@architect-io/cli (>=0.3.13, <=0.5.2-rc.7), @bagevent/taro-component (1.0.0) +33 more potentially affected by CVE-2020-15125 via auth0 (>=2.0.0-alpha.6, <=2.25.1)

auth0 NPM version =2.0.0-alpha.6, =0.3.13, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.1.0, =4.0.0, =0.0.23, =1.8.0, =0.0.34, =0.0.1, =0.0.34, =3.1.0, =4.0.0 and more Source cves: CVE-2020-15125 Source advisory: OSV:GHSA-5JPF-PJ32-XX53...

chatc-cli (>=0.1.7, <=0.1.9), fast-http-cli (>=0.0.1, <=0.0.8) potentially affected by CVE-2020-7687 via fast-http (>=0.1.2, <=0.1.3)

fast-http NPM version =0.1.2, =0.1.7, =0.0.1, =0.0.8 Source cves: CVE-2020-7687 Source advisory: OSV:GHSA-7PHR-5M9X-RW9Q...

08cms (1.0.0), 18a58t9c-upload (>=1.0.0, <=1.0.3) +3430 more potentially affected by CVE-2020-8175 via jpeg-js (>=0.0.1, <=0.3.7)

jpeg-js NPM version =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0-alpha.19, =0.0.2, =2.2.1, =3.4.7 - @lan/uni-libs 0.0.3 and more Source cves: CVE-2020-8175 Source advisory: OSV:GHSA-W7Q9-P3JQ-FMHM...

webfm (>=0.9.0, <=0.9.37) potentially affected by CVE-2018-21036 via sails-hook-sockets (1.4.3)

sails-hook-sockets NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on sails-hook-sockets and may be impacted: - webfm =0.9.0, =0.9.37 Source cves: CVE-2018-21036 Source advisory: OSV:GHSA-F7F4-HQP2-7PRC...

@0x18b2ee/parse-server (>=3.10.1, <=3.11.0), @adncorp/parse-server (>=2.0.0, <=2.10.4) +24 more potentially affected by unknown CVE via parse (>=2.0.1, <=2.8.0)

parse NPM version =2.0.1, =3.10.1, =2.0.0, =0.0.7, =1.0.5, =4.3.0-fast-roles, =4.3.0, =1.0.9, =1.0.0, =3.1.1, =3.10.0, =3.1.3, =3.1.6 - nex-parse-server 4.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WVH7-5P38-2QFC...

@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), sails-hook-parse-server (>=1.0.0, <=1.1.0) potentially affected by CVE-2020-15126 via parse-server (3.10.0)

parse-server NPM version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-server and may be impacted: - @bigegg/parse-server-schema-config =1.0.5, =1.0.0, =1.1.0 Source cves: CVE-2020-15126 Source advisory: OSV:GHSA-236H-RQV8-8Q73...

@aliyun-sls/sql (>=0.2.9-dev-10, <=0.3.10-dev-9), @blocksx/bulk (>=0.1.3-alpha.0, <=0.3.0) +36 more potentially affected by CVE-2020-15123 via codecov (>=3.0.0, <=3.7.0)

codecov NPM version =3.0.0, =0.2.9-dev-10, =0.1.3-alpha.0, =0.1.19-alpha.0, =0.1.11-alpha.0, =0.1.3-alpha.0, =0.0.1, =0.0.29, =1.0.10, =1.0.18, =1.0.0, =1.7.0, =1.0.1, =1.7.34 and more Source cves: CVE-2020-15123 Source advisory: OSV:GHSA-XP63-6VF5-XF3V...

@bigfishtv/tank-form-ui (>=1.1.0, <=1.10.2), @dicdikshaorg/resource-library (0.0.20) +68 more potentially affected by unknown CVE via fine-uploader (>=5.12.0, <=5.16.2)

fine-uploader NPM version =5.12.0, =1.1.0, =0.0.1, =0.0.7, =0.2.8, =0.3.1, =0.3.97, =0.3.100, =0.3.112, =0.3.80, =0.3.2, =0.3.2, =0.3.82, =0.3.80, =1.0.1-alpha.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-FINEUPLOADER-585902...

@braneframe/plugin-github (>=0.1.53-main.2922731, <=0.6.7), @dxos/plugin-github (>=0.6.8-main.046e6cf, <=0.7.4) +26 more potentially affected by CVE-2020-8203 via lodash.update (4.10.2)

lodash.update NPM version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.update and may be impacted: - @braneframe/plugin-github =0.1.53-main.2922731, =0.6.8-main.046e6cf, =0.2.19, =0.0.1, =5.5.0, =22.1.0-pre.1, =5.2.0, =4.0.0, =1.0.0,...

@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +809 more potentially affected by CVE-2020-8203 via lodash-es (>=3.10.1, <=4.17.15)

lodash-es NPM version =3.10.1, =0.0.1-alpha.4, =0.1.10, =0.0.1, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =0.0.1, =3.2.1, =3.2.1, =0.3.14, =0.4.63, =0.4.64 and more Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

0-logger (>=1.1.0, <=1.1.1), 0xsodium (>=0.2.0, <=0.14.0) +9380 more potentially affected by CVE-2020-8203 via lodash.set (>=3.7.4, <=4.3.2)

lodash.set NPM version =3.7.4, =1.1.0, =0.2.0, =2.0.0, =1.1.0, =1.0.0, =4.11.0, =0.1.0, =1.0.19, =2.0.0-alpha and more Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

@finviet-jsrpt/jsrpt-electron-pdf (>=1.0.0, <=1.0.6), @jsreport/jsreport-electron-pdf (>=4.0.0-beta.1, <=5.2.0) +18 more potentially affected by CVE-2020-8203 via lodash.pick (>=4.0.1, <=4.3.0)

lodash.pick NPM version =4.0.1, =1.0.0, =4.0.0-beta.1, =1.0.0-alpha.0, =0.1.0, =2.1.0, =1.0.0, =1.2.3, =2.3.0, =1.0.0-beta.1, =0.4.0, =0.1.0, =4.0.0-alpha.1, =4.0.0-alpha.5 and more Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

@0pecm/token-test (>=1.2.14, <=1.2.21), @actionpower/i18n-spreadsheet-to-json (>=0.0.29, <=0.0.35) +193 more potentially affected by CVE-2020-8203 via lodash.setwith (4.3.2)

lodash.setwith NPM version 4.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.setwith and may be impacted: - @0pecm/token-test =1.2.14, =0.0.29, =0.7.0, =0.8.8, =0.19.0, =1.0.0-canary-2040-1068.0.aa2e178, =1.0.0-canary-2040-1068.0.aa2e178,...

0.workspace (>=0.1.0, <=0.1.1), 00ld8nuivn (2.1.0) +60335 more potentially affected by CVE-2020-8203 via lodash (>=3.7.0, <=4.17.18)

lodash NPM version =3.7.0, =0.1.0, =1.0.0, =1.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 - 0850u4lkpu 1.1.0 - 08cms 1.0.0 and more Source cves: CVE-2020-8203 Source advisory:...

acme-compilers (>=0.2.2, <=0.2.4), actix-governor (>=0.2.6, <=0.4.1) +1421 more potentially affected by unknown CVE via mach (>=0.0.3, <=0.3.2)

mach CARGO version =0.0.3, =0.2.2, =0.2.6, =0.1.0-beta.8, =0.23.0, =0.23.0, =0.1.0, =0.1.0, =0.1.0-alpha, =0.0.2, =0.2.0, =0.1.4, =1.1.0, =1.2.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0168...

htl-template-loader (>=1.2.0, <=3.0.0), ideal-cli (>=1.0.0-alpha.1, <=1.0.0-alpha.3) +1 more potentially affected by unknown CVE via standard-version (8.0.0)

standard-version NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on standard-version and may be impacted: - htl-template-loader =1.2.0, =1.0.0-alpha.1, =1.0.0-alpha.3 - next-standard-version 2.1.3 Source cves: unknown CVE Source advisory...

@3deye-toolkit/react-camera (>=0.0.1-alpha.7, <=0.0.1-alpha.11), @3deye-toolkit/react-event-list (>=0.0.1-alpha.7, <=0.0.1-alpha.12) +100 more potentially affected by unknown CVE via i18next (>=19.0.0, <=19.8.2)

i18next NPM version =19.0.0, =0.0.1-alpha.7, =0.0.1-alpha.7, =1.0.0, =0.2.0-alpha.1, =2.0.0, =2.0.0, =0.0.0, =1.34.1, =0.0.10, =1.15.0-alpha1, =1.0.1-alpha.9762.0, =0.2.2-alpha.3546.0, =0.3.2, =0.4.4, =0.5.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-I18NEXT-585930...

@adpt/cli (>=0.4.0-next.27, <=0.4.0-next.28), @alasdair/check-engines (1.0.0) +142 more potentially affected by unknown CVE via npm-registry-fetch (>=5.0.0, <=8.1.0)

npm-registry-fetch NPM version =5.0.0, =0.4.0-next.27, =0.1.0, =0.21.0, =1.0.0, =1.0.0, =0.1.0, =0.2.0, =0.14.0, =4.0.13, =3.1.10, =2.3.0, =3.1.10, =3.1.10, =3.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-JMQM-F2GX-4FJV...

@swydo/custom-integrations (>=0.10.0, <=1.0.25), @testim/testim-cli (1.142.0) potentially affected by unknown CVE via npm-registry-fetch (4.0.0)

npm-registry-fetch NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on npm-registry-fetch and may be impacted: - @swydo/custom-integrations =0.10.0, =1.0.25 - @testim/testim-cli 1.142.0 Source cves: unknown CVE Source advisory:...

@admixltd/admix-error (>=1.3.7, <=2.0.2), @admixltd/admix-jwt (>=1.9.4, <=2.0.0) +93 more potentially affected by CVE-2020-15095 via npm (>=6.0.0, <=6.14.5)

npm NPM version =6.0.0, =1.3.7, =1.9.4, =0.0.1, =0.1.2, =0.4.3, =1.0.0-beta.0, =1.0.0-beta.15, =1.1.58, =3.2.2, =0.0.0-semantic-release, =2.0.0, =2.1.0 and more Source cves: CVE-2020-15095 Source advisory: OSV:GHSA-93F3-23RQ-PJFP...