@gdyfe/tools (>=1.0.0, <=1.0.10), icetest-test (1.0.1) +6 more potentially affected by CVE-2021-23562 via plupload (>=2.3.2, <=2.3.6)

plupload NPM version =2.3.2, =1.0.0, =1.0.1, =1.0.0, =0.0.28, =0.2.4, =1.0.5, =0.0.0, =0.0.37 Source cves: CVE-2021-23562 Source advisory: SNYK:JS-PLUPLOAD-1583909...

@hey_joz/gatsby-source-netlify-cms (>=0.0.10, <=0.0.11), @hey_joz/gatsby-theme-netlify-cms (>=0.0.10, <=0.0.11) +1 more potentially affected by CVE-2021-39199 via remark-html (14.0.0)

remark-html NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on remark-html and may be impacted: - @heyjoz/gatsby-source-netlify-cms =0.0.10, =0.0.10, =0.1.0, =0.1.1 Source cves: CVE-2021-39199 Source advisory: OSV:GHSA-9Q5W-79CV-947M...

@anemone/newline-use-comments (3.0.0), @elastic/docsmobile (>=0.0.0-verceltest.1, <=2.0.3-rc.1) +10 more potentially affected by CVE-2021-39199 via remark-html (13.0.1)

remark-html NPM version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on remark-html and may be impacted: - @anemone/newline-use-comments 3.0.0 - @elastic/docsmobile =0.0.0-verceltest.1, =1.3.6, =0.0.0, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =7.0.0,...

@graphprotocol/payments (>=0.0.2-next.a995f4b.40, <=0.1.0), @graphprotocol/receipts (>=0.0.2-next.a995f4b.40, <=0.1.0) +2 more potentially affected by CVE-2021-3766 via objection (>=2.1.2, <=2.2.14)

objection NPM version =2.1.2, =0.0.2-next.a995f4b.40, =0.0.2-next.a995f4b.40, =0.0.2, =0.2.0, =1.25.2 Source cves: CVE-2021-3766 Source advisory: OSV:GHSA-R659-8XFP-J327...

0i0 (1.0.10), 0xgank-tea-advice-pull (1.0.0) +9564 more potentially affected by CVE-2021-3757 via immer (>=7.0.0, <=9.0.5)

immer NPM version =7.0.0, =9.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on immer and may be impacted: - 0i0 1.0.10 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

@cookiex/class-state (>=0.0.1, <=0.0.2), @cookiex/cli (>=0.2.10, <=0.2.11-0) +3 more potentially affected by CVE-2021-23442 via @cookiex/deep (>=0.0.1, <=0.0.6)

@cookiex/deep NPM version =0.0.1, =0.0.1, =0.2.10, =0.0.0-0.1, =0.1.2, =0.1.3 Source cves: CVE-2021-23442 Source advisory: SNYK:JS-COOKIEXDEEP-1582793...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +42 more potentially affected by CVE-2021-23631 via convert-svg-core (>=0.3.3, <=0.5.0)

convert-svg-core NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =0.3.0, =0.3.0, =1.0.3, =1.2.1 and more Source cves: CVE-2021-23631 Source advisory: SNYK:JS-CONVERTSVGCORE-1582785...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +40 more potentially affected by CVE-2021-23631 via convert-svg-to-png (>=0.3.3, <=0.5.0)

convert-svg-to-png NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =1.0.3, =0.0.1, =1.4.0, =1.5.0 and more Source cves: CVE-2021-23631 Source advisory: SNYK:JS-CONVERTSVGTOPNG-2348244...

1405-authtokens (>=1.0.1, <=1.0.5), 1405_logging (1.0.0) +4376 more potentially affected by CVE-2021-23438 via mpath (>=0.1.1, <=0.8.3)

mpath NPM version =0.1.1, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.0.1, =0.3.5, =1.2.3, =0.2.0, =0.0.1, =0.1.3 and more Source cves: CVE-2021-23438 Source advisory: OSV:GHSA-P92X-R36W-9395...

11zwheat (0.2.6), barley (0.0.1) +28 more potentially affected by CVE-2021-23426 via proto (>=1.0.17, <=1.0.19)

proto NPM version =1.0.17, =1.0.0, =1.0.4, =1.0.1, =1.0.0, =2.0.0, =0.0.1, =0.0.1, =1.1.0, =2.0.0, =2.0.1 and more Source cves: CVE-2021-23426 Source advisory: OSV:GHSA-58G2-9FQR-36Q2...

0i0 (1.0.10), 0xgank-tea-advice-pull (1.0.0) +9564 more potentially affected by CVE-2021-23436 via immer (>=7.0.0, <=9.0.5)

immer NPM version =7.0.0, =9.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on immer and may be impacted: - 0i0 1.0.10 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

atlasboard-sonarqube-package (>=1.0.0, <=1.0.1) potentially affected by CVE-2021-39109 via atlasboard (1.0.1)

atlasboard NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on atlasboard and may be impacted: - atlasboard-sonarqube-package =1.0.0, =1.0.1 Source cves: CVE-2021-39109 Source advisory: OSV:GHSA-25PR-6PR6-68V7...

@adobe/probot-serverless-openwhisk (>=4.0.24, <=4.0.54), @csnext/cs-layer-server (>=0.0.101-beta.22, <=0.0.132-beta.207) +101 more potentially affected by CVE-2021-32822 via hbs (>=4.0.0, <=4.1.2)

hbs NPM version =4.0.0, =4.0.24, =0.0.101-beta.22, =0.7.0, =0.7.0, =0.7.0, =0.19.0, =2.0.1, =0.1.5, =0.0.1-alpha.0, =0.1.2, =0.1.2, =0.1.0, =0.2.1, =0.0.2, =0.0.3 and more Source cves: CVE-2021-32822 Source advisory: OSV:GHSA-7F5C-RPF4-86P8...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +24089 more potentially affected by CVE-2021-23424 via ansi-html (>=0.0.4, <=0.0.7)

ansi-html NPM version =0.0.4, =1.0.1, =1.1.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

steal-tools (>=1.4.0-pre.0, <=1.4.0-pre.1) potentially affected by CVE-2021-23429 via transpile (2.4.0-pre.0)

transpile NPM version 2.4.0-pre.0 is affected by a known vulnerability. The following packages have a transitive dependency on transpile and may be impacted: - steal-tools =1.4.0-pre.0, =1.4.0-pre.1 Source cves: CVE-2021-23429 Source advisory: OSV:GHSA-7XRJ-F5RP-J55H...

@fley_real/notification-manager (1.0.0), @nbish11/test (>=1.0.2, <=1.2.0) +53 more potentially affected by CVE-2021-23432 via mootools (>=1.3.2, <=1.5.2)

mootools NPM version =1.3.2, =1.0.2, =0.1.2, =0.1.0, =0.8.3, =1.0.0, =0.9.3, =1.3.0, =0.0.2, =0.4.0, =0.2.0, =0.2.0, =1.0.5, =2.0.2 and more Source cves: CVE-2021-23432 Source advisory: OSV:GHSA-X6HX-7GH3-3Q98...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +6856 more potentially affected by CVE-2021-23434 via object-path (>=0.0.1, <=0.11.5)

object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.99 and more Source cves: CVE-2021-23434 Source advisory: OSV:GHSA-V39P-96QG-C8RF...

silverscreen (>=0.1.0, <=0.1.2) potentially affected by CVE-2021-23419 via open-graph (0.1.7)

open-graph NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on open-graph and may be impacted: - silverscreen =0.1.0, =0.1.2 Source cves: CVE-2021-23419 Source advisory: OSV:GHSA-G452-6RFC-VRVX...

keeshond_editor (>=0.1.0, <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (0.2.4)

toodee CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:GHSA-XM9M-2VJ8-FMFR...

@0soft/use-nextjs-page-loader (>=0.0.23-alpha.5, <=0.0.25), @aaiello/rimble-ui (>=0.0.1, <=0.14.3) +480 more potentially affected by CVE-2021-39178 via next (>=10.0.0, <=11.1.0)

next NPM version =10.0.0, =0.0.23-alpha.5, =0.0.1, =0.1.0, =0.0.25, =0.0.1, =0.0.1, =0.0.13, =1.0.0, =2.0.0-bundle-perf-test.0, =0.0.2, =3.0.0-bundle-perf-test.0, =3.1.0-section-linker.0 and more Source cves: CVE-2021-39178 Source advisory: OSV:GHSA-9GR3-7897-PP7M...