adiscord (>=0.0.1, <=0.0.3), alpaca-data-api (>=0.1.0, <=0.1.2) +21 more potentially affected by unknown CVE via dotenv_codegen (>=0.7.2, <=0.15.0)

dotenvcodegen CARGO version =0.7.2, =0.0.1, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.2, =0.7.0, =0.1.0, =0.1.0, =0.3.0 - meep 1.0.1 - ncrsdk 0.1.0 - new-rawr 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0142...

account-db (0.1.0), akita (>=0.1.0, <=0.4.3) +386 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)

lru CARGO version =0.1.17, =0.1.0, =0.3.0, =0.1.0, =0.1.1, =0.1.1, =2.0.0-alpha.22, =2.0.3, =2.0.3, =2.0.3, =0.28.2, =0.7.2, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-45720 Source advisory: OSV:RUSTSEC-2021-0130...

acme-redirect (>=0.1.0, <=0.4.0), actix-auth (0.1.0) +387 more potentially affected by CVE-2020-36846 +1 more via brotli-sys (>=0.1.2, <=0.3.2)

brotli-sys CARGO version =0.1.2, =0.1.0, =0.1.3, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =0.3.0, =0.1.0-alpha.1, =0.1.0, =0.1.0-alpha.1, =3.0.0-beta.18 and more Source cves: CVE-2020-36846, CVE-2020-8927 Source advisory: OSV:RUSTSEC-2021-0131...

@gdyfe/tools (>=1.0.0, <=1.0.10), icetest-test (1.0.1) +6 more potentially affected by CVE-2021-23562 via plupload (>=2.3.2, <=2.3.6)

plupload NPM version =2.3.2, =1.0.0, =1.0.1, =1.0.0, =0.0.28, =0.2.4, =1.0.5, =0.0.0, =0.0.37 Source cves: CVE-2021-23562 Source advisory: OSV:GHSA-RP2C-JRGP-CVR8...

react-here-map-interactive (>=0.0.1, <=0.9.2) potentially affected by CVE-2021-23700 via merge-deep2 (3.0.6)

merge-deep2 NPM version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on merge-deep2 and may be impacted: - react-here-map-interactive =0.0.1, =0.9.2 Source cves: CVE-2021-23700 Source advisory: OSV:GHSA-J28Q-P8WW-CP87...

roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:GHSA-MMJF-F5JW-W72Q...

0x-hunter-core (>=1.0.0-33, <=1.0.0-38), 1155-to-20 (>=1.0.0, <=1.0.2) +2818 more potentially affected by CVE-2021-46320 +1 more via @openzeppelin/contracts (>=3.2.0, <=4.4.0)

@openzeppelin/contracts NPM version =3.2.0, =1.0.0-33, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.9.1, =3.24.7, =1.7.2, =3.10.3, =0.0.2, =1.4.1, =1.0.0, =1.0.0-alpha.0, =1.1.0-alpha.0 and more Source cves: CVE-2021-46320, CVE-2022-39384 Source advisory: OSV:GHSA-9C22-PWXW-P6HX...

roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:RUSTSEC-2021-0129...

jsgui-node-file-metadata (0.3.8), jsgui-node-fs2-core (>=0.1.0, <=0.1.5) +7 more potentially affected by CVE-2022-25301 via jsgui-lang-essentials (>=0.3.8, <=0.4.3)

jsgui-lang-essentials NPM version =0.3.8, =0.1.0, =0.1.0, =0.1.0, =0.3.8, =0.3.8, =0.3.35 Source cves: CVE-2022-25301 Source advisory: SNYK:JS-JSGUILANGESSENTIALS-2316897...

@fanatic/oracle (>=1.0.0, <=1.3.0), @ghg/amplifier (>=0.0.2, <=0.5.7) +8 more potentially affected by CVE-2020-7609 via node-rules (>=3.2.0, <=4.0.2)

node-rules NPM version =3.2.0, =1.0.0, =0.0.2, =0.0.2, =0.0.13, =0.0.1, =0.0.1, =0.2.7, =0.2.2, =0.2.3 Source cves: CVE-2020-7609 Source advisory: OSV:GHSA-F78F-353M-CF4J...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +11764 more potentially affected by CVE-2021-29059 via is-svg (>=2.1.0, <=4.2.2)

is-svg NPM version =2.1.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =1.1.8, =1.0.0, =1.0.4 - 4design 0.0.1 and more Source cves: CVE-2021-29059 Source advisory: OSV:GHSA-R8J5-H5CX-65GG...

@attivio/suit (>=0.0.47, <=1.0.7), @botxo_team/fe-shared (>=1.0.0, <=1.15.29) +44 more potentially affected by CVE-2021-23398 via react-bootstrap-table (>=4.0.6, <=4.3.1)

react-bootstrap-table NPM version =4.0.6, =0.0.47, =1.0.0, =0.3.1, =0.1.1, =1.21.0, =0.15.0-beta-1, =1.14.3, =1.0.1, =0.1.0, =2.0.0 - bs-table-fg2 1.0.0 - censadesignsystem 2.38.0 - chainofdemand 0.1.0 and more Source cves: CVE-2021-23398 Source advisory: OSV:GHSA-2589-W6XF-983R...

@balena/jellyfish-chat-widget (>=0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, <=2.0.0-rendition-notifications-1f10048b0b56657415485386d8bdc09fa8b8ffb0), @balena/jellyfish-ui-components (>=0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, <=2.0.25-add-react-virtualised-to-infinite-list-4e291b52a55f3950254be3ce329926ed26ecc421) +17 more potentially affected by CVE-2021-35513 via mermaid (>=8.4.0, <=8.10.1)

mermaid NPM version =8.4.0, =0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, =0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, =0.0.3, =0.0.2, =0.0.5, =0.0.5, =0.8.0, =0.8.0, =6.7.0-use-source-sans-pro-6543bbfbb6b2c9ae92a4909d99bb182d9406ef01, =0.0.9,...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +398 more potentially affected by CVE-2021-23400 via nodemailer (>=6.0.0, <=6.6.0)

nodemailer NPM version =6.0.0, =1.0.49, =0.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =2.4.4 and more Source cves: CVE-2021-23400 Source advisory: OSV:GHSA-HWQF-GCQM-7353...

fusion-plugin-jwt (>=0.1.0, <=0.1.8), toystore (>=1.1.1, <=1.5.3) potentially affected by CVE-2021-25952 via just-safe-set (1.1.0)

just-safe-set NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-safe-set and may be impacted: - fusion-plugin-jwt =0.1.0, =1.1.1, =1.5.3 Source cves: CVE-2021-25952 Source advisory: OSV:GHSA-V26W-GCXH-V4R7...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23389 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23389 Source advisory: OSV:GHSA-7FM6-GXQG-2PWR...

hixtory (1.0.0), ncfg (>=0.0.1, <=0.12.1) +2 more potentially affected by CVE-2021-25953 via putil-merge (>=1.2.0, <=2.2.0)

putil-merge NPM version =1.2.0, =0.0.1, =0.9.1, =1.5.2, =2.10.5 Source cves: CVE-2021-25953 Source advisory: OSV:GHSA-9X7M-9HPG-XXMW...

@4players/odin-bot-sdk (>=0.1.0, <=0.4.4), @bhznjns/node-mp3-player (>=1.0.0, <=1.3.3) +39 more potentially affected by CVE-2020-7615 via fsa (>=0.3.1, <=0.5.1)

fsa NPM version =0.3.1, =0.1.0, =1.0.0, =1.0.0, =0.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.2-3, =1.2.2, =0.1.0, =1.0.4, =0.1.0, =0.1.0, =1.0.0, =2.0.0 - chiasenhac-music-bot 1.0.0 and more Source cves: CVE-2020-7615 Source advisory: OSV:GHSA-3P94-VJ97-FM4Q...

@10yun/cv-mobile-ui (0.3.20), @aiot-toolkit/aiotpack (>=2.0.5-beta.11, <=2.0.5-widget-provider-beta.2) +184 more potentially affected by CVE-2020-7636 via adb-driver (>=0.0.1, <=0.1.8)

adb-driver NPM version =0.0.1, =2.0.5-beta.11, =1.0.0-beta.0, =1.0.0-beta.0, =2.0.0-26820200330001, =2.0.0-27520200518001, =2.0.0-26920200420001, =0.1.0, =1.0.0, =1.9.3, =1.9.3, =0.4.0-beta.0, =2.1.1 and more Source cves: CVE-2020-7636 Source advisory: OSV:GHSA-4M6Q-RXHM-675W...

@sobotics/caching (1.1.1) potentially affected by CVE-2015-9545 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2015-9545 Source advisory: OSV:GHSA-76QM-4F93-FG6F...