10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +19164 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.17.20)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.0.2, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =4.11.20 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: OSV:GHSA-HPMR-G4PQ-JHGP...

@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by CVE-2021-29491 via mixme (>=0.0.1, <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: CVE-2021-29491 Source advisory: OSV:GHSA-79JW-6WG7-R9G4...

atomic-server (>=0.10.0, <=0.22.3), basic-http-server (>=0.6.0, <=0.8.1) +44 more potentially affected by CVE-2021-38186 via comrak (>=0.1.9, <=0.9.1)

comrak CARGO version =0.1.9, =0.10.0, =0.6.0, =0.1.0, =0.1.5, =0.1.0, =0.0.1, =0.15.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.6 and more Source cves: CVE-2021-38186 Source advisory: OSV:RUSTSEC-2021-0063...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +51 more potentially affected by unknown CVE via aes-ctr (>=0.6.0, <=0.99.99)

aes-ctr CARGO version =0.6.0, =0.4.3-updated, =0.5.0, =0.1.0, =0.2.0, =0.1.0, =0.40.0, =0.40.0, =0.40.0, =0.40.0, =0.1.0, =0.1.0, =0.6.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0061...

@dfeidao/server (>=5.0.0, <=5.0.1), @mm-works/p000005 (>=1.0.202004231823, <=1.0.202004272011) +6 more potentially affected by CVE-2020-7762 via jsreport-chrome-pdf (>=1.0.0, <=1.9.0)

jsreport-chrome-pdf NPM version =1.0.0, =5.0.0, =1.0.202004231823, =1.0.202003051337, =1.6.2-patch.1, =2.0.0, =0.0.1, =0.0.2 - jsreport-worker 0.3.1 Source cves: CVE-2020-7762 Source advisory: OSV:GHSA-934W-HVJ4-7FR6...

@joshmccall/atomic-stories (>=0.0.0-semantically-released, <=1.9.5), abmcontent (0.1.0) +3 more potentially affected by CVE-2020-7787 via react-adal (>=0.3.15, <=0.4.24)

react-adal NPM version =0.3.15, =0.0.0-semantically-released, =0.1.0, =0.1.3 - widgettestcomponent 0.1.0 Source cves: CVE-2020-7787 Source advisory: OSV:GHSA-7MPX-VG3C-CMR4...

chhyun-utils (>=1.0.12, <=1.0.39), s3-uploader (>=2.0.0-rc.1, <=2.0.3) +3 more potentially affected by CVE-2019-10788 via im-metadata (3.0.1)

im-metadata NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on im-metadata and may be impacted: - chhyun-utils =1.0.12, =2.0.0-rc.1, =0.0.1, =2.0.2, =2.0.3 - wn-s3-uploader 1.0.0 Source cves: CVE-2019-10788 Source advisory:...

applets-helper (>=1.0.1, <=1.0.5), git-metric (0.1.7) +1 more potentially affected by CVE-2021-26541 via gitlog (4.0.3)

gitlog NPM version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitlog and may be impacted: - applets-helper =1.0.1, =1.0.2, =1.0.5 Source cves: CVE-2021-26541 Source advisory: OSV:GHSA-67MM-M3WX-J7FR...

@servable/server (>=1.0.0, <=1.11.2), dockertools (1.8.2) +5 more potentially affected by CVE-2020-7785 via node-ps (0.0.2)

node-ps NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-ps and may be impacted: - @servable/server =1.0.0, =1.0.0, =1.5.1, =0.2.1, =0.0.3, =0.0.4 - servable-publishable 1.1.0 Source cves: CVE-2020-7785 Source advisory:...

diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)

diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:RUSTSEC-2021-0037...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2021-28037 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2021-28037 Source advisory: OSV:RUSTSEC-2021-0036...

vostok (>=1.4.0, <=1.5.5) potentially affected by CVE-2021-21322 via fastify-http-proxy (>=4.0.4, <=4.1.0)

fastify-http-proxy NPM version =4.0.4, =1.4.0, =1.5.5 Source cves: CVE-2021-21322 Source advisory: OSV:GHSA-C4QR-GMR9-V23W...

easy-http-request (>=0.0.5, <=0.1.0), epic-wallet-rust-python (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-21299 via hyper (>=0.12.12, <=0.12.19)

hyper CARGO version =0.12.12, =0.0.5, =0.1.0, =0.1.0, =3.3.2, =3.3.2, =3.3.2, =3.0.0, =3.0.0, =3.0.0, =3.0.5 Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...

opendocx-node (>=0.2.2-alpha, <=2.0.3), yatte (>=1.4.0-beta.12, <=3.0.0-alpha.1) potentially affected by CVE-2021-21277 via angular-expressions (1.0.0)

angular-expressions NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on angular-expressions and may be impacted: - opendocx-node =0.2.2-alpha, =1.4.0-beta.12, =3.0.0-alpha.1 Source cves: CVE-2021-21277 Source advisory:...

amethyst_nphysics (>=0.0.1, <=0.2.0), arci-urdf-viz (>=0.0.1, <=0.1.0) +52 more potentially affected by unknown CVE via ncollide3d (>=0.15.4, <=0.33.0)

ncollide3d CARGO version =0.15.4, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =0.3.0, =0.12.0, =0.2.0, =0.2.0, =0.3.0, =0.2.0, =0.2.2 - f3lsurface 0.2.0 - fere 0.0.0 - fere-common 0.0.0 - fere-resources 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0150...

console-blame (>=1.0.0, <=1.1.1), grunt-lintblame (>=0.1.0, <=0.3.5) +2 more potentially affected by CVE-2020-28434 via gitblame (>=0.1.0, <=0.1.1)

gitblame NPM version =0.1.0, =1.0.0, =0.1.0, =0.2.5, =0.9.5 - tch-lint-jshint 0.0.1 Source cves: CVE-2020-28434 Source advisory: SNYK:JS-GITBLAME-1050430...

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +280 more potentially affected by CVE-2021-45688 via ash (>=0.24.4, <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.2.0, =0.1.0, =0.1.3, =0.1.4 - aravis-utils 0.7.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:RUSTSEC-2021-0090...

financ (>=0.1.0, <=0.3.0), fitparser (>=0.1.0, <=0.5.1) +16 more potentially affected by CVE-2021-26951 via calamine (>=0.11.8, <=0.16.2)

calamine CARGO version =0.11.8, =0.1.0, =0.1.0, =1.0.0, =0.2.0, =0.15.0, =0.11.0, =0.21.0, =0.16.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-26951 Source advisory: OSV:RUSTSEC-2021-0015...

ifinfo (0.1.0), prosafe_exporter (>=0.1.1, <=0.2.7) potentially affected by unknown CVE via interfaces2 (0.0.5)

interfaces2 CARGO version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on interfaces2 and may be impacted: - ifinfo 0.1.0 - prosafeexporter =0.1.1, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0002...

@csnext/cs-timeline (>=0.0.101-beta.22, <=0.0.132-beta.446), @net7/components (>=3.0.2-rc.2, <=4.3.2) +4 more potentially affected by CVE-2020-28487 via vis-timeline (>=7.1.3, <=7.4.2)

vis-timeline NPM version =7.1.3, =0.0.101-beta.22, =3.0.2-rc.2, =2.0.0-alpha2, =1.3.0, =3.1.1-build1667201258, =3.1.2 Source cves: CVE-2020-28487 Source advisory: SNYK:JS-VISTIMELINE-1063500...

@concord-consortium/cloud-file-manager (>=2.0.0-pre.1, <=2.3.1), @hat-core/juggler (>=0.4.0-dev20200410, <=0.4.1-dev20210707) +45 more potentially affected by unknown CVE via jiff (>=0.6.0, <=0.7.3)

jiff NPM version =0.6.0, =2.0.0-pre.1, =0.4.0-dev20200410, =0.5.1-dev20210809, =0.1.0, =1.0.0, =1.0.1, =0.0.3, =2.0.0, =1.0.0, =0.0.1, =0.5.5, =1.0.0-3, =1.0.0-0, =1.0.0, =1.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-JIFF-1017118...

cv-letter (1.0.0), docogen (>=0.0.3, <=0.1.6) +4 more potentially affected by CVE-2020-28433 via node-latex-pdf (0.0.2)

node-latex-pdf NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-latex-pdf and may be impacted: - cv-letter 1.0.0 - docogen =0.0.3, =0.0.1, =0.0.7 - resume-builder-iitrpr 1.0.0 Source cves: CVE-2020-28433 Source advisory:...

20mk-utils (>=1.0.0, <=1.0.3), 2o3t-icon-font (0.0.11) +8831 more potentially affected by unknown CVE via highlight.js (>=9.0.0, <=10.4.0)

highlight.js NPM version =9.0.0, =1.0.0, =0.0.1, =0.1.3, =1.0.0, =0.0.2, =0.3.0-alpha.22-10p, =0.1.56, =1.0.0, =1.3.0, =0.1.4, =11.0.1, =11.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7WWV-VH3V-89CQ...

canonical (>=0.4.1, <=0.5.3), canonical_collections (0.4.0) +11 more potentially affected by CVE-2020-36469 via appendix (0.2.2)

appendix CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on appendix and may be impacted: - canonical =0.4.1, =0.4.0, =0.4.3, =0.4.0, =0.6.0, =0.1.0, =0.18.0, =0.11.0, =0.4.0, =0.6.0, =0.7.0 - rusk-abi 0.7.0 - rusk-vm 0.12.0-rc.0 Sourc...

scratch-paint (>=0.2.0-prerelease.20180531225024, <=0.2.0-prerelease.20180607153112), scratch-render (>=0.1.0-prerelease.20180531210700, <=0.1.0-prerelease.20180605145739) potentially affected by CVE-2020-7750 via scratch-svg-renderer (>=0.1.0-prerelease.20180524210316, <=0.1.0-prerelease.20180605140533)

scratch-svg-renderer NPM version =0.1.0-prerelease.20180524210316, =0.2.0-prerelease.20180531225024, =0.1.0-prerelease.20180531210700, =0.1.0-prerelease.20180605145739 Source cves: CVE-2020-7750 Source advisory: OSV:GHSA-J977-G5VJ-J27G...

maidsafe_client (>=0.1.0, <=0.1.2), maidsafe_types (>=0.0.9, <=0.2.3) +8 more potentially affected by unknown CVE via routing (>=0.0.9, <=0.4.1)

routing CARGO version =0.0.9, =0.1.0, =0.0.9, =0.0.3, =0.1.4, =0.1.0, =0.1.0, =0.1.5, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0076...

@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +396 more potentially affected by CVE-2020-7793 via ua-parser-js (>=0.6.2, <=0.7.22)

ua-parser-js NPM version =0.6.2, =1.4.0, =0.16.9, =2018.7.11-0, =2.0.1, =1.0.0-beta.11, =2.0.0-beta.1, =1.9.0, =1.9.0, =1.0.0, =5.0.0, =1.1.3, =2.6.6, =2.7.0 and more Source cves: CVE-2020-7793 Source advisory: SNYK:JS-UAPARSERJS-1023599...

@capacitor-community/electron-core (>=0.0.2, <=1.0.1), @felixrieseberg/electron-prebuilt-compile (>=9.0.0-beta.1, <=9.2.1) +16 more potentially affected by CVE-2020-15174 via electron (>=9.0.0, <=9.2.1)

electron NPM version =9.0.0, =0.0.2, =9.0.0-beta.1, =5.0.0-1, =0.8.2, =0.1.1, =0.3.218, =0.2.9, =3.0.7, =9.0.0, =1.1.52, =3.2.13, =3.1.0, =3.1.10 and more Source cves: CVE-2020-15174 Source advisory: OSV:GHSA-2Q4G-W47C-4674...

@demandcluster/api-plugin-files (>=1.0.0, <=1.0.4), @goodcastle/api-plugin-epayco-cash (>=0.0.3, <=0.2.5) +28 more potentially affected by CVE-2020-7742 via simpl-schema (>=1.4.1, <=1.8.1)

simpl-schema NPM version =1.4.1, =1.0.0, =0.0.3, =1.0.8, =0.0.9, =1.0.5, =1.2.3, =1.0.3, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.0.1, =0.0.1, =0.0.7 - @idigi/reaction-plugin-newsletters 0.0.2 and more Source cves: CVE-2020-7742 Source advisory: SNYK:JS-SIMPLSCHEMA-1016157...

@alib/build-scripts (>=0.1.0-0, <=1.0.0-0), @alicd/cone-build-scripts (>=0.1.0, <=0.1.2) +220 more potentially affected by CVE-2020-7608 via yargs-parser (>=14.0.0, <=15.0.0)

yargs-parser NPM version =14.0.0, =0.1.0-0, =0.1.0, =0.1.1-1, =0.1.1-1, =0.1.1-1, =0.1.0, =0.3.1, =1.0.22-alpha.2, =1.3.0-alpha.1, =0.1.0-alpha.3, =0.1.7-alpha.1, =0.2.4-alpha.1, =0.3.4 and more Source cves: CVE-2020-7608 Source advisory: OSV:GHSA-P9PC-299P-VXGP...

@makeomatic/confidence (5.0.0), @makeomatic/deploy (>=10.0.1, <=10.2.1) +6 more potentially affected by unknown CVE via @hapi/hoek (9.0.2)

@hapi/hoek NPM version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/hoek and may be impacted: - @makeomatic/confidence 5.0.0 - @makeomatic/deploy =10.0.1, =6.0.0, =15.0.0, =10.0.0, =8.0.0, =14.0.0, =6.1.2, =6.8.3 Source cves: unknown CVE...

arupex (>=0.4.0, <=0.4.4), captain-ahab (1.0.0) +11 more potentially affected by unknown CVE via deep-setter (1.0.2)

deep-setter NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on deep-setter and may be impacted: - arupex =0.4.0, =2.3.4, =3.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.18, =0.0.7, =0.0.1, =0.0.6 Source cves: unknown CVE Source advisory:...

mirtx (0.1.0), mithril-slider (1.1.2) potentially affected by unknown CVE via mithril (2.0.0-rc.4)

mithril NPM version 2.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on mithril and may be impacted: - mirtx 0.1.0 - mithril-slider 1.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-C3PX-V9C7-M734...

norska (>=0.7.0, <=0.8.4), norska-frontend (>=0.7.4, <=0.9.11) +5 more potentially affected by unknown CVE via lazysizes (>=5.1.1, <=5.2.0)

lazysizes NPM version =5.1.1, =0.7.0, =0.7.4, =0.7.4, =2.1.4, =0.5.2, =0.5.2, =0.7.2 - sov 0.2.4 Source cves: unknown CVE Source advisory: OSV:GHSA-W4VP-3MQ7-7V82...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +1618 more potentially affected by unknown CVE via hapi (>=0.14.2, <=18.1.0)

hapi NPM version =0.14.2, =0.0.2, =0.3.0, =1.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.0.1, =0.1.0, =0.9.0, =1.0.7, =0.0.1, =1.0.8-rc.1, =11.1.27-alpha.4606607431 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7HX8-2RXV-66XV...

@aviationpast/niotest (>=1.0.1, <=1.0.17) potentially affected by unknown CVE via 4equest (0.0.1-security)

4equest NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on 4equest and may be impacted: - @aviationpast/niotest =1.0.1, =1.0.17 Source cves: unknown CVE Source advisory: OSV:GHSA-P33Q-W45H-2HCJ...

@colmena/api (0.1.0), @sp-temp/composer-rest-server (>=0.20.8, <=0.20.14) +9 more potentially affected by unknown CVE via loopback (>=3.0.0-alpha.2, <=3.18.2)

loopback NPM version =3.0.0-alpha.2, =0.20.8, =0.20.8, =0.13.0-beta.1, =0.13.2-20171004211143, =0.13.2-20171004211143, =0.0.1, =0.13.2-20171004211143, =1.0.0, =0.0.5, =0.0.39 Source cves: unknown CVE Source advisory: OSV:GHSA-8WGC-JJVV-CV6V...

1405-authtokens (>=1.0.1, <=1.0.5), 2048.io (0.0.1) +1308 more potentially affected by CVE-2015-1164 via serve-static (>=1.0.1, <=1.7.1)

serve-static NPM version =1.0.1, =1.0.1, =0.2.0, =1.0.37, =7.0.0, =0.0.2, =1.0.0, =0.0.1, =0.13.7, =0.0.5-SNAPSHOT.11, =3.14.2 and more Source cves: CVE-2015-1164 Source advisory: OSV:GHSA-C3X7-GJMX-R2FF...

@blueprintjs/docs (>=1.0.0, <=1.3.1), @frctl/twig (>=1.0.0-alpha.0, <=1.0.0-beta.2) +101 more potentially affected by CVE-2020-7700 via phpjs (>=0.0.1, <=1.3.2)

phpjs NPM version =0.0.1, =1.0.0, =1.0.0-alpha.0, =0.3.16, =1.2.7, =0.1.3, =1.0.1, =1.0.0, =0.7.0, =0.0.1, =0.0.9, =0.0.1-alpha.1, =0.0.1, =0.0.7 and more Source cves: CVE-2020-7700 Source advisory: SNYK:JS-PHPJS-598681...

@random-guys/coralpay-pgp (>=0.0.1, <=0.1.0), @woocommerce/components (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2020-7719 via locutus (>=2.0.10, <=2.0.11)

locutus NPM version =2.0.10, =0.0.1, =1.0.0, =1.1.0, =1.0.2, =1.0.52, =0.1.0, =0.2.1 Source cves: CVE-2020-7719 Source advisory: SNYK:JS-LOCUTUS-598675...

@brunnerlivio/terminus (>=6.3.1, <=6.5.2), @eik/core (>=1.0.0-alpha.9, <=1.0.0-alpha.14) +54 more potentially affected by CVE-2020-8192 via fastify (>=2.0.0, <=2.15.0)

fastify NPM version =2.0.0, =6.3.1, =1.0.0-alpha.9, =1.0.0-alpha.1, =0.0.1, =2.0.0-alpha.1, =0.0.1, =0.0.1, =0.1.12, =0.0.10, =0.2.0, =1.7.0, =2.1.0, =6.0.1, =6.2.0-rc.0, =6.5.6 and more Source cves: CVE-2020-8192 Source advisory: OSV:GHSA-XW5P-HW6R-2J98...

@amitport/koangular-users (0.0.0), @antimatter-studios/dredd (>=14.1.0, <=15.0.11) +201 more potentially affected by CVE-2020-7709 via json-pointer (>=0.0.4, <=0.6.0)

json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =0.1.0, =1.0.1 - ajv-moment 1.0.0 and more Source cves: CVE-2020-7709 Source advisory: SNYK:JS-JSONPOINTER-596925...

@badgeup/badgeup-ionic-client (>=1.0.1, <=1.0.3), @codedungeon/code-assistant (>=0.0.1, <=0.0.4-dev.53) +42 more potentially affected by CVE-2020-8116 via dot-prop (>=4.0.0, <=4.2.0)

dot-prop NPM version =4.0.0, =1.0.1, =0.0.1, =0.0.1-dev.9, =0.0.3, =0.0.4, =1.1.0, =1.0.0-alpha.5, =0.10.1, =3.0.0, =1.0.0-beta.1, =0.1.12, =1.0.0, =1.0.2 - falcor-array 0.0.1 - flipcache 0.0.1 and more Source cves: CVE-2020-8116 Source advisory: OSV:GHSA-FF7X-QRG7-QGGM...

webfm (>=0.9.0, <=0.9.37) potentially affected by CVE-2018-21036 via sails-hook-sockets (1.4.3)

sails-hook-sockets NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on sails-hook-sockets and may be impacted: - webfm =0.9.0, =0.9.37 Source cves: CVE-2018-21036 Source advisory: OSV:GHSA-F7F4-HQP2-7PRC...

0-logger (>=1.1.0, <=1.1.1), 0xsodium (>=0.2.0, <=0.14.0) +9375 more potentially affected by CVE-2020-8203 via lodash.set (>=3.7.4, <=4.3.2)

lodash.set NPM version =3.7.4, =1.1.0, =0.2.0, =2.0.0, =1.1.0, =1.0.0, =4.11.0, =0.1.0, =1.0.19, =2.0.0-alpha and more Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2020-35874 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2020-35874 Source advisory: OSV:RUSTSEC-2020-0017...

alchemymvc (0.0.1), alinkage (0.1.2) +216 more potentially affected by CVE-2020-7656 via jquery (>=1.5.1, <=1.8.3)

jquery NPM version =1.5.1, =0.1.0, =0.3.3, =0.0.2, =2.0.0, =2.0.1 - arale-tip 2.0.0 - artusi-auth 0.1.0-1 - artusi-drawer 0.1.0-1 - artusi-elevator 0.1.0-1 - artusi-filesystem-drawer 0.1.0-1 - artusi-hob 0.1.0-1 - artusi-kitchen 0.1.0-1 - artusi-kitchen-assistant 0.1.0-1 and more Source cves:...

norska (>=0.7.0, <=0.8.4), norska-frontend (>=0.7.4, <=0.9.11) +5 more potentially affected by CVE-2020-7642 via lazysizes (>=5.1.1, <=5.2.0)

lazysizes NPM version =5.1.1, =0.7.0, =0.7.4, =0.7.4, =2.1.4, =0.5.2, =0.5.2, =0.7.2 - sov 0.2.4 Source cves: CVE-2020-7642 Source advisory: SNYK:JS-LAZYSIZES-567144...

atqueillo (1.0.0), consequaturlaudantium (1.0.0) +11 more potentially affected by unknown CVE via ecstatic (>=2.0.0, <=2.1.0)

ecstatic NPM version =2.0.0, =1.8.4, =1.0.15, =1.0.0, =1.0.0, =1.2.0, =1.4.0 - react-currency-conversion 1.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-9Q64-MPXX-87FG...