@cag-group/google-api-tools (0.3.1), @doodle3d/superlogin (>=0.6.2, <=0.7.0) +182 more potentially affected by CVE-2021-25945 via js-extend (1.0.1)

js-extend NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on js-extend and may be impacted: - @cag-group/google-api-tools 0.3.1 - @doodle3d/superlogin =0.6.2, =2.1.12, =1.0.2, =0.0.0, =0.0.49, =1.0.0, =4.2.0, =0.3.4, =0.1.21, =0.0.1-a,...

@dylanlindgren/storybook-addon-sn-next-ui (2.0.0), @github1/ajax-service (>=0.4.0-next.0, <=0.4.44) +48 more potentially affected by CVE-2021-33502 via normalize-url (>=4.3.0, <=4.5.0)

normalize-url NPM version =4.3.0, =0.4.0-next.0, =0.4.39-next.0, =5.1.0, =5.7.5 - @plaa/metascraper 5.4.0 - @plaa/metascraper-amazon 5.4.0 - @plaa/metascraper-audio 5.4.0 - @plaa/metascraper-author 5.4.0 - @plaa/metascraper-date 5.4.0 - @plaa/metascraper-description 5.4.0 -...

@pixelastic/videogames-helper (>=0.2.2, <=0.2.3), aberlaas (>=1.21.0, <=1.23.0) +6 more potentially affected by CVE-2021-33502 via normalize-url (6.0.0)

normalize-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on normalize-url and may be impacted: - @pixelastic/videogames-helper =0.2.2, =1.21.0, =2.13.0, =2.3.0, =4.0.0, =5.0.0 - pietro 0.6.1 Source cves: CVE-2021-33502 Source...

@cumulus/api-client (1.19.0), @github1/ajax-service (>=0.4.0, <=0.4.55) +55 more potentially affected by CVE-2021-33502 via normalize-url (>=5.0.0, <=5.3.0)

normalize-url NPM version =5.0.0, =0.4.0, =1.0.1, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =1.0.1, =0.8.7, =0.8.0, =0.8.0, =1.0.1, =0.8.0, =0.8.97 and more Source cves: CVE-2021-33502 Source advisory: OSV:GHSA-PX4H-XG32-Q955...

@netsells/reg-suit-basic-git-hash-plugin (>=0.2.0, <=0.2.1), reg-notify-github-plugin (>=0.0.18, <=0.4.2) potentially affected by CVE-2021-32673 via reg-keygen-git-hash-plugin (>=0.0.17, <=0.8.5)

reg-keygen-git-hash-plugin NPM version =0.0.17, =0.2.0, =0.0.18, =0.4.2 Source cves: CVE-2021-32673 Source advisory: OSV:GHSA-49Q3-8867-5WMP...

@buckeye/bs-layered-config (>=1.0.0, <=1.2.0), reason-nconf (>=1.2.0, <=1.3.2) potentially affected by CVE-2021-25946 via nconf-toml (0.0.2)

nconf-toml NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on nconf-toml and may be impacted: - @buckeye/bs-layered-config =1.0.0, =1.2.0, =1.3.2 Source cves: CVE-2021-25946 Source advisory: OSV:GHSA-HX7J-43W2-7RJ7...

5ug-cli (>=1.0.72, <=1.4.0), @11ty/eleventy-plugin-syntaxhighlight (>=3.1.0, <=3.1.1) +173 more potentially affected by CVE-2021-33587 via css-what (4.0.0)

css-what NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on css-what and may be impacted: - 5ug-cli =1.0.72, =3.1.0, =0.0.1, =0.4.0-next.8, =0.4.0-next.8, =0.4.0-next.8, =2.8.1-canary.0, =2.7.6, =2.8.0-canary.5, =1.0.0-alpha.0, =1.0.0,...

@tiendanube/components (>=0.0.2, <=2.4.2), @tiendanube/icons (>=0.1.1, <=0.2.8) +2 more potentially affected by CVE-2021-33623 via trim-newlines (3.0.0)

trim-newlines NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on trim-newlines and may be impacted: - @tiendanube/components =0.0.2, =0.1.1, =1.0.1, =1.0.2 Source cves: CVE-2021-33623 Source advisory: OSV:GHSA-7P7H-4MM5-852V...

justy-entity (>=1.0.0, <=1.3.7) potentially affected by CVE-2021-23388 via forms (1.1.4)

forms NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on forms and may be impacted: - justy-entity =1.0.0, =1.3.7 Source cves: CVE-2021-23388 Source advisory: OSV:GHSA-C56F-GRV3-GPFR...

@glossgenius/eslint-config (>=1.0.2, <=1.0.7), @halonext/nestjs-express-cassandra (>=7.0.0, <=7.1.0) +7 more potentially affected by CVE-2021-26707 via merge-deep (>=3.0.0, <=3.0.2)

merge-deep NPM version =3.0.0, =1.0.2, =7.0.0, =5.2.0, =6.0.1, =0.0.1, =0.1.0-rc0, =0.0.11, =1.0.0, =1.2.4 Source cves: CVE-2021-26707 Source advisory: OSV:GHSA-R6RJ-9CH6-G264...

@aisino/cli-plugin-unit-mocha (>=0.0.1, <=1.0.15), @aws-amplify/cli (4.44.1-beta.0) +29 more potentially affected by CVE-2020-28469 via glob-parent (>=5.0.0, <=5.1.1)

glob-parent NPM version =5.0.0, =0.0.1, =0.0.1, =5.0.1, =0.6.1, =0.14.0, =26.4.0, =0.0.2, =4.0.0-alpha.0, =1.0.0-alpha2, =2.21.3-beta.0, =2.22.2 - amplify-provider-awscloudformation 4.39.1-beta.0 - amplify-util-mock 3.28.1-beta.0 and more Source cves: CVE-2020-28469 Source advisory:...

@bdsm-tools/v-dom (0.1.0), @byhuz/huz-ui-sigma (>=1.0.19, <=1.0.27) +33 more potentially affected by CVE-2021-23327 via apexcharts (>=3.2.0, <=3.26.3)

apexcharts NPM version =3.2.0, =1.0.19, =0.7.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =7.20.0-snapshot-1617172219791, =2.3.0, =1.0.3, =0.0.1, =0.0.1, =0.0.1, =0.0.15 - @pixwell/city-performer-widget 1.0.0 and more Source cves: CVE-2021-23327 Source advisory: SNYK:JS-APEXCHARTS-1300579...

abbegm (>=0.1.0, <=0.5.0), acacia (0.2.0) +565 more potentially affected by CVE-2021-38190 via nalgebra (>=0.11.2, <=0.26.2)

nalgebra CARGO version =0.11.2, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.3.0 and more Source cves: CVE-2021-38190 Source advisory: OSV:RUSTSEC-2021-0070...

@brudi-toolbox/id (>=1.4.5-next.1, <=2.0.4), @cimpress/simple-auth-wrapper (>=3.0.0, <=3.1.6) +4 more potentially affected by CVE-2021-32641 via auth0-lock (>=11.0.1, <=11.28.1)

auth0-lock NPM version =11.0.1, =1.4.5-next.1, =3.0.0, =0.0.1, =1.0.42, =0.11.0, =0.25.0 Source cves: CVE-2021-32641 Source advisory: OSV:GHSA-JR3J-WHM4-9WWM...

@backstage/plugin-catalog (>=0.0.0-nightly-202011242419, <=0.2.9), @backstage/plugin-techdocs (>=0.0.0-nightly-202011132190, <=0.7.0) +2 more potentially affected by CVE-2021-32660 via @backstage/techdocs-common (>=0.0.0-nightly-20220923026, <=0.5.1)

@backstage/techdocs-common NPM version =0.0.0-nightly-20220923026, =0.0.0-nightly-202011242419, =0.0.0-nightly-202011132190, =0.0.0-nightly-202011132190, =0.0.0-nightly-202111222339, =0.3.5 Source cves: CVE-2021-32660 Source advisory: OSV:GHSA-PWHF-39XG-4RXW...

@backstage/plugin-api-docs (>=0.1.1-alpha.18, <=0.1.1), @backstage/plugin-catalog (>=0.0.0-nightly-202010102951, <=0.2.9) +20 more potentially affected by CVE-2021-32661 via @backstage/plugin-techdocs (>=0.0.0-nightly-20220708025041, <=0.5.8)

@backstage/plugin-techdocs NPM version =0.0.0-nightly-20220708025041, =0.1.1-alpha.18, =0.0.0-nightly-202010102951, =0.1.1-alpha.22, =0.1.1-alpha.25, =0.1.1-alpha.17, =0.1.1-alpha.22, =0.1.1-alpha.25, =0.1.1-alpha.9, =0.1.1-alpha.22, =0.1.1-alpha.13, =0.1.1-alpha.19, =0.0.0-nightly-20220504024625...

@backstage/plugin-catalog (>=0.0.0-nightly-202011242419, <=0.2.9), @backstage/plugin-techdocs (>=0.0.0-nightly-202011132190, <=0.7.0) +2 more potentially affected by CVE-2021-32662 via @backstage/techdocs-common (>=0.0.0-nightly-20220923026, <=0.5.1)

@backstage/techdocs-common NPM version =0.0.0-nightly-20220923026, =0.0.0-nightly-202011242419, =0.0.0-nightly-202011132190, =0.0.0-nightly-202011132190, =0.0.0-nightly-202111222339, =0.3.5 Source cves: CVE-2021-32662 Source advisory: OSV:GHSA-PGF8-28GG-VPR6...

airmash-protocol (>=0.2.0, <=0.3.0), altv-core (0.1.0) +246 more potentially affected by CVE-2021-45695 via mopa (0.2.2)

mopa CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on mopa and may be impacted: - airmash-protocol =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =0.6.0, =0.7.0, =0.15.3 and more Source cves:...

7ghost (>=4.11.25, <=4.11.46), @100mslive/hms-excalidraw (>=0.1.3, <=0.1.14) +1202 more potentially affected by CVE-2021-32640 via ws (>=6.0.0, <=6.2.1)

ws NPM version =6.0.0, =4.11.25, =0.1.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =7.0.0-rc1, =0.1.0, =4.4.0-rc.1, =4.2.2, =2.9.0, =0.0.1-alpha.95, =1.0.0-alpha.46, =1.2.0, =1.0.2, =1.0.4 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...

@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +163 more potentially affected by CVE-2021-32640 via ws (>=5.0.0, <=5.2.2)

ws NPM version =5.0.0, =0.1.2, =0.3.7, =0.1.8, =1.0.0, =1.0.0, =1.0.17-beta, =1.3.6, =0.1.0, =3.0.0-alpha.1, =3.0.0-alpha.1, =1.0.21, =1.0.27 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...

10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +2768 more potentially affected by CVE-2021-32640 via ws (>=7.0.0, <=7.4.5)

ws NPM version =7.0.0, =1.0.0, =0.0.12, =0.0.12, =3.10.1, =5.0.0, =1.14.2, =1.0.1, =0.1.13, =0.0.4, =1.0.2, =0.1.0, =1.0.0, =1.0.4 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.12), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.3.7) +71 more potentially affected by unknown CVE via tinymce (>=5.0.6, <=5.7.0)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =10.3.1-snapshot-1616513687673, =0.18.0, =0.7.9-0, =0.0.1-alpha.9, =15.0.1, =1.2.2, =1.18.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5VM8-HHGR-JCJP...

277snippet-cli (>=1.0.0, <=1.0.2), 40au-isteven-angular-multiselect (4.0.0) +740 more potentially affected by CVE-2025-11149 via node-static (>=0.5.6, <=0.7.11)

node-static NPM version =0.5.6, =1.0.0, =1.0.5, =0.0.5, =0.0.1, =0.0.1, =17.0.6 and more Source cves: CVE-2025-11149 Source advisory: SNYK:JS-NODESTATIC-1297183...

rvm-windows (>=0.0.1, <=1.0.7), simpartic (>=0.1.4, <=0.8.8) +1 more potentially affected by CVE-2021-23416 via curly-bracket-parser (1.3.5)

curly-bracket-parser NPM version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on curly-bracket-parser and may be impacted: - rvm-windows =0.0.1, =0.1.4, =0.3.0, =0.9.54 Source cves: CVE-2021-23416 Source advisory: SNYK:JS-CURLYBRACKETPARSER-12971...

@graphql-mesh/container (>=0.0.4-alpha-4e6432fb.0, <=0.0.62), @graphql-mesh/openapi (>=0.10.2, <=0.16.9) +13 more potentially affected by unknown CVE via json-ptr (2.0.0)

json-ptr NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-ptr and may be impacted: - @graphql-mesh/container =0.0.4-alpha-4e6432fb.0, =0.10.2, =0.5.2, =0.0.2, =0.6.0, =0.0.1, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =0.0.2, =1.0.264,...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +24089 more potentially affected by CVE-2021-23424 via ansi-html (>=0.0.4, <=0.0.7)

ansi-html NPM version =0.0.4, =1.0.1, =1.1.0 - 0726react 0.1.1 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

@molgenis-ui/core-ui (>=0.2.2, <=0.5.3), @molgenis/core-ui (0.2.4) +12 more potentially affected by CVE-2021-20087 via jquery-deparam (>=0.1.0, <=0.5.3)

jquery-deparam NPM version =0.1.0, =0.2.2, =0.1.0, =0.0.1, =1.0.1, =1.2.1, =1.4.4, =1.0.0, =1.0.0, =1.2.1, =0.0.6, =0.3.8, =0.17.22 Source cves: CVE-2021-20087 Source advisory: OSV:GHSA-XG68-CHX2-253G...

1tp (>=0.0.1, <=0.11.2), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +2802 more potentially affected by CVE-2021-31597 via xmlhttprequest-ssl (>=1.5.1, <=1.5.5)

xmlhttprequest-ssl NPM version =1.5.1, =0.0.1, =1.0.2, =4.11.25, =0.1.3, =0.0.15, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =0.2.9-dev-10, =0.13.0-alkemio, =0.17.0-alkemio-1 and more Source cves: CVE-2021-31597 Source advisory: OSV:GHSA-72MH-269X-7MH5...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +18078 more potentially affected by CVE-2021-23364 via browserslist (>=4.0.0, <=4.16.4)

browserslist NPM version =4.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0...

swagger-ui-browserify (>=2.1.4-a, <=2.2.3) potentially affected by CVE-2021-20086 via jquery-bbq (1.0.0)

jquery-bbq NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jquery-bbq and may be impacted: - swagger-ui-browserify =2.1.4-a, =2.2.3 Source cves: CVE-2021-20086 Source advisory: OSV:GHSA-7W8J-85WM-6XFQ...

@anothersoftware/lotion-connect (>=0.1.23, <=0.1.24), @beaker/core (>=1.0.0, <=3.0.2) +371 more potentially affected by CVE-2021-23386 via dns-packet (>=3.0.1, <=5.2.1)

dns-packet NPM version =3.0.1, =0.1.23, =1.0.0, =1.0.0, =1.2.2-urlencoded, =2.0.6, =2.0.2, =0.0.1, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =1.0.1, =1.0.1, =2.0.0, =2.2.0 and more Source cves: CVE-2021-23386 Source advisory: OSV:GHSA-3WCQ-X3MQ-6R9P...

aloha-sd (>=1.0.0, <=1.0.7) potentially affected by CVE-2021-23386 via dns-packet (1.1.1)

dns-packet NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dns-packet and may be impacted: - aloha-sd =1.0.0, =1.0.7 Source cves: CVE-2021-23386 Source advisory: OSV:GHSA-3WCQ-X3MQ-6R9P...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +398 more potentially affected by CVE-2021-23400 via nodemailer (>=6.0.0, <=6.6.0)

nodemailer NPM version =6.0.0, =1.0.49, =0.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =2.4.4 and more Source cves: CVE-2021-23400 Source advisory: SNYK:JS-NODEMAILER-1296415...

justy-entity (>=1.0.0, <=1.3.7) potentially affected by CVE-2021-23388 via forms (1.1.4)

forms NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on forms and may be impacted: - justy-entity =1.0.0, =1.3.7 Source cves: CVE-2021-23388 Source advisory: SNYK:JS-FORMS-1296389...

aquamarine-vm (>=0.1.0, <=0.5.2), ashpaper-plus (>=0.5.0, <=0.5.1) +140 more potentially affected by CVE-2021-32629 via cranelift-codegen (>=0.14.0, <=0.72.0)

cranelift-codegen CARGO version =0.14.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.2.9, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.26.1, =0.13.2, =0.8.0-alpha1, =0.14.0, =0.14.0, =0.66.0 and more Source cves: CVE-2021-32629 Source advisory: OSV:RUSTSEC-2021-0067...

about-filter (0.1.0), acari-lib (>=0.1.11, <=0.1.12) +467 more potentially affected by unknown CVE via twoway (>=0.1.8, <=0.2.2)

twoway CARGO version =0.1.8, =0.1.11, =0.1.0, =0.9.2, =0.1.0, =0.4.0-beta.1, =0.1.0-beta.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =0.1.18 - akibisuto-stylus 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0146...

@anothersoftware/lotion-connect (>=0.1.23, <=0.1.24), @beaker/core (>=1.0.0, <=3.0.2) +371 more potentially affected by CVE-2021-23386 via dns-packet (>=3.0.1, <=5.2.1)

dns-packet NPM version =3.0.1, =0.1.23, =1.0.0, =1.0.0, =1.2.2-urlencoded, =2.0.6, =2.0.2, =0.0.1, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =1.0.1, =1.0.1, =2.0.0, =2.2.0 and more Source cves: CVE-2021-23386 Source advisory: SNYK:JS-DNSPACKET-1293563...

aloha-sd (>=1.0.0, <=1.0.7) potentially affected by CVE-2021-23386 via dns-packet (1.1.1)

dns-packet NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dns-packet and may be impacted: - aloha-sd =1.0.0, =1.0.7 Source cves: CVE-2021-23386 Source advisory: SNYK:JS-DNSPACKET-1293563...

2bsafe-api (>=1.0.1, <=1.0.2), 3architecture (>=1.0.0, <=1.7.0) +2315 more potentially affected by CVE-2020-7765 via @firebase/util (>=0.1.4, <=0.3.3-2020926155854)

@firebase/util NPM version =0.1.4, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.1, =1.0.24, =0.65.0, =0.53.0, =0.50.0, =1.0.1, =0.0.2, =0.0.1, =0.1.0 and more Source cves: CVE-2020-7765 Source advisory: OSV:GHSA-FPM5-VV97-JFWG...

gulp-controlled-merge-json (0.2.1) potentially affected by CVE-2020-28268 via controlled-merge (1.1.0)

controlled-merge NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on controlled-merge and may be impacted: - gulp-controlled-merge-json 0.2.1 Source cves: CVE-2020-28268 Source advisory: OSV:GHSA-5PG7-V24C-9RP9...

@shoplo/kit-vue (>=1.17.0, <=1.22.16), dm-cli (>=0.4.1-0, <=0.4.5) potentially affected by CVE-2020-7680 via docsify (>=4.2.1, <=4.9.1)

docsify NPM version =4.2.1, =1.17.0, =0.4.1-0, =0.4.5 Source cves: CVE-2020-7680 Source advisory: OSV:GHSA-QPQH-46QJ-VWCW...

@applicaster/zapp-react-native-fast-image (>=1.0.0, <=1.1.0-beta.0), @momo-platform/component-kits (1.1.74) +5 more potentially affected by CVE-2020-7696 via react-native-fast-image (>=8.1.2, <=8.2.0)

react-native-fast-image NPM version =8.1.2, =1.0.0, =0.0.1, =0.1.0, =1.2.23 Source cves: CVE-2020-7696 Source advisory: OSV:GHSA-6XHG-Q9C8-RJ32...

rollup.config.flow (4.0.0), tslib-cli (>=1.0.0, <=5.4.1) potentially affected by CVE-2020-7684 via rollup-plugin-serve (1.0.1)

rollup-plugin-serve NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on rollup-plugin-serve and may be impacted: - rollup.config.flow 4.0.0 - tslib-cli =1.0.0, =5.4.1 Source cves: CVE-2020-7684 Source advisory: OSV:GHSA-4J46-MP85-MV8C...

@deg-skeletor/plugin-express (>=1.4.0, <=1.4.8), @magento/create-pwa (>=1.0.0-alpha.1, <=3.0.0-alpha.4) +5 more potentially affected by CVE-2020-8186 via devcert (>=1.0.0, <=1.1.1)

devcert NPM version =1.0.0, =1.4.0, =1.0.0-alpha.1, =2.0.0-rc.15, =2.0.0-rc.3, =0.0.99, =1.0.0, =1.0.0, =1.0.5 Source cves: CVE-2020-8186 Source advisory: OSV:GHSA-4228-7QVX-F4RQ...

@ardier16/node-lb (>=1.0.0, <=2.0.0), @economist/backstopjs (>=0.0.1, <=0.0.3) +138 more potentially affected by CVE-2020-7679 via casperjs (>=1.1.0-beta3, <=1.1.4)

casperjs NPM version =1.1.0-beta3, =1.0.0, =0.0.1, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =1.2.0, =0.4.0, =0.1.0, =0.0.2, =3.40.4-ez-bin.7, =0.0.1, =0.0.2, =0.0.3 - autocallinjs 1.0.0 and more Source cves: CVE-2020-7679 Source advisory: OSV:GHSA-VRR3-5R3V-7XFW...

cd-core (>=0.0.3, <=0.0.11) potentially affected by CVE-2020-7675 via cd-messenger (2.7.12)

cd-messenger NPM version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on cd-messenger and may be impacted: - cd-core =0.0.3, =0.0.11 Source cves: CVE-2020-7675 Source advisory: OSV:GHSA-V756-4WHV-48VC...

@igames/ghost (>=3.41.6, <=4.0.0-alpha.2), @loftysoul/soul (>=3.0.3-1-soul, <=3.0.16-soul) +8 more potentially affected by CVE-2021-32817 via express-hbs (>=2.0.2, <=2.3.5)

express-hbs NPM version =2.0.2, =3.41.6, =3.0.3-1-soul, =3.0.7, =4.0.4, =1.26.1, =3.17.1, =3.2.1, =0.0.4, =0.1.1-alpha.0 - sign-alex 1.0.1 Source cves: CVE-2021-32817 Source advisory: OSV:GHSA-RWXP-HWWF-653V...

@27works/posto (2.0.2), @lluis/codo (>=2.1.2, <=2.1.3) +70 more potentially affected by CVE-2021-32818 via haml-coffee (>=1.4.1, <=1.14.1)

haml-coffee NPM version =1.4.1, =2.1.2, =0.0.2, =2.1.3, =0.0.1, =0.0.1, =0.2.0, =0.2.0, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-32818 Source advisory: OSV:GHSA-M7MF-VM62-7X3Q...

101 (>=0.2.0, <=1.6.2), 101-es6 (0.8.0) +306 more potentially affected by CVE-2021-25943 via 101 (>=1.2.0, <=1.6.3)

101 NPM version =1.2.0, =0.2.0, =0.1.0, =0.0.0, =0.0.2, =2.13.1, =0.0.1, =0.0.2, =0.1.0, =1.0.0, =1.1.2, =0.0.1, =1.0.0, =0.0.48, =0.0.62 and more Source cves: CVE-2021-25943 Source advisory: OSV:GHSA-CWCX-RXGC-CMW3...

@tucows/donejs-carousel-plugin (>=0.1.0, <=3.3.0), @tucows/tucows-carousel-plugin (>=0.1.0, <=0.2.0) +22 more potentially affected by CVE-2021-23429 via transpile (>=0.9.7, <=2.8.0)

transpile NPM version =0.9.7, =0.1.0, =0.1.0, =0.0.1, =0.0.1-0, =1.0.0, =0.5.0, =0.3.0-beta.0, =5.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2021-23429 Source advisory: SNYK:JS-TRANSPILE-1290774...