entfrm-bpmn (>=8.6.2, <=8.6.6), entfrm-flowable-designer (>=1.0.0, <=1.2.6) +4 more potentially affected by CVE-2021-23460 via min-dash (3.5.2)

min-dash NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on min-dash and may be impacted: - entfrm-bpmn =8.6.2, =1.0.0, =2.2.0, =1.0.0, =1.1.3 Source cves: CVE-2021-23460 Source advisory: GHSA-2M53-83F3-562J...

@convergence/mxgraph-adapter (>=0.1.0, <=0.2.0), vue-workflow-modeler (>=0.1.3, <=0.1.6) potentially affected by CVE-2019-13127 via mxgraph (3.9.12)

mxgraph NPM version 3.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on mxgraph and may be impacted: - @convergence/mxgraph-adapter =0.1.0, =0.1.3, =0.1.6 Source cves: CVE-2019-13127 Source advisory: MEND:CVE-2019-13127...

SAP NetWeaver Workflow Modeler - Multiple XSS

Application: SAP NetWeaver Workflow Modeler Versions Affected: SAP NetWeaver NW2004s SP6 Workflow Modeler Vendor URL: http://www.sap.com Bugs: XSS Exploits: YES Reported: 06.08.2010 Vendor response: 07.08.2010 Date of Public Advisory: 12.02.2014 Reference: SAP Security Note 1860923 Author:...