react-endless (>=1.0.4, <=1.0.6), react-templet (>=1.0.0, <=1.0.3) potentially affected by unknown CVE via epress (0.0.1-security)

epress NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-VF8Q-PW7H-R2X2...

cassandra-query (>=1.0.1, <=1.0.3), toobatel-bot-lib-js (1.0.0) potentially affected by unknown CVE via blubird (0.0.1-security)

blubird NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on blubird and may be impacted: - cassandra-query =1.0.1, =1.0.3 - toobatel-bot-lib-js 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RVWW-X6M4-4VC2...

node-lemonldap-ng-handler (0.4.0) potentially affected by CVE-2020-24660 via lemonldap-ng-handler (0.4.0)

lemonldap-ng-handler NPM version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on lemonldap-ng-handler and may be impacted: - node-lemonldap-ng-handler 0.4.0 Source cves: CVE-2020-24660 Source advisory: OSV:GHSA-X44X-R84W-8V67...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +108 more potentially affected by unknown CVE via next (>=1.2.3, <=5.0.1-canary.14)

next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.1, =3.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =1.0.2, =0.0.1, =0.1.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5VJ8-3V2H-H38V...

@absolunet/ioc (2.0.0), @absolunet/nwayo-workflow (>=3.7.2, <=3.8.1) +885 more potentially affected by CVE-2020-7608 via yargs-parser (>=16.0.0, <=18.1.0)

yargs-parser NPM version =16.0.0, =3.7.2, =6.0.4, =1.0.0, =1.0.2, =1.0.6, =1.4.0-alpha.1, =1.19.6, =1.0.0, =5.0.0, =2.0.0-beta.2, =2.0.0-beta.2, =2.3.2 and more Source cves: CVE-2020-7608 Source advisory: OSV:GHSA-P9PC-299P-VXGP...

another-work-report-generator (>=3.4.1, <=3.4.5), largest-package (>=5.0.0, <=8.0.0) +5 more potentially affected by CVE-2020-7608 via yargs-parser (5.0.0-security.0)

yargs-parser NPM version 5.0.0-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on yargs-parser and may be impacted: - another-work-report-generator =3.4.1, =5.0.0, =1.1.0, =0.1.0, =4.13.5, =0.7.25, =0.7.26 - yargs 7.1.1 Source cves: CVE-2020-76...

@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +891 more potentially affected by unknown CVE via http-proxy (>=1.0.0, <=1.18.0)

http-proxy NPM version =1.0.0, =2018.7.11-0, =0.0.1, =0.156.0, =2.6.6, =4.0.0, =3.0.1, =0.0.1, =1.12.2-next.3, =1.0.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6X33-PW7P-HMPQ...

@anacoelhovicente/primecore (0.3.4-beta.1-webhook), @axonish/core (>=0.2.0, <=0.3.0) +29 more potentially affected by unknown CVE via type-graphql (>=0.12.3, <=0.17.5)

type-graphql NPM version =0.12.3, =0.2.0, =0.0.2, =1.0.0, =1.0.0, =0.0.5, =0.0.1, =0.0.0-487728, =0.1.0, =0.3.0-alpha.1, =0.0.1, =5.2.0, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XF64-2F9P-6PQQ...

@cloudmosaic/quickstarts (>=1.0.0-rc.0, <=1.0.0-rc.1), @cooptest/quickstarts (>=1.0.0, <=1.0.12) +113 more potentially affected by unknown CVE via showdown (>=1.0.0-alpha.2, <=1.9.0)

showdown NPM version =1.0.0-alpha.2, =1.0.0-rc.0, =1.0.0, =1.0.0-alpha.1, =2.0.0-beta.5, =0.4.0-1, =1.6.3, =5.2.1, =0.0.11, =0.0.9, =0.0.2, =1.0.0-rc.2, =1.0.1, =0.0.0-beta.1, =0.0.0-beta.24 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H6MQ-3CJ6-H738...

@codecademy/gamut (>=1.10.10-alpha.7c13cf.0, <=1.15.2), @contentful/field-editor-markdown (>=0.1.0, <=0.4.0) +18 more potentially affected by unknown CVE via markdown-to-jsx (>=6.4.1, <=6.11.1)

markdown-to-jsx NPM version =6.4.1, =1.10.10-alpha.7c13cf.0, =0.1.0, =0.1.0, =0.0.9, =7.1.0, =0.10.0, =1.0.0, =0.2.0, =0.1.0, =5.11.3, =5.8.9, =6.0.1, =1.0.0, =3.3.1-feather.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CCRP-C664-8P4J...

@aoboxinda/budget (>=0.1.155, <=0.1.186), @coobo/skeleton (>=1.0.0-a, <=1.0.0) +5 more potentially affected by unknown CVE via express-fileupload (>=1.0.0, <=1.1.5)

express-fileupload NPM version =1.0.0, =0.1.155, =1.0.0-a, =0.0.1-alpha.151, =0.0.1-alpha.44, =1.1.0, =1.0.0, =1.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-Q3W9-G74Q-VP5F...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @cimpress/simple-auth-wrapper (>=3.1.0, <=6.4.7) +277 more potentially affected by unknown CVE via lodash.merge (>=4.0.1, <=4.6.0)

lodash.merge NPM version =4.0.1, =0.1.0-18, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =6.2.6, =1.1.2, =0.0.22, =0.0.4, =1.2.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2M96-9W4J-WGV7...

@alessio.filippucci/admin-dashboard-core (0.0.0-development), @avoux/invoicing-manager (>=1.0.6, <=2.0.0) +114 more potentially affected by unknown CVE via quill (>=1.0.0, <=1.3.6)

quill NPM version =1.0.0, =1.0.6, =4.6.201905201249, =4.6.201907261001, =4.5.201903181201, =7.11.2-snapshot-1568934257537, =3.0.201812052008, =2.0.5-web, =1.0.9, =1.9.0, =28.3.0, =0.2.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-588M-9QG5-35PQ...

@commercial/hapi (19.0.2), @hapi/hapi (>=19.0.0, <=19.0.4) +7 more potentially affected by unknown CVE via @hapi/accept (4.0.1)

@hapi/accept NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/accept and may be impacted: - @commercial/hapi 19.0.2 - @hapi/hapi =19.0.0, =0.0.3, =0.27.0, =0.27.0, =0.9.0, =2.0.4, =5.0.2 Source cves: unknown CVE Source advisory:...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +1583 more potentially affected by unknown CVE via ammo (>=1.0.1, <=3.0.3)

ammo NPM version =1.0.1, =0.0.2, =0.3.0, =1.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.0.1, =0.1.0, =0.9.0, =1.0.7, =0.0.1, =1.0.8-rc.1, =11.1.27-alpha.4606607431 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MG85-8MV5-FFJR...

epoll (>=0.4.0, <=0.6.0), hydrogen (>=0.1.0, <=0.1.5) potentially affected by CVE-2020-35892 +1 more via simple-slab (>=0.1.0, <=0.2.3)

simple-slab CARGO version =0.1.0, =0.4.0, =0.1.0, =0.1.5 Source cves: CVE-2020-35892, CVE-2020-35893 Source advisory: OSV:RUSTSEC-2020-0039...

xxlib (>=0.1.0, <=0.4.0) potentially affected by CVE-2020-35890 +1 more via ordnung (0.0.1)

ordnung CARGO version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ordnung and may be impacted: - xxlib =0.1.0, =0.4.0 Source cves: CVE-2020-35890, CVE-2020-35891 Source advisory: OSV:RUSTSEC-2020-0038...

ftms (1.0.0), package-ftms (1.0.0) potentially affected by unknown CVE via requset (0.0.1-security)

requset NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requset and may be impacted: - ftms 1.0.0 - package-ftms 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-W7WG-24G3-2C78...

http-run (0.0.1) potentially affected by unknown CVE via requet (0.0.1-security)

requet NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requet and may be impacted: - http-run 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-H44F-769Q-J6PX...

04-rsib_contact-numbers-menue_cli (>=1.0.0, <=1.0.1), advanture-game-by-sam (>=1.0.0, <=1.0.1) +2 more potentially affected by unknown CVE via chak (0.0.1-security)

chak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 1.0.0 Source cves: unknown CVE Source advisory:...

@absa-subatomic/openshift-api (>=0.0.1, <=0.0.2), @atomist-seeds/automation-client (>=1.0.0-atomist-update-1.0.0-M.5a-1538147067873.20180928150441, <=1.0.0-master.20180928151025) +40 more potentially affected by unknown CVE via graphql-code-generator (>=0.5.5, <=0.17.0)

graphql-code-generator NPM version =0.5.5, =0.0.1, =1.0.0-atomist-update-1.0.0-M.5a-1538147067873.20180928150441, =1.0.0-atomist-update-1.0.0-M.5a-1538146868055.20180928150114, =1.0.0-atomist-update-1.0.0-M.5a-1538147121196.20180928150530, =0.1.0-master.20181019173228,...

favana-docx (>=1.0.28, <=1.0.47), web-commons-export (1.2.10) potentially affected by unknown CVE via office-converter (1.0.2)

office-converter NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on office-converter and may be impacted: - favana-docx =1.0.28, =1.0.47 - web-commons-export 1.2.10 Source cves: unknown CVE Source advisory: OSV:GHSA-9P64-H5Q4-PHPM...

@cowlick/analyzer (>=0.9.0, <=0.9.1), @cowlick/kag-compiler (>=0.9.0, <=0.9.1) +4 more potentially affected by CVE-2020-8244 via bl (2.0.1)

bl NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on bl and may be impacted: - @cowlick/analyzer =0.9.0, =0.9.0, =4.1.6, =1.2.0, =1.0.0, =1.0.0, =1.1.37 Source cves: CVE-2020-8244 Source advisory: OSV:GHSA-PP7H-53GX-MX7R...

sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)

md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-HGR5-82RC-P936...

basic-read-config (>=1.0.2, <=1.0.3), blockchain-profile (>=0.1.0, <=0.3.2) +8 more potentially affected by unknown CVE via merge-objects (1.0.5)

merge-objects NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on merge-objects and may be impacted: - basic-read-config =1.0.2, =0.1.0, =0.0.5, =0.3.0, =0.0.1, =1.1.4, =1.4.0, =0.1.0, =0.0.1, =0.5.3 Source cves: unknown CVE Source...

@elastic/eui (>=0.0.1-prealpha, <=0.0.11), @pl-test/c (>=1.1.0, <=1.1.1) +5 more potentially affected by unknown CVE via serve (>=6.0.0, <=6.4.10)

serve NPM version =6.0.0, =0.0.1-prealpha, =1.1.0, =7.1.9, =4.1.8, =5.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-WM7Q-RXCH-43MX...

reasy (>=1.0.0, <=1.5.1), reasy-pure (>=0.0.5, <=1.0.4) +1 more potentially affected by CVE-2017-16097 via tiny-http (>=1.2.2, <=2.0.8)

tiny-http NPM version =1.2.2, =1.0.0, =0.0.5, =1.1.0, =2.1.4 Source cves: CVE-2017-16097 Source advisory: OSV:GHSA-CCH6-5X4H-6QC5...

@c12e/cortex-studio-skill-lab-extension (>=0.4.4, <=0.4.7), @faicon/core (>=0.0.24, <=0.0.27) +37 more potentially affected by CVE-2017-16009 via ag-grid (>=18.0.1, <=18.1.2)

ag-grid NPM version =18.0.1, =0.4.4, =0.0.24, =5.2.0-alpha26-fix1, =1.0.2-alpha.0, =1.0.0, =1.0.0, =8.9.0, =0.2.1, =1.0.1, =1.0.0, =0.1.0, =1.1.0 and more Source cves: CVE-2017-16009 Source advisory: OSV:GHSA-WFW3-RGFR-6G67...

gfe (1.1.0) potentially affected by CVE-2017-16040 via gfe-sass (1.0.19)

gfe-sass NPM version 1.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on gfe-sass and may be impacted: - gfe 1.1.0 Source cves: CVE-2017-16040 Source advisory: OSV:GHSA-72Q2-5RXX-XFFF...

angular-chart (0.2.3), bit-c3 (>=0.0.1, <=0.1.3) +4 more potentially affected by CVE-2016-1000240 via c3 (>=0.3.0, <=0.4.10)

c3 NPM version =0.3.0, =0.0.1, =3.1.0, =3.3.1 Source cves: CVE-2016-1000240 Source advisory: OSV:GHSA-GVG7-PP82-CFF3...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G336-C7WV-8HP3...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by CVE-2016-5682 via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: CVE-2016-5682 Source advisory: OSV:GHSA-P239-93F7-H6XF...

@corex/argon-theme (>=1.1.1, <=1.1.33), @creative-tim-official/argon-dashboard-free (1.2.0) +14 more potentially affected by CVE-2016-1000227 via bootstrap-tagsinput (0.7.1)

bootstrap-tagsinput NPM version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-tagsinput and may be impacted: - @corex/argon-theme =1.1.1, =0.27.0-rc1, =0.0.1, =0.1.0, =3.0.0, =1.2.0, =0.1.0, =0.2.0, =0.1.1, =1.2.6, =1.4.0, =0.1.89,...

@akryum/hotel (>=0.8.8, <=0.8.12), @bdefore/nivo-patterned-radial-arc (0.79.1) +19 more potentially affected by CVE-2015-9239 via ansi2html (0.0.1)

ansi2html NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansi2html and may be impacted: - @akryum/hotel =0.8.8, =0.8.7, =2.0.4, =10.3.3, =1.1.0, =1.4.1, =0.9.0-0, =9.12.5, =9.12.9 and more Source cves: CVE-2015-9239 Source advisory:...

@w3sec/goof (1.1.0), door (>=0.0.5, <=0.0.6) +5 more potentially affected by CVE-2014-3744 via st (>=0.0.12, <=0.2.4)

st NPM version =0.0.12, =0.0.5, =1.0.0, =0.0.0, =0.0.0-a10, =0.1.0, =0.0.1, =0.0.12 Source cves: CVE-2014-3744 Source advisory: OSV:GHSA-69RR-WVH9-6C4Q...

@hytong-yarn/cli (1.4.0), @yym-yarn/cli (1.0.0) +10 more potentially affected by CVE-2013-6393 via libyaml (>=0.0.2, <=0.2.2)

libyaml NPM version =0.0.2, =0.3.0, =1.0.24, =2.0.8, =0.0.1, =0.1.2, =0.0.10, =0.0.4, =0.0.5 Source cves: CVE-2013-6393 Source advisory: OSV:GHSA-M75H-CGHQ-C8H5...

grunt-qunit-notifier (0.1.0), helper-clockmaker (1.0.3) +2 more potentially affected by CVE-2013-7381 via libnotify (>=1.0.1, <=1.0.2)

libnotify NPM version =1.0.1, =0.1.0, =0.0.1, =0.1.5 Source cves: CVE-2013-7381 Source advisory: OSV:GHSA-6898-WX94-8JQ8...

@aqsi/ui (>=3.22.0-rc.0, <=4.15.1), @ausbom/charts (>=0.1.0, <=0.1.2) +6 more potentially affected by unknown CVE via highcharts (>=8.0.0, <=8.1.0)

highcharts NPM version =8.0.0, =3.22.0-rc.0, =0.1.0, =0.0.0, =1.3.0, =7.0.0-alpha1, =16.8.1, =1.2.8, =1.0.6, =1.0.7 Source cves: unknown CVE Source advisory: OSV:GHSA-GR4J-R575-G665...

@blueprintjs/docs (>=1.0.0, <=1.3.1), @frctl/twig (>=1.0.0-alpha.0, <=1.0.0-beta.2) +101 more potentially affected by CVE-2020-7700 via phpjs (>=0.0.1, <=1.3.2)

phpjs NPM version =0.0.1, =1.0.0, =1.0.0-alpha.0, =0.3.16, =1.2.7, =0.1.3, =1.0.1, =1.0.0, =0.7.0, =0.0.1, =0.0.9, =0.0.1-alpha.1, =0.0.1, =0.0.7 and more Source cves: CVE-2020-7700 Source advisory: SNYK:JS-PHPJS-598681...

@random-guys/coralpay-pgp (>=0.0.1, <=0.1.0), @woocommerce/components (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2020-7719 via locutus (>=2.0.10, <=2.0.11)

locutus NPM version =2.0.10, =0.0.1, =1.0.0, =1.1.0, =1.0.2, =1.0.52, =0.1.0, =0.2.1 Source cves: CVE-2020-7719 Source advisory: SNYK:JS-LOCUTUS-598675...

3architecture (>=1.0.0, <=1.7.0), @1amageek/tradable (0.9.0) +1596 more potentially affected by CVE-2020-7768 via grpc (>=1.0.0, <=1.24.3)

grpc NPM version =1.0.0, =1.0.0, =1.0.24, =0.0.2, =1.1.6, =0.0.1, =0.1.0, =1.2.1, =0.0.0-7, =1.0.0, =1.1.0 - @ampretia/composer-opus 0.2.0 - @andregarvin/cuneiform 0.0.1 and more Source cves: CVE-2020-7768 Source advisory: SNYK:JS-GRPC-598671...

@aikosia/automaton (>=0.6.0, <=0.8.1), @aikosia/automaton-cli (>=0.2.1, <=0.3.5) +27 more potentially affected by CVE-2020-7718 via gammautils (>=0.0.2, <=0.0.81)

gammautils NPM version =0.0.2, =0.6.0, =0.2.1, =0.9.0, =0.1.5, =1.0.49, =9.0.0, =0.1.44, =0.1.22, =0.1.20, =1.0.1, =0.0.9, =0.0.7, =0.0.8 and more Source cves: CVE-2020-7718 Source advisory: SNYK:JS-GAMMAUTILS-598670...

@benningfield-group/grunt-build-angularjs (>=0.1.0, <=0.1.2), @brandonli8/grunt-config (>=0.0.0-dev.7, <=0.0.0-dev.22) +165 more potentially affected by CVE-2020-7729 via grunt (>=1.0.0, <=1.2.1)

grunt NPM version =1.0.0, =0.1.0, =0.0.0-dev.7, =0.0.16-alpha, =1.0.0, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =0.0.13, =1.0.0, =1.0.0, =0.0.1, =1.0.7, =1.0.1, =1.1.12 and more Source cves: CVE-2020-7729 Source advisory: SNYK:JS-GRUNT-597546...

@abstract.tech/brad-cli (>=0.0.4, <=1.0.1), @bandwidth/shared-components (>=6.0.2, <=6.2.2) +106 more potentially affected by CVE-2020-36632 via flat (>=4.0.0, <=4.1.0)

flat NPM version =4.0.0, =0.0.4, =6.0.2, =1.0.7, =4.2.2, =1.2.10, =2.1.31, =1.0.11, =2.0.11, =1.1.11, =1.0.27, =2.0.8, =1.0.0, =0.0.6, =0.0.1, =0.0.2, =0.0.8 and more Source cves: CVE-2020-36632 Source advisory: SNYK:JS-FLAT-596927...

chatc-cli (>=0.1.7, <=0.1.9), fast-http-cli (>=0.0.1, <=0.0.8) potentially affected by CVE-2020-7687 via fast-http (>=0.1.2, <=0.1.3)

fast-http NPM version =0.1.2, =0.1.7, =0.0.1, =0.0.8 Source cves: CVE-2020-7687 Source advisory: OSV:GHSA-7PHR-5M9X-RW9Q...

@0x18b2ee/parse-server (>=3.10.1, <=3.11.0), @adncorp/parse-server (>=2.0.0, <=2.10.4) +24 more potentially affected by unknown CVE via parse (>=2.0.1, <=2.8.0)

parse NPM version =2.0.1, =3.10.1, =2.0.0, =0.0.7, =1.0.5, =4.3.0-fast-roles, =4.3.0, =1.0.9, =1.0.0, =3.1.1, =3.10.0, =3.1.3, =3.1.6 - nex-parse-server 4.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WVH7-5P38-2QFC...

@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +809 more potentially affected by CVE-2020-8203 via lodash-es (>=3.10.1, <=4.17.15)

lodash-es NPM version =3.10.1, =0.0.1-alpha.4, =0.1.10, =0.0.1, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =0.0.1, =3.2.1, =3.2.1, =0.3.14, =0.4.63, =0.4.64 and more Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

@finviet-jsrpt/jsrpt-electron-pdf (>=1.0.0, <=1.0.6), @jsreport/jsreport-electron-pdf (>=4.0.0-beta.1, <=5.2.0) +18 more potentially affected by CVE-2020-8203 via lodash.pick (>=4.0.1, <=4.3.0)

lodash.pick NPM version =4.0.1, =1.0.0, =4.0.0-beta.1, =1.0.0-alpha.0, =0.1.0, =2.1.0, =1.0.0, =1.2.3, =2.3.0, =1.0.0-beta.1, =0.4.0, =0.1.0, =4.0.0-alpha.1, =4.0.0-alpha.5 and more Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

@vidispine/vdt-materialui (>=0.12.0-pre.1, <=26.2.0-pre.3) potentially affected by CVE-2020-8203 via lodash.updatewith (4.10.2)

lodash.updatewith NPM version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.updatewith and may be impacted: - @vidispine/vdt-materialui =0.12.0-pre.1, =26.2.0-pre.3 Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

0.workspace (>=0.1.0, <=0.1.1), 00ld8nuivn (2.1.0) +60335 more potentially affected by CVE-2020-8203 via lodash (>=3.7.0, <=4.17.18)

lodash NPM version =3.7.0, =0.1.0, =1.0.0, =1.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 - 0850u4lkpu 1.1.0 - 08cms 1.0.0 and more Source cves: CVE-2020-8203 Source advisory:...