1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3201 more potentially affected by CVE-2021-32014 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32014 Source advisory: SNYK:JS-XLSX-1311139...

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3201 more potentially affected by CVE-2021-32013 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32013 Source advisory: SNYK:JS-XLSX-1311137...

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3201 more potentially affected by CVE-2021-32012 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32012 Source advisory: SNYK:JS-XLSX-1311141...

@apalchys/serverless-openapi-documentation (>=0.1.0, <=0.5.4), @conqa/serverless-openapi-documentation (>=1.0.1, <=1.0.4) +27 more potentially affected by CVE-2021-23396 via lutils (>=0.2.11, <=2.4.0)

lutils NPM version =0.2.11, =0.1.0, =1.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =2.0.9, =0.3.0, =0.0.1, =0.1.9 and more Source cves: CVE-2021-23396 Source advisory: SNYK:JS-LUTILS-1311023...

@generates/cli (>=0.0.2, <=0.0.7), @generates/core (>=0.0.2, <=0.0.7) +40 more potentially affected by CVE-2021-23397 via @ianwalter/merge (>=1.0.2, <=9.0.1)

@ianwalter/merge NPM version =1.0.2, =0.0.2, =0.0.2, =0.0.40, =0.0.2, =0.0.2, =0.0.0, =0.0.1, =2.5.0, =1.0.0, =3.0.0, =2.0.0, =1.1.1, =0.0.1, =0.1.1, =1.0.0 and more Source cves: CVE-2021-23397 Source advisory: SNYK:JS-IANWALTERMERGE-1311022...

@antlerengineering/components (>=2.4.0, <=2.10.3), @antlerengineering/form-builder (>=2.1.7, <=2.4.1) +79 more potentially affected by CVE-2021-23411 via anchorme (>=0.7.2, <=3.0.8)

anchorme NPM version =0.7.2, =2.4.0, =2.1.7, =2.10.4, =0.2.2, =0.2.2, =0.6.22, =0.0.1, =2.1.0-rc1, =0.0.1, =12.4.0, =0.7.11, =0.6.100, =0.6.100, =0.6.6, =1.1.9, =1.1.14 and more Source cves: CVE-2021-23411 Source advisory: SNYK:JS-ANCHORME-1311008...

bivouac-framework (0.1.0a0), cornerstonecms (>=0.1.0, <=0.1.20) +6 more potentially affected by CVE-2021-23401 via flask-user (>=0.6.1, <=1.0.2.2)

flask-user PYPI version =0.6.1, =0.1.0, =0.1.0, =0.0.39, =0.8.8, =0.1.0a3, =0.1.1a6 Source cves: CVE-2021-23401 Source advisory: SNYK:PYTHON-FLASKUSER-1293188...

@random-guys/coralpay-pgp (>=0.0.1, <=0.1.0), @woocommerce/components (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2021-23392 via locutus (>=2.0.10, <=2.0.14)

locutus NPM version =2.0.10, =0.0.1, =1.0.0, =1.1.0, =1.0.2, =1.0.52, =0.1.0, =0.2.1 Source cves: CVE-2021-23392 Source advisory: OSV:GHSA-39Q4-P535-C852...

@cag-group/google-api-tools (0.3.1), @doodle3d/superlogin (>=0.6.2, <=0.7.0) +182 more potentially affected by CVE-2021-25945 via js-extend (1.0.1)

js-extend NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on js-extend and may be impacted: - @cag-group/google-api-tools 0.3.1 - @doodle3d/superlogin =0.6.2, =2.1.12, =1.0.2, =0.0.0, =0.0.49, =1.0.0, =4.2.0, =0.3.4, =0.1.21, =0.0.1-a,...

@dylanlindgren/storybook-addon-sn-next-ui (2.0.0), @github1/ajax-service (>=0.4.0-next.0, <=0.4.44) +48 more potentially affected by CVE-2021-33502 via normalize-url (>=4.3.0, <=4.5.0)

normalize-url NPM version =4.3.0, =0.4.0-next.0, =0.4.39-next.0, =5.1.0, =5.7.5 - @plaa/metascraper 5.4.0 - @plaa/metascraper-amazon 5.4.0 - @plaa/metascraper-audio 5.4.0 - @plaa/metascraper-author 5.4.0 - @plaa/metascraper-date 5.4.0 - @plaa/metascraper-description 5.4.0 -...

@pixelastic/videogames-helper (>=0.2.2, <=0.2.3), aberlaas (>=1.21.0, <=1.23.0) +6 more potentially affected by CVE-2021-33502 via normalize-url (6.0.0)

normalize-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on normalize-url and may be impacted: - @pixelastic/videogames-helper =0.2.2, =1.21.0, =2.13.0, =2.3.0, =4.0.0, =5.0.0 - pietro 0.6.1 Source cves: CVE-2021-33502 Source...

@cumulus/api-client (1.19.0), @github1/ajax-service (>=0.4.0, <=0.4.55) +55 more potentially affected by CVE-2021-33502 via normalize-url (>=5.0.0, <=5.3.0)

normalize-url NPM version =5.0.0, =0.4.0, =1.0.1, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =1.0.1, =0.8.7, =0.8.0, =0.8.0, =1.0.1, =0.8.0, =0.8.97 and more Source cves: CVE-2021-33502 Source advisory: OSV:GHSA-PX4H-XG32-Q955...

@netsells/reg-suit-basic-git-hash-plugin (>=0.2.0, <=0.2.1), reg-notify-github-plugin (>=0.0.18, <=0.4.2) potentially affected by CVE-2021-32673 via reg-keygen-git-hash-plugin (>=0.0.17, <=0.8.5)

reg-keygen-git-hash-plugin NPM version =0.0.17, =0.2.0, =0.0.18, =0.4.2 Source cves: CVE-2021-32673 Source advisory: OSV:GHSA-49Q3-8867-5WMP...

5ug-cli (>=1.0.72, <=1.4.0), @11ty/eleventy-plugin-syntaxhighlight (>=3.1.0, <=3.1.1) +170 more potentially affected by CVE-2021-33587 via css-what (4.0.0)

css-what NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on css-what and may be impacted: - 5ug-cli =1.0.72, =3.1.0, =0.0.1, =0.4.0-next.8, =0.4.0-next.8, =0.4.0-next.8, =2.8.1-canary.0, =2.7.6, =2.8.0-canary.5, =1.0.0-alpha.0, =1.0.0,...

@tiendanube/components (>=0.0.2, <=2.4.2), @tiendanube/icons (>=0.1.1, <=0.2.8) +2 more potentially affected by CVE-2021-33623 via trim-newlines (3.0.0)

trim-newlines NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on trim-newlines and may be impacted: - @tiendanube/components =0.0.2, =0.1.1, =1.0.1, =1.0.2 Source cves: CVE-2021-33623 Source advisory: OSV:GHSA-7P7H-4MM5-852V...

@glossgenius/eslint-config (>=1.0.2, <=1.0.7), @halonext/nestjs-express-cassandra (>=7.0.0, <=7.1.0) +7 more potentially affected by CVE-2021-26707 via merge-deep (>=3.0.0, <=3.0.2)

merge-deep NPM version =3.0.0, =1.0.2, =7.0.0, =5.2.0, =6.0.1, =0.0.1, =0.1.0-rc0, =0.0.11, =1.0.0, =1.2.4 Source cves: CVE-2021-26707 Source advisory: OSV:GHSA-R6RJ-9CH6-G264...

@aisino/cli-plugin-unit-mocha (>=0.0.1, <=1.0.15), @aws-amplify/cli (4.44.1-beta.0) +29 more potentially affected by CVE-2020-28469 via glob-parent (>=5.0.0, <=5.1.1)

glob-parent NPM version =5.0.0, =0.0.1, =0.0.1, =5.0.1, =0.6.1, =0.14.0, =26.4.0, =0.0.2, =4.0.0-alpha.0, =1.0.0-alpha2, =2.21.3-beta.0, =2.22.2 - amplify-provider-awscloudformation 4.39.1-beta.0 - amplify-util-mock 3.28.1-beta.0 and more Source cves: CVE-2020-28469 Source advisory:...

@bdsm-tools/v-dom (0.1.0), @byhuz/huz-ui-sigma (>=1.0.19, <=1.0.27) +33 more potentially affected by CVE-2021-23327 via apexcharts (>=3.2.0, <=3.26.3)

apexcharts NPM version =3.2.0, =1.0.19, =0.7.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =7.20.0-snapshot-1617172219791, =2.3.0, =1.0.3, =0.0.1, =0.0.1, =0.0.1, =0.0.15 - @pixwell/city-performer-widget 1.0.0 and more Source cves: CVE-2021-23327 Source advisory: SNYK:JS-APEXCHARTS-1300579...

abbegm (>=0.1.0, <=0.5.0), acacia (0.2.0) +561 more potentially affected by CVE-2021-38190 via nalgebra (>=0.11.2, <=0.26.2)

nalgebra CARGO version =0.11.2, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.3.0 - amethyst-navigation 0.1.0 and more Source cves: CVE-2021-38190 Source advisory: OSV:RUSTSEC-2021-0070...

@brudi-toolbox/id (>=1.4.5-next.1, <=2.0.4), @cimpress/simple-auth-wrapper (>=3.0.0, <=3.1.6) +4 more potentially affected by CVE-2021-32641 via auth0-lock (>=11.0.1, <=11.28.1)

auth0-lock NPM version =11.0.1, =1.4.5-next.1, =3.0.0, =0.0.1, =1.0.42, =0.11.0, =0.25.0 Source cves: CVE-2021-32641 Source advisory: OSV:GHSA-JR3J-WHM4-9WWM...