fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2021-28037 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2021-28037 Source advisory: OSV:RUSTSEC-2021-0036...

vostok (>=1.4.0, <=1.5.5) potentially affected by CVE-2021-21322 via fastify-http-proxy (>=4.0.4, <=4.1.0)

fastify-http-proxy NPM version =4.0.4, =1.4.0, =1.5.5 Source cves: CVE-2021-21322 Source advisory: OSV:GHSA-C4QR-GMR9-V23W...

@ahbbvc/invoice-generator (1.0.0), @atomspace/vue (>=1.2.0, <=1.4.0) +55 more potentially affected by CVE-2021-21353 via pug (3.0.0)

pug NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pug and may be impacted: - @ahbbvc/invoice-generator 1.0.0 - @atomspace/vue =1.2.0, =2.0.0-17, =0.0.12, =0.0.0-canary-0925da6f11e35cc712cc12337716f846a67c0e4c,...

08cms (1.0.0), 0xweb (>=0.9.9, <=0.10.93) +29772 more potentially affected by CVE-2021-23358 via underscore (>=1.3.2, <=1.12.0)

underscore NPM version =1.3.2, =0.9.9, =0.1.1, =0.1.0, =1.0.0, =0.0.1-alpha, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =0.0.2, =0.2.2, =0.1.0, =1.5.3 and more Source cves: CVE-2021-23358 Source advisory: SNYK:JS-UNDERSCORE-1080984...

@accordproject/cicero-cli (>=0.3.4, <=0.21.27-20210409091004), @accordproject/cicero-common (>=0.3.4, <=0.3.12) +455 more potentially affected by CVE-2021-27516 via urijs (>=1.16.1, <=1.19.5)

urijs NPM version =1.16.1, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.4.5-20180705184508, =0.11.2-20190326183124, =0.10.2-20190213145246, =0.0.5-20190507210024, =0.71.8-20190915045234, =0.80.2-20190926121100, =0.80.4-20191003231621, =0.61.2-20190916200303, =0.90.1-20200514190616, =0.6.0-alpha.0,...

1000components (>=0.10.1, <=0.10.3), 3base (>=0.1.0, <=0.1.31) +1910 more potentially affected by CVE-2020-28496 via three (>=0.54.0, <=0.124.0)

three NPM version =0.54.0, =0.10.1, =0.1.0, =1.0.0, =1.0.0, =1.0.0-RC.1, =2.0.40, =1.0.1, =1.4.0, =0.0.1, =1.0.0, =0.0.2, =0.0.1, =1.0.1 and more Source cves: CVE-2020-28496 Source advisory: OSV:GHSA-FQ6P-X6J3-CMMQ...

@21epub/resource-lib (>=1.0.0, <=1.0.3), @2fn/helpers (>=1.0.0, <=1.0.1) +3138 more potentially affected by CVE-2021-23341 via prismjs (>=1.2.0, <=1.22.0)

prismjs NPM version =1.2.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @ada87/hexo-prism-plugin 2.3.0 - @adebawo-damilare/esm-reports-app 5.2.0 - @admin-bro/design-system 1.4.0 and more Source cves:...

4talent-questions-shortlist (1.3.3), @42.nl/ui (>=1.0.7, <=1.0.9) +624 more potentially affected by CVE-2021-23346 via html-parse-stringify2 (2.0.1)

html-parse-stringify2 NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on html-parse-stringify2 and may be impacted: - 4talent-questions-shortlist 1.3.3 - @42.nl/ui =1.0.7, =5.0.1, =0.1.0, =1.0.0, =0.2.0-alpha.1, =0.1.2, =0.9.9, =0.9.9,...

@fluentui/token-pipeline (>=0.3.3, <=0.22.0), @inmotionnow/momentum-components (>=8.2.2-next.2, <=102.38.0) +7 more potentially affected by unknown CVE via style-dictionary (>=2.5.0, <=2.10.2)

style-dictionary NPM version =2.5.0, =0.3.3, =8.2.2-next.2, =1.0.2, =0.1.0, =0.0.2, =1.0.0, =8.1.3, =6.0.0, =8.2.2-next.2 Source cves: unknown CVE Source advisory: SNYK:JS-STYLEDICTIONARY-1080632...

125softnlp (0.0.1), a2 (>=0.10.11, <=0.10.13) +4965 more potentially affected by unknown CVE via tensorflow (>=1.0.1, <=2.21.0)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.10.11, =0.5.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: unknown CVE Source advisory: OSV:OSV-2021-449...

@dolittle/node-red (>=2.0.0, <=2.2.8), @dolittle/node-red-infor-m3 (>=2.0.0, <=2.2.8) +13 more potentially affected by CVE-2021-21298 via @node-red/runtime (>=1.0.0, <=1.2.7)

@node-red/runtime NPM version =1.0.0, =2.0.0, =2.0.0, =7.0.0, =1.2.0, =0.1.1, =1.0.0-beta.1, =0.0.1, =0.0.3, =0.0.5, =0.0.2, =1.0.4, =1.0.1, =1.0.2 Source cves: CVE-2021-21298 Source advisory: OSV:GHSA-M33V-338H-4V9F...

@dolittle/node-red (>=2.0.0, <=2.2.8), @dolittle/node-red-infor-m3 (>=2.0.0, <=2.2.8) +13 more potentially affected by CVE-2021-21297 via @node-red/runtime (>=1.0.0, <=1.2.7)

@node-red/runtime NPM version =1.0.0, =2.0.0, =2.0.0, =7.0.0, =1.2.0, =0.1.1, =1.0.0-beta.1, =0.0.1, =0.0.3, =0.0.5, =0.0.2, =1.0.4, =1.0.1, =1.0.2 Source cves: CVE-2021-21297 Source advisory: OSV:GHSA-XP9C-82X8-7F67...

atomic-server (>=0.10.0, <=0.17.0), basic-http-server (>=0.6.0, <=0.8.1) +40 more potentially affected by CVE-2021-27671 via comrak (>=0.1.9, <=0.8.2)

comrak CARGO version =0.1.9, =0.10.0, =0.6.0, =0.1.0, =0.1.5, =0.1.0, =0.0.1, =0.15.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.7 and more Source cves: CVE-2021-27671 Source advisory: OSV:RUSTSEC-2021-0026...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23344 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23344 Source advisory: SNYK:JS-TOTALJS-1077069...

3d-kit (>=0.0.1, <=0.0.14), @0x4447/broccoli (>=1.0.0, <=1.0.16) +144 more potentially affected by CVE-2021-4278 via tree-kit (>=0.0.4, <=0.6.2)

tree-kit NPM version =0.0.4, =0.0.1, =1.0.0, =2.0.0, =1.0.0, =1.18.0, =0.0.1, =1.0.5-master.20190403074739, =1.0.0-master.20180909013449, =0.1.0-master.20191109234452, =0.1.0-ipcrm-custom-event.20191122150318, =1.1.0-master.20190802170815, =0.1.0-master.20190319050251,...

960.css (1.0.0), @4site/engrid-styles (>=0.2.19, <=0.2.24) +120 more potentially affected by CVE-2021-23343 via path-parse (>=1.0.5, <=1.0.6)

path-parse NPM version =1.0.5, =0.2.19, =0.1.1, =7.0.0-2, =0.2.0, =0.17.0, =0.17.0, =0.19.0, =0.17.0, =0.23.0, =0.17.0, =0.17.0, =0.17.1 - @choerodon/issue 0.17.0 and more Source cves: CVE-2021-23343 Source advisory: SNYK:JS-PATHPARSE-1077067...

aiowrap (0.1.0), ambisonic (>=0.1.0, <=0.3.1) +147 more potentially affected by CVE-2021-29938 via slice-deque (>=0.1.16, <=0.3.0)

slice-deque CARGO version =0.1.16, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.8.0, =0.3.0, =0.6.0, =0.4.0, =0.8.0, =0.2.0, =0.6.0, =0.15.3 and more Source cves: CVE-2021-29938 Source advisory: OSV:RUSTSEC-2021-0047...

keeshond_editor (>=0.1.0, <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (0.2.4)

toodee CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:RUSTSEC-2021-0028...

@frostoven/alkalurops (>=1.28.2, <=1.28.5), @h5web/app (>=0.1.0-beta.1, <=4.2.0-beta.1) +14 more potentially affected by unknown CVE via d3-color (3.0.1)

d3-color NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on d3-color and may be impacted: - @frostoven/alkalurops =1.28.2, =0.1.0-beta.1, =0.1.0-beta.0, =0.1.1, =1.0.1, =0.2.0, =0.1.6, =0.1.1, =0.2.0, =0.2.0, =0.0.2, =0.3.0, =0.1.0, =0.3...

@igames/ghost-cli (>=1.15.3, <=1.15.5), homebridge-ring (9.14.2) +1 more potentially affected by CVE-2021-21315 via systeminformation (>=5.0.6, <=5.1.2)

systeminformation NPM version =5.0.6, =1.15.3, =1.15.5 - homebridge-ring 9.14.2 - ring-client-api 9.14.2 Source cves: CVE-2021-21315 Source advisory: OSV:GHSA-2M8V-572M-FF2V...