9934 matches found
3a-server (>=0.7.41, <=0.9.10), 3a-server-mongo (>=0.1.0-beta.1, <=1.0.0-beta.1) +11 more potentially affected by unknown CVE via html-pdf-chrome (>=0.2.0, <=0.5.0)
html-pdf-chrome NPM version =0.2.0, =0.7.41, =0.1.0-beta.1, =0.1.3, =0.2.0, =1.0.0, =1.1.0, =1.0.0, =0.1.0, =1.0.3, =0.0.0, =0.5.12 Source cves: unknown CVE Source advisory: OSV:GHSA-5P98-WPC9-G498...
alinex-make (0.0.3), apifs2swagger (>=0.1.0, <=0.1.2) +72 more potentially affected by unknown CVE via getsetdeep (>=2.0.0, <=2.1.0)
getsetdeep NPM version =2.0.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0-beta, =0.8.3, =0.0.1, =0.2.4, =0.0.0, =6.20.0, =6.29.0 - docpad-plugin-cachr 2.1.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8J49-49JQ-VWCQ...
arupex (>=0.4.0, <=0.4.4), captain-ahab (1.0.0) +11 more potentially affected by unknown CVE via deep-setter (1.0.2)
deep-setter NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on deep-setter and may be impacted: - arupex =0.4.0, =2.3.4, =3.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.18, =0.0.7, =0.0.1, =0.0.6 Source cves: unknown CVE Source advisory:...
1st_test_yamineo (0.1.0), @akaterra.co/apidog (>=0.0.4, <=0.0.5) +885 more potentially affected by unknown CVE via markdown (>=0.1.2, <=0.5.0)
markdown NPM version =0.1.2, =0.0.4, =0.0.102, =0.1.0, =0.4.0, =0.0.5, =2.1.1, =2.0.0, =0.0.2, =2.1.1, =2.1.1, =2.1.1, =2.1.1, =2.9.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WX77-RP39-C6VG...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1582 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.5.2)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q2C6-C6PM-G3GH...
@behance/istanbul (0.3.17-sourcemap), @bigcommerce/stencil-paper (>=2.0.15, <=2.0.25) +220 more potentially affected by unknown CVE via handlebars (>=3.0.0, <=3.0.7)
handlebars NPM version =3.0.0, =2.0.15, =0.4.0, =0.0.60-IE, =1.3.1, =1.0.4, =0.11.0, =0.0.1, =0.0.5, =0.0.6, =1.2.0, =0.1.0, =0.4.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q2C6-C6PM-G3GH...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1582 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.5.2)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G9R4-XPMJ-MJ65...
@behance/istanbul (0.3.17-sourcemap), @bigcommerce/stencil-paper (>=2.0.15, <=2.0.25) +220 more potentially affected by unknown CVE via handlebars (>=3.0.0, <=3.0.7)
handlebars NPM version =3.0.0, =2.0.15, =0.4.0, =0.0.60-IE, =1.3.1, =1.0.4, =0.11.0, =0.0.1, =0.0.5, =0.0.6, =1.2.0, =0.1.0, =0.4.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G9R4-XPMJ-MJ65...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1576 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.5.1)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2CF5-4W76-R9QV...
@behance/istanbul (0.3.17-sourcemap), @bigcommerce/stencil-paper (>=2.0.15, <=2.0.25) +220 more potentially affected by unknown CVE via handlebars (>=3.0.0, <=3.0.7)
handlebars NPM version =3.0.0, =2.0.15, =0.4.0, =0.0.60-IE, =1.3.1, =1.0.4, =0.11.0, =0.0.1, =0.0.5, =0.0.6, =1.2.0, =0.1.0, =0.4.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2CF5-4W76-R9QV...
@draftbit/airtable-graphql (2.0.0), @draftbit/hapi-airtable-authentication-plugin (>=1.0.0, <=1.1.0) +34 more potentially affected by unknown CVE via airtable (>=0.4.5, <=0.6.0)
airtable NPM version =0.4.5, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.3, =0.0.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =1.0.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-JRJ9-5QP6-2V8Q...
@cloudmosaic/quickstarts (>=1.0.0-rc.0, <=1.0.0-rc.1), @cooptest/quickstarts (>=1.0.0, <=1.0.12) +113 more potentially affected by unknown CVE via showdown (>=1.0.0-alpha.2, <=1.9.0)
showdown NPM version =1.0.0-alpha.2, =1.0.0-rc.0, =1.0.0, =1.0.0-alpha.1, =2.0.0-beta.5, =0.4.0-1, =1.6.3, =5.2.1, =0.0.11, =0.0.9, =0.0.2, =1.0.0-rc.2, =1.0.1, =0.0.0-beta.1, =0.0.0-beta.24 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H6MQ-3CJ6-H738...
@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1562 more potentially affected by unknown CVE via handlebars (>=4.0.0, <=4.4.3)
handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F52G-6JHX-586P...
@adpt/testutils (>=0.0.2-next.4, <=0.1.0-next.1), @elliemae/pui-cli (>=0.0.1, <=0.0.2-beta.7) +10 more potentially affected by unknown CVE via dompurify (>=2.0.0, <=2.0.5)
dompurify NPM version =2.0.0, =0.0.2-next.4, =0.0.1, =4.3.1-test1, =6.3.5, =8.1.1, =2.4.13-dev-verdaccio.1070, =0.0.1, =0.1.0, =0.0.1, =2.0.0, =2.1.0, =3.13.0, =4.3.3 Source cves: unknown CVE Source advisory: OSV:GHSA-MJJQ-C88Q-QHR6...
@achil/parcel-bundler (>=1.11.1, <=1.12.34), @acies/core (>=1.2.89, <=1.2.215) +134 more potentially affected by unknown CVE via safer-eval (>=1.2.3, <=1.3.6)
safer-eval NPM version =1.2.3, =1.11.1, =1.2.89, =0.1.0, =4.0.0, =4.1.0, =4.1.2, =0.9.2-pre.41, =2.0.2-pre.3, =1.0.0, =1.9.3-ext.1, =0.3.0, =1.12.3, =1.0.0, =0.0.1, =3.4.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-876R-HJ45-FW7G...
@codecademy/gamut (>=1.10.10-alpha.7c13cf.0, <=1.15.2), @contentful/field-editor-markdown (>=0.1.0, <=0.4.0) +18 more potentially affected by unknown CVE via markdown-to-jsx (>=6.4.1, <=6.11.1)
markdown-to-jsx NPM version =6.4.1, =1.10.10-alpha.7c13cf.0, =0.1.0, =0.1.0, =0.0.9, =7.1.0, =0.10.0, =1.0.0, =0.2.0, =0.1.0, =5.11.3, =5.8.9, =6.0.1, =1.0.0, =3.3.1-feather.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CCRP-C664-8P4J...
@adobe/helix-cli (>=0.10.6-pre.2, <=4.3.0), @c8y/cli (9.15.0) +123 more potentially affected by CVE-2020-12265 via decompress (>=4.0.0, <=4.2.0)
decompress NPM version =4.0.0, =0.10.6-pre.2, =1.1.4, =4.0.2-rc.0, =1.9.9-1, =1.0.1, =5.0.3-beta, =6.12.0, =0.9.1, =0.9.0, =0.10.5, =3.0.0-rc.0, =3.0.0-alpha.1, =0.0.1, =0.0.1-canary-publish-10b14e980f40c7d15fe9aa4b2b8dacd099133853, =3.60.0 and more Source cves: CVE-2020-12265 Source advisory:...
@aoboxinda/budget (>=0.1.155, <=0.1.186), @coobo/skeleton (>=1.0.0-a, <=1.0.0) +5 more potentially affected by unknown CVE via express-fileupload (>=1.0.0, <=1.1.5)
express-fileupload NPM version =1.0.0, =0.1.155, =1.0.0-a, =0.0.1-alpha.151, =0.0.1-alpha.44, =1.1.0, =1.0.0, =1.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-Q3W9-G74Q-VP5F...
hexo-wustxiao-blog (1.1.1) potentially affected by unknown CVE via hexo-admin (2.3.0)
hexo-admin NPM version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hexo-admin and may be impacted: - hexo-wustxiao-blog 1.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PHPH-XPJ4-WVCV...
@36node/template-service (0.3.5), @alexbp-ds/microservice-wrapper (1.1.8) +329 more potentially affected by unknown CVE via mongodb (>=3.0.0, <=3.1.12)
mongodb NPM version =3.0.0, =0.0.1, =3.2.9, =0.1.0, =1.0.0, =1.0.0, =0.0.1-rc.1, =0.0.2, =1.11.1, =0.0.2, =0.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MH5C-679W-HH4R...