cd-core (>=0.0.3, <=0.0.11) potentially affected by CVE-2020-7675 via cd-messenger (2.7.12)

cd-messenger NPM version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on cd-messenger and may be impacted: - cd-core =0.0.3, =0.0.11 Source cves: CVE-2020-7675 Source advisory: SNYK:JS-CDMESSENGER-571493...

@aequos/extensibility (>=0.4.0, <=1.3.0-beta.1.732feb8), @eoverfield/spfx-common (0.8.0) +53 more potentially affected by unknown CVE via @uifabric/utilities (>=7.0.0-rc001, <=7.16.0)

@uifabric/utilities NPM version =7.0.0-rc001, =0.4.0, =0.1.0-alpha.3, =0.2.0, =0.1.0, =1.10.0-plusbeta, =1.10.0-plusbeta, =1.10.0-plusbeta, =1.10.0-plusbeta, =1.10.0-plusbeta, =1.10.0-plusbeta, =1.10.0-plusbeta, =1.10.0-plusbeta, =1.10.0-plusbeta, =1.11.0 and more Source cves: unknown CVE Source...

@fluentui/local-sandbox (>=0.31.1-alpha.6224, <=0.45.0), @fluentui/react (>=0.31.1-alpha.6224, <=0.46.0) +6 more potentially affected by unknown CVE via @fluentui/styles (>=0.31.1-alpha.6224, <=0.49.0)

@fluentui/styles NPM version =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.47.6, =0.47.0, =0.47.4, =0.1.0, =2.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-FLUENTUISTYLES-570808...

@zhoujiahao/comp-factory (1.0.1), firemelon (>=0.0.5, <=0.0.7) potentially affected by CVE-2020-4035 via @nozbe/watermelondb (>=0.1.24, <=0.14.1)

@nozbe/watermelondb NPM version =0.1.24, =0.0.5, =0.0.7 Source cves: CVE-2020-4035 Source advisory: OSV:GHSA-38F9-M297-6Q9G...

acari-lib (>=0.1.1, <=0.1.8), accepted (>=0.2.0, <=0.3.2) +1861 more potentially affected by CVE-2020-35881 via traitobject (>=0.0.1, <=0.1.1)

traitobject CARGO version =0.0.1, =0.1.1, =0.2.0, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.2 - aigcapi 5.1.2 - aigcchain 5.1.2 - aigcconfig 5.1.2 and more Source cves: CVE-2020-35881 Source advisory: OSV:RUSTSEC-2020-0027...

bat (0.18.0), buffett-core (>=0.1.0, <=0.1.1) +74 more potentially affected by CVE-2020-36434 via sys-info (>=0.4.1, <=0.7.0)

sys-info CARGO version =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.3.0, =0.29.0, =0.20.0, =0.1.0, =0.1.0, =1.3.0, =1.8.0, =0.7.0, =0.7.0, =0.31.2 and more Source cves: CVE-2020-36434 Source advisory: OSV:RUSTSEC-2020-0100...

@blitzbank/dashboard (>=0.0.1, <=0.0.2), @bloombox/js-client (1.1.4) +22 more potentially affected by CVE-2020-11079 via dns-sync (0.1.3)

dns-sync NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on dns-sync and may be impacted: - @blitzbank/dashboard =0.0.1, =0.1.0, =1.0.2, =1.0.1, =1.0.1, =2.2.37, =0.0.1, =0.2.24, =0.0.1, =1.0.0, =2.0.3 and more Source cves: CVE-2020-1107...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2020-35874 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2020-35874 Source advisory: OSV:RUSTSEC-2020-0017...

alchemymvc (0.0.1), alinkage (0.1.2) +216 more potentially affected by CVE-2020-7656 via jquery (>=1.5.1, <=1.8.3)

jquery NPM version =1.5.1, =0.1.0, =0.3.3, =0.0.2, =2.0.0, =2.0.1 - arale-tip 2.0.0 - artusi-auth 0.1.0-1 - artusi-drawer 0.1.0-1 - artusi-elevator 0.1.0-1 - artusi-filesystem-drawer 0.1.0-1 - artusi-hob 0.1.0-1 - artusi-kitchen 0.1.0-1 - artusi-kitchen-assistant 0.1.0-1 and more Source cves:...

@internxt/cli (>=1.0.5, <=1.2.2), @latitude-data/cli (>=0.0.29, <=1.11.0-canary.8) +10 more potentially affected by CVE-2020-7660 via serialize-javascript (>=7.0.0, <=7.0.2)

serialize-javascript NPM version =7.0.0, =1.0.5, =0.0.29, =0.7.5, =1.3.0, =0.1.0, =1.0.7, =0.2.0, =0.7.0-alpha.6 Source cves: CVE-2020-7660 Source advisory: SNYK:JS-SERIALIZEJAVASCRIPT-570062...

alchemymvc (0.0.1), alinkage (0.1.2) +216 more potentially affected by CVE-2020-7656 via jquery (>=1.5.1, <=1.8.3)

jquery NPM version =1.5.1, =0.1.0, =0.3.3, =0.0.2, =2.0.0, =2.0.1 - arale-tip 2.0.0 - artusi-auth 0.1.0-1 - artusi-drawer 0.1.0-1 - artusi-elevator 0.1.0-1 - artusi-filesystem-drawer 0.1.0-1 - artusi-hob 0.1.0-1 - artusi-kitchen 0.1.0-1 - artusi-kitchen-assistant 0.1.0-1 and more Source cves:...

08cms (1.0.0), 0card-images-helper (1.0.2) +5063 more potentially affected by CVE-2020-7661 via url-regex (>=1.0.4, <=5.0.0)

url-regex NPM version =1.0.4, =1.0.3, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1 - 3e 1.0.0 and more Source cves: CVE-2020-7661 Source advisory: SNYK:JS-URLREGEX-569472...

babel-plugin-transform-cssobj (3.0.2), cssobj-converter (>=2.1.2, <=2.4.3) +5 more potentially affected by unknown CVE via objutil (>=2.0.2, <=2.17.4)

objutil NPM version =2.0.2, =2.1.2, =1.0.1, =1.0.0, =0.0.5, =0.0.21 Source cves: unknown CVE Source advisory: SNYK:JS-OBJUTIL-559496...

@neuraflash/einstein-lang (1.0.0), @safwanuk/sk-npm-hello-world (>=6.0.1, <=6.0.2) +38 more potentially affected by CVE-2020-7646 via curlrequest (1.0.1)

curlrequest NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on curlrequest and may be impacted: - @neuraflash/einstein-lang 1.0.0 - @safwanuk/sk-npm-hello-world =6.0.1, =1.0.2, =0.0.1, =1.0.0, =1.0.25, =0.0.1, =0.4.1, =1.0.0, =0.0.1,...

bch-wallet-plugin-postoffice (>=1.0.0, <=1.0.8), bitcoin-wallet-api (>=0.0.5, <=0.1.6) potentially affected by CVE-2020-11071 via slpjs (>=0.22.5, <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-11071 Source advisory: OSV:GHSA-JC83-CPF9-Q7C6...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @ec.components/tinymce (>=0.5.7, <=0.6.0) +37 more potentially affected by CVE-2019-1010091 via tinymce (>=4.5.1, <=4.9.8)

tinymce NPM version =4.5.1, =1.0.0, =0.5.7, =0.1.1, =0.0.13, =1.3.0, =8.0.0, =0.8.8, =0.6.3, =1.2.0, =1.0.0-alpha.0, =1.1.0, =2.2.0 - common-library 0.0.0 - connectwise-manager 10.0.0 and more Source cves: CVE-2019-1010091 Source advisory: OSV:GHSA-C78W-2GW7-GJV3...

@enhavo/form (>=0.1.2, <=0.8.5), @enhavo/translation (>=0.8.4, <=0.8.5) +22 more potentially affected by CVE-2019-1010091 via tinymce (>=5.0.6, <=5.2.1)

tinymce NPM version =5.0.6, =0.1.2, =0.8.4, =0.18.0, =15.0.1, =0.0.46, =0.0.14, =1.0.11-beta.17, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2019-1010091 Source advisory: OSV:GHSA-C78W-2GW7-GJV3...

forgekit-reasoning (0.5.0), haneru (0.0.0) +7 more potentially affected by CVE-2020-35876 via rio (0.9.4)

rio CARGO version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on rio and may be impacted: - forgekit-reasoning 0.5.0 - haneru 0.0.0 - marble 0.0.0 - mfio-rt 0.1.0 - pearl =0.4.0, =0.31.0, =0.39.0, =0.34.7-p1, =0.34.7-patched Source cves:...

@neuraflash/einstein-lang (1.0.0), @safwanuk/sk-npm-hello-world (>=6.0.1, <=6.0.2) +63 more potentially affected by CVE-2020-7646 via curlrequest (>=0.3.10, <=1.0.1)

curlrequest NPM version =0.3.10, =6.0.1, =1.0.2, =0.2.0, =0.0.1, =0.1.0, =0.6.0, =0.0.1, =1.0.0, =0.3.0-a, =1.0.25, =0.1.0, =0.5.0 and more Source cves: CVE-2020-7646 Source advisory: SNYK:JS-CURLREQUEST-568274...

abacuz (>=0.1.0, <=0.1.1), acick (>=0.1.0-alpha.0, <=0.2.0) +2656 more potentially affected by unknown CVE via stdweb (>=0.1.3, <=0.4.20)

stdweb CARGO version =0.1.3, =0.1.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.1-alpha.0, =1.0.0, =0.8.0, =0.8.0, =0.1.0, =0.1.41, =0.4.0, =0.4.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0056...