hwatch (0.1.5) potentially affected by CVE-2019-15547 +1 more via ncurses (5.94.0)

ncurses CARGO version 5.94.0 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - hwatch 0.1.5 Source cves: CVE-2019-15547, CVE-2019-15548 Source advisory: OSV:GHSA-G7R5-X7CR-VM3V...

async_docker (>=0.1.0, <=0.1.1), cargo (>=0.4.0, <=0.8.0) +11 more potentially affected by CVE-2021-38511 via tar (>=0.2.14, <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole 0.1.0 Source cves: CVE-2021-38511 Source advisory: OSV:GHSA-62JX-8VMH-4MCW...

abbegm (>=0.1.0, <=0.2.1), abci-rs (>=0.10.0, <=0.11.1) +594 more potentially affected by CVE-2021-38192 via prost-types (>=0.2.3, <=0.7.0)

prost-types CARGO version =0.2.3, =0.1.0, =0.10.0, =0.0.2, =0.0.0, =0.1.3, =0.1.0, =0.17.0, =0.16.0, =0.1.2-alpha.3, =0.8.0, =0.8.0, =0.8.0, =0.11.0 and more Source cves: CVE-2021-38192 Source advisory: OSV:GHSA-X4QM-MCJQ-V2GF...

booklibrs (>=0.1.0, <=1.0.4), fl2rust (0.3.1) +5 more potentially affected by CVE-2021-28306 +2 more via fltk (>=0.9.7, <=0.14.13)

fltk CARGO version =0.9.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.15 Source cves: CVE-2021-28306, CVE-2021-28307, CVE-2021-28308 Source advisory: OSV:GHSA-VJMG-PC8H-P6P8...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (4.4.3)

bigint CARGO version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on bigint and may be impacted: - anchor-token =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and...

async_docker (>=0.1.0, <=0.1.1), cargo (>=0.4.0, <=0.8.0) +11 more potentially affected by CVE-2018-20990 via tar (>=0.2.14, <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole 0.1.0 Source cves: CVE-2018-20990 Source advisory: OSV:GHSA-2367-C296-3MP2...

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3199 more potentially affected by CVE-2021-32013 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32013 Source advisory: OSV:GHSA-8VCR-VXM8-293M...

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3199 more potentially affected by CVE-2021-32014 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32014 Source advisory: SNYK:JS-XLSX-1311139...

@graphql-mesh/container (>=0.0.4-alpha-4e6432fb.0, <=0.0.62), @graphql-mesh/openapi (>=0.10.2, <=0.16.9) +13 more potentially affected by unknown CVE via json-ptr (2.0.0)

json-ptr NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-ptr and may be impacted: - @graphql-mesh/container =0.0.4-alpha-4e6432fb.0, =0.10.2, =0.5.2, =0.0.2, =0.6.0, =0.0.1, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =0.0.2, =1.0.264,...

gulp-controlled-merge-json (0.2.1) potentially affected by CVE-2020-28268 via controlled-merge (1.1.0)

controlled-merge NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on controlled-merge and may be impacted: - gulp-controlled-merge-json 0.2.1 Source cves: CVE-2020-28268 Source advisory: OSV:GHSA-5PG7-V24C-9RP9...

@amitport/koangular-users (0.0.0), @antimatter-studios/dredd (>=14.1.0, <=16.1.0) +201 more potentially affected by CVE-2020-7709 via json-pointer (>=0.0.4, <=0.6.0)

json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =0.1.0, =1.0.1 - ajv-moment 1.0.0 and more Source cves: CVE-2020-7709 Source advisory: OSV:GHSA-7MG4-W3W5-X5PC...

09-nodejs (1.0.0), 11.17r (1.0.0) +337 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.4.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.1.0, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.0.0, =1.0.0-alpha.0, =1.1.0, =0.0.79, =0.0.120-2 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

atomic-server (>=0.10.0, <=0.22.3), basic-http-server (>=0.6.0, <=0.8.1) +44 more potentially affected by CVE-2021-38186 via comrak (>=0.1.9, <=0.9.1)

comrak CARGO version =0.1.9, =0.10.0, =0.6.0, =0.1.0, =0.1.5, =0.1.0, =0.0.1, =0.15.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.6 and more Source cves: CVE-2021-38186 Source advisory: OSV:RUSTSEC-2021-0063...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9374 more potentially affected by CVE-2021-23382 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23382 Source advisory: SNYK:JS-POSTCSS-1255640...

@ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=2.8.0), @apolitical/apis-client (>=1.0.0, <=1.1.5) +13 more potentially affected by CVE-2021-30246 via jsrsasign (>=10.0.0, <=10.1.13)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.2.0, =0.0.11, =9.21.5, =20.12.0, =1.0.11, =0.1.1, =0.1.10, =0.2.0, =0.3.0 Source cves: CVE-2021-30246 Source advisory: OSV:GHSA-27FJ-MC8W-J9WG...

@100mslive/hms-video-react (>=0.3.27, <=0.3.59), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +527 more potentially affected by CVE-2021-23368 via postcss (>=8.0.0, <=8.2.9)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =0.1200.0-next.8 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 -...

@servable/server (>=1.0.0, <=3.0.1), dockertools (1.8.2) +5 more potentially affected by CVE-2020-7785 via node-ps (0.0.2)

node-ps NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-ps and may be impacted: - @servable/server =1.0.0, =1.0.0, =1.5.1, =0.2.1, =0.0.3, =0.0.4 - servable-publishable 1.1.0 Source cves: CVE-2020-7785 Source advisory:...

diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)

diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:RUSTSEC-2021-0037...

vostok (>=1.4.0, <=1.5.5) potentially affected by CVE-2021-21322 via fastify-http-proxy (>=4.0.4, <=4.1.0)

fastify-http-proxy NPM version =4.0.4, =1.4.0, =1.5.5 Source cves: CVE-2021-21322 Source advisory: OSV:GHSA-C4QR-GMR9-V23W...

@arbetsmyra/semantic-release-config (>=1.0.2, <=1.1.4), @crystal-ball/semantic-release-base (>=2.13.0, <=2.22.0) +17 more potentially affected by CVE-2020-26226 via semantic-release (>=17.0.1, <=17.2.2)

semantic-release NPM version =17.0.1, =1.0.2, =2.13.0, =1.63.0, =2.0.0, =10.1.2, =1.2.0, =1.0.0, =1.4.0, =4.0.19, =8.0.0, =2.4.9, =10.0.0, =11.0.0 and more Source cves: CVE-2020-26226 Source advisory: OSV:GHSA-R2J6-P67H-Q639...

a2 (>=0.2.0, <=0.5.3), a3mo_lib (>=0.1.0, <=0.1.1) +7023 more potentially affected by CVE-2020-26235 via time (>=0.1.25, <=0.1.45)

time CARGO version =0.1.25, =0.2.0, =0.1.0, =0.1.7, =0.2.0-beta.4, =0.5.0, =0.1.1, =0.0.3, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.2.0 and more Source cves: CVE-2020-26235 Source advisory: OSV:RUSTSEC-2020-0071...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02-infrastructure (1.0.0) +54179 more potentially affected by CVE-2021-23337 via lodash.template (>=2.2.1, <=4.18.1)

lodash.template NPM version =2.2.1, =1.0.1, =0.0.2, =0.0.10 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

almond (0.2.0), ascesis (0.0.6) +86 more potentially affected by CVE-2020-36442 via beef (>=0.1.5, <=0.4.4)

beef CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.6, =0.1.0, =0.1.0, =0.5.4, =0.2.0, =0.2.0, =0.1.0, =0.1.2 and more Source cves: CVE-2020-36442 Source advisory: OSV:RUSTSEC-2020-0122...

api-browser (>=0.0.1, <=0.0.3), decoupled-swagger-editor (1.0.0) +3 more potentially affected by unknown CVE via swagger-ui (>=3.0.5, <=3.20.7)

swagger-ui NPM version =3.0.5, =0.0.1, =0.0.1, =3.0.12, =3.1.8 Source cves: unknown CVE Source advisory: OSV:GHSA-4F9M-PXWH-68HG...

20190403-utils (1.0.0), 3dio (>=1.0.0-beta.32, <=2.1.0) +4783 more potentially affected by CVE-2020-15168 via node-fetch (>=2.0.0, <=2.6.0)

node-fetch NPM version =2.0.0, =1.0.0-beta.32, =0.24.0, =0.0.0-alpha.1, =1.0.43, =0.0.80, =1.0.0-beta.1, =0.0.0-canary.0, =0.0.1, =2.0.0-alpha10, =1.0.0-beta, =0.1.0, =0.2.0 and more Source cves: CVE-2020-15168 Source advisory: OSV:GHSA-W7RC-RWVF-8Q5R...

00.demo (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +39527 more potentially affected by CVE-2020-7608 via yargs-parser (>=6.0.1, <=13.1.1)

yargs-parser NPM version =6.0.1, =1.0.0, =1.0.0, =8.3.5, =0.1.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2020-7608 Source advisory: OSV:GHSA-P9PC-299P-VXGP...

norska (>=0.7.0, <=0.8.4), norska-frontend (>=0.7.4, <=0.9.11) +5 more potentially affected by unknown CVE via lazysizes (>=5.1.1, <=5.2.0)

lazysizes NPM version =5.1.1, =0.7.0, =0.7.4, =0.7.4, =2.1.4, =0.5.2, =0.5.2, =0.7.2 - sov 0.2.4 Source cves: unknown CVE Source advisory: OSV:GHSA-W4VP-3MQ7-7V82...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +1591 more potentially affected by unknown CVE via pez (>=1.0.0, <=4.0.5)

pez NPM version =1.0.0, =0.0.2, =0.3.0, =1.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.0.1, =0.1.0, =0.9.0, =1.0.7, =0.0.1, =1.0.8-rc.1, =11.1.27-alpha.4606607431 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G64Q-3VG8-8F93...

@commercial/hapi (19.0.2), @hapi/hapi (>=19.0.0, <=19.0.4) +7 more potentially affected by unknown CVE via @hapi/accept (4.0.1)

@hapi/accept NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/accept and may be impacted: - @commercial/hapi 19.0.2 - @hapi/hapi =19.0.0, =0.0.3, =0.27.0, =0.27.0, =0.9.0, =2.0.4, =5.0.2 Source cves: unknown CVE Source advisory:...

@cc_server/api (>=1.4.0, <=1.7.0), @colmena/api (0.1.0) +16 more potentially affected by unknown CVE via loopback (>=3.0.0-alpha.2, <=3.23.0)

loopback NPM version =3.0.0-alpha.2, =1.4.0, =0.20.8, =0.20.8, =0.13.0-beta.1, =0.13.2-20171004211143, =0.13.2-20171004211143, =0.0.1, =0.13.2-20171004211143, =1.0.0, =1.0.3 - oe-batch-processing 2.0.0 - oe-cloud 2.0.0 - oe-data-acl 2.0.0 - oe-service-personalization 2.0.0 - oe-skeleton 2.0.0 and...

@planningcenter/icons (>=3.0.0-7, <=3.0.0-15), feathers-commands (>=0.0.1, <=0.1.4) +11 more potentially affected by unknown CVE via smart-extend (1.7.4)

smart-extend NPM version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on smart-extend and may be impacted: - @planningcenter/icons =3.0.0-7, =0.0.1, =1.0.4, =1.0.2, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =0.1.0, =1.0.1, =2.0.0, =3.0.5 Source cve...

favana-docx (>=1.0.28, <=1.0.47), web-commons-export (1.2.10) potentially affected by unknown CVE via office-converter (1.0.2)

office-converter NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on office-converter and may be impacted: - favana-docx =1.0.28, =1.0.47 - web-commons-export 1.2.10 Source cves: unknown CVE Source advisory: OSV:GHSA-9P64-H5Q4-PHPM...

@here/harp-leaflet (>=0.2.4, <=0.2.5) potentially affected by CVE-2020-8244 via bl (4.0.2)

bl NPM version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on bl and may be impacted: - @here/harp-leaflet =0.2.4, =0.2.5 Source cves: CVE-2020-8244 Source advisory: OSV:GHSA-PP7H-53GX-MX7R...

sysmonitor-client (>=0.0.1, <=1.0.0), sytemmonitor-client (0.0.1) potentially affected by CVE-2017-1000219 via windows-cpu (0.1.4)

windows-cpu NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on windows-cpu and may be impacted: - sysmonitor-client =0.0.1, =1.0.0 - sytemmonitor-client 0.0.1 Source cves: CVE-2017-1000219 Source advisory: OSV:GHSA-63M4-FHF2-CMF7...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G336-C7WV-8HP3...

be-more-hapi (1.0.0-rc.1.1), kazana-server (3.0.0) +2 more potentially affected by CVE-2015-9243 via hapi (>=11.0.1, <=11.1.2)

hapi NPM version =11.0.1, =0.1.94, =0.1.129 Source cves: CVE-2015-9243 Source advisory: OSV:GHSA-J3G2-M5JJ-6336...

@arakoodev/edgechains.js (>=0.25.0, <=0.30.1), @barnas2/polymer (1.0.0) +655 more potentially affected by CVE-2014-3743 via marked (>=0.0.1, <=0.3.0)

marked NPM version =0.0.1, =0.25.0, =0.0.1, =2.0.1, =26.0.1, =0.5.0, =1.0.8, =1.0.8, =1.0.10 and more Source cves: CVE-2014-3743 Source advisory: OSV:GHSA-9CW2-JQP5-7X39...

@hytong-yarn/cli (1.4.0), @yym-yarn/cli (1.0.0) +10 more potentially affected by CVE-2013-6393 via libyaml (>=0.0.2, <=0.2.2)

libyaml NPM version =0.0.2, =0.3.0, =1.0.24, =2.0.8, =0.0.1, =0.1.2, =0.0.10, =0.0.4, =0.0.5 Source cves: CVE-2013-6393 Source advisory: OSV:GHSA-M75H-CGHQ-C8H5...

3architecture (>=1.0.0, <=1.7.0), @1amageek/tradable (0.9.0) +1596 more potentially affected by CVE-2020-7768 via grpc (>=1.0.0, <=1.24.3)

grpc NPM version =1.0.0, =1.0.0, =1.0.24, =0.0.2, =1.1.6, =0.0.1, =0.1.0, =1.2.1, =0.0.0-7, =1.0.0, =1.1.0 - @ampretia/composer-opus 0.2.0 - @andregarvin/cuneiform 0.0.1 and more Source cves: CVE-2020-7768 Source advisory: SNYK:JS-GRPC-598671...

0-logger (>=1.1.0, <=1.1.1), 0xsodium (>=0.2.0, <=0.14.0) +9381 more potentially affected by CVE-2020-8203 via lodash.set (>=3.7.4, <=4.3.2)

lodash.set NPM version =3.7.4, =1.1.0, =0.2.0, =2.0.0, =1.1.0, =1.0.0, =4.11.0, =0.1.0, =1.0.19, =2.0.0-alpha and more Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

afterburn (4.1.0), aoaddons (>=0.1.1, <=0.1.6) +54 more potentially affected by unknown CVE via pnet_packet (>=0.20.0, <=0.26.0)

pnetpacket CARGO version =0.20.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0167...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5, <=4.4.3)

bigint CARGO version =1.0.5, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:RUSTSEC-2020-0025...

@absolunet/nwayo-workflow (>=3.2.0, <=3.3.6), @londondevstudio/gush (>=0.9.0, <=0.10.0) +53 more potentially affected by CVE-2020-7601 via gulp-scss-lint (>=0.1.12, <=1.0.0)

gulp-scss-lint NPM version =0.1.12, =3.2.0, =0.9.0, =1.0.0-alpha, =1.1.1, =0.0.27, =0.0.33, =1.0.34, =1.1.54 - fear-core-dev 1.3.2 and more Source cves: CVE-2020-7601 Source advisory: SNYK:JS-GULPSCSSLINT-560114...

actyxos_data_flow (0.1.0), bb8-tiberius (0.1.0) potentially affected by unknown CVE via tiberius (0.3.2)

tiberius CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tiberius and may be impacted: - actyxosdataflow 0.1.0 - bb8-tiberius 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0010...

@abtnode/mongoose-nedb (1.0.16), @andriyf/node-odata (>=0.7.15, <=0.7.1501) +515 more potentially affected by CVE-2019-17426 via mongoose (>=4.0.0, <=4.13.20)

mongoose NPM version =4.0.0, =0.7.15, =1.0.7, =0.0.0-alpha.1, =0.0.0, =0.0.1, =2.0.8, =1.2.17, =0.5.10, =0.2.0, =0.2.5-1, =0.1.2-beta.1, =0.4.0, =0.2.0, =0.3.1 and more Source cves: CVE-2019-17426 Source advisory: OSV:GHSA-8687-VV9J-HGPH...

api-browser (>=0.0.1, <=0.0.3), decoupled-swagger-editor (1.0.0) +3 more potentially affected by CVE-2019-17495 via swagger-ui (>=3.0.5, <=3.20.7)

swagger-ui NPM version =3.0.5, =0.0.1, =0.0.1, =3.0.12, =3.1.8 Source cves: CVE-2019-17495 Source advisory: OSV:GHSA-C427-HJC3-WRFW...

@doxteam/libs (>=1.0.0, <=1.0.3), @frenz/sql-repl (0.1.0) +111 more potentially affected by unknown CVE via sql (>=0.0.5, <=0.77.0)

sql NPM version =0.0.5, =1.0.0, =1.7.99, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =0.0.2, =0.0.31, =0.1.1, =1.0.1, =0.1.0, =0.1.0, =0.0.2, =0.1.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8F93-RV4P-X4JW...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +16188 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.13.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =2.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8J8C-7JFH-H6HX...

06-tekbooks (0.1.0), @1stg/rollup-config (>=0.11.6, <=0.11.7) +2379 more potentially affected by unknown CVE via bl (>=0.1.1, <=0.9.4)

bl NPM version =0.1.1, =0.11.6, =1.2.0, =0.1.3-v1, =0.0.1, =0.0.11, =0.0.1, =1.0.0, =0.0.1, =1.0.1, =1.4.0, =1.88.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WRW9-M778-G6MC...

@nodefony/sequelize-bundle (>=4.0.0-beta.2, <=4.2.0-beta.2), @sequelizejs/next (5.0.0-beta.16) +5 more potentially affected by CVE-2019-11069 via sequelize (>=5.0.0-beta.11, <=5.2.3)

sequelize NPM version =5.0.0-beta.11, =4.0.0-beta.2, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =1.0.0-beta1, =1.0.0-beta2.2 Source cves: CVE-2019-11069 Source advisory: OSV:GHSA-2777-2VQ8-C4V4...