@ionic/cli-plugin-ionic1 (>=0.0.2 <=0.0.3), @phoenix-plugin-registry/com.vevedh.ioniccli (=1.1.2) +21 more potentially affected by CVE-2015-1164 via serve-static (>=1.7.0 <=1.7.1)

serve-static NPM version =1.7.0, =0.0.2, =1.1.0, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =1.2.9, =0.0.9, =0.0.1, =0.0.1, =1.0.0, =0.0.1, =0.0.5 - isz =0.0.2 and more Source cves: CVE-2015-1164 Source advisory: OSV:GHSA-C3X7-GJMX-R2FF...

cnpmjs.org (>=2.0.0-beta0 <=2.0.0-rc.3), json2html-cli (>=0.0.2 <=0.0.8) +1 more potentially affected by CVE-2014-10065 via remarkable (=1.3.0)

remarkable NPM version =1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on remarkable and may be impacted: - cnpmjs.org =2.0.0-beta0, =0.0.2, =0.0.8 - koa-markdown =1.0.0 Source cves: CVE-2014-10065 Source advisory: OSV:GHSA-F9VC-Q3HH-QHFV...

crayon-audio (>=0.6.0 <=0.7.1) potentially affected by CVE-2020-35889 via crayon (>=0.6.0 <=0.7.1)

crayon CARGO version =0.6.0, =0.6.0, =0.7.1 Source cves: CVE-2020-35889 Source advisory: OSV:RUSTSEC-2020-0037...

alfred-material-manager (>=1.0.0 <=1.0.5) potentially affected by unknown CVE via alfred-workflow-nodejs (=2.0.4)

alfred-workflow-nodejs NPM version =2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on alfred-workflow-nodejs and may be impacted: - alfred-material-manager =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: SNYK:JS-ALFREDWORKFLOWNODEJS-608975...

ag-llama-api (>=0.0.1 <=0.0.31), ag-llama-api-s (>=0.0.4 <=0.0.12) +403 more potentially affected by CVE-2020-25032 via flask-cors (>=1.1.2 <=3.0.8)

flask-cors PYPI version =1.1.2, =0.0.1, =0.0.4, =0.0.13, =1.0.2, =2.5.0, =2.5.0, =0.1.0b2696.post0.dev1, =0.1.8, =0.0.1, =1.0.2, =0.4.0, =0.1.0, =1.0.1, =0.14.0, =0.15.3 - amundsen-databuilder =5.1.0 and more Source cves: CVE-2020-25032 Source advisory: OSV:PYSEC-2020-43...

tsutils (>=4.0.5 <=5.2.0) potentially affected by CVE-2020-15147 via red-discordbot (=3.0.2)

red-discordbot PYPI version =3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on red-discordbot and may be impacted: - tsutils =4.0.5, =5.2.0 Source cves: CVE-2020-15147 Source advisory: OSV:PYSEC-2020-266...

tsutils (>=4.0.5 <=5.2.0) potentially affected by CVE-2020-15140 via red-discordbot (=3.0.2)

red-discordbot PYPI version =3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on red-discordbot and may be impacted: - tsutils =4.0.5, =5.2.0 Source cves: CVE-2020-15140 Source advisory: OSV:PYSEC-2020-265...

tsutils (>=4.0.5 <=5.2.0) potentially affected by CVE-2020-15147 via red-discordbot (=3.0.2)

red-discordbot PYPI version =3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on red-discordbot and may be impacted: - tsutils =4.0.5, =5.2.0 Source cves: CVE-2020-15147 Source advisory: OSV:GHSA-7257-96VG-QF6X...

tsutils (>=4.0.5 <=5.2.0) potentially affected by CVE-2020-15140 via red-discordbot (=3.0.2)

red-discordbot PYPI version =3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on red-discordbot and may be impacted: - tsutils =4.0.5, =5.2.0 Source cves: CVE-2020-15140 Source advisory: OSV:GHSA-55J9-849X-26H4...

2max-express-authenticate (>=0.0.1 <=0.0.122), @0x18b2ee/parse-server (>=3.10.1 <=3.11.0) +2200 more potentially affected by CVE-2020-7689 via bcrypt (>=0.2.4 <=4.0.1)

bcrypt NPM version =0.2.4, =0.0.1, =3.10.1, =1.0.0, =0.0.1, =0.1.0-beta.0, =1.2.0, =1.0.30, =2.0.0, =2.0.1, =0.1.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4 - @aifedespaix/fdp-api-libs =1.0.7 and more Source cves: CVE-2020-7689 Source advisory: OSV:GHSA-5WG4-74H6-Q47V...

kea (>=0.1.0 <=0.1.3) potentially affected by CVE-2020-35885 via alpm-rs (=0.1.24)

alpm-rs CARGO version =0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on alpm-rs and may be impacted: - kea =0.1.0, =0.1.3 Source cves: CVE-2020-35885 Source advisory: OSV:RUSTSEC-2020-0032...

ai.lum:odinson-rest-api_2.12 (>=0.3.1 <=0.5.0), be.objectify:deadbolt-java_2.12 (>=2.8.0 <=2.8.1) +202 more potentially affected by CVE-2020-12480 via com.typesafe.play:play_2.12 (>=2.8.0 <=2.8.19)

com.typesafe.play:play2.12 MAVEN version =2.8.0, =0.3.1, =2.8.0, =2.8.0, =1.6-P28, =1.6-P28-B3, =1.6.1, =14.0.0play2.8, =14.0.0play2.8, =18.0.4play2.8 - com.digitaltangible:play-guard2.12 =2.5.0 and more Source cves: CVE-2020-12480 Source advisory: OSV:GHSA-CF8J-64H9-6Q58...

@zpmc/zwd-server (>=0.0.14 <=0.0.21) potentially affected by CVE-2020-15152 via ftp-srv (=4.1.0)

ftp-srv NPM version =4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ftp-srv and may be impacted: - @zpmc/zwd-server =0.0.14, =0.0.21 Source cves: CVE-2020-15152 Source advisory: OSV:GHSA-JW37-5GQR-CF9J...

dom-to-gaffa (>=0.0.1 <=0.0.2), driven (>=0.0.1 <=0.3.3) +12 more potentially affected by CVE-2020-7727 via gedi (>=0.10.1 <=1.6.3)

gedi NPM version =0.10.1, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.3.1, =0.3.3 Source cves: CVE-2020-7727 Source advisory: SNYK:JS-GEDI-598803...

svelte-forms-lib (>=1.1.1 <=1.3.2) potentially affected by CVE-2020-7707 via property-expr (=2.0.2)

property-expr NPM version =2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on property-expr and may be impacted: - svelte-forms-lib =1.1.1, =1.3.2 Source cves: CVE-2020-7707 Source advisory: SNYK:JS-PROPERTYEXPR-598800...

nis-model (>=0.6.0 <=0.6.22), nis-view (>=0.1.1 <=0.1.8) potentially affected by CVE-2020-7703 via nis-utils (=0.6.10)

nis-utils NPM version =0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nis-utils and may be impacted: - nis-model =0.6.0, =0.1.1, =0.1.8 Source cves: CVE-2020-7703 Source advisory: SNYK:JS-NISUTILS-598799...

worksmith_etcd (>=0.0.1 <=0.2.1) potentially affected by CVE-2020-7725 via worksmith (>=0.0.22 <=0.1.8)

worksmith NPM version =0.0.22, =0.0.1, =0.2.1 Source cves: CVE-2020-7725 Source advisory: SNYK:JS-WORKSMITH-598798...

grunt-kevoree (>=0.3.0 <=6.0.0-alpha.1), grunt-kevoree-registry (>=3.0.0 <=4.0.0-alpha) +9 more potentially affected by CVE-2020-7724 via tiny-conf (=1.1.0)

tiny-conf NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tiny-conf and may be impacted: - grunt-kevoree =0.3.0, =3.0.0, =5.7.0, =4.0.0, =5.5.0-alpha, =0.3.0, =1.6.0, =1.0.0-alpha, =1.0.1, =1.0.0, =1.0.2 Source cves: CVE-2020-7724...

@cloudron/manifest-format (>=5.27.0 <=5.35.0), @cloudron/pipework (>=1.1.0 <=2.0.0) +13 more potentially affected by CVE-2020-7737 via safetydance (>=0.0.15 <=2.5.1)

safetydance NPM version =0.0.15, =5.27.0, =1.1.0, =1.0.0, =0.1.2, =1.3.0, =1.0.0, =1.0.0, =1.0.0, =0.8.7, =1.3.0, =0.0.3, =0.0.2, =0.2.1 Source cves: CVE-2020-7737 Source advisory: SNYK:JS-SAFETYDANCE-598687...

@blueprintjs/docs (>=1.0.0 <=1.3.1), @frctl/twig (>=1.0.0-alpha.0 <=1.0.0-beta.2) +101 more potentially affected by CVE-2020-7700 via phpjs (>=0.0.1 <=1.3.2)

phpjs NPM version =0.0.1, =1.0.0, =1.0.0-alpha.0, =0.3.16, =1.2.7, =0.1.3, =1.0.1, =1.0.0, =0.7.0, =0.0.1, =0.0.9, =0.0.1-alpha.1, =0.0.1, =0.0.7 and more Source cves: CVE-2020-7700 Source advisory: SNYK:JS-PHPJS-598681...