amiwo (>=0.0.1, <=0.2.3), geoshaper (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-29935 via rocket (>=0.1.6, <=0.2.11)

rocket CARGO version =0.1.6, =0.0.1, =0.1.0, =0.8.0, =0.15.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2021-29935 Source advisory: OSV:RUSTSEC-2021-0044...

2pg-oauth (>=1.0.0, <=1.0.1), 30s (>=1.5.0, <=1.5.23) +1871 more potentially affected by CVE-2021-21306 via marked (>=1.1.1, <=1.2.9)

marked NPM version =1.1.1, =1.0.0, =1.5.0, =4.11.16, =1.0.1, =0.0.1, =2.4.0, =0.12.4, =4.0.0, =0.1.1, =0.1.10, =0.0.1, =1.0.0, =2.0.0, =3.1.1 - @adonisjs/cli 4.0.13 and more Source cves: CVE-2021-21306 Source advisory: OSV:GHSA-4R62-V4VQ-HR96...

fintalk-pkg (>=2.3.20, <=2.3.22) potentially affected by CVE-2021-21304 via dynamoose (2.3.0)

dynamoose NPM version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on dynamoose and may be impacted: - fintalk-pkg =2.3.20, =2.3.22 Source cves: CVE-2021-21304 Source advisory: OSV:GHSA-RRQM-P222-8PH2...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2020-28494 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2020-28494 Source advisory: OSV:GHSA-4449-HG37-77V8...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2020-28495 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2020-28495 Source advisory: OSV:GHSA-6CF8-QHQJ-VJQM...

3m5-coco (>=0.0.2, <=0.0.981), @24hr/sentry-logger-node (>=0.4.0, <=1.2.2) +278 more potentially affected by CVE-2021-25912 via dotty (>=0.0.1, <=0.1.0)

dotty NPM version =0.0.1, =0.0.2, =0.4.0, =1.1.4, =0.0.2, =1.15.3, =0.1.0, =0.1.6, =1.0.4, =0.1.6, =0.1.0, =1.0.0, =1.0.0, =1.0.7 - @kikiemz/komzpol 1.1.2 and more Source cves: CVE-2021-25912 Source advisory: OSV:GHSA-F5C9-X9J6-87QP...

@glossgenius/eslint-config (>=1.0.2, <=1.0.7), @halonext/nestjs-express-cassandra (>=7.0.0, <=7.1.0) +7 more potentially affected by CVE-2021-26707 via merge-deep (>=3.0.0, <=3.0.2)

merge-deep NPM version =3.0.0, =1.0.2, =7.0.0, =5.2.0, =6.0.1, =0.0.1, =0.1.0-rc0, =0.0.11, =1.0.0, =1.2.4 Source cves: CVE-2021-26707 Source advisory: SNYK:JS-MERGEDEEP-1070277...

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), anitable (0.1.0) +66 more potentially affected by CVE-2021-21299 via hyper (>=0.13.0-alpha.1, <=0.13.7)

hyper CARGO version =0.13.0-alpha.1, =0.5.0-alpha.6, =0.1.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.31.1 and more Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...

easy-http-request (>=0.0.5, <=0.1.0), epic-wallet-rust-python (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-21299 via hyper (>=0.12.12, <=0.12.19)

hyper CARGO version =0.12.12, =0.0.5, =0.1.0, =0.1.0, =3.3.2, =3.3.2, =3.3.2, =3.0.0, =3.0.0, =3.0.0, =3.0.5 Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...

df-excel (>=0.1.0, <=0.1.8) potentially affected by unknown CVE via office (0.8.1)

office CARGO version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on office and may be impacted: - df-excel =0.1.0, =0.1.8 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0034...

optra (>=0.1.0, <=0.2.1) potentially affected by CVE-2021-45694 via rdiff (0.1.2)

rdiff CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on rdiff and may be impacted: - optra =0.1.0, =0.2.1 Source cves: CVE-2021-45694 Source advisory: OSV:RUSTSEC-2021-0094...

guion (>=0.1.0, <=0.2.0-dev2), guion_sdl2 (>=0.1.0, <=0.2.0-dev2) potentially affected by CVE-2021-26954 via qwutils (>=0.1.1, <=0.2.0)

qwutils CARGO version =0.1.1, =0.1.0, =0.1.0, =0.2.0-dev2 Source cves: CVE-2021-26954 Source advisory: OSV:RUSTSEC-2021-0018...

@lyngs/chain (>=0.5.0, <=0.5.1) potentially affected by unknown CVE via @lyngs/merge (1.0.9)

@lyngs/merge NPM version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on @lyngs/merge and may be impacted: - @lyngs/chain =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory: SNYK:JS-LYNGSMERGE-1069823...

opendocx-node (>=0.2.2-alpha, <=2.0.3), yatte (>=1.4.0-beta.12, <=3.0.0-alpha.1) potentially affected by CVE-2021-21277 via angular-expressions (1.0.0)

angular-expressions NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on angular-expressions and may be impacted: - opendocx-node =0.2.2-alpha, =1.4.0-beta.12, =3.0.0-alpha.1 Source cves: CVE-2021-21277 Source advisory:...

airust (0.1.6), font (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2021-26953 via postscript (>=0.2.5, <=0.11.1)

postscript CARGO version =0.2.5, =0.0.2, =0.0.2, =0.1.0, =0.4.3, =0.1.0, =0.0.2, =0.0.4 Source cves: CVE-2021-26953 Source advisory: OSV:RUSTSEC-2021-0017...

@sap/grunt-sapui5-bestpractice-build (>=1.3.17, <=1.4.11), @sap/grunt-sapui5-bestpractice-test (>=0.0.1, <=2.0.3) +19 more potentially affected by CVE-2021-21316 via less-openui5 (>=0.1.0, <=0.9.0)

less-openui5 NPM version =0.1.0, =1.3.17, =0.0.1, =1.0.2, =0.0.12, =0.0.8, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =1.0.42, =0.1.0, =0.1.0, =1.0.0-beta.1, =1.2.0 and more Source cves: CVE-2021-21316 Source advisory: OSV:GHSA-3CRJ-W4F5-GWH4...

m2345a-atm (>=1.0.0, <=1.0.1), ndsh (>=1.5.1, <=1.5.5) +1 more potentially affected by CVE-2021-3190 via async-git (1.13.0)

async-git NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on async-git and may be impacted: - m2345a-atm =1.0.0, =1.5.1, =1.8.1, =1.9.1 Source cves: CVE-2021-3190 Source advisory: OSV:GHSA-6C3F-P5WP-34MH...

@ia-cloud/node-red-contrib-ia-cloud-dashboard (>=0.0.1, <=0.1.4), @ia-cloud/node-red-dashboard-2-ia-cloud (>=1.0.0, <=1.0.1) +5 more potentially affected by CVE-2021-3223 via node-red-dashboard (>=2.3.11, <=2.17.0)

node-red-dashboard NPM version =2.3.11, =0.0.1, =1.0.0, =0.3.0, =0.0.5, =0.1.0, =0.3.3, =1.0.11, =1.0.17 Source cves: CVE-2021-3223 Source advisory: OSV:GHSA-2HW7-MXVJ-M455...

@corejam/base (>=0.0.1, <=0.0.2), @corejam/cli (>=0.0.1, <=0.0.5) +27 more potentially affected by CVE-2021-23326 via @graphql-tools/git-loader (>=6.0.0, <=6.2.5-alpha-650176ab.0)

@graphql-tools/git-loader NPM version =6.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =6.0.15, =4.0.1-alpha-00202ef.0, =4.0.1-alpha-00202ef.0, =1.13.6-alpha-c74c7b7d.14, =0.0.0-canary.02a53c5, =0.0.1, =1.0.5, =0.0.24, =0.1.0, =1.29.0, =2.0.0-alpha.36 and more Source cves: CVE-2021-23326 Source advisory:...

amethyst_nphysics (>=0.0.1, <=0.2.0), caper (>=0.12.0, <=0.13.0) +4 more potentially affected by unknown CVE via nphysics3d (>=0.10.3, <=0.20.0)

nphysics3d CARGO version =0.10.3, =0.0.1, =0.12.0, =0.4.0, =0.4.0, =0.0.2, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0148...

myelin-engine (>=0.1.0, <=0.14.2), nphysics_testbed2d (>=0.4.0, <=0.10.0) +6 more potentially affected by unknown CVE via nphysics2d (>=0.10.3, <=0.24.0)

nphysics2d CARGO version =0.10.3, =0.1.0, =0.4.0, =0.5.0, =0.5.0, =0.5.0, =0.4.0, =0.0.2, =0.2.2, =0.11.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0149...

amethyst_nphysics (>=0.0.1, <=0.2.0), arci-urdf-viz (>=0.0.1, <=0.1.0) +52 more potentially affected by unknown CVE via ncollide3d (>=0.15.4, <=0.33.0)

ncollide3d CARGO version =0.15.4, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =0.3.0, =0.12.0, =0.2.0, =0.2.0, =0.3.0, =0.2.0, =0.2.2 - f3lsurface 0.2.0 - fere 0.0.0 - fere-common 0.0.0 - fere-resources 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0150...

axosnake (>=0.1.0, <=0.1.4), bevy_rapier2d (>=0.1.1, <=0.4.0) +22 more potentially affected by unknown CVE via ncollide2d (>=0.15.4, <=0.33.0)

ncollide2d CARGO version =0.15.4, =0.1.0, =0.1.1, =0.0.0, =0.18.0, =0.0.1, =0.1.0, =0.15.3, =0.8.0, =0.4.0, =0.5.0, =0.5.0, =0.5.0, =0.46.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0151...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2020-28495 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2020-28495 Source advisory: SNYK:JS-TOTALJS-1046671...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2020-28494 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2020-28494 Source advisory: SNYK:JS-TOTALJS-1046672...

@kumologica/pocdk (>=0.0.7-beta, <=0.0.8-beta), @kumologica/pocsdk (>=0.0.9-poc, <=0.0.33-poc) +6 more potentially affected by CVE-2020-26272 via electron (>=11.0.0, <=11.0.5)

electron NPM version =11.0.0, =0.0.7-beta, =0.0.9-poc, =3.0.0, =0.32.0-alpha.47, =2.0.9, =2.0.12 - simple-git-gui 3.5.4 Source cves: CVE-2020-26272 Source advisory: OSV:GHSA-HVF8-H2QH-37M9...

@dojo/cli-build-app (>=8.0.0-alpha.1, <=8.0.1), @finsemble/finsemble-electron-adapter (>=5.1.1, <=5.2.0) +13 more potentially affected by CVE-2020-26272 via electron (>=10.1.1, <=10.1.7)

electron NPM version =10.1.1, =8.0.0-alpha.1, =5.1.1, =0.17.1, =0.31.0-RC.1, =1.0.0, =0.3.243, =1.1.17, =0.0.21, =3.0.10, =0.9.23, =2.0.1, =1.0.0, =3.4.0, =0.12.0, =0.13.5 Source cves: CVE-2020-26272 Source advisory: OSV:GHSA-HVF8-H2QH-37M9...

@capacitor-community/electron-core (>=0.0.2, <=1.0.1), @felixrieseberg/electron-prebuilt-compile (>=9.0.0-beta.1, <=9.3.5) +18 more potentially affected by CVE-2020-26272 via electron (>=9.0.0, <=9.3.5)

electron NPM version =9.0.0, =0.0.2, =9.0.0-beta.1, =5.0.0-1, =5.9.2, =0.8.2, =0.1.1, =0.3.218, =0.2.9, =3.0.7, =9.0.0, =1.1.52, =2.0.0 and more Source cves: CVE-2020-26272 Source advisory: OSV:GHSA-HVF8-H2QH-37M9...

1000components (>=0.10.1, <=0.10.3), 3base (>=0.1.0, <=0.1.31) +1889 more potentially affected by CVE-2020-28496 via three (>=0.54.0, <=0.124.0)

three NPM version =0.54.0, =0.10.1, =0.1.0, =1.0.0, =1.0.0, =1.0.0-RC.1, =2.0.40, =1.0.1, =1.4.0, =0.0.1, =1.0.0, =0.0.2, =0.0.1, =1.0.1 and more Source cves: CVE-2020-28496 Source advisory: SNYK:JS-THREE-1064931...

3dcore-lib (0.17.9), @0xcert/client (>=1.0.0-beta, <=1.0.2) +1809 more potentially affected by CVE-2020-28498 via elliptic (>=6.0.2, <=6.5.3)

elliptic NPM version =6.0.2, =1.0.0-beta, =0.1.0, =0.0.0-alpha10, =2.0.0-alpha10, =2.0.0-alpha10, =1.0.0, =1.5.1, =2.0.0-alpha0, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =2.1.1 and more Source cves: CVE-2020-28498 Source advisory:...

m2345a-atm (>=1.0.0, <=1.0.1), ndsh (>=1.5.1, <=1.5.5) +1 more potentially affected by CVE-2020-28490 via async-git (1.13.0)

async-git NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on async-git and may be impacted: - m2345a-atm =1.0.0, =1.5.1, =1.8.1, =1.9.1 Source cves: CVE-2020-28490 Source advisory: SNYK:JS-ASYNCGIT-1064877...

bear (0.1.0), proud-badge (>=0.0.1, <=0.0.5) +1 more potentially affected by CVE-2020-28438 via deferred-exec (0.3.1)

deferred-exec NPM version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on deferred-exec and may be impacted: - bear 0.1.0 - proud-badge =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2020-28438 Source advisory: SNYK:JS-DEFERREDEXEC-1050433...

console-blame (>=1.0.0, <=1.1.1), grunt-lintblame (>=0.1.0, <=0.3.5) +2 more potentially affected by CVE-2020-28434 via gitblame (>=0.1.0, <=0.1.1)

gitblame NPM version =0.1.0, =1.0.0, =0.1.0, =0.2.5, =0.9.5 - tch-lint-jshint 0.0.1 Source cves: CVE-2020-28434 Source advisory: SNYK:JS-GITBLAME-1050430...

npos-cli (>=0.0.5, <=0.0.6) potentially affected by CVE-2020-28453 via npos-tesseract (0.0.3)

npos-tesseract NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on npos-tesseract and may be impacted: - npos-cli =0.0.5, =0.0.6 Source cves: CVE-2020-28453 Source advisory: SNYK:JS-NPOSTESSERACT-1051031...

m2345a-atm (>=1.0.0, <=1.0.1), ndsh (>=1.5.1, <=1.5.5) +1 more potentially affected by CVE-2021-3190 via async-git (1.13.0)

async-git NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on async-git and may be impacted: - m2345a-atm =1.0.0, =1.5.1, =1.8.1, =1.9.1 Source cves: CVE-2021-3190 Source advisory: SNYK:JS-ASYNCGIT-1063505...

0i0 (1.0.10), @1productaweek/react-stately (>=0.1.1, <=0.1.7) +1068 more potentially affected by CVE-2020-28477 via immer (>=7.0.0, <=8.0.0)

immer NPM version =7.0.0, =0.1.1, =0.1.0, =0.0.3-alpha.52, =0.0.10, =0.0.1, =0.1.0, =0.1.1, =0.97.1-20210526212817, =0.1.0, =2.3.1, =1.0.59, =4.4.2, =4.5.9 and more Source cves: CVE-2020-28477 Source advisory: OSV:GHSA-9QMH-276G-X5PJ...

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1111 more potentially affected by CVE-2020-28481 via socket.io (>=2.0.1, <=2.3.0)

socket.io NPM version =2.0.1, =4.11.25, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =2018.7.11-0, =0.1.14, =0.0.1, =0.0.1, =1.0.0-alpha.18, =1.0.0-feature-e945fc-k9e8d9l7 and more Source cves: CVE-2020-28481 Source advisory: OSV:GHSA-FXWF-4RQH-V8G3...

@aeonlabs/vue-model-viewer (>=0.0.1, <=0.0.67), @artefacts.tech/vue-model-viewer (>=0.0.1, <=0.0.2) +21 more potentially affected by CVE-2020-28478 via gsap (>=3.0.4, <=3.5.1)

gsap NPM version =3.0.4, =0.0.1, =0.0.1, =1.1.3-alpha1, =0.0.100, =0.0.4, =0.2.10, =0.0.1-alpha.2, =1.0.0, =0.0.0, =1.1.51, =1.1.55, =0.0.12, =0.0.22, =0.0.23 and more Source cves: CVE-2020-28478 Source advisory: OSV:GHSA-6G8V-HPGW-H2V7...

@convergence/jointjs-utils (0.4.0), aihub (>=1.0.1, <=1.0.2) +7 more potentially affected by CVE-2020-28480 via jointjs (>=3.1.0, <=3.2.0)

jointjs NPM version =3.1.0, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =0.9.0, =0.10.1 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2020-28480 Source advisory: OSV:GHSA-QWP9-52H8-XGG8...

alexcrichton-cranelift-native (>=0.52.0, <=0.53.0), alexcrichton-cranelift-simplejit (0.53.0) +152 more potentially affected by CVE-2021-45687 via raw-cpuid (>=4.0.0, <=8.1.2)

raw-cpuid CARGO version =4.0.0, =0.52.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.26.1, =0.6.2, =0.5.0, =0.2.0, =0.5.1 and more Source cves: CVE-2021-45687 Source advisory: OSV:RUSTSEC-2021-0089...

audir (0.1.0), com-impl (>=0.1.0, <=0.1.1) +6 more potentially affected by CVE-2021-45681 via derive-com-impl (0.1.1)

derive-com-impl CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on derive-com-impl and may be impacted: - audir 0.1.0 - com-impl =0.1.0, =0.3.0-alpha1, =0.3.0-alpha1, =0.3.0-alpha4 - dxgi 0.3.0-alpha4 - wic 0.3.0-alpha1 Source cves:...

@byhuz/huz-ui-sigma (>=1.0.19, <=1.0.27), @deliverybot/client (>=0.7.0, <=0.7.2) +30 more potentially affected by CVE-2021-23327 via apexcharts (>=3.2.0, <=3.23.1)

apexcharts NPM version =3.2.0, =1.0.19, =0.7.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =7.20.0-snapshot-1617172219791, =2.3.0, =1.0.3, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.15.0 and more Source cves: CVE-2021-23327 Source advisory: SNYK:JS-APEXCHARTS-1062708...

@corejam/base (>=0.0.1, <=0.0.2), @corejam/cli (>=0.0.1, <=0.0.5) +27 more potentially affected by CVE-2021-23326 via @graphql-tools/git-loader (>=6.0.0, <=6.2.5-alpha-650176ab.0)

@graphql-tools/git-loader NPM version =6.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =6.0.15, =4.0.1-alpha-00202ef.0, =4.0.1-alpha-00202ef.0, =1.13.6-alpha-c74c7b7d.14, =0.0.0-canary.02a53c5, =0.0.1, =1.0.5, =0.0.24, =0.1.0, =1.29.0, =2.0.0-alpha.36 and more Source cves: CVE-2021-23326 Source advisory:...

@convergence/jointjs-utils (0.4.0), aihub (>=1.0.1, <=1.0.2) +7 more potentially affected by CVE-2020-28479 via jointjs (>=3.1.0, <=3.2.0)

jointjs NPM version =3.1.0, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =0.9.0, =0.10.1 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2020-28479 Source advisory: SNYK:JS-JOINTJS-1062038...

@convergence/jointjs-utils (0.4.0), aihub (>=1.0.1, <=1.0.2) +7 more potentially affected by CVE-2020-28480 via jointjs (>=3.1.0, <=3.2.0)

jointjs NPM version =3.1.0, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =0.9.0, =0.10.1 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2020-28480 Source advisory: SNYK:JS-JOINTJS-1024444...

addr2line (0.6.0), backtrace (>=0.3.6, <=0.3.9) +11 more potentially affected by CVE-2021-25901 via lazy-init (>=0.1.1, <=0.3.0)

lazy-init CARGO version =0.1.1, =0.3.6, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.4.0, =0.4.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2021-25901 Source advisory: OSV:RUSTSEC-2021-0004...

6xs (>=0.1.0, <=0.1.3), 7ghost (>=4.11.0, <=4.11.46) +2400 more potentially affected by CVE-2020-28472 via aws-sdk (>=2.0.0-rc1, <=2.813.0)

aws-sdk NPM version =2.0.0-rc1, =0.1.0, =4.11.0, =3.10.1, =2.0.0, =1.0.0, =0.1.0, =1.16.0, =2.0.0, =3.7.0 and more Source cves: CVE-2020-28472 Source advisory: SNYK:JS-AWSSDK-1059424...

@adobe/aio-app-scripts (>=0.6.0, <=2.3.0), @adobe/aio-cli (>=2.1.0, <=4.0.0) +21 more potentially affected by CVE-2020-28471 via properties-reader (>=2.0.0, <=2.1.1)

properties-reader NPM version =2.0.0, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =1.7.0, =0.0.16, =2.0.0-alpha.0, =2.4.1-next.238, =2.0.0-RC1, =2.1.1-next.0, =2.1.1-next.0, =2.2.1-next.5, =2.1.1-next.0, =2.5.2-next.17 and more Source cves: CVE-2020-28471 Source advisory:...

kinvey-angular-sdk (>=3.4.0, <=3.5.3), kinvey-angular2-sdk (>=3.4.1, <=3.5.2) +6 more potentially affected by CVE-2020-7741 via hellojs (>=1.13.1, <=1.14.1)

hellojs NPM version =1.13.1, =3.4.0, =3.4.1, =3.4.1, =3.4.0, =3.4.1, =3.4.0, =3.4.0, =3.4.1, =3.5.2 Source cves: CVE-2020-7741 Source advisory: OSV:GHSA-7JH9-6CPF-H4M7...

hltc-webapi-master (>=1.0.0, <=1.2.0), verda (>=0.1.0, <=1.2.1) potentially affected by CVE-2020-7784 via ts-process-promises (1.0.2)

ts-process-promises NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ts-process-promises and may be impacted: - hltc-webapi-master =1.0.0, =0.1.0, =1.2.1 Source cves: CVE-2020-7784 Source advisory: OSV:GHSA-WW4J-C2RQ-47Q8...