co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2021-21295 +1 more via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

3dcore-lib (0.17.9), @0xcert/client (>=1.0.0-beta, <=1.0.2) +1808 more potentially affected by CVE-2020-28498 via elliptic (>=6.0.2, <=6.5.3)

elliptic NPM version =6.0.2, =1.0.0-beta, =0.1.0, =0.0.0-alpha10, =2.0.0-alpha10, =2.0.0-alpha10, =1.0.0, =1.5.1, =2.0.0-alpha0, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =2.1.1 and more Source cves: CVE-2020-28498 Source advisory:...

botbuilder (>=4.10.0, <=4.10.2-rc0), botbuilder-azure (>=4.10.0, <=4.10.2-rc0) +2 more potentially affected by CVE-2021-1725 via botframework-connector (>=4.10.0, <=4.10.2-rc0)

botframework-connector NPM version =4.10.0, =4.10.0, =4.10.0, =4.10.0-preview, =4.10.2-rc0-preview - botkit-mock 4.10.0 Source cves: CVE-2021-1725 Source advisory: OSV:GHSA-FVCJ-HVFW-7F2V...

@conversationlearner/sdk (>=0.502.2, <=0.505.2), botbuilder (>=4.7.0, <=4.7.2) +4 more potentially affected by CVE-2021-1725 via botframework-connector (>=4.7.0, <=4.7.2)

botframework-connector NPM version =4.7.0, =0.502.2, =4.7.0, =4.7.0, =1.4.1, =0.505.1, =1.6.0, =1.6.2 Source cves: CVE-2021-1725 Source advisory: OSV:GHSA-FVCJ-HVFW-7F2V...

botbuilder (>=4.9.0, <=4.9.3), botbuilder-azure (>=4.9.0, <=4.9.3) +3 more potentially affected by CVE-2021-1725 via botframework-connector (>=4.9.0, <=4.9.3)

botframework-connector NPM version =4.9.0, =4.9.0, =4.9.0, =4.9.0-preview, =4.9.0-preview, =4.9.3-preview - botkit-mock 4.9.0 Source cves: CVE-2021-1725 Source advisory: OSV:GHSA-FVCJ-HVFW-7F2V...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: SNYK:JS-CHRONONODE-1083228...

booklibrs (>=0.1.0, <=1.0.4), fl2rust (0.3.1) +5 more potentially affected by CVE-2021-28306 +2 more via fltk (>=0.9.7, <=0.14.13)

fltk CARGO version =0.9.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.15 Source cves: CVE-2021-28306, CVE-2021-28307, CVE-2021-28308 Source advisory: OSV:RUSTSEC-2021-0038...

317-project (0.0.0), 4pm-cli (>=0.0.1, <=0.0.5) +1884 more potentially affected by CVE-2020-28502 via xmlhttprequest (>=1.2.2, <=1.6.0)

xmlhttprequest NPM version =1.2.2, =0.0.1, =0.1.16-master.20181116180810, =0.1.0, =1.1.1, =0.0.4, =1.0.399-main, =0.1.0, =0.1.2, =0.1.3 - @flexcodelabs/input 0.1.1 and more Source cves: CVE-2020-28502 Source advisory: SNYK:JS-XMLHTTPREQUEST-1082935...

1tp (>=0.0.1, <=0.11.2), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +2800 more potentially affected by CVE-2020-28502 via xmlhttprequest-ssl (>=1.5.1, <=1.5.5)

xmlhttprequest-ssl NPM version =1.5.1, =0.0.1, =1.0.2, =4.11.25, =0.1.3, =0.0.15, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =0.2.9-dev-10, =0.13.0-alkemio, =0.17.0-alkemio-1 and more Source cves: CVE-2020-28502 Source advisory: SNYK:JS-XMLHTTPREQUESTSSL-1082936...

diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)

diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:RUSTSEC-2021-0037...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2021-28037 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2021-28037 Source advisory: OSV:RUSTSEC-2021-0036...

vostok (>=1.4.0, <=1.5.5) potentially affected by CVE-2021-21322 via fastify-http-proxy (>=4.0.4, <=4.1.0)

fastify-http-proxy NPM version =4.0.4, =1.4.0, =1.5.5 Source cves: CVE-2021-21322 Source advisory: OSV:GHSA-C4QR-GMR9-V23W...

@ahbbvc/invoice-generator (1.0.0), @atomspace/vue (>=1.2.0, <=1.4.0) +55 more potentially affected by CVE-2021-21353 via pug (3.0.0)

pug NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pug and may be impacted: - @ahbbvc/invoice-generator 1.0.0 - @atomspace/vue =1.2.0, =2.0.0-17, =0.0.12, =0.0.0-canary-0925da6f11e35cc712cc12337716f846a67c0e4c,...

08cms (1.0.0), 0xweb (>=0.9.9, <=0.10.93) +29786 more potentially affected by CVE-2021-23358 via underscore (>=1.3.2, <=1.12.0)

underscore NPM version =1.3.2, =0.9.9, =0.1.1, =0.1.0, =1.0.0, =0.0.1-alpha, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =0.0.2, =0.2.2, =0.1.0, =1.5.3 and more Source cves: CVE-2021-23358 Source advisory: SNYK:JS-UNDERSCORE-1080984...

@accordproject/cicero-cli (>=0.3.4, <=0.21.27-20210409091004), @accordproject/cicero-common (>=0.3.4, <=0.3.12) +455 more potentially affected by CVE-2021-27516 via urijs (>=1.16.1, <=1.19.5)

urijs NPM version =1.16.1, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.4.5-20180705184508, =0.11.2-20190326183124, =0.10.2-20190213145246, =0.0.5-20190507210024, =0.71.8-20190915045234, =0.80.2-20190926121100, =0.80.4-20191003231621, =0.61.2-20190916200303, =0.90.1-20200514190616, =0.6.0-alpha.0,...

@21epub/resource-lib (>=1.0.0, <=1.0.3), @2fn/helpers (>=1.0.0, <=1.0.1) +3135 more potentially affected by CVE-2021-23341 via prismjs (>=1.2.0, <=1.22.0)

prismjs NPM version =1.2.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @adebawo-damilare/esm-reports-app 5.2.0 - @admin-bro/design-system 1.4.0 - @afzalh/aug07 1.1.2 and more Source cves: CVE-2021-23341 Source...

4talent-questions-shortlist (1.3.3), @42.nl/ui (>=1.0.7, <=1.0.9) +624 more potentially affected by CVE-2021-23346 via html-parse-stringify2 (2.0.1)

html-parse-stringify2 NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on html-parse-stringify2 and may be impacted: - 4talent-questions-shortlist 1.3.3 - @42.nl/ui =1.0.7, =5.0.1, =0.1.0, =1.0.0, =0.2.0-alpha.1, =0.1.2, =0.9.9, =0.9.9,...

@fluentui/token-pipeline (>=0.3.3, <=0.22.0), @inmotionnow/momentum-components (>=8.2.2-next.2, <=102.39.0) +7 more potentially affected by unknown CVE via style-dictionary (>=2.5.0, <=2.10.2)

style-dictionary NPM version =2.5.0, =0.3.3, =8.2.2-next.2, =1.0.2, =0.1.0, =0.0.2, =1.0.0, =8.1.3, =6.0.0, =8.2.2-next.2 Source cves: unknown CVE Source advisory: SNYK:JS-STYLEDICTIONARY-1080632...

atomic-server (>=0.10.0, <=0.17.0), basic-http-server (>=0.6.0, <=0.8.1) +40 more potentially affected by CVE-2021-27671 via comrak (>=0.1.9, <=0.8.2)

comrak CARGO version =0.1.9, =0.10.0, =0.6.0, =0.1.0, =0.1.5, =0.1.0, =0.0.1, =0.15.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.7 and more Source cves: CVE-2021-27671 Source advisory: OSV:RUSTSEC-2021-0026...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23344 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23344 Source advisory: SNYK:JS-TOTALJS-1077069...