817 matches found
@achil/parcel-bundler (>=1.11.1, <=1.12.34), @acies/core (>=1.2.89, <=1.2.215) +134 more potentially affected by unknown CVE via safer-eval (>=1.2.3, <=1.3.6)
safer-eval NPM version =1.2.3, =1.11.1, =1.2.89, =0.1.0, =4.0.0, =4.1.0, =4.1.2, =0.9.2-pre.41, =2.0.2-pre.3, =1.0.0, =1.9.3-ext.1, =0.3.0, =1.12.3, =1.0.0, =0.0.1, =3.4.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-876R-HJ45-FW7G...
6_0901 (1.0.0), @alu0101227610/gh-repo-rename (>=1.2.0, <=1.2.1) +27 more potentially affected by unknown CVE via comander (0.0.1-security)
comander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on comander and may be impacted: - 60901 1.0.0 - @alu0101227610/gh-repo-rename =1.2.0, =1.1.1, =1.2.0, =0.0.2, =1.0.0, =1.2.2, =1.0.1, =1.0.5 - hager1 1.0.0 and more Sourc...
@zowe/db2 (>=3.0.1-alpha.201904091134, <=3.0.2), @zowe/db2-for-zowe-cli (>=4.0.0, <=4.0.1) +4 more potentially affected by unknown CVE via ibm_db (>=2.0.0, <=2.5.0)
ibmdb NPM version =2.0.0, =3.0.1-alpha.201904091134, =4.0.0, =0.0.1, =7.0.0, =0.0.4, =0.0.5 - node-red-contrib-deebeetwoforzed 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-P77H-HV6G-FMFP...
fleek-response (>=0.4.2, <=0.4.3), fleek-router (>=0.4.2, <=1.2.3) potentially affected by unknown CVE via swagger-injector (>=1.2.0, <=2.0.9)
swagger-injector NPM version =1.2.0, =0.4.2, =0.4.2, =1.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-V4X8-GW49-7HV4...
3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +1571 more potentially affected by unknown CVE via subtext (>=1.1.1, <=6.0.12)
subtext NPM version =1.1.1, =0.0.2, =0.3.0, =1.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.0.1, =0.1.0, =0.9.0, =1.0.7, =0.0.1, =1.0.8-rc.1, =11.1.27-alpha.4606607431 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2MVQ-XP48-4C77...
@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +109 more potentially affected by unknown CVE via sequelize (>=4.0.0, <=4.44.3)
sequelize NPM version =4.0.0, =0.0.1, =4.0.2, =1.0.16, =1.0.20, =1.0.18, =1.0.10, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =1.0.6-2ef3451f-b17, =5.1.3, =1.6.7, =0.6.3, =0.6.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-FW4P-36J9-RRJ3...
adaptive-fs (>=1.1.0, <=1.3.2), ajato (0.0.1-wip) +1 more potentially affected by unknown CVE via mogoose (0.0.1-security)
mogoose NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mogoose and may be impacted: - adaptive-fs =1.1.0, =1.0.48, =1.1.26 Source cves: unknown CVE Source advisory: OSV:GHSA-5MM9-55C9-P5R7...
ezs (>=5.5.0, <=9.3.1), hoppel (0.4.0) +2 more potentially affected by unknown CVE via notevil (>=1.0.0, <=1.3.1)
notevil NPM version =1.0.0, =5.5.0, =1.0.0, =1.0.1 - piedpiper-middle-out 5.8.1 Source cves: unknown CVE Source advisory: OSV:GHSA-7R5F-7QR4-PF6Q...
@quarks/bpmn-extension (>=1.0.0, <=1.0.142) potentially affected by unknown CVE via cmmn-js-properties-panel (0.4.0)
cmmn-js-properties-panel NPM version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cmmn-js-properties-panel and may be impacted: - @quarks/bpmn-extension =1.0.0, =1.0.142 Source cves: unknown CVE Source advisory: OSV:GHSA-VMH4-322V-CFPC...
@dotgov/bpmn (>=0.0.1, <=0.0.29), @dotgov/z_bpmn (>=0.0.1, <=2.0.0) +19 more potentially affected by unknown CVE via bpmn-js-properties-panel (>=0.11.2, <=0.30.0)
bpmn-js-properties-panel NPM version =0.11.2, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =1.1.22, =1.0.97, =2.0.0, =1.0.14, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VPJ4-89Q8-RH38...
@blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1), @blackbaud/skyux-builder (>=1.10.1, <=1.31.0) +72 more potentially affected by unknown CVE via lodash.mergewith (>=4.0.3, <=4.6.0)
lodash.mergewith NPM version =4.0.3, =1.10.0, =1.10.1, =5.0.0, =5.2.8, =5.0.0, =5.0.0, =5.1.1, =1.3.0, =1.0.0-alpha.1, =1.0.4, =1.1.3, =1.0.0-alpha.4, =1.1.11, =1.0.3, =1.0.0-alpha.3, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5947-M4FG-XHQG...
docpad-plugin-posteditor (>=2.0.0, <=2.1.2) potentially affected by unknown CVE via bleach (0.3.0)
bleach NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - docpad-plugin-posteditor =2.0.0, =2.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-5634-RV46-48JF...
@dev-engage/engage-ionic (>=0.6.0, <=0.6.6), @ionic/angular (>=4.1.0-dev.201902122208.39fbc32, <=4.1.2) +2 more potentially affected by unknown CVE via @ionic/core (>=4.1.0, <=4.1.2-dev.201903141948.7d01207)
@ionic/core NPM version =4.1.0, =0.6.0, =4.1.0-dev.201902122208.39fbc32, =4.1.2 - @ionic/pwa-elements 1.0.2 - dos-wc-library 0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-R3XC-47QG-H929...
@ionic/angular (>=4.3.0-dev.201904161617.4474974, <=4.3.0), dos-wc-library (>=0.7.7, <=0.7.21) potentially affected by unknown CVE via @ionic/core (4.3.0-dev.201904171418.07e739a)
@ionic/core NPM version 4.3.0-dev.201904171418.07e739a is affected by a known vulnerability. The following packages have a transitive dependency on @ionic/core and may be impacted: - @ionic/angular =4.3.0-dev.201904161617.4474974, =0.7.7, =0.7.21 Source cves: unknown CVE Source advisory:...
@alesju/sphinxapi (1.2.2), @aquanomix/symodbus (1.0.3) +159 more potentially affected by unknown CVE via put (0.0.6)
put NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on put and may be impacted: - @alesju/sphinxapi 1.2.2 - @aquanomix/symodbus 1.0.3 - @aredridel/clockworkmod-tether =1.0.0, =1.5.16, =1.0.0, =3.3.3, =3.8.0, =0.0.0, =0.0.1, =0.0.0, =0.0....
@adhitiadarmawan/tmcomponents (0.0.1), @aothechbcn/frontend-idealbar--lib-idealbar (>=1.0.0, <=1.0.10) +17 more potentially affected by unknown CVE via htmr (>=0.4.10, <=0.7.0)
htmr NPM version =0.4.10, =1.0.0, =0.0.1-alpha.100, =1.0.0-beta.1, =1.0.0-beta.5, =1.12.0, =1.5.0, =2.2.0, =1.27.0, =1.1.0, =1.1.0, =5.17.0, =1.1.0, =1.0.0, =5.0.0, =5.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F8RQ-M28H-8HXJ...
@rebelware/fibonacci-generator (0.0.3), react-oauth2-auth-code-flow (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via react-oauth-flow (1.2.0)
react-oauth-flow NPM version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-oauth-flow and may be impacted: - @rebelware/fibonacci-generator 0.0.3 - react-oauth2-auth-code-flow =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory:...
3nit-utils (0.24.0), @cloudinary/mediaflows-cli (>=0.0.23-beta, <=0.0.28) +29 more potentially affected by unknown CVE via @hapi/hapi (>=18.3.1, <=18.4.0)
@hapi/hapi NPM version =18.3.1, =0.0.23-beta, =7.4.0, =7.0.0, =8.5.0-snapshot, =0.1.0, =0.7.0, =2.12.6, =1.8.0, =1.8.0, =0.0.1, =1.0.0, =1.0.0, =2.0.0, =2.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-23VW-MHV5-GRV5...
3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +1617 more potentially affected by unknown CVE via hapi (>=0.14.2, <=18.1.0)
hapi NPM version =0.14.2, =0.0.2, =0.3.0, =1.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.0.1, =0.1.0, =0.9.0, =1.0.7, =0.0.1, =1.0.8-rc.1, =11.1.27-alpha.4606607431 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7HX8-2RXV-66XV...
3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +1590 more potentially affected by unknown CVE via pez (>=1.0.0, <=4.0.5)
pez NPM version =1.0.0, =0.0.2, =0.3.0, =1.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.0.1, =0.1.0, =0.9.0, =1.0.7, =0.0.1, =1.0.8-rc.1, =11.1.27-alpha.4606607431 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G64Q-3VG8-8F93...