3d-kit (>=0.0.1, <=0.0.14), @0x4447/broccoli (>=1.0.0, <=1.0.16) +144 more potentially affected by CVE-2021-4278 via tree-kit (>=0.0.4, <=0.6.2)

tree-kit NPM version =0.0.4, =0.0.1, =1.0.0, =2.0.0, =1.0.0, =1.18.0, =0.0.1, =1.0.5-master.20190403074739, =1.0.0-master.20180909013449, =0.1.0-master.20191109234452, =0.1.0-ipcrm-custom-event.20191122150318, =1.1.0-master.20190802170815, =0.1.0-master.20190319050251,...

960.css (1.0.0), @4site/engrid-styles (>=0.2.19, <=0.2.24) +120 more potentially affected by CVE-2021-23343 via path-parse (>=1.0.5, <=1.0.6)

path-parse NPM version =1.0.5, =0.2.19, =0.1.1, =7.0.0-2, =0.2.0, =0.17.0, =0.17.0, =0.19.0, =0.17.0, =0.23.0, =0.17.0, =0.17.0, =0.17.1 - @choerodon/issue 0.17.0 and more Source cves: CVE-2021-23343 Source advisory: SNYK:JS-PATHPARSE-1077067...

aiowrap (0.1.0), ambisonic (>=0.1.0, <=0.3.1) +147 more potentially affected by CVE-2021-29938 via slice-deque (>=0.1.16, <=0.3.0)

slice-deque CARGO version =0.1.16, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.8.0, =0.3.0, =0.6.0, =0.4.0, =0.8.0, =0.2.0, =0.6.0, =0.15.3 and more Source cves: CVE-2021-29938 Source advisory: OSV:RUSTSEC-2021-0047...

keeshond_editor (>=0.1.0, <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (0.2.4)

toodee CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:RUSTSEC-2021-0028...

@igames/ghost-cli (>=1.15.3, <=1.15.5), homebridge-ring (9.14.2) +1 more potentially affected by CVE-2021-21315 via systeminformation (>=5.0.6, <=5.1.2)

systeminformation NPM version =5.0.6, =1.15.3, =1.15.5 - homebridge-ring 9.14.2 - ring-client-api 9.14.2 Source cves: CVE-2021-21315 Source advisory: OSV:GHSA-2M8V-572M-FF2V...

@0soft/zero-material-ui (>=0.0.1, <=0.0.25), @abegalinov/backoffice-skeleton (>=0.1.0, <=0.4.9) +302 more potentially affected by CVE-2021-23353 via jspdf (>=2.0.0, <=2.3.0)

jspdf NPM version =2.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.0-nightly-202010102951, =0.0.0-nightly-202151822534, =0.0.0-nightly-202151023138, =0.0.0-nightly-2020112923923, =0.0.0-nightly-202141023010, =0.0.0-nightly-202010102951, =0.0.0-nightly-202122521518, =0.0.0-nightly-202121722854,...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2021-21310 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2021-21310 Source advisory: OSV:GHSA-PG53-56CG-4M8Q...

@byhuz/huz-ui-sigma (>=1.0.19, <=1.0.27), @deliverybot/client (>=0.7.0, <=0.7.2) +30 more potentially affected by CVE-2021-23327 via apexcharts (>=3.2.0, <=3.23.1)

apexcharts NPM version =3.2.0, =1.0.19, =0.7.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =7.20.0-snapshot-1617172219791, =2.3.0, =1.0.3, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.15.0 and more Source cves: CVE-2021-23327 Source advisory: OSV:GHSA-W46J-8HM6-H8MM...

1ib (>=1.0.9, <=1.0.11), 4front-cli (>=0.0.1, <=0.0.20) +375 more potentially affected by CVE-2021-23354 via printf (>=0.0.4, <=0.6.0)

printf NPM version =0.0.4, =1.0.9, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.5, =1.3.0-beta.0, =1.2.26, =1.2.31, =7.54.0 and more Source cves: CVE-2021-23354 Source advisory: SNYK:JS-PRINTF-1072096...

ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.4.0), br.com.simpli:simpli-ws (>=1.2.1, <=2.2.0) +631 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (>=7.0.0, <=7.9.3)

org.elasticsearch:elasticsearch MAVEN version =7.0.0, =j8.2.2.0, =1.2.1, =0.0.1-alpha, =6.1.0, =6.1.7, =6.1.0, =6.1.0, =6.1.7, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.12c, =6.1.0, =6.1.12e and more Source cves: CVE-2020-7021 Source advisory: MEND:CVE-2020-7021...

ai.grakn:grakn-dist (>=0.7.0, <=0.16.0), ai.grakn:grakn-test (0.10.0) +1941 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (>=0.6.0, <=6.8.13)

org.elasticsearch:elasticsearch MAVEN version =0.6.0, =0.7.0, =0.6.1, =0.11.0, =0.3.0-alpha-1, =1.0.1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.2.1 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-starter 5.2.0 and more Source cves: CVE-2020-7021 Source advisory: MEND:CVE-2020-7021...

@zpmc/zwd-server (>=0.0.14, <=0.0.21) potentially affected by CVE-2020-26299 via ftp-srv (4.1.0)

ftp-srv NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ftp-srv and may be impacted: - @zpmc/zwd-server =0.0.14, =0.0.21 Source cves: CVE-2020-26299 Source advisory: OSV:GHSA-PMW4-JGXX-PCQ9...

activedirectoryenum (>=0.4.7, <=0.5.0), airflow-run (0.4.9) +188 more potentially affected by CVE-2020-36242 via cryptography (>=3.1.0, <=3.3.1)

cryptography PYPI version =3.1.0, =0.4.7, =0.117.0b0, =2.0.1.dev14, =8.0.1, =0.0.3, =0.9.1, =0.11.0 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 - azureml-contrib-fairness 1.23.0 - azureml-contrib-functions 1.23.0 - azureml-contrib-gbdt 1.23.0 - azureml-contrib-interpret 1.23.0 -...

ansible-taskrunner (>=0.0.18, <=1.4.0), api-buddy (>=0.1.0, <=0.4.0) +23 more potentially affected by CVE-2020-14343 via pyyaml (4.2.0b1)

pyyaml PYPI version 4.2.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on pyyaml and may be impacted: - ansible-taskrunner =0.0.18, =0.1.0, =1.1.1, =0.3.4, =0.3.4, =0.5.4rc0, =0.5.1rc0, =2020.10.19, =1.2.3, =1.3.0, =0.1.1, =0.3.6 - md2k-cerebral-cort...

aalam-common (0.1.78), adamalib (0.1.0) +82 more potentially affected by CVE-2020-14343 via pyyaml (3.11.0)

pyyaml PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyyaml and may be impacted: - aalam-common 0.1.78 - adamalib 0.1.0 - aoikbookmarkstofiles =0.1.0, =1.14.1, =0.5.0, =1.1.3.dev34, =0.0.4, =0.1.0, =1.0.0, =0.0.4, =2016.3.17,...

argo-workflow-tools (0.9.6), assume (>=0.2.3, <=0.4.0) +56 more potentially affected by CVE-2020-14343 via pyyaml (4.2.0b4)

pyyaml PYPI version 4.2.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on pyyaml and may be impacted: - argo-workflow-tools 0.9.6 - assume =0.2.3, =0.2.10, =2.1.3, =0.2.1, =2.0.41, =0.3.25, =0.10.9, =1.11.1, =2.0.3, =2.1.2 - cloudless 0.0.8 -...

amiwo (>=0.0.1, <=0.2.3), geoshaper (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-29935 via rocket (>=0.1.6, <=0.2.11)

rocket CARGO version =0.1.6, =0.0.1, =0.1.0, =0.8.0, =0.15.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2021-29935 Source advisory: OSV:RUSTSEC-2021-0044...

2pg-oauth (>=1.0.0, <=1.0.1), 30s (>=1.5.0, <=1.5.23) +1872 more potentially affected by CVE-2021-21306 via marked (>=1.1.1, <=1.2.9)

marked NPM version =1.1.1, =1.0.0, =1.5.0, =4.11.16, =1.0.1, =0.0.1, =2.4.0, =0.12.4, =4.0.0, =0.1.1, =0.1.10, =0.0.1, =1.0.0, =2.0.0, =3.1.1 - @adonisjs/cli 4.0.13 and more Source cves: CVE-2021-21306 Source advisory: OSV:GHSA-4R62-V4VQ-HR96...

fintalk-pkg (>=2.3.20, <=2.3.22) potentially affected by CVE-2021-21304 via dynamoose (2.3.0)

dynamoose NPM version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on dynamoose and may be impacted: - fintalk-pkg =2.3.20, =2.3.22 Source cves: CVE-2021-21304 Source advisory: OSV:GHSA-RRQM-P222-8PH2...

activedirectoryenum (>=0.4.7, <=0.5.0), airflow-run (0.4.9) +188 more potentially affected by CVE-2020-36242 via cryptography (>=3.1.0, <=3.3.1)

cryptography PYPI version =3.1.0, =0.4.7, =0.117.0b0, =2.0.1.dev14, =8.0.1, =0.0.3, =0.9.1, =0.11.0 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 - azureml-contrib-fairness 1.23.0 - azureml-contrib-functions 1.23.0 - azureml-contrib-gbdt 1.23.0 - azureml-contrib-interpret 1.23.0 -...