@planningcenter/icons (>=3.0.0-7, <=3.0.0-15), feathers-commands (>=0.0.1, <=0.1.4) +11 more potentially affected by unknown CVE via smart-extend (1.7.4)

smart-extend NPM version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on smart-extend and may be impacted: - @planningcenter/icons =3.0.0-7, =0.0.1, =1.0.4, =1.0.2, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =0.1.0, =1.0.1, =2.0.0, =3.0.5 Source cve...

@autorest/common (>=1.0.0, <=1.5.2), @autorest/configuration (>=1.1.0-dev.2, <=1.9.2) +56 more potentially affected by unknown CVE via static-eval (2.0.0)

static-eval NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on static-eval and may be impacted: - @autorest/common =1.0.0, =1.1.0-dev.2, =3.0.6371, =4.0.2, =2.0.4, =0.2.0-dev.1, =4.0.149, =3.0.129, =4.0.174, =1.2.5, =1.5.0, =1.0.0, =1.2....

favana-docx (>=1.0.28, <=1.0.47), web-commons-export (1.2.10) potentially affected by unknown CVE via office-converter (1.0.2)

office-converter NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on office-converter and may be impacted: - favana-docx =1.0.28, =1.0.47 - web-commons-export 1.2.10 Source cves: unknown CVE Source advisory: OSV:GHSA-9P64-H5Q4-PHPM...

@cpomelo/pomelo (2.2.7), @linix01/pomelo (2.2.9) +54 more potentially affected by unknown CVE via pomelo-monitor (>=0.3.5, <=0.3.7)

pomelo-monitor NPM version =0.3.5, =2.2.5, =1.0.0, =2.2.5, =0.0.1, =0.0.1, =1.0.1, =0.1.0, =2.2.6, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M5CH-GX8G-RG73...

@akashic/engine-files-reftest (>=3.3.20, <=3.4.1), @astound/appium-xcuitest-driver (2.67.1) +66 more potentially affected by unknown CVE via node-idevice (0.1.6)

node-idevice NPM version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-idevice and may be impacted: - @akashic/engine-files-reftest =3.3.20, =0.1.0, =0.1.0-alpha.0, =0.8.0, =1.9.2-beta2.15, =0.1.5, =0.0.34, =5.7.8, =0.0.0-fake.230, =0.0.1,...

@aconex/styleguide (>=2.0.1, <=2.2.0) potentially affected by unknown CVE via markdown-it-toc-and-anchor (4.1.2)

markdown-it-toc-and-anchor NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-toc-and-anchor and may be impacted: - @aconex/styleguide =2.0.1, =2.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X6M6-5HRF-FH6R...

ryosukesuzuki (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via ascii-art (1.4.3)

ascii-art NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on ascii-art and may be impacted: - ryosukesuzuki =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-9HQJ-38J2-5JGM...

snsadmin (1.0.0) potentially affected by unknown CVE via soket.io (0.0.1-security)

soket.io NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-WP2P-Q35G-3RJJ...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G336-C7WV-8HP3...

@aqsi/ui (>=3.22.0-rc.0, <=4.15.1), @ausbom/charts (>=0.1.0, <=0.1.2) +6 more potentially affected by unknown CVE via highcharts (>=8.0.0, <=8.1.0)

highcharts NPM version =8.0.0, =3.22.0-rc.0, =0.1.0, =0.0.0, =1.3.0, =7.0.0-alpha1, =16.8.1, =1.2.8, =1.0.6, =1.0.7 Source cves: unknown CVE Source advisory: OSV:GHSA-GR4J-R575-G665...

@amitport/useful (>=0.5.0, <=0.5.2), @arivazhagan/demo-project (1.0.1) +1015 more potentially affected by unknown CVE via angular (>=1.0.8, <=1.7.9)

angular NPM version =1.0.8, =0.5.0, =0.0.8, =2.3.0, =1.5.8, =2.8.3-2, =0.1.0, =1.0.0, =0.0.7, =0.0.1, =0.2.24, =0.0.1, =0.0.1, =0.0.5, =0.1.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5CP4-XMRW-59WF...

acme-compilers (>=0.2.2, <=0.2.4), actix-governor (>=0.2.6, <=0.4.1) +1409 more potentially affected by unknown CVE via mach (>=0.0.3, <=0.3.2)

mach CARGO version =0.0.3, =0.2.2, =0.2.6, =0.1.0-beta.8, =0.23.0, =0.23.0, =0.1.0, =0.1.0, =0.1.0-alpha, =0.0.2, =0.2.0, =0.1.4, =1.1.0, =1.2.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0168...

@adpt/cli (>=0.4.0-next.27, <=0.4.0-next.28), @alasdair/check-engines (1.0.0) +142 more potentially affected by unknown CVE via npm-registry-fetch (>=5.0.0, <=8.1.0)

npm-registry-fetch NPM version =5.0.0, =0.4.0-next.27, =0.1.0, =0.21.0, =1.0.0, =1.0.0, =0.1.0, =0.2.0, =0.14.0, =4.0.13, =3.1.10, =2.3.0, =3.1.10, =3.1.10, =3.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-JMQM-F2GX-4FJV...

@swydo/custom-integrations (>=0.10.0, <=1.0.25), @testim/testim-cli (1.142.0) potentially affected by unknown CVE via npm-registry-fetch (4.0.0)

npm-registry-fetch NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on npm-registry-fetch and may be impacted: - @swydo/custom-integrations =0.10.0, =1.0.25 - @testim/testim-cli 1.142.0 Source cves: unknown CVE Source advisory:...

@10yun/cv-mobile-ui (0.3.20), @accordproject/cicero-cli (>=0.3.4, <=0.8.0) +495 more potentially affected by unknown CVE via jsrsasign (>=4.8.2, <=8.0.12)

jsrsasign NPM version =4.8.2, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.0.61-20180603194157, =0.0.61-20180603194157, =0.0.61-20180603194157, =0.14.7, =2.0.1-alpha.0, =1.0.0-beta.0, =1.0.0-beta.0, =2.0.1-alpha.0, =1.0.0-beta.0, =1.2.1-alpha.0 and more Source cves: unknown CVE Source advisory:...

afterburn (4.1.0), aoaddons (>=0.1.1, <=0.1.6) +54 more potentially affected by unknown CVE via pnet_packet (>=0.20.0, <=0.26.0)

pnetpacket CARGO version =0.20.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0167...

@forecastr/api (>=0.0.4, <=0.0.5), @hammerframework/api (>=0.0.1-alpha.13, <=0.0.1-alpha.14) +8 more potentially affected by unknown CVE via apollo-server-lambda (>=2.0.0-xrc.11, <=2.11.0)

apollo-server-lambda NPM version =2.0.0-xrc.11, =0.0.4, =0.0.1-alpha.13, =0.0.1-alpha.12, =1.1.0, =0.0.1-alpha.27, =1.0.0, =1.2.1 - photos-production-api 1.0.0 - redwood-express-api 0.8.1 Source cves: unknown CVE Source advisory: OSV:GHSA-W42G-7VFC-XF37...

@fluentui/local-sandbox (>=0.31.1-alpha.6224, <=0.45.0), @fluentui/react (>=0.31.1-alpha.6224, <=0.46.0) +6 more potentially affected by unknown CVE via @fluentui/styles (>=0.31.1-alpha.6224, <=0.49.0)

@fluentui/styles NPM version =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.47.6, =0.47.0, =0.47.4, =0.1.0, =2.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-FLUENTUISTYLES-570808...

a2 (>=0.2.0, <=0.5.3), a2d (>=0.1.0, <=0.1.11) +7730 more potentially affected by unknown CVE via net2 (0.2.39)

net2 CARGO version 0.2.39 is affected by a known vulnerability. The following packages have a transitive dependency on net2 and may be impacted: - a2 =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.3, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.2.0 and more Source cves: unknown CVE Source advisory:...

@01/service-core (1.2.1), @adyen/api-library (>=2.0.0, <=2.1.5) +348 more potentially affected by unknown CVE via https-proxy-agent (>=2.0.0, <=2.2.2)

https-proxy-agent NPM version =2.0.0, =2.0.0, =3.9.0-alpha.0, =0.1.0, =0.1.0, =2.0.3, =2.1.3 - @back4app/ant 0.0.19 - @back4app/ant-cli 0.0.19 - @back4app/ant-core 0.0.19 - @back4app/ant-graphql 0.0.19 - @back4app/ant-graphql-express 0.0.19 - @back4app/ant-serverless 0.0.19 and more Source cves:...