baal (>=0.1.0, <=0.3.0), bit_crusher (0.2.0) +12 more potentially affected by CVE-2016-10933 via portaudio (>=0.4.19, <=0.6.4)

portaudio CARGO version =0.4.19, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1, =0.5.0, =0.2.0, =0.4.0, =0.1.0, =0.5.0, =0.8.0, =0.11.0 - volume 0.2.0 Source cves: CVE-2016-10933 Source advisory: OSV:GHSA-PQ6V-X7GP-7776...

aerial (0.1.0), afterparty (0.1.0) +345 more potentially affected by CVE-2017-18587 via hyper (>=0.0.1, <=0.9.14)

hyper CARGO version =0.0.1, =0.7.0, =0.1.0, =0.1.3, =0.5.1, =0.1.2, =0.5.3, =0.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2017-18587 Source advisory: OSV:GHSA-Q89X-F52W-6HJ2...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +700 more potentially affected by CVE-2017-18589 via cookie (>=0.1.21, <=0.6.2)

cookie CARGO version =0.1.21, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.5.0, =0.6.5 and more Source cves: CVE-2017-18589 Source advisory: OSV:GHSA-VJRQ-CG9X-RFJP...

alumina (>=0.1.0, <=0.1.1), amethyst_animation (0.1.0) +105 more potentially affected by CVE-2018-20991 via smallvec (>=0.3.4, <=0.5.1)

smallvec CARGO version =0.3.4, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.6, =0.1.2, =0.6.2, =0.1.0, =0.1.1 and more Source cves: CVE-2018-20991 Source advisory: OSV:GHSA-RXR4-X558-X7HW...

@lukeed/bongo (>=0.0.1, <=0.0.12), @novivia/build-module (>=0.3.0, <=0.5.3) +3 more potentially affected by CVE-2021-23784 via tempura (>=0.0.8, <=0.3.2)

tempura NPM version =0.0.8, =0.0.1, =0.3.0, =0.6.0, =0.0.1, =3.4.0, =4.12.3 Source cves: CVE-2021-23784 Source advisory: SNYK:JS-TEMPURA-1569633...

ASP.NET Core Information Disclosure Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1 and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An information disclosure vulnerabilit...

book2json (>=1.0.0, <=1.0.1), csv-extractor (1.0.0) +8 more potentially affected by CVE-2021-39157 via detect-character-encoding (>=0.2.1, <=0.6.0)

detect-character-encoding NPM version =0.2.1, =1.0.0, =1.0.0-beta.5, =0.0.10, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.3.2 - whois-2 0.0.1 Source cves: CVE-2021-39157 Source advisory: OSV:GHSA-JQFH-8HW5-FQJR...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +6856 more potentially affected by CVE-2020-15256 +1 more via object-path (>=0.0.1, <=0.11.5)

object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.99 and more Source cves: CVE-2020-15256, CVE-2021-23434 Source advisory: SNYK:JS-OBJECTPATH-1569453...

ferris-rich-input (0.0.1) potentially affected by CVE-2021-37695 via ckeditor4 (4.14.0)

ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2021-37695 Source advisory: OSV:GHSA-M94C-37G6-CJHC...

ferris-rich-input (0.0.1) potentially affected by CVE-2021-32809 via ckeditor4 (4.14.0)

ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2021-32809 Source advisory: OSV:GHSA-7889-RM5J-HPGG...

ferris-rich-input (0.0.1) potentially affected by CVE-2021-32808 via ckeditor4 (4.14.0)

ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2021-32808 Source advisory: OSV:GHSA-6226-H7FF-CH6C...

10-24-dars (1.0.0), @alephdata/react-ftm (>=1.9.1, <=2.4.0-alpha.2) +206 more potentially affected by CVE-2021-23632 via git (0.1.5)

git NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on git and may be impacted: - 10-24-dars 1.0.0 - @alephdata/react-ftm =1.9.1, =1.5.2, =0.4.120, =1.0.0-alpha.0, =7.7.1, =1.1.7, =1.0.1, =0.13.1, =1.12.2, =1.0.0, =2.1.1 and more Source...

@aeternity/aeproject (>=3.0.4, <=3.0.5), @berlinvege/fedockerjs (>=1.0.4, <=1.0.5) +95 more potentially affected by CVE-2021-23732 via docker-cli-js (>=1.0.9, <=2.10.0)

docker-cli-js NPM version =1.0.9, =3.0.4, =1.0.4, =0.0.10, =1.0.0, =0.0.1-dev.0, =0.0.1-dev.1, =1.0.710, =0.1.0, =3.0.28, =3.0.29, =0.0.1, =0.8.6, =1.0.0, =1.0.2 and more Source cves: CVE-2021-23732 Source advisory: SNYK:JS-DOCKERCLIJS-1568516...

a-bot (0.0.1), a-gpt (>=0.1.0, <=0.4.0) +13686 more potentially affected by unknown CVE via ansi_term (>=0.5.2, <=0.12.1)

ansiterm CARGO version =0.5.2, =0.1.0, =0.2.0, =0.0.2, =0.4.1, =0.9.0, =0.2.1, =0.1.0, =0.1.0, =0.7.0, =0.2.4, =0.8.0 - ablescriptcli 0.2.0 - ableton-link 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0139...

a_r_c_h_e_r_y (>=0.4.1, <=0.4.3), abe_gpsw (>=0.8.0, <=2.0.0) +3755 more potentially affected by unknown CVE via serde_cbor (>=0.3.3, <=0.11.2)

serdecbor CARGO version =0.3.3, =0.4.1, =0.8.0, =0.9.0, =0.1.0, =0.1.0, =1.0.0, =0.1.7, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.4 - actix-codec 0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0127...

@christianhugo/cli (>=0.7.2-beta.6, <=0.7.3-beta.15), @christianhugo/mobile-builder (>=0.7.2-beta.6, <=0.7.4-beta.9) +72 more potentially affected by CVE-2021-23445 via datatables.net (>=1.10.12, <=1.10.25)

datatables.net NPM version =1.10.12, =0.7.2-beta.6, =0.7.2-beta.6, =0.7.2-beta.6, =0.7.2-beta.6, =0.6.4-beta.10, =0.7.2-beta.7, =0.6.4-beta.10, =0.6.4-beta.10, =1.0.0, =1.0.0, =3.0.0, =3.0.11 and more Source cves: CVE-2021-23445 Source advisory: SNYK:JS-DATATABLESNET-1540544...

0i0 (1.0.10), 0xgank-tea-advice-pull (1.0.0) +9564 more potentially affected by CVE-2020-28477 +1 more via immer (>=7.0.0, <=9.0.5)

immer NPM version =7.0.0, =9.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on immer and may be impacted: - 0i0 1.0.10 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

@enonic/semantic-ui-react-form (>=2.1.0, <=2.3.0) potentially affected by CVE-2019-10747 +1 more via set-value (4.0.0)

set-value NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on set-value and may be impacted: - @enonic/semantic-ui-react-form =2.1.0, =2.3.0 Source cves: CVE-2019-10747, CVE-2021-23440 Source advisory: SNYK:JS-SETVALUE-1540541...

@alitajs/cordova (>=2.0.0-beta.2, <=2.3.2), @alitajs/create-alita (1.0.0-beta.1) +138 more potentially affected by CVE-2019-10747 +1 more via set-value (>=3.0.0, <=3.0.2)

set-value NPM version =3.0.0, =2.0.0-beta.2, =2.0.0-beta.2, =1.1.21, =1.1.9, =1.0.0, =1.4.0, =1.1.21, =1.0.0-alpha.115, =1.0.0-alpha.1, =1.0.0-alpha.3, =0.0.1, =0.0.1, =1.2.0, =1.2.1 and more Source cves: CVE-2019-10747, CVE-2021-23440 Source advisory: SNYK:JS-SETVALUE-1540541...

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4566 more potentially affected by CVE-2021-3664 via url-parse (>=0.1.5, <=1.5.1)

url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2021-3664 Source advisory: OSV:GHSA-HH27-FFR2-F2JC...