@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2021-23597 via fastify-multipart (>=5.2.1, <=5.3.0)

fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2021-23597 Source advisory: OSV:GHSA-QH73-QC3P-RJV2...

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +2020 more potentially affected by CVE-2021-23383 via handlebars (>=4.0.0, <=4.7.6)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.2-alpha.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-23383 Source advisory: OSV:GHSA-765H-QJXV-5F44...

3d-crystal-model (0.1.0), 5ug-cli (>=1.0.23, <=1.0.70) +3150 more potentially affected by CVE-2020-15366 via ajv (>=6.0.0, <=6.12.2)

ajv NPM version =6.0.0, =1.0.23, =0.0.1, =1.0.0, =1.0.0, =6.0.0, =1.0.6, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.4, =3.0.0-beta.3, =0.0.1, =0.33.12 and more Source cves: CVE-2020-15366 Source advisory: OSV:GHSA-V88G-CGMW-V5XW...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42426 more potentially affected by CVE-2022-0536 via follow-redirects (>=1.0.0, <=1.14.7)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0536 Source advisory: OSV:GHSA-PW2R-VQ6V-HR8C...

@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +396 more potentially affected by CVE-2020-7793 via ua-parser-js (>=0.6.2, <=0.7.22)

ua-parser-js NPM version =0.6.2, =1.4.0, =0.16.9, =2018.7.11-0, =2.0.1, =1.0.0-beta.11, =2.0.0-beta.1, =1.9.0, =1.9.0, =1.0.0, =5.0.0, =1.1.3, =2.6.6, =2.7.0 and more Source cves: CVE-2020-7793 Source advisory: OSV:GHSA-394C-5J6W-4XMX...

create-frourio-app (>=0.15.0, <=0.29.0) potentially affected by CVE-2022-23623 via frourio (>=0.18.2, <=0.25.1)

frourio NPM version =0.18.2, =0.15.0, =0.29.0 Source cves: CVE-2022-23623 Source advisory: OSV:GHSA-8XXM-H73R-GHFJ...

@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2020-8136 +1 more via fastify-multipart (>=5.2.1, <=5.3.0)

fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2020-8136, CVE-2021-23597 Source advisory: SNYK:JS-FASTIFYMULTIPART-2395480...

4pm-cli (>=0.0.1, <=0.0.5), 7ghost (>=4.11.0, <=4.11.46) +2954 more potentially affected by CVE-2022-21803 via nconf (>=0.1.14, <=0.11.3)

nconf NPM version =0.1.14, =0.0.1, =4.11.0, =0.0.1, =0.8.7, =3.6.0-beta.3, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =3.0.0, =1.1.0, =2.0.4, =1.0.0, =1.2.10 - @algtools/leetcode-cli 1.0.0 and more Source cves: CVE-2022-21803 Source advisory: SNYK:JS-NCONF-2395478...

@mohamed.abdelall/omni-backend (>=1.0.0, <=1.1.53), generator-rest (0.2.0) +7 more potentially affected by CVE-2020-7600 +1 more via querymen (2.1.4)

querymen NPM version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on querymen and may be impacted: - @mohamed.abdelall/omni-backend =1.0.0, =0.0.1, =1.0.0, =1.0.0, =0.1.0, =1.0.14, =1.0.6, =1.4.10 - vulnogram 0.1.0-rc1 Source cves: CVE-2020-7600,...

bmoor-cache (>=0.3.0, <=0.6.0), bmoor-comm (>=0.0.1, <=0.6.0) +7 more potentially affected by CVE-2021-23558 via bmoor (>=0.0.5, <=0.9.8)

bmoor NPM version =0.0.5, =0.3.0, =0.0.1, =0.5.0, =0.2.0, =0.1.0, =0.0.4, =0.6.0, =0.6.43 Source cves: CVE-2021-23558 Source advisory: OSV:GHSA-4M8H-H59M-M34J...

@webiny/api-page-builder (>=0.0.0-mt-1, <=5.21.0), @webiny/api-page-builder-import-export (>=0.0.0-mt-1, <=5.21.0) +5 more potentially affected by CVE-2021-23484 via zip-local (0.3.4)

zip-local NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on zip-local and may be impacted: - @webiny/api-page-builder =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.0.0-mt-1, =0.1.0, =0.0.2, =0.0.7 Source cves: CVE-2021-23484...

gemachain-bpf-loader-program (1.8.0), solana-bpf-loader-program (1.8.7) +1 more potentially affected by CVE-2021-46102 via solana_rbpf (>=0.2.14, <=0.2.16)

solanarbpf CARGO version =0.2.14, =0.1.8, =0.1.9 Source cves: CVE-2021-46102 Source advisory: OSV:GHSA-XWQR-XMGG-J69Q...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +11 more potentially affected by CVE-2021-23631 via convert-svg-to-png (>=0.3.3, <=0.4.0)

convert-svg-to-png NPM version =0.3.3, =0.0.1, =0.0.18, =0.1.6, =0.0.1, =1.0.3, =0.0.1, =0.0.3, =1.0.0, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.2 - xd2svg 0.8.0 Source cves: CVE-2021-23631 Source advisory: OSV:GHSA-JV7G-9G6Q-CXVW...

unidb (>=0.2.1, <=0.3.5), unidb_odbc (>=0.1.0, <=0.1.1) +1 more potentially affected by unknown CVE via r2d2_odbc (0.5.0)

r2d2odbc CARGO version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on r2d2odbc and may be impacted: - unidb =0.2.1, =0.1.0, =0.1.1 - unidbpgsql 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0036...

0.edsql (>=1.0.49, <=1.0.50), @codious/core (>=1.2.15, <=1.2.18) +99 more potentially affected by CVE-2022-21676 via engine.io (>=5.0.0, <=5.1.1)

engine.io NPM version =5.0.0, =1.0.49, =1.2.15, =0.5.3, =0.6.3, =0.6.3, =0.6.3, =0.6.3, =0.6.5, =0.6.4, =0.6.3, =0.6.3, =8.0.0, =2.0.0, =0.5.1-feat-1122.01a4d64d.130, =0.5.1-feat-1122.01a4d64d.130, =1.0.0-rc.3 and more Source cves: CVE-2022-21676 Source advisory: OSV:GHSA-273R-MGR4-V34F...

@ahora/socket.io (3.0.3), @azteam/express (>=1.2.33, <=1.2.142) +22 more potentially affected by CVE-2022-21676 via engine.io (>=4.0.6, <=4.1.1)

engine.io NPM version =4.0.6, =1.2.33, =1.12.0, =3.0.0, =2.0.0-beta.6, =2.3.0-beta.20, =1.1.3, =2.2.26-3, =2.0.0, =0.9.301, =1.0.0, =0.4.0, =0.4.3 and more Source cves: CVE-2022-21676 Source advisory: OSV:GHSA-273R-MGR4-V34F...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42422 more potentially affected by CVE-2022-0155 via follow-redirects (>=1.0.0, <=1.14.6)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0155 Source advisory: OSV:GHSA-74FJ-2J2H-C42Q...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +2000 more potentially affected by CVE-2021-23566 via nanoid (>=3.0.0, <=3.1.30)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.3, =1.0.0, =0.1.1-alpha.51, =0.0.20, =1.0.1, =0.0.1, =0.4.2, =0.4.11 - @agrippa-io/node-connection-manager 1.0.0 and more Source cves: CVE-2021-23566 Source advisory: SNYK:JS-NANOID-2332193...

scratch-paint (>=0.2.0-prerelease.20180531225024, <=0.2.0-prerelease.20180607153112), scratch-render (>=0.1.0-prerelease.20180531210700, <=0.1.0-prerelease.20180605145739) potentially affected by CVE-2020-27428 via scratch-svg-renderer (>=0.1.0-prerelease.20180524210316, <=0.1.0-prerelease.20180605140533)

scratch-svg-renderer NPM version =0.1.0-prerelease.20180524210316, =0.2.0-prerelease.20180531225024, =0.1.0-prerelease.20180531210700, =0.1.0-prerelease.20180605145739 Source cves: CVE-2020-27428 Source advisory: OSV:GHSA-H3VQ-WV8J-36GW...

async-fetcher (>=0.1.1, <=0.1.2), exonum (0.9.7) +2 more potentially affected by CVE-2018-25024 +2 more via actix-web (>=0.2.1, <=0.7.3)

actix-web CARGO version =0.2.1, =0.1.1, =0.1.0, =0.1.3 - sockjs 0.1.0 Source cves: CVE-2018-25024, CVE-2018-25025, CVE-2018-25026 Source advisory: OSV:GHSA-7X36-H62W-VW65...

agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)

csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-9783-42PM-X5JQ...

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +280 more potentially affected by CVE-2021-45688 via ash (>=0.24.4, <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.2.0, =0.1.0, =0.1.3, =0.1.4 - aravis-utils 0.7.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:GHSA-64WV-8VWP-XGW2...

ckb-analyzer (0.39.2), ckb-app-config (>=0.37.0-pre, <=0.100.0-rc2) +57 more potentially affected by CVE-2021-45697 via molecule (>=0.2.5, <=0.7.1)

molecule CARGO version =0.2.5, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.40.0, =0.40.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.1.0, =0.37.0-pre, =0.39.1 and more Source cves: CVE-2021-45697 Source advisory: OSV:GHSA-6P3C-V8VC-C244...

boringdb (>=0.2.0, <=0.3.10), bp7 (>=0.7.0, <=0.8.1) +19 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)

nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - boringdb =0.2.0, =0.7.0, =0.13.0, =0.4.0, =0.10.0, =0.3.0, =0.3.14, =0.4.2, =0.4.1, =0.6.1, =0.1.0, =0.1.7, =0.2.1 and more Source cves:...

acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1247 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-76W9-P8MG-J927...

@hola.org/har-validator (2.0.6-hola.1), @hola.org/request (>=2.67.0-hola.5, <=2.67.0-hola.6) +46 more potentially affected by CVE-2018-1107 via is-my-json-valid (>=2.10.1, <=2.17.1)

is-my-json-valid NPM version =2.10.1, =2.67.0-hola.5, =2.67.0-lum.3, =1.0.1, =1.2.0, =1.0.0, =0.4.0, =1.0.0, =0.4.1, =0.0.1, =0.0.10 - fsa-creator 0.1.1 - geojsonvalidator 0.0.1 and more Source cves: CVE-2018-1107 Source advisory: OSV:GHSA-4HPF-3WQ7-5RPR...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +19164 more potentially affected by CVE-2020-28500 via lodash (>=4.0.0, <=4.17.20)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.0.2, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =4.11.20 and more Source cves: CVE-2020-28500 Source advisory: OSV:GHSA-29MW-WPGM-HMR9...

account-db (0.1.0), akita (>=0.1.0, <=0.4.3) +391 more potentially affected by CVE-2021-45720 via lru (>=0.1.17, <=0.6.6)

lru CARGO version =0.1.17, =0.1.0, =0.3.0, =0.1.0, =0.1.1, =0.1.1, =2.0.0-alpha.22, =2.0.3, =2.0.3, =2.0.3, =0.28.2, =0.7.2, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2021-45720 Source advisory: OSV:RUSTSEC-2021-0130...

roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:GHSA-MMJF-F5JW-W72Q...

@superdev-official/buffet-angular (1.0.11), apps-b-builder (>=0.1.0, <=0.4.3) +9 more potentially affected by CVE-2022-25760 via accesslog (0.0.2)

accesslog NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on accesslog and may be impacted: - @superdev-official/buffet-angular 1.0.11 - apps-b-builder =0.1.0, =0.6.0, =3.1.0, =0.1.0, =2.0.0, =0.4.0, =0.1.0, =0.4.1, =0.5.0 Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.23.0-alpha.1), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.0-alpha.1) +151 more potentially affected by CVE-2021-23555 via vm2 (>=3.0.0, <=3.9.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2018.7.11-0, =2018.8.5-0, =2018.8.14-0 - @appium/execute-driver-plugin...

@lukeed/bongo (>=0.0.1, <=0.0.12), @novivia/build-module (>=0.3.0, <=0.5.3) +3 more potentially affected by CVE-2021-23784 via tempura (>=0.0.8, <=0.3.2)

tempura NPM version =0.0.8, =0.0.1, =0.3.0, =0.6.0, =0.0.1, =3.4.0, =4.12.3 Source cves: CVE-2021-23784 Source advisory: OSV:GHSA-W4V7-HWX7-9929...

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.16), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.3.7) +110 more potentially affected by CVE-2024-21910 via tinymce (>=5.0.6, <=5.9.2)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =10.3.1-snapshot-1616513687673, =0.18.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-beta.1, =0.0.1-alpha.1, =0.0.17 and more Source cves: CVE-2024-21910 Source advisory: OSV:GHSA-R8HM-W5F7-WJ39...

@atlassian/aui (>=8.2.4, <=9.4.1), @chinchilla-software/ng-date-time-picker (>=1.0.0, <=1.0.1) +129 more potentially affected by CVE-2021-41184 via jquery-ui (>=1.10.4, <=1.12.1)

jquery-ui NPM version =1.10.4, =8.2.4, =1.0.0, =1.0.0, =0.1.0, =2.3.2, =6.4.0, =1.1.42, =5.0.0-110, =0.0.0, =2.1.1, =4.0.0, =1.0.0-alpha.0, =11.0.0, =17.0.0-dev.3 and more Source cves: CVE-2021-41184 Source advisory: OSV:GHSA-GPQQ-952Q-5327...

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.12), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.3.7) +109 more potentially affected by CVE-2024-21908 via tinymce (>=5.0.6, <=5.8.2)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =10.3.1-snapshot-1616513687673, =0.18.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-beta.1, =0.0.1-alpha.1, =0.0.17 and more Source cves: CVE-2024-21908 Source advisory: OSV:GHSA-5H9G-X5RV-25WG...

acid-store (>=0.1.0, <=0.14.2), actaeon (>=0.1.1, <=0.2.1) +207 more potentially affected by unknown CVE via sodiumoxide (>=0.0.4, <=0.2.7)

sodiumoxide CARGO version =0.0.4, =0.1.0, =0.1.1, =0.1.0, =0.6.2, =0.6.2, =0.6.1, =0.6.2, =0.15.2, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0137...

@accordproject/cicero-cli (>=0.3.4, <=0.23.0-alpha.1), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.0-alpha.1) +143 more potentially affected by CVE-2021-23449 via vm2 (>=3.0.0, <=3.9.3)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2018.7.11-0, =2018.8.5-0, =0.9.14, =2.0.14-alpha.1392172559 and more...

6ix (0.0.0-canary.0), 9ight (>=0.0.0-canary.0, <=0.0.0-canary.6) +3477 more potentially affected by CVE-2019-18413 via class-validator (>=0.3.2, <=0.13.2)

class-validator NPM version =0.3.2, =0.0.0-canary.0, =0.0.1, =1.0.4, =4.2.3, =2.7.0, =1.1.0, =1.1.0, =1.0.0, =0.0.1, =0.1.0, =0.0.2, =0.0.1, =0.0.13 and more Source cves: CVE-2019-18413 Source advisory: OSV:GHSA-FJ58-H2FR-3PP2...

gulp-teddy (>=0.0.1, <=1.6.1), roosevelt (>=0.4.9, <=0.4.33) potentially affected by CVE-2021-23447 via teddy (>=0.2.52, <=0.4.28)

teddy NPM version =0.2.52, =0.0.1, =0.4.9, =0.4.33 Source cves: CVE-2021-23447 Source advisory: OSV:GHSA-5F38-9JW2-6R6H...

7ghost (>=4.11.0, <=4.11.46), @heroku-cli/plugin-java (>=3.0.0, <=3.1.1) +49 more potentially affected by CVE-2021-41117 via keypair (>=1.0.0, <=1.0.3)

keypair NPM version =1.0.0, =4.11.0, =3.0.0, =2.3.1, =3.41.6, =1.0.1, =1.0.0, =0.1.2, =0.2.1, =0.4.0, =0.1.2, =0.1.2, =0.1.11 and more Source cves: CVE-2021-41117 Source advisory: OSV:GHSA-3F99-HVG4-QJWJ...

@cromwell/admin-panel (>=1.1.3, <=2.1.8), @cromwell/cms (>=1.1.7, <=2.1.12) +5 more potentially affected by CVE-2021-22963 via fastify-static (>=4.0.1, <=4.2.3)

fastify-static NPM version =4.0.1, =1.1.3, =1.1.7, =1.31.0, =1.39.28, =4.41.2-test.1, =3.4.0, =3.6.0-beta.3 Source cves: CVE-2021-22963 Source advisory: OSV:GHSA-P6VG-P826-QP3V...

@dhakshan82/react-webpack-builder (1.0.0), @getsensibill/web-sdk (0.1.0) +6 more potentially affected by CVE-2021-3822 via jsoneditor (>=9.0.5, <=9.5.5)

jsoneditor NPM version =9.0.5, =2.0.7, =0.0.1, =0.0.85, =0.0.1, =0.0.3 - vue-language-json-view 0.0.1 Source cves: CVE-2021-3822 Source advisory: OSV:GHSA-HHFG-6HFC-RVXM...

acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1247 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:RUSTSEC-2021-0119...

acid-store (>=0.8.0, <=0.11.2), alsa (0.5.1) +13 more potentially affected by CVE-2021-45707 via nix (0.21.0)

nix CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on nix and may be impacted: - acid-store =0.8.0, =0.1.4, =0.1.4, =0.1.4, =4.0.0, =0.1.0-alpha.1, =0.1.2, =0.10.0, =1.4.10, =0.13.0-alpha.1, =0.0.8, =0.0.13 Source cves: CVE-2021-4570...

@convergence/jointjs-utils (>=0.4.0, <=0.6.0), @cronapp/tools (>=1.0.0-SNAPSHOT.4, <=1.0.0-SNAPSHOT.12) +10 more potentially affected by CVE-2021-23444 via jointjs (>=3.1.0, <=3.4.1)

jointjs NPM version =3.1.0, =0.4.0, =1.0.0-SNAPSHOT.4, =1.5.2-3.1, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =1.2.0, =0.9.0, =0.12.0 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2021-23444 Source advisory: OSV:GHSA-F3PP-32QC-36W4...

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: SNYK:JS-BOOTSTRAPTABLE-1657597...

@codedungeon/gunner (>=0.38.0, <=0.80.1), @codedungeon/laravel-versions-cli (0.1.0) +22 more potentially affected by CVE-2021-3807 via ansi-regex (>=4.0.0, <=4.1.0)

ansi-regex NPM version =4.0.0, =0.38.0, =0.0.65, =0.0.0, =0.0.41, =0.0.12, =0.0.0, =0.2.0, =3.3.69, =0.0.3, =0.2.11, =5.1.0, =4.0.58, =3.0.58, =6.0.17, =6.1.110 and more Source cves: CVE-2021-3807 Source advisory: OSV:GHSA-93Q8-GQ69-WQMW...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +36 more potentially affected by CVE-2021-39216 +2 more via wasmtime (>=0.7.0, <=0.29.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.0, =0.8.0-alpha.2, =0.8.0-alpha.2, =0.1.1, =0.1.1, =0.1.2, =0.1.4 and more Source cves: CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 Source advisory: OSV:GHSA-Q879-9G95-56MX...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +36 more potentially affected by CVE-2021-39216 +2 more via wasmtime (>=0.7.0, <=0.29.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.0, =0.8.0-alpha.2, =0.8.0-alpha.2, =0.1.1, =0.1.1, =0.1.2, =0.1.4 and more Source cves: CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 Source advisory: OSV:GHSA-V4CP-H94R-M7XF...

@graphprotocol/payments (>=0.0.2-next.a995f4b.40, <=0.1.0), @graphprotocol/receipts (>=0.0.2-next.a995f4b.40, <=0.1.0) +2 more potentially affected by CVE-2021-3766 via objection (>=2.1.2, <=2.2.14)

objection NPM version =2.1.2, =0.0.2-next.a995f4b.40, =0.0.2-next.a995f4b.40, =0.0.2, =0.2.0, =1.25.2 Source cves: CVE-2021-3766 Source advisory: OSV:GHSA-R659-8XFP-J327...