@aicore/cocodb (>=1.0.1, <=1.0.6), @chainlink/external-adapter-framework (>=0.0.65, <=0.12.0) +77 more potentially affected by CVE-2022-39288 via fastify (>=4.0.2, <=4.7.0)

fastify NPM version =4.0.2, =1.0.1, =0.0.65, =1.1.1, =5.0.1, =1.0.0, =2.0.0, =9.0.0-next.2, =3.7.4, =2.2.1-canary.98, =3.0.0, =3.0.0, =0.0.1, =0.0.5, =6.0.0-6-next.35, =6.0.0-6-next.49 and more Source cves: CVE-2022-39288 Source advisory: OSV:GHSA-455W-C45V-86RG...

@adobe/git-server (>=1.0.3, <=1.0.5), @adobe/helix-cli (>=5.9.3, <=6.1.0) +29 more potentially affected by CVE-2022-22984 +1 more via @snyk/snyk-cocoapods-plugin (>=2.0.1, <=2.5.2)

@snyk/snyk-cocoapods-plugin NPM version =2.0.1, =1.0.3, =5.9.3, =2.17.2, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.5.8, =0.0.2, =0.0.8, =0.2.0-a1, =1.20.0-alpha.11736.3, =2.3.2, =2.6.4 and more Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory: SNYK:JS-SNYKSNYKCOCOAPODSPLUGIN-3038625...

@adobe/helix-deploy (>=7.0.0, <=7.0.8) potentially affected by CVE-2022-39218 via @fastly/js-compute (>=0.4.0, <=0.5.2)

@fastly/js-compute NPM version =0.4.0, =7.0.0, =7.0.8 Source cves: CVE-2022-39218 Source advisory: OSV:GHSA-CMR8-5W4C-44V8...

@adobe/helix-google-support (>=1.3.4, <=2.0.3), @adobe/helix-html-pipeline (>=3.0.0, <=3.1.8) +64 more potentially affected by CVE-2022-36083 via jose (>=4.0.3, <=4.9.1)

jose NPM version =4.0.3, =1.3.4, =3.0.0, =1.11.39, =8.0.0, =0.0.1, =0.0.2-alpha.15, =2.2.2, =2022.2.6, =1.0.1, =2.7.3, =1.0.4-alpha.0, =2.2.9, =1.1.5, =1.1.9 and more Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ9...

@beer-code-industry/common-frontend (>=0.5.0, <=0.7.6), @birthdayresearch/contented (1.0.1) +29 more potentially affected by CVE-2022-36046 via next (12.2.3-canary.2)

next NPM version 12.2.3-canary.2 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @beer-code-industry/common-frontend =0.5.0, =1.0.1, =1.0.0, =1.89.0-next.89, =0.0.19, =0.0.19, =0.0.20, =0.0.44, =0.0.15, =0.0.31 -...

@fb24m/etc (>=1.0.0, <=1.2.0), pdf-exports (1.0.0) +1 more potentially affected by CVE-2022-21165 via font-converter (1.1.1)

font-converter NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on font-converter and may be impacted: - @fb24m/etc =1.0.0, =1.2.0 - pdf-exports 1.0.0 - pdf-img-exports 1.0.0 Source cves: CVE-2022-21165 Source advisory:...

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (>=0.3.5, <=0.17.9) +737 more potentially affected by CVE-2022-2564 via mongoose (>=5.0.0, <=5.13.14)

mongoose NPM version =5.0.0, =0.24.0, =0.3.5, =0.2.0, =3.7.0, =0.1.17, =1.0.0, =2.8.0, =0.0.1, =0.0.2, =0.7.0, =1.0.33, =2.1.3 and more Source cves: CVE-2022-2564 Source advisory: OSV:GHSA-F825-F98C-GJ3G...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +137 more potentially affected by CVE-2022-2564 via mongoose (>=6.0.1, <=6.4.5)

mongoose NPM version =6.0.1, =1.2.3, =1.0.5, =1.0.9, =1.1.80, =0.0.1, =1.0.13, =1.0.0-rc.1.8.10, =1.0.2, =1.0.3, =0.4.3, =0.4.3, =0.4.3, =2.0.1, =2.0.2 and more Source cves: CVE-2022-2564 Source advisory: OSV:GHSA-F825-F98C-GJ3G...

@accordproject/cicero-cli (>=0.2.48, <=0.8.0), @accordproject/cicero-common (>=0.2.50, <=0.3.17) +102 more potentially affected by CVE-2020-7677 via thenify (>=3.0.0, <=3.3.0)

thenify NPM version =3.0.0, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.0.37, =0.0.36, =0.0.37, =0.1.0, =0.1.0, =2.1.1, =0.1.0, =0.2.2 and more Source cves: CVE-2020-7677 Source advisory: OSV:GHSA-29XR-V42J-R956...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 08cms (1.0.0) +17624 more potentially affected by CVE-2022-25758 via scss-tokenizer (>=0.1.2, <=0.4.2)

scss-tokenizer NPM version =0.1.2, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages 0.2.0 and more Source cves: CVE-2022-25758 Source advisory: OSV:GHSA-7MWH-4PQV-WMR8...

agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)

csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-R67P-M7G9-GXW6...

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-43306 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-43306 Source advisory: OSV:GHSA-J9M2-H2PV-WVPH...

@zambezi/ez-doc (1.0.0-prepare-for-open-source.1), apigeeks-devdocs (1.0.5) +4 more potentially affected by CVE-2019-19596 via gitbook (>=2.5.2, <=2.6.6)

gitbook NPM version =2.5.2, =1.0.3, =1.0.4 - gitbook-plugin-plasma 1.0.0 - lab-devdocs 0.0.1 Source cves: CVE-2019-19596 Source advisory: OSV:GHSA-HWGP-C653-6684...

hello_sf_pkg (1.0.0), sf-b9.2-test-npm (>=1.2.0, <=1.3.0) +3 more potentially affected by unknown CVE via jquerry (0.0.1-security)

jquerry NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jquerry and may be impacted: - hellosfpkg 1.0.0 - sf-b9.2-test-npm =1.2.0, =1.3.0 - sfgittestpackage 1.0.0 - sfgittestpackage2 1.0.0 - web3bruh 0.0.0 Source cves: unknow...

@chainsafe/lodestar (>=0.28.2-dev.9, <=0.29.3-dev.5), @chainsafe/lodestar-cli (>=0.28.2-dev.0, <=0.28.2-dev.18) potentially affected by CVE-2022-24759 via @chainsafe/libp2p-noise (4.1.0)

@chainsafe/libp2p-noise NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @chainsafe/libp2p-noise and may be impacted: - @chainsafe/lodestar =0.28.2-dev.9, =0.28.2-dev.0, =0.28.2-dev.18 Source cves: CVE-2022-24759 Source advisory:...

10-24-dars (1.0.0), @alephdata/react-ftm (>=1.9.1, <=2.4.0-alpha.2) +206 more potentially affected by CVE-2021-23632 via git (0.1.5)

git NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on git and may be impacted: - 10-24-dars 1.0.0 - @alephdata/react-ftm =1.9.1, =1.5.2, =0.4.120, =1.0.0-alpha.0, =7.7.1, =1.1.7, =1.0.1, =0.13.1, =1.12.2, =1.0.0, =2.1.1 and more Source...

abi_stable_derive (>=0.7.0, <=0.8.4), abnf (>=0.10.0, <=0.11.3) +346 more potentially affected by CVE-2022-24713 via regex (>=1.0.2, <=1.5.4)

regex CARGO version =1.0.2, =0.7.0, =0.10.0, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.1, =0.10.0, =0.10.0, =0.1.0, =1.1.0, =1.6.0 and more Source cves: CVE-2022-24713 Source advisory: OSV:RUSTSEC-2022-0013...

@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2021-23597 via fastify-multipart (>=5.2.1, <=5.3.0)

fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2021-23597 Source advisory: OSV:GHSA-QH73-QC3P-RJV2...

@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2020-8136 +1 more via fastify-multipart (>=5.2.1, <=5.3.0)

fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2020-8136, CVE-2021-23597 Source advisory: SNYK:JS-FASTIFYMULTIPART-2395480...

@3kles/3kles-socketio (>=1.0.0, <=1.0.5), @livejack/broker (1.3.4) +22 more potentially affected by CVE-2022-21676 via engine.io (6.0.1)

engine.io NPM version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on engine.io and may be impacted: - @3kles/3kles-socketio =1.0.0, =0.1.0, =8.1.2, =1.4.0, =0.4.11, =0.4.0, =0.4.0, =0.4.10, =0.4.11, =0.4.5-beta4, =5.0.0, =1.0.0-alpha.1,...

@sobotics/caching (1.1.1) potentially affected by CVE-2020-11611 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2020-11611 Source advisory: OSV:GHSA-C6C4-JMQX-3R33...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=1.0.2) +1329 more potentially affected by CVE-2021-43803 via next (>=1.2.3, <=11.1.2)

next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2021-43803 Source advisory: OSV:GHSA-25MP-G6FV-MQXX...

@agoric/cosmic-swingset (>=0.10.8-dev.0, <=0.18.0), @agoric/ertp (>=0.1.4, <=0.4.1) +18 more potentially affected by CVE-2021-23594 via realms-shim (1.2.2)

realms-shim NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on realms-shim and may be impacted: - @agoric/cosmic-swingset =0.10.8-dev.0, =0.1.4, =0.0.1, =0.1.1, =0.0.1, =0.0.20, =0.1.0, =2.0.1, =1.0.0, =0.0.1, =0.4.1, =0.0.6,...

7ghost (>=4.11.0, <=4.11.46), @heroku-cli/plugin-java (>=3.0.0, <=3.1.1) +49 more potentially affected by CVE-2021-41117 via keypair (>=1.0.0, <=1.0.3)

keypair NPM version =1.0.0, =4.11.0, =3.0.0, =2.3.1, =3.41.6, =1.0.1, =1.0.0, =0.1.2, =0.2.1, =0.4.0, =0.1.2, =0.1.2, =0.1.11 and more Source cves: CVE-2021-41117 Source advisory: OSV:GHSA-3F99-HVG4-QJWJ...

@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by unknown CVE via mixme (>=0.0.1, <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-84P7-FH9C-6G8H...

@adaptable/client (>=0.0.9, <=1.26.0), @adaptable/cloud (>=0.0.1, <=1.28.0) +407 more potentially affected by CVE-2021-37701 via tar (>=6.0.0, <=6.1.6)

tar NPM version =6.0.0, =0.0.9, =0.0.1, =1.6.0, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.1.0, =0.6.5, =1.1.0, =1.0.0, =0.0.2, =0.1.0, =0.1.8 and more Source cves: CVE-2021-37701 Source advisory: OSV:GHSA-9R2W-394V-53QC...

barberousse (>=0.1.0, <=0.1.6), borrowing_exerci (>=0.1.0, <=0.4.51) +19 more potentially affected by CVE-2021-36753 via bat (>=0.9.0, <=0.17.1)

bat CARGO version =0.9.0, =0.1.0, =0.1.0, =0.4.0, =0.6.0, =0.1.0, =0.2.0, =0.0.2-alpha.1, =0.16.0, =0.16.0, =0.1.0-rc1, =0.5.2, =0.12.0, =0.11.1, =0.12.0, =0.14.1 and more Source cves: CVE-2021-36753 Source advisory: OSV:GHSA-P24J-H477-76Q3...

afterburn (4.1.0), aoaddons (>=0.1.1, <=0.1.6) +49 more potentially affected by CVE-2019-25054 via pnet (>=0.12.0, <=0.26.0)

pnet CARGO version =0.12.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.1.0, =0.1.6 and more Source cves: CVE-2019-25054 Source advisory: OSV:GHSA-R6FF-2Q3C-V3PV...

hwatch (0.1.5) potentially affected by CVE-2019-15547 +1 more via ncurses (5.94.0)

ncurses CARGO version 5.94.0 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - hwatch 0.1.5 Source cves: CVE-2019-15547, CVE-2019-15548 Source advisory: OSV:GHSA-32V7-GHPR-C8HG...

airust (0.1.6), font (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2021-26953 via postscript (>=0.2.5, <=0.11.1)

postscript CARGO version =0.2.5, =0.0.2, =0.0.2, =0.1.0, =0.4.3, =0.1.0, =0.0.2, =0.0.4 Source cves: CVE-2021-26953 Source advisory: OSV:GHSA-FHVC-GP6C-H2WX...

epoll (>=0.4.0, <=0.6.0), hydrogen (>=0.1.0, <=0.1.5) potentially affected by CVE-2020-35892 +1 more via simple-slab (>=0.1.0, <=0.2.3)

simple-slab CARGO version =0.1.0, =0.4.0, =0.1.0, =0.1.5 Source cves: CVE-2020-35892, CVE-2020-35893 Source advisory: OSV:GHSA-HQC8-J86X-2764...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=1.0.2) +1234 more potentially affected by CVE-2021-37699 via next (>=1.2.3, <=11.0.1)

next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2021-37699 Source advisory: OSV:GHSA-VXF5-WXWP-M7G9...

@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +163 more potentially affected by CVE-2021-32640 via ws (>=5.0.0, <=5.2.2)

ws NPM version =5.0.0, =0.1.2, =0.3.7, =0.1.8, =1.0.0, =1.0.0, =1.0.17-beta, =1.3.6, =0.1.0, =3.0.0-alpha.1, =3.0.0-alpha.1, =1.0.21, =1.0.27 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...

10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +2758 more potentially affected by CVE-2021-32640 via ws (>=7.0.0, <=7.4.5)

ws NPM version =7.0.0, =1.0.0, =0.0.12, =0.0.12, =3.10.1, =5.0.0, =1.14.2, =1.0.1, =0.1.13, =0.0.4, =1.0.2, =0.1.0, =1.0.0, =1.0.4 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...

console-blame (>=1.0.0, <=1.1.1), grunt-lintblame (>=0.1.0, <=0.3.5) +2 more potentially affected by CVE-2020-28434 via gitblame (>=0.1.0, <=0.1.1)

gitblame NPM version =0.1.0, =1.0.0, =0.1.0, =0.2.5, =0.9.5 - tch-lint-jshint 0.0.1 Source cves: CVE-2020-28434 Source advisory: SNYK:JS-GITBLAME-1050430...

financ (>=0.1.0, <=0.3.0), fitparser (>=0.1.0, <=0.5.1) +16 more potentially affected by CVE-2021-26951 via calamine (>=0.11.8, <=0.16.2)

calamine CARGO version =0.11.8, =0.1.0, =0.1.0, =1.0.0, =0.2.0, =0.15.0, =0.11.0, =0.21.0, =0.16.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-26951 Source advisory: OSV:RUSTSEC-2021-0015...

@concord-consortium/cloud-file-manager (>=2.0.0-pre.1, <=2.3.1), @hat-core/juggler (>=0.4.0-dev20200410, <=0.4.1-dev20210707) +45 more potentially affected by unknown CVE via jiff (>=0.6.0, <=0.7.3)

jiff NPM version =0.6.0, =2.0.0-pre.1, =0.4.0-dev20200410, =0.5.1-dev20210809, =0.1.0, =1.0.0, =1.0.1, =0.0.3, =2.0.0, =1.0.0, =0.0.1, =0.5.5, =1.0.0-3, =1.0.0-0, =1.0.0, =1.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-JIFF-1017118...

@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +804 more potentially affected by CVE-2020-28500 via lodash-es (>=4.0.0, <=4.17.20)

lodash-es NPM version =4.0.0, =0.0.1-alpha.4, =0.1.10, =0.0.1, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =0.0.1, =3.2.1, =3.2.1, =0.1.0, =0.3.14, =0.4.42 and more Source cves: CVE-2020-28500 Source advisory: SNYK:JS-LODASHES-2434289...

app-state (>=0.3.0, <=2.0.1), grasshopper-framework (0.0.0-alpha.5) +3 more potentially affected by unknown CVE via get-setter (0.0.0)

get-setter NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on get-setter and may be impacted: - app-state =0.3.0, =0.0.0, =0.0.1 - immutable-model-object 0.0.0 - model-object 0.0.0 Source cves: unknown CVE Source advisory:...

hexo-wustxiao-blog (1.1.1) potentially affected by unknown CVE via hexo-admin (2.3.0)

hexo-admin NPM version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hexo-admin and may be impacted: - hexo-wustxiao-blog 1.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-PHPH-XPJ4-WVCV...

@27works/posto (2.0.2), @asephermann/capacitor-filechooser (0.0.1) +161 more potentially affected by unknown CVE via eco (>=1.0.3, <=1.1.0-rc-3)

eco NPM version =1.0.3, =0.0.9, =1.0.1, =0.0.1, =0.0.73, =0.0.1, =1.2.1, =0.0.1, =0.2.5, =1.0.0, =0.1.0, =0.2.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R32X-JHW5-G48P...

@xyo-network/bridge-ble (>=0.35.0, <=0.42.0), @xyo-network/bridge-server (>=0.35.0, <=0.42.0) +7 more potentially affected by unknown CVE via node-wifi (>=2.0.2, <=2.0.5)

node-wifi NPM version =2.0.2, =0.35.0, =0.35.0, =0.43.0, =0.43.0, =0.43.0, =0.43.0, =0.35.0, =1.0.0, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-4X6X-782Q-JFC4...

@colmena/api (0.1.0), @sp-temp/composer-rest-server (>=0.20.8, <=0.20.14) +9 more potentially affected by unknown CVE via loopback (>=3.0.0-alpha.2, <=3.18.2)

loopback NPM version =3.0.0-alpha.2, =0.20.8, =0.20.8, =0.13.0-beta.1, =0.13.2-20171004211143, =0.13.2-20171004211143, =0.0.1, =0.13.2-20171004211143, =1.0.0, =0.0.5, =0.0.39 Source cves: unknown CVE Source advisory: OSV:GHSA-8WGC-JJVV-CV6V...

@corex/argon-theme (>=1.1.1, <=1.1.33), @creative-tim-official/argon-dashboard-free (1.2.0) +14 more potentially affected by CVE-2016-1000227 via bootstrap-tagsinput (0.7.1)

bootstrap-tagsinput NPM version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-tagsinput and may be impacted: - @corex/argon-theme =1.1.1, =0.27.0-rc1, =0.0.1, =0.1.0, =3.0.0, =1.2.0, =0.1.0, =0.2.0, =0.1.1, =1.2.6, =1.4.0, =0.1.89,...

@0pecm/token-test (>=1.2.14, <=1.2.21), @actionpower/i18n-spreadsheet-to-json (>=0.0.29, <=0.0.35) +193 more potentially affected by CVE-2020-8203 via lodash.setwith (4.3.2)

lodash.setwith NPM version 4.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.setwith and may be impacted: - @0pecm/token-test =1.2.14, =0.0.29, =0.7.0, =0.8.8, =0.19.0, =1.0.0-canary-2040-1068.0.aa2e178, =1.0.0-canary-2040-1068.0.aa2e178,...

@blitzbank/dashboard (>=0.0.1, <=0.0.2), @bloombox/js-client (1.1.4) +22 more potentially affected by CVE-2020-11079 via dns-sync (0.1.3)

dns-sync NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on dns-sync and may be impacted: - @blitzbank/dashboard =0.0.1, =0.1.0, =1.0.2, =1.0.1, =1.0.1, =2.2.37, =0.0.1, =0.2.24, =0.0.1, =1.0.0, =2.0.3 and more Source cves: CVE-2020-1107...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5, <=4.4.3)

bigint CARGO version =1.0.5, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:RUSTSEC-2020-0025...

dijit (>=1.14.0, <=1.14.5), dojox (>=1.14.0, <=1.14.5) potentially affected by CVE-2020-5258 via dojo (>=1.14.0, <=1.14.5)

dojo NPM version =1.14.0, =1.14.0, =1.14.0, =1.14.5 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

@nitro/app (>=4.14.2, <=5.2.0), @omneedia/template (>=1.0.0, <=1.0.10) +3 more potentially affected by CVE-2019-10793 via dot-object (>=2.0.0, <=2.1.2)

dot-object NPM version =2.0.0, =4.14.2, =1.0.0, =1.0.0, =1.4.8, =1.5.11 Source cves: CVE-2019-10793 Source advisory: SNYK:JS-DOTOBJECT-548905...

@philipplgh/electron-app-manager (>=0.12.0, <=0.56.0), electron-app-manager (>=0.56.0, <=0.57.1) +4 more potentially affected by unknown CVE via electron-updater (>=4.0.0, <=4.1.2)

electron-updater NPM version =4.0.0, =0.12.0, =0.56.0, =0.0.2, =4.0.3, =1.0.0, =1.3.1 Source cves: unknown CVE Source advisory: SNYK:JS-ELECTRONUPDATER-561421...