toolbox (>=0.2.7-final, <=0.2.9) potentially affected by CVE-2020-36432 via alg_ds (>=0.2.7, <=0.3.2)

algds CARGO version =0.2.7, =0.2.7-final, =0.2.9 Source cves: CVE-2020-36432 Source advisory: OSV:RUSTSEC-2020-0033...

kay (>=0.1.0, <=0.5.1) potentially affected by CVE-2020-36433 via chunky (>=0.1.4, <=0.3.7)

chunky CARGO version =0.1.4, =0.1.0, =0.5.1 Source cves: CVE-2020-36433 Source advisory: OSV:RUSTSEC-2020-0035...

kea (>=0.1.0, <=0.1.3) potentially affected by CVE-2020-35885 via alpm-rs (0.1.24)

alpm-rs CARGO version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on alpm-rs and may be impacted: - kea =0.1.0, =0.1.3 Source cves: CVE-2020-35885 Source advisory: OSV:RUSTSEC-2020-0032...

@brudi-toolbox/id (>=1.4.5-next.1, <=1.14.15), @cimpress/simple-auth-wrapper (>=3.0.0, <=3.1.6) +4 more potentially affected by CVE-2020-15119 via auth0-lock (>=11.0.1, <=11.26.1)

auth0-lock NPM version =11.0.1, =1.4.5-next.1, =3.0.0, =0.0.1, =1.0.42, =0.11.0, =0.21.2 Source cves: CVE-2020-15119 Source advisory: OSV:GHSA-6GG3-PMM7-97XC...

@zpmc/zwd-server (>=0.0.14, <=0.0.21) potentially affected by CVE-2020-15152 via ftp-srv (4.1.0)

ftp-srv NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ftp-srv and may be impacted: - @zpmc/zwd-server =0.0.14, =0.0.21 Source cves: CVE-2020-15152 Source advisory: OSV:GHSA-JW37-5GQR-CF9J...

@coreui/coreui-datatables (1.0.0), @daai/sb-decloud (>=1.0.0, <=1.0.11) +38 more potentially affected by unknown CVE via datatables.net (>=1.10.12, <=1.10.21)

datatables.net NPM version =1.10.12, =1.0.0, =1.0.0, =3.0.0, =1.1.1, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =0.0.0, =0.1.56, =0.2.151 and more Source cves: unknown CVE Source advisory: SNYK:JS-DATATABLESNET-598806...

@supermodel/cli (>=0.45.0, <=0.48.1), @supermodel/lib (>=0.4.4, <=0.5.0) +1 more potentially affected by unknown CVE via jsonpointer (4.0.1)

jsonpointer NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on jsonpointer and may be impacted: - @supermodel/cli =0.45.0, =0.4.4, =0.0.3, =0.0.9 Source cves: unknown CVE Source advisory: SNYK:JS-JSONPOINTER-598804...

app-context-connie (>=0.0.1, <=1.1.0), app-context-connie-firebase (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2020-7706 via connie-lang (>=0.0.1, <=0.1.0)

connie-lang NPM version =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.2.1 Source cves: CVE-2020-7706 Source advisory: SNYK:JS-CONNIELANG-598853...

svelte-forms-lib (>=1.1.1, <=1.3.2) potentially affected by CVE-2020-7707 via property-expr (2.0.2)

property-expr NPM version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on property-expr and may be impacted: - svelte-forms-lib =1.1.1, =1.3.2 Source cves: CVE-2020-7707 Source advisory: SNYK:JS-PROPERTYEXPR-598800...

nis-model (>=0.6.0, <=0.6.22), nis-view (>=0.1.1, <=0.1.8) potentially affected by CVE-2020-7703 via nis-utils (0.6.10)

nis-utils NPM version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nis-utils and may be impacted: - nis-model =0.6.0, =0.1.1, =0.1.8 Source cves: CVE-2020-7703 Source advisory: SNYK:JS-NISUTILS-598799...

worksmith_etcd (>=0.0.1, <=0.2.1) potentially affected by CVE-2020-7725 via worksmith (>=0.0.22, <=0.1.8)

worksmith NPM version =0.0.22, =0.0.1, =0.2.1 Source cves: CVE-2020-7725 Source advisory: SNYK:JS-WORKSMITH-598798...

@cloudron/manifest-format (>=5.27.0, <=5.35.0), @cloudron/pipework (>=1.1.0, <=2.0.0) +13 more potentially affected by CVE-2020-7737 via safetydance (>=0.0.15, <=2.5.1)

safetydance NPM version =0.0.15, =5.27.0, =1.1.0, =1.0.0, =0.1.2, =1.3.0, =1.0.0, =1.0.0, =1.0.0, =0.8.7, =1.3.0, =0.0.3, =0.0.2, =0.2.1 Source cves: CVE-2020-7737 Source advisory: SNYK:JS-SAFETYDANCE-598687...

@blueprintjs/docs (>=1.0.0, <=1.3.1), @frctl/twig (>=1.0.0-alpha.0, <=1.0.0-beta.2) +101 more potentially affected by CVE-2020-7700 via phpjs (>=0.0.1, <=1.3.2)

phpjs NPM version =0.0.1, =1.0.0, =1.0.0-alpha.0, =0.3.16, =1.2.7, =0.1.3, =1.0.1, =1.0.0, =0.7.0, =0.0.1, =0.0.9, =0.0.1-alpha.1, =0.0.1, =0.0.7 and more Source cves: CVE-2020-7700 Source advisory: SNYK:JS-PHPJS-598681...

node-oojs-tool (>=1.0.0, <=1.0.11), node-oojs-utility (>=1.0.5, <=1.2.11) +6 more potentially affected by CVE-2020-7721 via node-oojs (1.4.0)

node-oojs NPM version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-oojs and may be impacted: - node-oojs-tool =1.0.0, =1.0.5, =0.0.6, =0.1.0, =0.1.1, =0.1.0, =1.0.0, =1.0.5 Source cves: CVE-2020-7721 Source advisory: SNYK:JS-NODEOOJS-5986...

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +8745 more potentially affected by CVE-2020-7720 via node-forge (>=0.1.15, <=0.9.2)

node-forge NPM version =0.1.15, =0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-forge and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 ...

@random-guys/coralpay-pgp (>=0.0.1, <=0.1.0), @woocommerce/components (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2020-7719 via locutus (>=2.0.10, <=2.0.11)

locutus NPM version =2.0.10, =0.0.1, =1.0.0, =1.1.0, =1.0.2, =1.0.52, =0.1.0, =0.2.1 Source cves: CVE-2020-7719 Source advisory: SNYK:JS-LOCUTUS-598675...

3architecture (>=1.0.0, <=1.7.0), @1amageek/tradable (0.9.0) +1596 more potentially affected by CVE-2020-7768 via grpc (>=1.0.0, <=1.24.3)

grpc NPM version =1.0.0, =1.0.0, =1.0.24, =0.0.2, =1.1.6, =0.0.1, =0.1.0, =1.2.1, =0.0.0-7, =1.0.0, =1.1.0 - @ampretia/composer-opus 0.2.0 - @andregarvin/cuneiform 0.0.1 and more Source cves: CVE-2020-7768 Source advisory: SNYK:JS-GRPC-598671...

@arkecosystem/core-new-relic (>=2.6.0-next.4, <=2.7.26), @beyounglabs/alfred (>=0.0.3, <=3.0.16) +62 more potentially affected by CVE-2020-7768 via @grpc/grpc-js (>=1.0.0, <=1.1.7)

@grpc/grpc-js NPM version =1.0.0, =2.6.0-next.4, =0.0.3, =0.1.4, =1.12.0, =0.7.1, =0.7.4, =0.7.2, =4.4.3-dev.21, =1.6.0-rc, =0.1.14-alpha-71502f6.0, =0.1.1-alpha.0, =0.0.2, =0.1.9, =2.9.0-alpha.0, =3.3.0 - @irvingjs/vip-go 3.0.0-alpha.16 and more Source cves: CVE-2020-7768 Source advisory:...

@aikosia/automaton (>=0.6.0, <=0.8.1), @aikosia/automaton-cli (>=0.2.1, <=0.3.5) +27 more potentially affected by CVE-2020-7718 via gammautils (>=0.0.2, <=0.0.81)

gammautils NPM version =0.0.2, =0.6.0, =0.2.1, =0.9.0, =0.1.5, =1.0.49, =9.0.0, =0.1.44, =0.1.22, =0.1.20, =1.0.1, =0.0.9, =0.0.7, =0.0.8 and more Source cves: CVE-2020-7718 Source advisory: SNYK:JS-GAMMAUTILS-598670...

@decentverse/server (>=0.0.1, <=0.0.148), @swapscanner/truffle-hdwallet-provider-klaytn (1.4.2) +18 more potentially affected by CVE-2020-7717 via dot-notes (3.1.1)

dot-notes NPM version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dot-notes and may be impacted: - @decentverse/server =0.0.1, =1.0.0, =1.0.0, =1.0.1-rc.4, =1.4.0-rc.1, =1.0.0, =1.6.4, =0.0.1, =1.0.0, =0.0.1, =0.1.1 and more Source cves:...