16pixels (>=0.1.10, <=0.1.12), @3dlook/camera (>=2.1.0, <=2.2.0) +1120 more potentially affected by CVE-2022-29244 via npm (>=7.9.0, <=8.8.0)

npm NPM version =7.9.0, =0.1.10, =2.1.0, =5.0.5, =2.0.0, =1.0.0, =1.0.0-beta.2, =2.3.0, =1.0.0, =0.8.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0, =3.0.2 and more Source cves: CVE-2022-29244 Source advisory: OSV:GHSA-HJ9C-8JMM-8C52...

10secondsofcode-custom (1.0.0), 11ty-dither (>=0.0.1, <=0.0.8) +4033 more potentially affected by CVE-2022-29256 via sharp (>=0.4.2, <=0.30.4)

sharp NPM version =0.4.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.1, =4.11.0, =1.0.0, =0.16.0, =0.1.0, =1.0.1-beta.1 and more Source cves: CVE-2022-29256 Source advisory: OSV:GHSA-GP95-PPV5-3JC5...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +42 more potentially affected by CVE-2022-25759 via convert-svg-core (>=0.3.3, <=0.5.0)

convert-svg-core NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =0.3.0, =0.3.0, =1.0.3, =1.2.1 and more Source cves: CVE-2022-25759 Source advisory: SNYK:JS-CONVERTSVGCORE-2849633...

flipper-server (>=0.171.1, <=0.212.0), flipper-server-companion (>=0.171.0, <=0.212.0) +1 more potentially affected by unknown CVE via flipper-frontend-core (>=0.171.0, <=0.212.0)

flipper-frontend-core NPM version =0.171.0, =0.171.1, =0.171.0, =0.171.1, =0.212.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-3074...

@0cfg/rpc-common (>=0.0.1, <=0.1.3), @0cfg/rpc-node (>=0.0.1, <=0.1.3) +312 more potentially affected by CVE-2022-25878 via protobufjs (>=6.11.0-pre, <=6.11.2)

protobufjs NPM version =6.11.0-pre, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =0.0.2, =0.1.0, =0.4.0, =4.0.0, =1.0.0, =0.4.21, =1.0.3-next.0, =0.1.0-alpha.32, =0.1.0-alpha.0, =0.4.115, =0.5.167 and more Source cves: CVE-2022-25878 Source advisory: OSV:GHSA-G954-5HWP-PP24...

@agconnect/database (>=1.1.0, <=1.3.2), @ardenthq/sdk-egld (>=1.0.0, <=1.3.1) +124 more potentially affected by CVE-2022-25878 via protobufjs (>=6.10.0, <=6.10.2)

protobufjs NPM version =6.10.0, =1.1.0, =1.0.0, =3.0.0-next.36, =3.0.0-next.36, =3.0.0-next.36, =3.0.0-next.36, =0.0.0, =0.0.0-beta.20200917165907, =0.0.0-beta.20200724145337, =0.0.0-beta.20200724123546, =0.0.0-beta.20200724123546, =0.0.0-beta.20210111150545 and more Source cves: CVE-2022-25878...

@altenull/foret-ng (1.0.0-0), @apipass/buttons (>=0.1.1-beta.2, <=0.1.1) +365 more potentially affected by CVE-2021-4231 via @angular/core (>=10.0.0, <=10.2.4)

@angular/core NPM version =10.0.0, =0.1.1-beta.2, =0.1.1-beta.4, =0.1.1-beta.14, =0.1.1-beta.12, =0.1.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - @clemanto/ng2-smart-table 1.7.3 and more Source cves: CVE-2021-4231 Source advisory: OSV:GHSA-C75V-2VQ8-878F...

@hyperledger/cactus-cockpit (0.3.0), @kengic/ng.account (>=3.2.100, <=3.3.127) +17 more potentially affected by CVE-2021-4231 via @angular/core (>=11.0.0, <=11.0.4)

@angular/core NPM version =11.0.0, =3.2.100, =3.2.106, =3.2.100, =1.0.100, =1.0.1-BETA.93934, =1.0.0-BETA.93934, =1.0.59, =1.1.61, =1.0.2, =1.0.7, =0.0.2, =0.0.3 and more Source cves: CVE-2021-4231 Source advisory: OSV:GHSA-C75V-2VQ8-878F...

@nexus-switchboard/nexus-conn-jira (>=0.1.0, <=0.2.2), @nexus-switchboard/nexus-mod-service (>=0.4.1, <=0.6.3) +1 more potentially affected by CVE-2021-26073 via atlassian-connect-express (>=3.5.2, <=4.4.1)

atlassian-connect-express NPM version =3.5.2, =0.1.0, =0.4.1, =0.0.1, =2.0.5 Source cves: CVE-2021-26073 Source advisory: OSV:GHSA-4V96-M8XV-X83V...

@chainsafe/lodestar-cli (>=0.12.0, <=0.28.2-dev.18) potentially affected by CVE-2022-29219 via @chainsafe/lodestar (>=0.12.0, <=0.28.2-dev.18)

@chainsafe/lodestar NPM version =0.12.0, =0.12.0, =0.28.2-dev.18 Source cves: CVE-2022-29219 Source advisory: OSV:GHSA-CVJ7-5F3C-9VG9...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2022-29214 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2022-29214 Source advisory: OSV:GHSA-Q2MX-J4X2-2H74...

@lowdefy/server (>=4.0.0-alpha.1, <=4.0.0-alpha.10), @lowdefy/server-dev (>=4.0.0-alpha.6, <=4.0.0-alpha.10) +4 more potentially affected by CVE-2022-29214 via next-auth (>=4.0.0-beta.6, <=4.2.1)

next-auth NPM version =4.0.0-beta.6, =4.0.0-alpha.1, =4.0.0-alpha.6, =0.31.1, =1.42.1, =0.50.4, =0.78.15-alpha.2 - chirpy-dev 0.1.0 Source cves: CVE-2022-29214 Source advisory: OSV:GHSA-Q2MX-J4X2-2H74...

json_index (0.0.0), koios (>=0.0.1, <=1.0.1) +5 more potentially affected by CVE-2021-20088 via mootools-more (>=1.5.1, <=1.5.2)

mootools-more NPM version =1.5.1, =0.0.1, =0.1.0, =0.0.0, =0.1.0, =0.1.0, =0.8.3 - youtube-playlist-download 1.0.0 Source cves: CVE-2021-20088 Source advisory: OSV:GHSA-FW45-938V-P26J...

@graasp/cli (>=0.3.0, <=0.4.0), @loftysoul/soul (>=1.0.1, <=2.19.8) +29 more potentially affected by CVE-2019-19729 via bson-objectid (>=1.1.1, <=1.2.5)

bson-objectid NPM version =1.1.1, =0.3.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.1.1, =2.0.0, =2.3.4 and more Source cves: CVE-2019-19729 Source advisory: OSV:GHSA-P84X-5XX8-HFF9...

buildfire-sdk (>=0.0.11, <=0.0.13) potentially affected by CVE-2019-17221 via phantomjs (2.1.1)

phantomjs NPM version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on phantomjs and may be impacted: - buildfire-sdk =0.0.11, =0.0.13 Source cves: CVE-2019-17221 Source advisory: OSV:GHSA-X43G-GJ9X-838X...

@brudi-toolbox/id (>=1.4.5-next.1, <=2.0.4), @cimpress/simple-auth-wrapper (>=3.0.0, <=3.1.6) +6 more potentially affected by CVE-2022-29172 via auth0-lock (>=11.0.1, <=11.31.0)

auth0-lock NPM version =11.0.1, =1.4.5-next.1, =3.0.0, =1.0.1, =0.0.1, =1.0.42, =0.11.0, =0.1.0, =0.1.2 Source cves: CVE-2022-29172 Source advisory: OSV:GHSA-7WW6-75FJ-JCJ7...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +16075 more potentially affected by CVE-2021-42740 via shell-quote (>=1.6.3, <=1.7.2)

shell-quote NPM version =1.6.3, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0....

admin-gp (>=1.0.0-beta, <=1.0.4-beta), aspiesolutions_core (>=0.0.1-alpha+3, <=0.0.1-alpha.11) +41 more potentially affected by CVE-2021-20332 via mongodb (1.2.5)

mongodb CARGO version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on mongodb and may be impacted: - admin-gp =1.0.0-beta, =0.0.1-alpha+3, =1.0.0, =1.1.0, =1.6.2, =0.12.8, =0.3.0, =0.4.2, =0.1.0-pre-alpha.1, =0.1.0, =1.0.0-beta, =0.1.0, =0.3.1 an...

@1023-ventures/serra-common (>=0.3.31, <=0.3.33), @2600hz/sds-react-native-components (>=0.1.0, <=1.8.1) +1999 more potentially affected by CVE-2021-24037 via hermes-engine (>=0.0.0, <=0.7.2)

hermes-engine NPM version =0.0.0, =0.3.31, =0.1.0, =0.6.0-alpha.1, =1.0.0, =1.0.1, =0.0.1, =0.0.1, =3.0.0, =0.1.0, =10.2.0-alpha.0, =12.0.3-alpha.1, =1.0.4, =0.0.1, =0.0.4 and more Source cves: CVE-2021-24037 Source advisory: OSV:GHSA-MPH8-6787-R8HW...

4cdl (>=1.0.1, <=1.0.7), 77cli (>=0.0.10, <=0.0.12) +445 more potentially affected by CVE-2021-25944 via deep-defaults (1.0.5)

deep-defaults NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on deep-defaults and may be impacted: - 4cdl =1.0.1, =0.0.10, =0.0.2, =0.0.1, =0.2.0, =0.0.1, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =1.0.2, =1.0.4 and more Source cves: CVE-2021-259...

@adobe/helix-deploy (>=3.0.0, <=3.16.0), @nordicsemiconductor/asset-tracker-cloud-device-simulator-azure (>=1.0.0, <=1.2.0) +1 more potentially affected by CVE-2021-28458 via @azure/ms-rest-nodeauth (>=3.0.3, <=3.0.7)

@azure/ms-rest-nodeauth NPM version =3.0.3, =3.0.0, =1.0.0, =1.2.0 - @trulive/sye-tools 3.0.1 Source cves: CVE-2021-28458 Source advisory: OSV:GHSA-QPFW-4M9X-RXX8...

@shoplo/kit-vue (>=1.17.0, <=1.22.16), dm-cli (>=0.4.1-0, <=0.4.5) potentially affected by CVE-2021-30074 via docsify (>=4.2.1, <=4.9.1)

docsify NPM version =4.2.1, =1.17.0, =0.4.1-0, =0.4.5 Source cves: CVE-2021-30074 Source advisory: OSV:GHSA-5H7X-68WJ-JHWC...

diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)

diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:GHSA-J8Q9-5RP9-4MV9...

@dependable/session (0.7.0), angularjs-lively (0.0.1) +18 more potentially affected by CVE-2021-25915 via changeset (>=0.0.5, <=0.2.1)

changeset NPM version =0.0.5, =0.2.0, =1.0.1, =0.0.4, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.10, =2.0.0, =1.0.0, =1.0.3 - observable-delta-stream 0.1.0 and more Source cves: CVE-2021-25915 Source advisory: OSV:GHSA-2GQW-Q9R9-7F79...

guion (>=0.1.0, <=0.2.0-dev2), guion_sdl2 (>=0.1.0, <=0.2.0-dev2) potentially affected by CVE-2021-26954 via qwutils (>=0.1.1, <=0.2.0)

qwutils CARGO version =0.1.1, =0.1.0, =0.1.0, =0.2.0-dev2 Source cves: CVE-2021-26954 Source advisory: OSV:GHSA-68P4-PJPF-XWCQ...

tract-linalg (>=0.5.7, <=0.5.8) potentially affected by CVE-2021-25900 via smallvec (0.6.13)

smallvec CARGO version 0.6.13 is affected by a known vulnerability. The following packages have a transitive dependency on smallvec and may be impacted: - tract-linalg =0.5.7, =0.5.8 Source cves: CVE-2021-25900 Source advisory: OSV:GHSA-43W2-9J62-HQ99...

blkar (7.2.7), prcn_lib (0.3.1) +1 more potentially affected by CVE-2021-25900 via smallvec (>=1.0.0, <=1.2.0)

smallvec CARGO version =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2021-25900 Source advisory: OSV:GHSA-43W2-9J62-HQ99...

@trovo/components (>=5.0.2, <=5.3.0), @trovo/motion (>=5.0.2, <=6.0.0) +9 more potentially affected by CVE-2020-28277 via dset (1.0.1)

dset NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on dset and may be impacted: - @trovo/components =5.0.2, =5.0.2, =5.0.0, =1.0.15, =1.1.4, =1.0.0, =2.2.0, =1.0.0, =0.0.1, =0.0.2, =0.0.11 Source cves: CVE-2020-28277 Source advisory:...

@dataparty/bouncer-model (>=1.0.1, <=1.4.0), @dataparty/dpc (>=0.1.0, <=0.4.14) +8 more potentially affected by CVE-2020-28276 via deep-set (1.0.1)

deep-set NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-set and may be impacted: - @dataparty/bouncer-model =1.0.1, =0.1.0, =0.1.1, =1.0.1, =0.1.0, =0.0.1, =2.2.0 - stalwart 0.1.0 Source cves: CVE-2020-28276 Source advisory:...

@averjs/core (>=1.0.22, <=2.0.0-3), @cojecom/vuex-persistedstate (2.5.4) +11 more potentially affected by CVE-2020-28278 via shvl (1.3.1)

shvl NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on shvl and may be impacted: - @averjs/core =1.0.22, =1.1.37, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =2.3.0, =1.1.1, =5.2.0 Source cves: CVE-2020-28278 Source advisory:...

mongo-rest-api (0.1.0), pine-ql (>=0.1.0, <=0.5.4) potentially affected by CVE-2020-28272 via keyget (1.0.1)

keyget NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api 0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2020-28272 Source advisory: OSV:GHSA-8MP8-28XH-R486...

ferris-rich-input (0.0.1) potentially affected by CVE-2020-27193 via ckeditor4 (4.14.0)

ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2020-27193 Source advisory: OSV:GHSA-4M44-5J2G-XF64...

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1535 more potentially affected by CVE-2020-1915 via hermes-engine (>=0.0.0, <=0.6.0)

hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1915 Source advisory: OSV:GHSA-X4CF-6JR3-3QVP...

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1535 more potentially affected by CVE-2020-1914 via hermes-engine (>=0.0.0, <=0.6.0)

hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1914 Source advisory: OSV:GHSA-327C-QX3V-H673...

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1913 via hermes-engine (>=0.0.0, <=0.5.1)

hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1913 Source advisory: OSV:GHSA-GMPM-XP43-F7G6...

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1912 via hermes-engine (>=0.0.0, <=0.5.1)

hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1912 Source advisory: OSV:GHSA-PF27-929J-9PMM...

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1911 via hermes-engine (>=0.0.0, <=0.5.1)

hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1911 Source advisory: OSV:GHSA-F5X2-XV93-4P23...

@symbol-it/strapi-plugin-mailjet (>=0.0.1, <=0.0.2), @zerops/strapi-builder (>=0.0.34, <=0.1.13) +4 more potentially affected by CVE-2020-13961 via strapi (3.0.0-rc.0)

strapi NPM version 3.0.0-rc.0 is affected by a known vulnerability. The following packages have a transitive dependency on strapi and may be impacted: - @symbol-it/strapi-plugin-mailjet =0.0.1, =0.0.34, =0.0.1-alpha.1, =0.0.1-alpha.2 - strapi-plugin-mailjet 0.0.2 Source cves: CVE-2020-13961 Sourc...

@banhmi/email (>=1.0.0, <=1.3.0), @clevyr/pavo-mailer (0.0.12) +12 more potentially affected by CVE-2020-12827 via mjml (>=4.1.0, <=4.5.1)

mjml NPM version =4.1.0, =1.0.0, =0.2.0, =1.0.0, =0.1.13, =0.1.0, =0.1.10, =0.0.1, =4.1.2-1, =0.1.0, =0.1.0, =1.0.0, =1.0.1 Source cves: CVE-2020-12827 Source advisory: OSV:GHSA-4HCH-R9XF-6VFR...

3a-server (>=0.7.41, <=0.9.10), 3a-server-mongo (>=0.1.0-beta.1, <=1.0.0-beta.1) +547 more potentially affected by CVE-2020-7645 via chrome-launcher (>=0.1.3, <=0.13.1)

chrome-launcher NPM version =0.1.3, =0.7.41, =0.1.0-beta.1, =0.1.3, =0.0.3, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-beta.3, =0.0.1, =0.1.0, =1.3.0-beta, =1.0.2, =2.0.1-pr.52, =0.0.1-alpha.1, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2020-7645 Source advisory: OSV:GHSA-GP2J-MG4W-2RH5...

@sobotics/caching (1.1.1) potentially affected by CVE-2020-11610 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2020-11610 Source advisory: OSV:GHSA-MR5M-2385-2VCP...

@5rabbits/create-lib (>=0.1.0, <=0.4.0), @5rabbits/create-react-lib (0.4.0) +174 more potentially affected by CVE-2020-8141 via dot (>=1.0.0, <=1.1.2)

dot NPM version =1.0.0, =0.1.0, =0.1.16-master.20181116180810, =0.1.0, =4.6.201910241203, =4.6.201905201019, =4.6.201906121726, =4.6.201908201256, =4.6.201907131632, =4.6.201908021805, =4.6.201905201531, =4.6.201907081200, =4.6.201908311200 and more Source cves: CVE-2020-8141 Source advisory:...

byways (>=1.2.0, <=1.5.2), component-build (>=1.0.0, <=1.2.2) +16 more potentially affected by CVE-2019-10794 via component-flatten (1.0.1)

component-flatten NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on component-flatten and may be impacted: - byways =1.2.0, =1.0.0, =1.0.0, =1.3.0, =0.0.3, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0, =0.0.1, =0.0.1, =0.1.0, =0.2.0-beta3 and...

@aliyun-sls/sql (>=0.2.9-dev-10, <=0.3.10-dev-9), @dpjayasekara/tscore (>=0.0.1, <=0.1.1) +29 more potentially affected by CVE-2020-7596 via codecov (>=3.0.0, <=3.6.1)

codecov NPM version =3.0.0, =0.2.9-dev-10, =0.0.1, =0.0.29, =1.0.10, =1.0.18, =1.0.0, =1.7.0, =1.0.1, =1.0.8, =0.1.1, =0.1.6, =0.1.1, =0.0.1, =1.17.0, =1.22.16 and more Source cves: CVE-2020-7596 Source advisory: OSV:GHSA-MH2H-6J8Q-X246...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by CVE-2016-1000229 via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: CVE-2016-1000229 Source advisory: OSV:GHSA-H8WP-WGCQ-QHRF...

@angular-devkit/build-angular (>=0.8.8, <=0.900.0-rc.8), @apployees-nx/node (>=0.0.1, <=0.0.21) +159 more potentially affected by CVE-2019-15598 via tree-kill (>=1.0.0, <=1.2.1)

tree-kill NPM version =1.0.0, =0.8.8, =0.0.1, =0.0.1-alpha.1, =1.2.2, =6.0.0-beta.0, =0.0.1, =0.0.1, =2.0.0-beta.22, =2.0.0-beta.1, =1.0.0, =0.0.1, =0.2.0, =7.0.2 and more Source cves: CVE-2019-15598 Source advisory: OSV:GHSA-J7FQ-P9Q7-5WFV...

@zambezi/ez-doc (1.0.0-prepare-for-open-source.1), apigeeks-devdocs (1.0.5) +4 more potentially affected by CVE-2019-19596 via gitbook (>=2.5.2, <=2.6.6)

gitbook NPM version =2.5.2, =1.0.3, =1.0.4 - gitbook-plugin-plasma 1.0.0 - lab-devdocs 0.0.1 Source cves: CVE-2019-19596 Source advisory: OSV:GHSA-HWGP-C653-6684...

cargo-apk (>=0.3.1, <=0.4.0), cargo-authors (>=0.0.1, <=0.4.0) +30 more potentially affected by CVE-2019-16760 via cargo (>=0.4.0, <=0.26.0)

cargo CARGO version =0.4.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.3.1, =0.1.0, =0.5.1, =0.1.0, =0.2.1 and more Source cves: CVE-2019-16760 Source advisory: OSV:GHSA-9F3P-WVJ7-Q82X...

@amokrushin/zongji (0.5.1-patch.1), @breautek/storm (1.2.0-beta.0) +71 more potentially affected by CVE-2019-14939 via mysql (2.17.1)

mysql NPM version 2.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on mysql and may be impacted: - @amokrushin/zongji 0.5.1-patch.1 - @breautek/storm 1.2.0-beta.0 - @cenkingunlugu/mysql-events =0.6.0, =0.0.2, =1.0.0, =1.0.25, =1.0.22, =0.0.1, =1.4.1...

@sysdoc/sysdoc-web-stack (1.0.0), open-stack (>=1.1.0, <=1.2.7) potentially affected by CVE-2019-13483 via passport-sharepoint (0.2.12)

passport-sharepoint NPM version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on passport-sharepoint and may be impacted: - @sysdoc/sysdoc-web-stack 1.0.0 - open-stack =1.1.0, =1.2.7 Source cves: CVE-2019-13483 Source advisory:...