@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23389 +1 more via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23389, CVE-2021-32831 Source advisory: SNYK:JS-TOTALJS-1088607...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +11784 more potentially affected by CVE-2021-28092 via is-svg (>=2.1.0, <=4.2.1)

is-svg NPM version =2.1.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =1.1.8, =1.0.0, =1.0.4 - 4design 0.0.1 and more Source cves: CVE-2021-28092 Source advisory: OSV:GHSA-7R28-3M3F-R2PR...

1.1.0 (1.0.0), 1c (>=6.2.0, <=8.0.0) +7241 more potentially affected by CVE-2021-27290 via ssri (>=5.2.2, <=6.0.1)

ssri NPM version =5.2.2, =6.2.0, =0.0.1, =2.0.0, =0.1.0, =0.0.2, =0.3.0, =1.0.0, =1.0.0-beta.1, =1.0.4, =1.0.1, =1.6.1 and more Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...

byte-common (1.0.0), registry-sync (>=2.4.1, <=2.4.6) potentially affected by CVE-2021-27290 via ssri (>=7.0.0, <=7.1.0)

ssri NPM version =7.0.0, =2.4.1, =2.4.6 Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...

@eik/core (>=1.0.0-alpha.19, <=1.2.6), @eik/service (>=1.0.0-alpha.13, <=1.2.32) +2 more potentially affected by CVE-2021-27290 via ssri (8.0.0)

ssri NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ssri and may be impacted: - @eik/core =1.0.0-alpha.19, =1.0.0-alpha.13, =26.4.0, =2.4.7, =2.5.4 Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...

a6s-railway (>=0.2.0, <=0.2.3), fbl (>=1.5.0, <=1.15.0) potentially affected by CVE-2021-25914 via object-collider (1.0.3)

object-collider NPM version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on object-collider and may be impacted: - a6s-railway =0.2.0, =1.5.0, =1.15.0 Source cves: CVE-2021-25914 Source advisory: OSV:GHSA-85G2-29M8-QF2P...

com.github.fanzezhen.common:common-security (>=0.0.1, <=2.0.3), com.github.fanzezhen:security (>=1.3.3, <=1.3.4.4) +6 more potentially affected by CVE-2021-25329 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.1, =1.3.3, =5.22, =10.0.0-m1, =10.0.0-m1, =3.15.0, =3.16.8 - su.boleyn.oj:oj-server 1.1.2 Source cves: CVE-2021-25329 Source advisory: OSV:GHSA-JGWR-3QM3-26F3...

4talent-questions-shortlist (1.3.3), @42.nl/ui (>=1.0.7, <=1.0.9) +624 more potentially affected by CVE-2021-23346 via html-parse-stringify2 (2.0.1)

html-parse-stringify2 NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on html-parse-stringify2 and may be impacted: - 4talent-questions-shortlist 1.3.3 - @42.nl/ui =1.0.7, =5.0.1, =0.1.0, =1.0.0, =0.2.0-alpha.1, =0.1.2, =0.9.9, =0.9.9,...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +11789 more potentially affected by CVE-2021-28092 +1 more via is-svg (>=2.1.0, <=4.2.2)

is-svg NPM version =2.1.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =1.1.8, =1.0.0, =1.0.4 - 4design 0.0.1 and more Source cves: CVE-2021-28092, CVE-2021-29059 Source advisory: SNYK:JS-ISSVG-1243891...

@anandsuresh/smart-stream (>=1.0.1, <=1.1.0), @anandsuresh/smart_stream (1.0.0) +10 more potentially affected by CVE-2021-21368 via msgpack5 (>=4.0.2, <=4.4.0)

msgpack5 NPM version =4.0.2, =1.0.1, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =1.0.2, =1.2.9, =2.0.0-rc1, =0.5.6, =0.1.0, =0.1.3 Source cves: CVE-2021-21368 Source advisory: OSV:GHSA-GMJW-49P4-PCFM...

imapapi (>=1.4.6, <=1.4.9) potentially affected by CVE-2021-21368 via msgpack5 (>=5.0.0, <=5.2.0)

msgpack5 NPM version =5.0.0, =1.4.6, =1.4.9 Source cves: CVE-2021-21368 Source advisory: OSV:GHSA-GMJW-49P4-PCFM...

@solid/community-server (0.4.1) potentially affected by unknown CVE via @solid/identity-token-verifier (0.4.3)

@solid/identity-token-verifier NPM version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solid/identity-token-verifier and may be impacted: - @solid/community-server 0.4.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XMH9-RG6F-J3MR...

@0soft/zero-material-ui (>=0.0.1, <=0.0.25), @abegalinov/backoffice-skeleton (>=0.1.0, <=0.4.9) +302 more potentially affected by CVE-2021-23353 via jspdf (>=2.0.0, <=2.3.0)

jspdf NPM version =2.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.0-nightly-202010102951, =0.0.0-nightly-202151822534, =0.0.0-nightly-202151023138, =0.0.0-nightly-2020112923923, =0.0.0-nightly-202141023010, =0.0.0-nightly-202010102951, =0.0.0-nightly-202122521518, =0.0.0-nightly-202121722854,...

sn-cicd (>=4.6.12, <=4.6.17) potentially affected by CVE-2021-23372 via mongo-express (1.0.0-alpha.1)

mongo-express NPM version 1.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongo-express and may be impacted: - sn-cicd =4.6.12, =4.6.17 Source cves: CVE-2021-23372 Source advisory: SNYK:JS-MONGOEXPRESS-1085403...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +15394 more potentially affected by CVE-2021-24033 via react-dev-utils (>=0.4.0, <=11.0.3)

react-dev-utils NPM version =0.4.0, =1.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2, =1.0.3, =1.0.11 and more Source cves: CVE-2021-24033 Source advisory: OSV:GHSA-5Q6M-3H65-W53X...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +10864 more potentially affected by CVE-2021-21366 via xmldom (>=0.1.2, <=0.4.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.11.3-alpha.1660, =0.0.3, =0.0.9 and more Source cves: CVE-2021-21366 Source advisory: SNYK:JS-XMLDOM-1084960...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +4694 more potentially affected by CVE-2020-27223 via org.eclipse.jetty:jetty-server (>=9.4.6.v20170531, <=9.4.36.v20210114)

org.eclipse.jetty:jetty-server MAVEN version =9.4.6.v20170531, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.0.2, =0.1.0, =0.1.3-20210127.1838-76ab4fc -...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2021-21295 +1 more via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +1700 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.2.final)

io.netty:netty MAVEN version 3.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark2.11 =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.14.0.1, =3.14.0.1, =3.20.0.2, =3.20.0.2,...

ch.uzh.ifi.ddis.ifp:cassandra-esper (>=0.1.0, <=0.3.0), ch.uzh.ifi.ddis.ifp:cassandra-esper-integration-tests (>=0.2.2, <=0.3.0) +101 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.5.9.final)

io.netty:netty MAVEN version 3.5.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ch.uzh.ifi.ddis.ifp:cassandra-esper =0.1.0, =0.2.2, =2.0.0, =2.0.0, =0.6.0-2, =1.0.1-dse, =1.0.1-dse, =2.2.1, =2.2.1, =2.3.0,...