@dhakshan82/react-webpack-builder (1.0.0), @getsensibill/web-sdk (0.1.0) +6 more potentially affected by CVE-2021-3822 via jsoneditor (>=9.0.5, <=9.5.5)

jsoneditor NPM version =9.0.5, =2.0.7, =0.0.1, =0.0.85, =0.0.1, =0.0.3 - vue-language-json-view 0.0.1 Source cves: CVE-2021-3822 Source advisory: OSV:GHSA-HHFG-6HFC-RVXM...

@deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7), @ibuk/epubjs-rn (>=0.2.40, <=0.2.43) +49 more potentially affected by CVE-2021-3820 via i (>=0.2.0, <=0.3.6)

i NPM version =0.2.0, =0.1.2-beta.1, =0.2.40, =0.2.38, =0.3.25, =0.2.33, =4.0.0-beta.6, =0.2.5, =0.6.0, =0.1.5, =0.0.2, =0.2.37, =0.0.1, =0.0.3 and more Source cves: CVE-2021-3820 Source advisory: OSV:GHSA-X55W-VJJP-222R...

@christianhugo/cli (>=0.7.2-beta.6, <=0.7.3-beta.15), @christianhugo/mobile-builder (>=0.7.2-beta.6, <=0.7.4-beta.9) +72 more potentially affected by CVE-2021-23445 via datatables.net (>=1.10.12, <=1.10.25)

datatables.net NPM version =1.10.12, =0.7.2-beta.6, =0.7.2-beta.6, =0.7.2-beta.6, =0.7.2-beta.6, =0.6.4-beta.10, =0.7.2-beta.7, =0.6.4-beta.10, =0.6.4-beta.10, =1.0.0, =1.0.0, =3.0.0, =3.0.11 and more Source cves: CVE-2021-23445 Source advisory: OSV:GHSA-H73Q-5WMJ-Q8PJ...

aurelia-sails-socket-client (0.10.0) potentially affected by CVE-2021-41097 via aurelia-path (1.0.0-beta.1)

aurelia-path NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on aurelia-path and may be impacted: - aurelia-sails-socket-client 0.10.0 Source cves: CVE-2021-41097 Source advisory: OSV:GHSA-3C9C-2P65-QVWV...

@abcum/ember-table (>=0.1.0, <=0.1.6), @afosto/components (>=1.0.1, <=1.0.7) +146 more potentially affected by CVE-2021-23446 via handsontable (>=0.25.1, <=9.0.2)

handsontable NPM version =0.25.1, =0.1.0, =1.0.1, =1.0.4, =1.2.0-beta.0, =0.0.134, =0.3.59, =0.5.0-before.35, =0.5.0-before.35, =1.0.1, =0.5.0-before.35, =0.5.0-before.35, =1.0.0, =1.0.0, =0.1.0, =26.1.1 and more Source cves: CVE-2021-23446 Source advisory: SNYK:JS-HANDSONTABLE-1726770...

acid-store (>=0.8.0, <=0.11.2), alsa (0.5.1) +13 more potentially affected by CVE-2021-45707 via nix (0.21.0)

nix CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on nix and may be impacted: - acid-store =0.8.0, =0.1.4, =0.1.4, =0.1.4, =4.0.0, =0.1.0-alpha.1, =0.1.2, =0.10.0, =1.4.10, =0.13.0-alpha.1, =0.0.8, =0.0.13 Source cves: CVE-2021-4570...

acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1256 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:RUSTSEC-2021-0119...

boringdb (>=0.2.0, <=0.3.10), bp7 (>=0.7.0, <=0.8.1) +19 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)

nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - boringdb =0.2.0, =0.7.0, =0.13.0, =0.4.0, =0.10.0, =0.3.0, =0.3.14, =0.4.2, =0.4.1, =0.6.1, =0.1.0, =0.1.7, =0.2.1 and more Source cves:...

@convergence/jointjs-utils (>=0.4.0, <=0.6.0), @cronapp/tools (>=1.0.0-SNAPSHOT.4, <=1.0.0-SNAPSHOT.12) +10 more potentially affected by CVE-2021-23444 via jointjs (>=3.1.0, <=3.4.1)

jointjs NPM version =3.1.0, =0.4.0, =1.0.0-SNAPSHOT.4, =1.5.2-3.1, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =1.2.0, =0.9.0, =0.12.0 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2021-23444 Source advisory: OSV:GHSA-F3PP-32QC-36W4...

access-control (0.0.7), destiny-api (1.0.0) +11 more potentially affected by unknown CVE via millisecond (>=0.0.1, <=0.1.1)

millisecond NPM version =0.0.1, =0.11.0, =0.0.0, =0.0.1, =0.4.0, =0.0.1, =1.0.0, =1.0.4, =0.0.9, =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M489-XR35-FJXR...

277snippet-cli (>=1.0.0, <=1.0.2), 40au-isteven-angular-multiselect (4.0.0) +741 more potentially affected by unknown CVE via node-static (>=0.5.6, <=0.7.11)

node-static NPM version =0.5.6, =1.0.0, =1.0.5, =0.0.5, =0.0.1, =0.0.1, =17.0.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8R4G-CG4M-X23C...

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: SNYK:JS-BOOTSTRAPTABLE-1657597...

@datadog/datadog-ci (>=0.13.7-alpha, <=0.17.0-alpha), @testgram/cli (>=0.2.0, <=0.11.0) potentially affected by CVE-2020-26301 via ssh2 (>=1.1.0, <=1.3.0)

ssh2 NPM version =1.1.0, =0.13.7-alpha, =0.2.0, =0.11.0 Source cves: CVE-2020-26301 Source advisory: OSV:GHSA-652H-XWHF-Q4H6...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +6857 more potentially affected by CVE-2021-3805 via object-path (>=0.0.1, <=0.11.7)

object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.99 and more Source cves: CVE-2021-3805 Source advisory: OSV:GHSA-8V63-CQQC-6R2C...

@21epub/resource-lib (>=1.0.0, <=1.0.3), @2fn/helpers (>=1.0.0, <=1.0.1) +3321 more potentially affected by CVE-2021-3801 via prismjs (>=1.2.0, <=1.24.1)

prismjs NPM version =1.2.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @ada87/hexo-prism-plugin 2.3.0 - @adebawo-damilare/esm-reports-app 5.2.0 - @admin-bro/design-system 1.4.0 and more Source cves:...

@nice-move/cli (>=0.5.13, <=0.5.21), @nice-move/init (>=0.1.12, <=0.2.4) +4 more potentially affected by CVE-2021-3795 via semver-regex (>=3.0.0, <=3.1.2)

semver-regex NPM version =3.0.0, =0.5.13, =0.1.12, =2.7.0, =1.2.0, =1.2.3 Source cves: CVE-2021-3795 Source advisory: OSV:GHSA-44C6-4V22-4MHX...

@asiachan/ui-h5 (>=0.0.1, <=0.0.12), @asiachan/ui-h5-test (0.0.1) +57 more potentially affected by CVE-2021-3807 via ansi-regex (5.0.0)

ansi-regex NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansi-regex and may be impacted: - @asiachan/ui-h5 =0.0.1, =0.2.16, =3.0.1-1.0, =1.0.0, =2.1.6, =0.0.0, =0.0.25, =0.0.0, =0.0.19, =0.8.5, =0.8.40 and more Source cves:...

@codedungeon/gunner (>=0.38.0, <=0.80.1), @codedungeon/laravel-versions-cli (0.1.0) +22 more potentially affected by CVE-2021-3807 via ansi-regex (>=4.0.0, <=4.1.0)

ansi-regex NPM version =4.0.0, =0.38.0, =0.0.65, =0.0.0, =0.0.41, =0.0.12, =0.0.0, =0.2.0, =3.3.69, =0.0.3, =0.2.11, =5.1.0, =4.0.58, =3.0.58, =6.0.17, =6.1.110 and more Source cves: CVE-2021-3807 Source advisory: OSV:GHSA-93Q8-GQ69-WQMW...

@bdehamer/foo-a (>=0.1.0, <=0.1.1), @platform/cell.cli (0.2.277) +10 more potentially affected by CVE-2021-3807 via ansi-regex (6.0.0)

ansi-regex NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansi-regex and may be impacted: - @bdehamer/foo-a =0.1.0, =0.1.1 - @platform/cell.cli 0.2.277 - @platform/cell.fs.sync 0.3.273 - @platform/cell.service 0.8.41 -...

abt.api.web (0.0.3) potentially affected by CVE-2021-3807 via ansi-regex (3.0.0)

ansi-regex NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansi-regex and may be impacted: - abt.api.web 0.0.3 Source cves: CVE-2021-3807 Source advisory: OSV:GHSA-93Q8-GQ69-WQMW...

@web-desktop-environment/development-edition-server (>=0.0.4, <=1.0.2), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=1.0.2) potentially affected by CVE-2021-3810 via code-server (>=3.9.2, <=3.9.3)

code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =1.0.2 Source cves: CVE-2021-3810 Source advisory: OSV:GHSA-49X3-8228-3W3M...

@cookiex/class-state (>=0.0.1, <=0.0.2), @cookiex/cli (>=0.2.10, <=0.2.11-0) +3 more potentially affected by CVE-2021-23442 via @cookiex/deep (>=0.0.1, <=0.0.6)

@cookiex/deep NPM version =0.0.1, =0.0.1, =0.2.10, =0.0.0-0.1, =0.1.2, =0.1.3 Source cves: CVE-2021-23442 Source advisory: OSV:GHSA-92V9-XH2Q-FQ9F...

@agreejs/cli (>=0.0.2, <=3.2.43), @agreejs/h5-runner (3.2.1) +56 more potentially affected by CVE-2021-3804 via @tarojs/helper (>=3.0.0, <=3.3.8)

@tarojs/helper NPM version =3.0.0, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =1.0.0-alpha.1, =1.0.0, =1.1.5, =0.0.5, =1.1.0, =3.0.0-rc.0, =3.3.8 and more Source cves: CVE-2021-3804 Source advisory: OSV:GHSA-468Q-V4JJ-485H...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +36 more potentially affected by CVE-2021-39216 +2 more via wasmtime (>=0.7.0, <=0.29.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.0, =0.8.0-alpha.2, =0.8.0-alpha.2, =0.1.1, =0.1.1, =0.1.2, =0.1.4 and more Source cves: CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 Source advisory: OSV:GHSA-Q879-9G95-56MX...

ceres-executor (>=0.1.0, <=0.2.0), inkpad-executor (0.1.0) +21 more potentially affected by CVE-2021-39216 +2 more via wasmtime (>=0.26.1, <=0.29.0)

wasmtime CARGO version =0.26.1, =0.1.0, =0.2.0, =0.1.2, =0.2.2, =0.3.0, =0.28.0, =0.26.0, =0.26.0, =0.27.0 and more Source cves: CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 Source advisory: OSV:GHSA-4873-36H9-WV49...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +36 more potentially affected by CVE-2021-39216 +2 more via wasmtime (>=0.7.0, <=0.29.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.0, =0.8.0-alpha.2, =0.8.0-alpha.2, =0.1.1, =0.1.1, =0.1.2, =0.1.4 and more Source cves: CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 Source advisory: OSV:GHSA-V4CP-H94R-M7XF...

@cromwell/admin-panel (>=1.1.3, <=2.1.8), @cromwell/cms (>=1.1.7, <=2.1.12) +115 more potentially affected by CVE-2021-39227 via zrender (>=5.0.0-alpha.1, <=5.2.0)

zrender NPM version =5.0.0-alpha.1, =1.1.3, =1.1.7, =0.0.3-beta.7, =0.0.1, =0.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =0.0.1, =7.2.2, =1.0.0, =1.1.0 - @lingxiteam/pcfactory 0.2.0 and more Source cves: CVE-2021-39227 Source advisory: OSV:GHSA-FHV8-FX5F-7FXF...

97gg-home-test (>=1.0.0, <=1.0.1), @21epub/matomo-echarts-components (>=0.1.0, <=0.1.21) +2864 more potentially affected by CVE-2021-39227 via zrender (>=4.0.0, <=4.3.2)

zrender NPM version =4.0.0, =1.0.0, =0.1.0, =0.26.6, =1.0.32, =1.0.2, =0.0.2, =0.1.1, =0.1.0, =0.1.2, =0.1.5, =0.1.24 - @aliwa/npmangularecharts 1.0.0 - @aliwa/npmreactecharts 1.0.0 and more Source cves: CVE-2021-39227 Source advisory: OSV:GHSA-FHV8-FX5F-7FXF...

@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by unknown CVE via mixme (>=0.0.1, <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-84P7-FH9C-6G8H...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +36 more potentially affected by CVE-2021-39216 +2 more via wasmtime (>=0.7.0, <=0.29.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.0, =0.8.0-alpha.2, =0.8.0-alpha.2, =0.1.1, =0.1.1, =0.1.2, =0.1.4 and more Source cves: CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 Source advisory: OSV:RUSTSEC-2021-0110...

@accordproject/cicero-cli (>=0.3.4, <=0.23.0-alpha.1), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.0-alpha.1) +143 more potentially affected by CVE-2021-23449 via vm2 (>=3.0.0, <=3.9.3)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2018.7.11-0, =2018.8.5-0, =0.9.14, =2.0.14-alpha.1392172559 and more...

@biconomy/hyphen-contracts (1.0.4), @devprotocol/protocol-l2 (>=0.0.1, <=0.0.2) +8 more potentially affected by CVE-2021-41264 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.3.1)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.0.1, =1.1.2, =1.0.1, =1.1.2, =1.0.0, =0.8.1-pr-brioux-1333.92b26c3a.36, =1.0.5, =2.3.0, =2.3.2 Source cves: CVE-2021-41264 Source advisory: OSV:GHSA-5VP3-V4HC-GX76...

@avalabs/avalanche-wallet-sdk (>=0.3.0, <=0.9.4), @b0dhidharma/contract-utils (0.1.1) +62 more potentially affected by CVE-2021-41264 via @openzeppelin/contracts (>=4.1.0, <=4.3.1)

@openzeppelin/contracts NPM version =4.1.0, =0.3.0, =0.0.2, =1.0.0, =1.1.0, =2.0.0-alpha.0, =0.1.1, =0.0.1, =3.0.0-alpha.2, =3.0.0-alpha.1, =3.0.0-alpha.1, =3.0.0-alpha.1, =0.0.0-736762ba, =0.0.23-canary and more Source cves: CVE-2021-41264 Source advisory: OSV:GHSA-5VP3-V4HC-GX76...

@biconomy/hyphen-contracts (1.0.4), @devprotocol/protocol-l2 (>=0.0.1, <=0.0.2) +8 more potentially affected by unknown CVE via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.3.1)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.0.1, =1.1.2, =1.0.1, =1.1.2, =1.0.0, =0.8.1-pr-brioux-1333.92b26c3a.36, =1.0.5, =2.3.0, =2.3.2 Source cves: unknown CVE Source advisory: OSV:GHSA-Q4H9-46XG-M3X9...

@iamkenos/fragile (>=0.1.1, <=0.1.5) potentially affected by CVE-2021-3666 via body-parser-xml (2.0.1)

body-parser-xml NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on body-parser-xml and may be impacted: - @iamkenos/fragile =0.1.1, =0.1.5 Source cves: CVE-2021-3666 Source advisory: OSV:GHSA-2GHC-6V89-PW9J...

matrix-react-sdk (>=3.24.0-rc.1, <=3.29.0) potentially affected by CVE-2021-40823 via matrix-js-sdk (>=12.0.0, <=12.4.0-rc.1)

matrix-js-sdk NPM version =12.0.0, =3.24.0-rc.1, =3.29.0 Source cves: CVE-2021-40823 Source advisory: OSV:GHSA-23CM-X6J7-6HQ3...

@alitajs/cordova (>=2.0.0-beta.2, <=2.3.2), @alitajs/create-alita (1.0.0-beta.1) +138 more potentially affected by CVE-2021-23440 via set-value (>=3.0.0, <=3.0.2)

set-value NPM version =3.0.0, =2.0.0-beta.2, =2.0.0-beta.2, =1.1.21, =1.1.9, =1.0.0, =1.4.0, =1.1.21, =1.0.0-alpha.115, =1.0.0-alpha.1, =1.0.0-alpha.3, =0.0.1, =0.0.1, =1.2.0, =1.2.1 and more Source cves: CVE-2021-23440 Source advisory: OSV:GHSA-4JQC-8M5R-9RPR...

@enonic/semantic-ui-react-form (>=2.1.0, <=2.3.0) potentially affected by CVE-2021-23440 via set-value (4.0.0)

set-value NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on set-value and may be impacted: - @enonic/semantic-ui-react-form =2.1.0, =2.3.0 Source cves: CVE-2021-23440 Source advisory: OSV:GHSA-4JQC-8M5R-9RPR...

@blerpapp/js-data-cloud-datastore (>=1.0.0-rc.2, <=1.0.0-rc.3), @citygro/vdata (>=5.0.0, <=8.10.0) +90 more potentially affected by CVE-2020-28442 +1 more via js-data (>=0.4.2, <=4.0.0-beta.4)

js-data NPM version =0.4.2, =1.0.0-rc.2, =5.0.0, =0.3.27, =0.3.0, =1.0.2, =1.0.0, =0.1.0, =0.1.2, =2.1.30, =1.2.15-alpha, =0.2.5, =1.0.0, =1.3.1 - api-fusion 0.1.2 and more Source cves: CVE-2020-28442, CVE-2021-23574 Source advisory: SNYK:JS-JSDATA-1584361...

@iamkenos/fragile (>=0.1.1, <=0.1.5) potentially affected by CVE-2021-3666 via body-parser-xml (2.0.1)

body-parser-xml NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on body-parser-xml and may be impacted: - @iamkenos/fragile =0.1.1, =0.1.5 Source cves: CVE-2021-3666 Source advisory: SNYK:JS-BODYPARSERXML-1584211...

acid-store (>=0.12.0, <=0.14.2), aliyundrive-fuse (>=0.1.0, <=0.1.14) +41 more potentially affected by unknown CVE via fuser (>=0.4.1, <=0.15.1)

fuser CARGO version =0.4.1, =0.12.0, =0.1.0, =0.2.4, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.2, =0.6.0, =1.5.5, =0.2.5, =0.2.82 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0154...

acid-store (>=0.12.0, <=0.14.2), aliyundrive-fuse (>=0.1.0, <=0.1.14) +40 more potentially affected by unknown CVE via fuser (>=0.7.0, <=0.15.1)

fuser CARGO version =0.7.0, =0.12.0, =0.1.0, =0.2.4, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.2, =0.6.0, =1.5.5, =0.2.5, =0.1.2, =0.5.2 and more Source cves: unknown CVE Source advisory: SNYK:RUST-FUSER-12671322...

@gdyfe/tools (>=1.0.0, <=1.0.10), icetest-test (1.0.1) +6 more potentially affected by CVE-2021-23562 via plupload (>=2.3.2, <=2.3.6)

plupload NPM version =2.3.2, =1.0.0, =1.0.1, =1.0.0, =0.0.28, =0.2.4, =1.0.5, =0.0.0, =0.0.37 Source cves: CVE-2021-23562 Source advisory: SNYK:JS-PLUPLOAD-1583909...

@hey_joz/gatsby-source-netlify-cms (>=0.0.10, <=0.0.11), @hey_joz/gatsby-theme-netlify-cms (>=0.0.10, <=0.0.11) +1 more potentially affected by CVE-2021-39199 via remark-html (14.0.0)

remark-html NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on remark-html and may be impacted: - @heyjoz/gatsby-source-netlify-cms =0.0.10, =0.0.10, =0.1.0, =0.1.1 Source cves: CVE-2021-39199 Source advisory: OSV:GHSA-9Q5W-79CV-947M...

@anemone/newline-use-comments (3.0.0), @elastic/docsmobile (>=0.0.0-verceltest.1, <=2.0.3-rc.1) +10 more potentially affected by CVE-2021-39199 via remark-html (13.0.1)

remark-html NPM version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on remark-html and may be impacted: - @anemone/newline-use-comments 3.0.0 - @elastic/docsmobile =0.0.0-verceltest.1, =1.3.6, =0.0.0, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =7.0.0,...

@graphprotocol/payments (>=0.0.2-next.a995f4b.40, <=0.1.0), @graphprotocol/receipts (>=0.0.2-next.a995f4b.40, <=0.1.0) +2 more potentially affected by CVE-2021-3766 via objection (>=2.1.2, <=2.2.14)

objection NPM version =2.1.2, =0.0.2-next.a995f4b.40, =0.0.2-next.a995f4b.40, =0.0.2, =0.2.0, =1.25.2 Source cves: CVE-2021-3766 Source advisory: OSV:GHSA-R659-8XFP-J327...

0i0 (1.0.10), 0xgank-tea-advice-pull (1.0.0) +9559 more potentially affected by CVE-2021-3757 via immer (>=7.0.0, <=9.0.5)

immer NPM version =7.0.0, =9.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on immer and may be impacted: - 0i0 1.0.10 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

@cookiex/class-state (>=0.0.1, <=0.0.2), @cookiex/cli (>=0.2.10, <=0.2.11-0) +3 more potentially affected by CVE-2021-23442 via @cookiex/deep (>=0.0.1, <=0.0.6)

@cookiex/deep NPM version =0.0.1, =0.0.1, =0.2.10, =0.0.0-0.1, =0.1.2, =0.1.3 Source cves: CVE-2021-23442 Source advisory: SNYK:JS-COOKIEXDEEP-1582793...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +40 more potentially affected by CVE-2021-23631 via convert-svg-to-png (>=0.3.3, <=0.5.0)

convert-svg-to-png NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =1.0.3, =0.0.1, =1.4.0, =1.5.0 and more Source cves: CVE-2021-23631 Source advisory: SNYK:JS-CONVERTSVGTOPNG-2348244...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +42 more potentially affected by CVE-2021-23631 via convert-svg-core (>=0.3.3, <=0.5.0)

convert-svg-core NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =0.3.0, =0.3.0, =1.0.3, =1.2.1 and more Source cves: CVE-2021-23631 Source advisory: SNYK:JS-CONVERTSVGCORE-1582785...