@blueprintjs/docs (>=1.0.0, <=1.3.1), @frctl/twig (>=1.0.0-alpha.0, <=1.0.0-beta.2) +98 more potentially affected by CVE-2020-7700 via phpjs (>=1.0.2, <=1.3.2)

phpjs NPM version =1.0.2, =1.0.0, =1.0.0-alpha.0, =0.3.16, =1.2.7, =0.1.3, =1.0.1, =1.0.0, =0.7.0, =0.0.1, =0.0.1-alpha.1, =0.0.1, =0.0.7 and more Source cves: CVE-2020-7700 Source advisory: OSV:GHSA-M428-JQC4-2P5J...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2020-17479 via jpv (2.0.1)

jpv NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on jpv and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2020-17479 Source advisory: OSV:GHSA-VH6R-G38F-Q3W8...

@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +272 more potentially affected by CVE-2021-27292 via ua-parser-js (>=0.7.14, <=0.7.23)

ua-parser-js NPM version =0.7.14, =1.4.0, =0.16.9, =2018.7.11-0, =2.0.1, =1.9.0, =1.9.0, =1.0.0, =5.0.0, =1.1.3, =2.6.6, =1.0.0, =6.6.0, =7.5.3 and more Source cves: CVE-2021-27292 Source advisory: OSV:GHSA-78CJ-FXPH-M83P...

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4508 more potentially affected by CVE-2021-27515 via url-parse (>=0.1.5, <=1.4.7)

url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2021-27515 Source advisory: OSV:GHSA-9M6J-FCG5-2442...

@fengshangwuqi/appkit (>=1.0.22, <=1.0.29), @koj/strapi (>=1.4.1, <=1.4.3) +30 more potentially affected by CVE-2021-23362 via hosted-git-info (>=3.0.0, <=3.0.7)

hosted-git-info NPM version =3.0.0, =1.0.22, =1.4.1, =0.1.0, =4.0.0, =1.0.0, =3.0.0, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.1.0, =0.1.10 and more Source cves: CVE-2021-23362 Source advisory:...

421752593pro (5.6.0), @concisejs/docz-theme-ext (>=0.0.1, <=0.0.3) +81 more potentially affected by CVE-2021-23362 via hosted-git-info (>=2.1.5, <=2.8.8)

hosted-git-info NPM version =2.1.5, =0.0.1, =0.1.0, =1.3.13, =3.0.0, =2.0.0, =1.16.0, =0.0.2, =2.3.1, =1.0.0, =1.0.0, =1.3.0, =1.3.16 and more Source cves: CVE-2021-23362 Source advisory: OSV:GHSA-43F8-2H32-F4CJ...

@codious/core (>=1.0.6, <=1.2.6), @koj/strapi (>=1.4.1, <=1.4.3) +6 more potentially affected by CVE-2021-26540 via sanitize-html (>=2.1.0, <=2.3.1)

sanitize-html NPM version =2.1.0, =1.0.6, =1.4.1, =3.37.0, =2.1.56, =2.0.58, =0.12.0, =3.2.5, =3.5.2 Source cves: CVE-2021-26540 Source advisory: OSV:GHSA-MJXR-4V3X-Q3M4...

@codious/core (>=1.0.6, <=1.2.4), @koj/strapi (>=1.4.1, <=1.4.3) +6 more potentially affected by CVE-2021-26539 via sanitize-html (>=2.1.0, <=2.3.0)

sanitize-html NPM version =2.1.0, =1.0.6, =1.4.1, =3.37.0, =2.1.56, =2.0.58, =0.12.0, =3.2.5, =3.5.2 Source cves: CVE-2021-26539 Source advisory: OSV:GHSA-RJQQ-98F6-6J3R...

08cms (1.0.0), 0xweb (>=0.9.9, <=0.10.93) +29778 more potentially affected by CVE-2021-23358 via underscore (>=1.3.2, <=1.12.0)

underscore NPM version =1.3.2, =0.9.9, =0.1.1, =0.1.0, =1.0.0, =0.0.1-alpha, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =0.0.2, =0.2.2, =0.1.0, =1.5.3 and more Source cves: CVE-2021-23358 Source advisory: OSV:GHSA-CF4H-3JHX-XVHQ...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +19162 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.17.20)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.0.2, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =4.11.20 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +806 more potentially affected by CVE-2021-23337 +1 more via lodash-es (>=4.0.0, <=4.17.20)

lodash-es NPM version =4.0.0, =0.0.1-alpha.4, =0.1.10, =0.0.1, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =0.0.1, =3.2.1, =3.2.1, =0.1.0, =0.3.14, =0.4.42 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

09-nodejs (1.0.0), 11.17r (1.0.0) +333 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.4.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.1.0, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.0.0, =1.0.0-alpha.0, =1.1.0, =0.0.79, =0.0.120-2 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: OSV:GHSA-HPMR-G4PQ-JHGP...

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +2021 more potentially affected by CVE-2021-23369 via handlebars (>=4.0.0, <=4.7.6)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.2-alpha.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-23369 Source advisory: OSV:GHSA-F2JV-R9RF-7988...

roar-sdk (>=0.1.97, <=0.2.24) potentially affected by CVE-2021-23380 via roar-pidusage (1.1.7)

roar-pidusage NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on roar-pidusage and may be impacted: - roar-sdk =0.1.97, =0.2.24 Source cves: CVE-2021-23380 Source advisory: OSV:GHSA-XFXF-QW26-HR33...

reliable-macaca-slave (>=1.0.0, <=2.1.0), reliable-slave (>=1.0.0, <=1.0.3) potentially affected by CVE-2021-23381 via killing (1.0.6)

killing NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on killing and may be impacted: - reliable-macaca-slave =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2021-23381 Source advisory: OSV:GHSA-CQ77-8JPX-892G...

@1studio/ui (>=1.0.7, <=2.83.0), @clickview/player (>=1.24.1-dev.0, <=100.101.0-rc.1) +52 more potentially affected by CVE-2021-31712 via react-draft-wysiwyg (>=1.10.0, <=1.14.5)

react-draft-wysiwyg NPM version =1.10.0, =1.0.7, =1.24.1-dev.0, =0.0.2, =2.1.15, =0.1.0, =1.0.0, =1.0.0-rc.1.0.0, =0.1.1, =0.1.5, =0.8.6, =0.0.15, =2.1.19, =1.0.0, =0.10.5, =0.10.6 and more Source cves: CVE-2021-31712 Source advisory: OSV:GHSA-QCG2-H349-VWM3...

@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by CVE-2021-29491 via mixme (>=0.0.1, <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: CVE-2021-29491 Source advisory: OSV:GHSA-79JW-6WG7-R9G4...

actix-broker (>=0.1.3, <=0.1.7), actix-diesel (>=0.1.0, <=0.3.0) +896 more potentially affected by unknown CVE via cpuid-bool (>=0.1.2, <=0.2.0)

cpuid-bool CARGO version =0.1.2, =0.1.3, =0.1.0, =0.3.0, =0.3.0-alpha.1, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0064...

@amaspace-editor/builder (>=0.0.52, <=0.0.522), @instacart/eslint-config (0.3.0) +13 more potentially affected by CVE-2020-28499 via merge (2.1.0)

merge NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on merge and may be impacted: - @amaspace-editor/builder =0.0.52, =1.4.2, =4.0.19, =1.0.21, =4.0.30, =1.0.34, =2.0.25, =3.0.17, =1.0.19, =4.0.21, =4.0.26 Source cves: CVE-2020-28499...

317-project (0.0.0), 4pm-cli (>=0.0.1, <=0.0.5) +1887 more potentially affected by CVE-2020-28502 via xmlhttprequest (>=1.2.2, <=1.6.0)

xmlhttprequest NPM version =1.2.2, =0.0.1, =0.1.16-master.20181116180810, =0.1.0, =1.1.1, =0.0.4, =0.0.53, =0.0.42, =1.0.399-main, =0.1.0, =0.1.1 and more Source cves: CVE-2020-28502 Source advisory: OSV:GHSA-H4J5-C7CJ-74XG...

1tp (>=0.0.1, <=0.11.2), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +2802 more potentially affected by CVE-2020-28502 via xmlhttprequest-ssl (>=1.5.1, <=1.5.5)

xmlhttprequest-ssl NPM version =1.5.1, =0.0.1, =1.0.2, =4.11.25, =0.1.3, =0.0.15, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =0.2.9-dev-10, =0.13.0-alkemio, =0.17.0-alkemio-1 and more Source cves: CVE-2020-28502 Source advisory: OSV:GHSA-H4J5-C7CJ-74XG...

photo-cleanup (>=1.4.2, <=1.5.0) potentially affected by unknown CVE via exiftool-vendored (14.0.0)

exiftool-vendored NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on exiftool-vendored and may be impacted: - photo-cleanup =1.4.2, =1.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-4WHQ-R978-2X68...

atomic-server (>=0.10.0, <=0.22.3), basic-http-server (>=0.6.0, <=0.8.1) +44 more potentially affected by CVE-2021-38186 via comrak (>=0.1.9, <=0.9.1)

comrak CARGO version =0.1.9, =0.10.0, =0.6.0, =0.1.0, =0.1.5, =0.1.0, =0.0.1, =0.15.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.6 and more Source cves: CVE-2021-38186 Source advisory: SNYK:RUST-COMRAK-1279044...

atomic-server (>=0.10.0, <=0.22.3), basic-http-server (>=0.6.0, <=0.8.1) +44 more potentially affected by CVE-2021-38186 via comrak (>=0.1.9, <=0.9.1)

comrak CARGO version =0.1.9, =0.10.0, =0.6.0, =0.1.0, =0.1.5, =0.1.0, =0.0.1, =0.15.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.6 and more Source cves: CVE-2021-38186 Source advisory: OSV:RUSTSEC-2021-0063...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +51 more potentially affected by unknown CVE via aes-ctr (>=0.6.0, <=0.99.99)

aes-ctr CARGO version =0.6.0, =0.4.3-updated, =0.5.0, =0.1.0, =0.2.0, =0.1.0, =0.40.0, =0.40.0, =0.40.0, =0.40.0, =0.1.0, =0.1.0, =0.6.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0061...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +928 more potentially affected by unknown CVE via aesni (>=0.9.0, <=0.10.0)

aesni CARGO version =0.9.0, =0.4.3-updated, =0.1.3, =0.1.0, =0.3.0, =0.3.0-alpha.1, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0059...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +943 more potentially affected by unknown CVE via aes-soft (0.6.4)

aes-soft CARGO version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aes-soft and may be impacted: - actinium226-librespot 0.4.3 - actinium226-librespot-connect 0.4.3 - actinium226-librespot-playback =0.4.3-updated, =0.1.3, =0.1.0, =0.3.0,...

rkyv_dyn (>=0.1.0, <=0.5.1), stackstring (0.0.2) +12 more potentially affected by CVE-2021-31919 via rkyv (>=0.1.1, <=0.5.2)

rkyv CARGO version =0.1.1, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.8.0, =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.5 Source cves: CVE-2021-31919 Source advisory: OSV:RUSTSEC-2021-0054...

1-of (>=1.0.0, <=1.0.1), 3klesmanager-common (>=2.0.0, <=2.0.1) +5783 more potentially affected by CVE-2021-29469 via redis (>=2.6.0-0, <=3.1.0)

redis NPM version =2.6.0-0, =1.0.0, =2.0.0, =0.0.12, =0.0.12, =3.10.1, =1.0.0, =0.7.0, =1.0.0, =1.0.2, =1.2.1, =2.0.0, =1.0.0, =1.0.0, =2.4.0 and more Source cves: CVE-2021-29469 Source advisory: OSV:GHSA-35Q2-47Q7-3PC3...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9381 more potentially affected by CVE-2021-23382 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23382 Source advisory: SNYK:JS-POSTCSS-1255640...

@100mslive/hms-video-react (>=0.3.27, <=0.3.125), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +544 more potentially affected by CVE-2021-23382 via postcss (>=8.0.0, <=8.2.12)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =12.0.0-rc.0 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 - @babytian/openinula-repl-next...

@cloudogu/dogu-integration-test-library (0.1.0-development), @clutch-sh/tools (>=1.0.0-beta.20210406113722, <=1.0.0-beta.20210427110621) +1 more potentially affected by unknown CVE via cypress (>=7.0.0, <=7.1.0)

cypress NPM version =7.0.0, =1.0.0-beta.20210406113722, =13.1.0, =13.1.4 Source cves: unknown CVE Source advisory: SNYK:JS-CYPRESS-1255446...

@abramltd/jwt-oauth2-middleware (0.1.0), @aerocorp/cli (7.0.5) +143 more potentially affected by CVE-2017-18924 via oauth2-server (>=3.0.0, <=3.1.1)

oauth2-server NPM version =3.0.0, =1.0.0, =0.0.1, =2.1.0, =3.0.0, =0.4.1, =0.1.0, =3.0.0, =3.0.0, =3.5.8 and more Source cves: CVE-2017-18924 Source advisory: OSV:GHSA-2FW4-MGQ9-39CX...

@dci-lint/cmd-api-server (>=0.3.0, <=0.4.0), @dci-lint/test-api-client (>=0.3.0, <=0.4.0) +29 more potentially affected by CVE-2021-29443 via jose (>=1.18.1, <=1.28.0)

jose NPM version =1.18.1, =0.3.0, =0.3.0, =0.3.0, =0.10.0-unstable.0042dcd, =2.0.0, =0.1.1-alpha.289, =0.4.0, =0.1.1-alpha.289, =0.5.0-alpha.0, =0.5.0-alpha.0, =0.5.0-alpha.0, =0.4.0, =0.1.1-alpha.289, =0.1.1-alpha.289, =0.1.1-alpha.289, =0.5.0 and more Source cves: CVE-2021-29443 Source advisory...

@decentralized-identity/ion-sdk (>=0.1.0, <=0.4.1), @tadashi/jwt (6.0.0) +19 more potentially affected by CVE-2021-29443 via jose (>=2.0.1, <=2.0.3)

jose NPM version =2.0.1, =0.1.0, =3.0.4, =3.0.4, =3.0.5, =3.0.4, =3.0.5, =3.0.4, =3.0.6, =3.0.3, =3.0.5, =3.1.0, =2.3.2, =0.1.0, =0.1.3 and more Source cves: CVE-2021-29443 Source advisory: OSV:GHSA-58F5-HFQC-JGCH...

@cdoor/core (>=0.0.1, <=0.0.3) potentially affected by CVE-2021-29443 via jose (3.7.0)

jose NPM version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on jose and may be impacted: - @cdoor/core =0.0.1, =0.0.3 Source cves: CVE-2021-29443 Source advisory: OSV:GHSA-58F5-HFQC-JGCH...

20-exceljs (>=4.5.7, <=4.5.9), 88slot-ap (1.0.0) +744 more potentially affected by CVE-2021-23413 via jszip (>=3.0.0, <=3.6.0)

jszip NPM version =3.0.0, =4.5.7, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.5-20190507210024, =0.0.37, =0.0.36, =0.0.37, =0.20.0-20191013002840, =16.14.0-100, =16.14.0-101 and more Source cves: CVE-2021-23413 Source advisory:...

@ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=2.8.0), @apolitical/apis-client (>=1.0.0, <=1.1.5) +14 more potentially affected by CVE-2021-30246 via jsrsasign (>=10.0.0, <=10.1.13)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.2.0, =0.0.11, =9.21.5, =20.12.0, =20.12.0, =1.0.11, =0.1.1, =0.1.10, =0.1.11 and more Source cves: CVE-2021-30246 Source advisory: OSV:GHSA-27FJ-MC8W-J9WG...

7ghost (>=4.11.0, <=4.11.46), @0x18b2ee/parse-server (>=3.10.1, <=3.11.0) +2858 more potentially affected by CVE-2021-28918 via netmask (>=1.0.4, <=1.0.6)

netmask NPM version =1.0.4, =4.11.0, =3.10.1, =0.1.0, =0.1.0, =1.6.1, =0.0.1, =2.0.0, =0.0.9, =0.0.175, =0.0.81, =2.0.0, =0.9.17-pre.6, =1.0.5 and more Source cves: CVE-2021-28918 Source advisory: OSV:GHSA-4C7M-WXVM-R7GC...

@convergence/jointjs-utils (0.4.0), aihub (>=1.0.1, <=1.0.2) +7 more potentially affected by CVE-2020-28479 via jointjs (>=3.1.0, <=3.2.0)

jointjs NPM version =3.1.0, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =0.9.0, =0.10.1 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2020-28479 Source advisory: OSV:GHSA-CQ8R-FC3Q-6HG2...

@scullyio/init (1.0.0-beta.4), @scullyio/scully-plugin-google-analytics (>=1.0.0-beta.0, <=1.0.0) potentially affected by CVE-2020-28470 via @scullyio/scully (1.0.0-beta.5)

@scullyio/scully NPM version 1.0.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on @scullyio/scully and may be impacted: - @scullyio/init 1.0.0-beta.4 - @scullyio/scully-plugin-google-analytics =1.0.0-beta.0, =1.0.0 Source cves: CVE-2020-28470...

@scullyio/init (1.0.0-beta.4) potentially affected by CVE-2020-28470 via @scullyio/ng-lib (1.0.0-beta.1)

@scullyio/ng-lib NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on @scullyio/ng-lib and may be impacted: - @scullyio/init 1.0.0-beta.4 Source cves: CVE-2020-28470 Source advisory: OSV:GHSA-R96P-V3CR-GFV8...

0726react (0.1.1), 0x0.icu.anima (0.1.0) +13091 more potentially affected by CVE-2020-7693 via sockjs (>=0.0.4, <=0.3.19)

sockjs NPM version =0.0.4, =1.0.4, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.4.0, =1.4.1 and more Source cves: CVE-2020-7693 Source advisory: OSV:GHSA-C9G6-9335-X697...

diversion (>=0.2.0, <=0.4.6), push-it (>=0.1.0, <=0.1.4) +1 more potentially affected by CVE-2020-8823 via sockjs (>=0.0.4, <=0.2.1)

sockjs NPM version =0.0.4, =0.2.0, =0.1.0, =0.0.0pre25, =0.0.0pre31 Source cves: CVE-2020-8823 Source advisory: OSV:GHSA-HH8V-JMH3-9437...

jsreport-keycloak-auth (>=0.0.1, <=0.0.2) potentially affected by CVE-2020-8128 via jsreport (2.0.0)

jsreport NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jsreport and may be impacted: - jsreport-keycloak-auth =0.0.1, =0.0.2 Source cves: CVE-2020-8128 Source advisory: OSV:GHSA-5FJJ-CFH2-GHC5...

@dfeidao/server (>=5.0.0, <=5.0.1), @mm-works/p000005 (>=1.0.202004231823, <=1.0.202004272011) +6 more potentially affected by CVE-2020-7762 via jsreport-chrome-pdf (>=1.0.0, <=1.9.0)

jsreport-chrome-pdf NPM version =1.0.0, =5.0.0, =1.0.202004231823, =1.0.202003051337, =1.6.2-patch.1, =2.0.0, =0.0.1, =0.0.2 - jsreport-worker 0.3.1 Source cves: CVE-2020-7762 Source advisory: OSV:GHSA-934W-HVJ4-7FR6...

@attraqt/activity (>=0.0.1, <=1.3.0), @attraqt/xo-js (0.0.1) +2 more potentially affected by CVE-2020-28464 via djv (2.1.3-alpha.0)

djv NPM version 2.1.3-alpha.0 is affected by a known vulnerability. The following packages have a transitive dependency on djv and may be impacted: - @attraqt/activity =0.0.1, =1.1.8, =1.0.3, =1.1.6 Source cves: CVE-2020-28464 Source advisory: OSV:GHSA-4HV7-3Q38-97M8...

@dfeidao/server (>=4.5.201902251314, <=4.6.201910181238), @feidao-factory/server (>=5.0.201901071713, <=5.1.201902201403) +26 more potentially affected by CVE-2020-8129 via script-manager (>=0.2.0, <=0.8.6)

script-manager NPM version =0.2.0, =4.5.201902251314, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =2.0.0, =1.6.2-patch.1, =1.0.0, =1.0.1, =1.0.0, =0.4.0, =1.1.1, =0.0.1, =1.0.1, =1.0.3 and more Source cves: CVE-2020-8129 Source advisory:...

eslint-plugin-mozilla (>=2.7.0, <=2.9.2), gatsby (>=2.24.6-telemetry-test.19, <=2.24.6-telemetry-test.20) +3 more potentially affected by CVE-2020-28448 via multi-ini (2.1.0)

multi-ini NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on multi-ini and may be impacted: - eslint-plugin-mozilla =2.7.0, =2.24.6-telemetry-test.19, =2.12.64-telemetry-test.19, =0.1.54-telemetry-test.19, =1.3.21-telemetry-test.19,...