0.0 <=1.0.2) potentially affected by CVE-2017-16047 via mysqljs (=0.0.2-security)

mysqljs NPM version =0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on mysqljs and may be impacted: - graph.generator20 =1.0.0, =1.0.2 Source cves: CVE-2017-16047 Source advisory: OSV:GHSA-8GV6-G7VP-HR34...

reasy (>=1.0.0 <=1.5.1), reasy-pure (>=0.0.5 <=1.0.4) +1 more potentially affected by CVE-2017-16097 via tiny-http (>=1.2.2 <=2.0.8)

tiny-http NPM version =1.2.2, =1.0.0, =0.0.5, =1.1.0, =2.1.4 Source cves: CVE-2017-16097 Source advisory: OSV:GHSA-CCH6-5X4H-6QC5...

xtalk-demo (>=0.0.2 <=0.0.8) potentially affected by CVE-2017-16091 via xtalk (>=0.0.3 <=0.0.5)

xtalk NPM version =0.0.3, =0.0.2, =0.0.8 Source cves: CVE-2017-16091 Source advisory: OSV:GHSA-CQV6-7FWC-8M3C...

sysmonitor-client (>=0.0.1 <=1.0.0), sytemmonitor-client (=0.0.1) potentially affected by CVE-2017-1000219 via windows-cpu (=0.1.4)

windows-cpu NPM version =0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on windows-cpu and may be impacted: - sysmonitor-client =0.0.1, =1.0.0 - sytemmonitor-client =0.0.1 Source cves: CVE-2017-1000219 Source advisory: OSV:GHSA-63M4-FHF2-CMF7...

frames-simulator (>=1.0.8 <=1.0.9) potentially affected by CVE-2016-10649 via frames-compiler (=1.0.8)

frames-compiler NPM version =1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on frames-compiler and may be impacted: - frames-simulator =1.0.8, =1.0.9 Source cves: CVE-2016-10649 Source advisory: OSV:GHSA-9CHW-XRWX-F86J...

@csltech/strong-nginx-controller (>=1.0.2 <=1.0.3), @csltech/strong-pm (>=7.0.0 <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.17 <=2.1.8-M1)

swagger-ui NPM version =2.0.17, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G336-C7WV-8HP3...

lets-chat-kerberos (>=0.2.0 <=0.4.1), passport-assistant-kerberos (=0.0.1) +1 more potentially affected by CVE-2016-1000238 via node-krb5 (=0.0.6)

node-krb5 NPM version =0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-krb5 and may be impacted: - lets-chat-kerberos =0.2.0, =0.4.1 - passport-assistant-kerberos =0.0.1 - passport-kerberos =0.0.1 Source cves: CVE-2016-1000238 Source advisor...

@irjudson/nitrogen-mongodb-providers (=0.3.7), @oada/oada-id-client (=1.0.0) +210 more potentially affected by CVE-2016-1000223 via jws (>=0.0.2 <=2.0.0)

jws NPM version =0.0.2, =0.1.11, =1.0.0, =0.0.2, =0.1.0, =0.0.7, =0.0.4, =1.0.0, =1.0.0, =1.0.8 - auth0-rule-sandbox =1.0.0 and more Source cves: CVE-2016-1000223 Source advisory: OSV:GHSA-GJCW-V447-2W7Q...

docpad-plugin-posteditor (>=2.0.0 <=2.1.2) potentially affected by CVE-2014-8881 via bleach (=0.3.0)

bleach NPM version =0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - docpad-plugin-posteditor =2.0.0, =2.1.2 Source cves: CVE-2014-8881 Source advisory: OSV:GHSA-MVMF-CVFX-QG55...

ariadne-jwt (>=0.1.0 <=0.1.3), balder (=0.1.24) +30 more potentially affected by CVE-2020-24583 via django (>=3.1.0 <=3.1.0rc1)

django PYPI version =3.1.0, =0.1.0, =20.13.1, =0.1.0, =0.10.0, =0.9.0, =0.4.0, =0.12.0, =0.5.0, =0.7.0, =0.8.0, =0.13.2 and more Source cves: CVE-2020-24583 Source advisory: OSV:PYSEC-2020-33...

atila-vue (>=0.1.3 <=0.1.3.5), contrail (>=0.3.0 <=1.0.2) +27 more potentially affected by CVE-2020-24583 via django (>=3.0.0 <=3.0.0rc1)

django PYPI version =3.0.0, =0.1.3, =0.3.0, =0.1.1, =0.0.1, =0.0.1, =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.4 and more Source cves: CVE-2020-24583 Source advisory: OSV:PYSEC-2020-33...

ambition-edc (>=0.3.68 <=0.3.72), boorunaut (=0.4.3) +46 more potentially affected by CVE-2020-24584 via django (>=2.2.0 <=2.2.15)

django PYPI version =2.2.0, =0.3.68, =5.2.1, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =2.0.0, =0.3.0a0, =0.4.0b1 - django-dicom =0.0.1 - django-gov-notify =0.1.0 - django-htmx-rest =0.0.1b1 - django-ios-storekit =1.0.6 and more Source cves: CVE-2020-24584 Source advisory: OSV:PYSEC-2020-34...