gulp-controlled-merge-json (0.2.1) potentially affected by CVE-2020-28268 via controlled-merge (1.1.0)

controlled-merge NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on controlled-merge and may be impacted: - gulp-controlled-merge-json 0.2.1 Source cves: CVE-2020-28268 Source advisory: OSV:GHSA-5PG7-V24C-9RP9...

@shoplo/kit-vue (>=1.17.0, <=1.22.16), dm-cli (>=0.4.1-0, <=0.4.5) potentially affected by CVE-2020-7680 via docsify (>=4.2.1, <=4.9.1)

docsify NPM version =4.2.1, =1.17.0, =0.4.1-0, =0.4.5 Source cves: CVE-2020-7680 Source advisory: OSV:GHSA-QPQH-46QJ-VWCW...

@applicaster/zapp-react-native-fast-image (>=1.0.0, <=1.1.0-beta.0), @momo-platform/component-kits (1.1.74) +5 more potentially affected by CVE-2020-7696 via react-native-fast-image (>=8.1.2, <=8.2.0)

react-native-fast-image NPM version =8.1.2, =1.0.0, =0.0.1, =0.1.0, =1.2.23 Source cves: CVE-2020-7696 Source advisory: OSV:GHSA-6XHG-Q9C8-RJ32...

rollup.config.flow (4.0.0), tslib-cli (>=1.0.0, <=5.4.1) potentially affected by CVE-2020-7684 via rollup-plugin-serve (1.0.1)

rollup-plugin-serve NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on rollup-plugin-serve and may be impacted: - rollup.config.flow 4.0.0 - tslib-cli =1.0.0, =5.4.1 Source cves: CVE-2020-7684 Source advisory: OSV:GHSA-4J46-MP85-MV8C...

@deg-skeletor/plugin-express (>=1.4.0, <=1.4.8), @magento/create-pwa (>=1.0.0-alpha.1, <=3.0.0-alpha.4) +5 more potentially affected by CVE-2020-8186 via devcert (>=1.0.0, <=1.1.1)

devcert NPM version =1.0.0, =1.4.0, =1.0.0-alpha.1, =2.0.0-rc.15, =2.0.0-rc.3, =0.0.99, =1.0.0, =1.0.0, =1.0.5 Source cves: CVE-2020-8186 Source advisory: OSV:GHSA-4228-7QVX-F4RQ...

@ardier16/node-lb (>=1.0.0, <=2.0.0), @economist/backstopjs (>=0.0.1, <=0.0.3) +138 more potentially affected by CVE-2020-7679 via casperjs (>=1.1.0-beta3, <=1.1.4)

casperjs NPM version =1.1.0-beta3, =1.0.0, =0.0.1, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =1.2.0, =0.4.0, =0.1.0, =0.0.2, =3.40.4-ez-bin.7, =0.0.1, =0.0.2, =0.0.3 - autocallinjs 1.0.0 and more Source cves: CVE-2020-7679 Source advisory: OSV:GHSA-VRR3-5R3V-7XFW...

cd-core (>=0.0.3, <=0.0.11) potentially affected by CVE-2020-7675 via cd-messenger (2.7.12)

cd-messenger NPM version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on cd-messenger and may be impacted: - cd-core =0.0.3, =0.0.11 Source cves: CVE-2020-7675 Source advisory: OSV:GHSA-V756-4WHV-48VC...

@igames/ghost (>=3.41.6, <=4.0.0-alpha.2), @loftysoul/soul (>=3.0.3-1-soul, <=3.0.16-soul) +8 more potentially affected by CVE-2021-32817 via express-hbs (>=2.0.2, <=2.3.5)

express-hbs NPM version =2.0.2, =3.41.6, =3.0.3-1-soul, =3.0.7, =4.0.4, =1.26.1, =3.17.1, =3.2.1, =0.0.4, =0.1.1-alpha.0 - sign-alex 1.0.1 Source cves: CVE-2021-32817 Source advisory: OSV:GHSA-RWXP-HWWF-653V...

@27works/posto (2.0.2), @lluis/codo (>=2.1.2, <=2.1.3) +70 more potentially affected by CVE-2021-32818 via haml-coffee (>=1.4.1, <=1.14.1)

haml-coffee NPM version =1.4.1, =2.1.2, =0.0.2, =2.1.3, =0.0.1, =0.0.1, =0.2.0, =0.2.0, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-32818 Source advisory: OSV:GHSA-M7MF-VM62-7X3Q...

101 (>=0.2.0, <=1.6.2), 101-es6 (0.8.0) +306 more potentially affected by CVE-2021-25943 via 101 (>=1.2.0, <=1.6.3)

101 NPM version =1.2.0, =0.2.0, =0.1.0, =0.0.0, =0.0.2, =2.13.1, =0.0.1, =0.0.2, =0.1.0, =1.0.0, =1.1.2, =0.0.1, =1.0.0, =0.0.48, =0.0.62 and more Source cves: CVE-2021-25943 Source advisory: OSV:GHSA-CWCX-RXGC-CMW3...

@tucows/donejs-carousel-plugin (>=0.1.0, <=3.3.0), @tucows/tucows-carousel-plugin (>=0.1.0, <=0.2.0) +22 more potentially affected by CVE-2021-23429 via transpile (>=0.9.7, <=2.8.0)

transpile NPM version =0.9.7, =0.1.0, =0.1.0, =0.0.1, =0.0.1-0, =1.0.0, =0.5.0, =0.3.0-beta.0, =5.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2021-23429 Source advisory: SNYK:JS-TRANSPILE-1290774...

evm (>=0.13.0, <=0.20.0), evm-gasometer (>=0.13.0, <=0.20.0) +2 more potentially affected by unknown CVE via evm-core (>=0.13.1, <=0.20.0)

evm-core CARGO version =0.13.1, =0.13.0, =0.13.0, =0.13.0, =2.0.0-alpha.3, =2.0.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0066...

evm (>=0.22.0, <=0.22.1), evm-gasometer (0.22.0) +1 more potentially affected by unknown CVE via evm-core (0.22.0)

evm-core CARGO version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on evm-core and may be impacted: - evm =0.22.0, =0.22.1 - evm-gasometer 0.22.0 - evm-runtime 0.22.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0066...

@adeunis/codecs (>=1.3.0, <=1.4.0), @linkapi.solutions/nodejs-sdk (>=1.0.5, <=2.0.2) +3 more potentially affected by CVE-2020-7772 via doc-path (>=2.0.0, <=2.1.0)

doc-path NPM version =2.0.0, =1.3.0, =1.0.5, =3.2.0, =3.7.7 Source cves: CVE-2020-7772 Source advisory: OSV:GHSA-GM8G-XHH8-RMWR...

3nit-utils (0.24.0), @8base/api-cli (>=0.0.1, <=0.1.0) +346 more potentially affected by CVE-2020-7769 via nodemailer (>=6.0.0, <=6.4.15)

nodemailer NPM version =6.0.0, =0.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =1.2.1, =0.16.9, =0.17.0 - @agnostack/sync-moltin-to-shipstation 1.0.0 and more Source cves: CVE-2020-7769 Source advisory: OSV:GHSA-48WW-J4FC-435P...

@myticketing/common (>=1.0.3, <=1.0.5), @pavtickets/common (1.0.2) potentially affected by CVE-2020-7767 via express-validators (1.0.4)

express-validators NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on express-validators and may be impacted: - @myticketing/common =1.0.3, =1.0.5 - @pavtickets/common 1.0.2 Source cves: CVE-2020-7767 Source advisory:...

3architecture (>=1.0.0, <=1.7.0), @1amageek/tradable (0.9.0) +1596 more potentially affected by CVE-2020-7768 via grpc (>=1.0.0, <=1.24.3)

grpc NPM version =1.0.0, =1.0.0, =1.0.24, =0.0.2, =1.1.6, =0.0.1, =0.1.0, =1.2.1, =0.0.0-7, =1.0.0, =1.1.0 - @ampretia/composer-opus 0.2.0 - @andregarvin/cuneiform 0.0.1 and more Source cves: CVE-2020-7768 Source advisory: OSV:GHSA-PP75-XFPW-37G9...

@arkecosystem/core-new-relic (>=2.6.0-next.4, <=2.7.26), @beyounglabs/alfred (>=0.0.3, <=3.0.16) +62 more potentially affected by CVE-2020-7768 via @grpc/grpc-js (>=1.0.0, <=1.1.7)

@grpc/grpc-js NPM version =1.0.0, =2.6.0-next.4, =0.0.3, =0.1.4, =1.12.0, =0.7.1, =0.7.4, =0.7.2, =4.4.3-dev.21, =1.6.0-rc, =0.1.14-alpha-71502f6.0, =0.1.1-alpha.0, =0.0.2, =0.1.9, =2.9.0-alpha.0, =3.3.0 - @irvingjs/vip-go 3.0.0-alpha.16 and more Source cves: CVE-2020-7768 Source advisory:...

@graphql-mesh/container (>=0.0.4-alpha-4e6432fb.0, <=0.0.62), @graphql-mesh/openapi (>=0.10.2, <=0.16.9) +13 more potentially affected by CVE-2020-7766 via json-ptr (2.0.0)

json-ptr NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-ptr and may be impacted: - @graphql-mesh/container =0.0.4-alpha-4e6432fb.0, =0.10.2, =0.5.2, =0.0.2, =0.6.0, =0.0.1, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =0.0.2, =1.0.264,...

@gearedminds/tsed-api-support (2.0.0), @kabuce/api (0.0.1-alpha.42) +18 more potentially affected by CVE-2020-7748 via @tsed/core (>=5.0.1, <=5.65.6)

@tsed/core NPM version =5.0.1, =5.0.4, =5.0.4, =5.0.4, =5.34.2, =5.60.0, =5.0.4, =5.0.4, =5.34.2, =5.45.0, =5.60.0, =5.34.2, =5.0.4, =5.0.4, =5.47.0 and more Source cves: CVE-2020-7748 Source advisory: OSV:GHSA-77XQ-CPVG-7XM2...

2cs-basecode (>=0.1.0, <=0.1.1), 8bit-ghost-ui (>=1.0.0-beta.1, <=1.0.0-beta.3) +345 more potentially affected by CVE-2020-7746 via chart.js (>=2.0.0, <=2.9.3)

chart.js NPM version =2.0.0, =0.1.0, =1.0.0-beta.1, =1.0.3, =1.0.0, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =1.0.0, =7.0.1, =0.0.1-alpha.3,...

@asciidoctor/reveal.js (>=3.0.0-rc1, <=3.1.0), ace-technical-sharing-serverless-by-joseph (1.0.1) +16 more potentially affected by CVE-2020-8127 via reveal.js (>=3.0.0, <=3.8.0)

reveal.js NPM version =3.0.0, =3.0.0-rc1, =1.1.0, =0.0.31, =1.0.0, =1.0.4, =0.0.1, =0.0.0, =0.1.0, =0.0.14, =0.1.2, =0.0.1, =0.0.15 and more Source cves: CVE-2020-8127 Source advisory: OSV:GHSA-6VWX-MWP8-FH44...

0.8.18-p11 (0.8.18-p12), 0hub (1.0.0-beta.2) +1394 more potentially affected by CVE-2020-7760 via codemirror (>=5.0.0, <=5.58.1)

codemirror NPM version =5.0.0, =4.13.7-rc4, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.19.1-rc.2, =0.19.1-rc.3, =0.1.1, =0.0.1, =0.1.0, =0.1.0, =1.0.2 and more Source cves: CVE-2020-7760 Source advisory: OSV:GHSA-4GW3-8F77-F72C...

@cycle-robot-drivers/run (>=0.0.0, <=1.0.27), @wannaby/wanna-model-viewer (>=0.0.1, <=0.0.10) +17 more potentially affected by CVE-2020-7755 via dat.gui (>=0.6.5, <=0.7.7)

dat.gui NPM version =0.6.5, =0.0.0, =0.0.1, =1.0.0, =3.0.0, =0.0.0, =0.0.0, =1.0.0, =0.6.0, =0.1.0, =0.3.2, =2.0.0, =0.0.7, =0.0.0, =0.0.7 and more Source cves: CVE-2020-7755 Source advisory: OSV:GHSA-CHWR-HF3W-C984...

02strich-markdown (>=1.0.0, <=1.0.2), 10secondsofcode-custom (1.0.0) +11505 more potentially affected by CVE-2020-7753 via trim (0.0.1)

trim NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on trim and may be impacted: - 02strich-markdown =1.0.0, =1.0.0, =0.0.2, =0.0.1, =4.11.0, =0.1.0, =0.0.2, =0.2.0, =1.0.16, =1.2.0, =1.2.2 and more Source cves: CVE-2020-7753 Source...

@koj/strapi (>=0.0.0, <=1.4.0), @symbol-it/strapi-plugin-mailjet (>=0.0.1, <=0.0.2) +5 more potentially affected by CVE-2020-27664 via strapi (>=3.0.0, <=3.1.6)

strapi NPM version =3.0.0, =0.0.0, =0.0.1, =0.0.34, =0.0.1-alpha.1, =0.0.1-alpha.2 - strapi-plugin-mailjet 0.0.2 Source cves: CVE-2020-27664 Source advisory: OSV:GHSA-7FRV-9PHW-VRVR...

@baic/yolk (>=1.0.0-alpha.2, <=1.0.0-alpha.43), @baic/yolk-miniapp (>=1.0.0-alpha.1, <=1.0.0-alpha.43) +4 more potentially affected by CVE-2020-7743 via mathjs (>=7.1.0, <=7.5.0)

mathjs NPM version =7.1.0, =1.0.0-alpha.2, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.3, =2.0.12, =2.2.25 Source cves: CVE-2020-7743 Source advisory: OSV:GHSA-X2FC-MXCX-W4MF...

@demandcluster/api-plugin-files (>=1.0.0, <=1.0.4), @goodcastle/api-plugin-epayco-cash (>=0.0.3, <=0.2.5) +28 more potentially affected by CVE-2020-7742 via simpl-schema (>=1.4.1, <=1.8.1)

simpl-schema NPM version =1.4.1, =1.0.0, =0.0.3, =1.0.8, =0.0.9, =1.0.5, =1.2.3, =1.0.3, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.0.1, =0.0.1, =0.0.7 - @idigi/reaction-plugin-newsletters 0.0.2 and more Source cves: CVE-2020-7742 Source advisory: OSV:GHSA-9MX2-PRFP-8HQP...

@amitport/koangular-users (0.0.0), @antimatter-studios/dredd (>=14.1.0, <=16.1.0) +201 more potentially affected by CVE-2020-7709 via json-pointer (>=0.0.4, <=0.6.0)

json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =0.1.0, =1.0.1 - ajv-moment 1.0.0 and more Source cves: CVE-2020-7709 Source advisory: OSV:GHSA-7MG4-W3W5-X5PC...

bmoor-cache (>=0.3.0, <=0.6.0), bmoor-comm (>=0.0.1, <=0.6.0) +4 more potentially affected by CVE-2020-7736 via bmoor (>=0.0.5, <=0.5.1)

bmoor NPM version =0.0.5, =0.3.0, =0.0.1, =0.2.0, =0.1.0, =0.0.4, =0.6.0, =0.6.43 Source cves: CVE-2020-7736 Source advisory: OSV:GHSA-H3RX-G5C9-8Q4X...

@cpomelo/pomelo (2.2.7), @linix01/pomelo (2.2.9) +54 more potentially affected by CVE-2020-7620 via pomelo-monitor (>=0.3.5, <=0.3.7)

pomelo-monitor NPM version =0.3.5, =2.2.5, =1.0.0, =2.2.5, =0.0.1, =0.0.1, =1.0.1, =0.1.0, =2.2.6, =0.0.1, =0.1.0 and more Source cves: CVE-2020-7620 Source advisory: OSV:GHSA-4J54-MXF6-WXX2...

geojson2 (>=0.1.1, <=0.1.8) potentially affected by CVE-2020-28429 via geojson2kml (0.1.1)

geojson2kml NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on geojson2kml and may be impacted: - geojson2 =0.1.1, =0.1.8 Source cves: CVE-2020-28429 Source advisory: OSV:GHSA-W83X-FP72-P9QC...

sizemometer (>=0.0.3, <=0.8.1) potentially affected by CVE-2020-7619 via get-git-data (>=1.0.3, <=1.3.1)

get-git-data NPM version =1.0.3, =0.0.3, =0.8.1 Source cves: CVE-2020-7619 Source advisory: OSV:GHSA-WJ6H-7CHW-X4H2...

168wangxiao-ui (>=0.3.6, <=0.3.70), 3achatlibrary (>=1.0.0, <=1.0.9) +4552 more potentially affected by CVE-2021-3163 via quill (>=1.0.0, <=1.3.7)

quill NPM version =1.0.0, =0.3.6, =1.0.0, =19.0.0, =1.0.1, =1.0.0, =1.0.10, =3.1.1-0, =1.0.7, =19.0.0, =0.0.1, =3.0.10 and more Source cves: CVE-2021-3163 Source advisory: OSV:GHSA-4943-9VGG-GR5R...

@alicd/oc-address (>=0.1.0-beta.0, <=0.1.3), @alicd/oc-table (>=0.0.1-beta.0, <=0.0.6) +294 more potentially affected by CVE-2021-23370 via swiper (>=6.0.0, <=6.5.0)

swiper NPM version =6.0.0, =0.1.0-beta.0, =0.0.1-beta.0, =0.0.1, =2.0.0-beta.23, =0.1.0, =2.0.0-beta.0, =1.1.8, =0.1.0, =0.1.4, =0.1.0, =0.1.20, =0.1.24 - @aligov/clark-helper-plugin 0.0.8 - @aligov/clark-helper-rax 0.1.0 - @aligov/mobile-app-search 0.1.1 and more Source cves: CVE-2021-23370 Sour...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9375 more potentially affected by CVE-2021-23368 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23368 Source advisory: OSV:GHSA-HWJ9-H5MP-3PM3...

@100mslive/hms-video-react (>=0.3.27, <=0.3.59), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +529 more potentially affected by CVE-2021-23368 via postcss (>=8.0.0, <=8.2.9)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =0.1200.0-next.8 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 -...

@0negativ/hawtio-integration (>=4.13.7-rc4, <=4.13.7-rc5), @atlasmap/atlasmap.data.mapper (>=1.32.0-SNAPSHOT.20180129121405, <=1.34.0-SNAPSHOT.20180420142818) +105 more potentially affected by CVE-2019-20921 via bootstrap-select (>=1.7.3, <=1.13.5)

bootstrap-select NPM version =1.7.3, =4.13.7-rc4, =1.32.0-SNAPSHOT.20180129121405, =1.0.0, =2.0.0, =1.0.0, =1.0.0, =3.2.13, =3.0.11, =3.0.1, =3.0.7, =3.2.17, =5.4.1 and more Source cves: CVE-2019-20921 Source advisory: OSV:GHSA-7C82-MP33-R854...

@angular-ru/build-tools (14.46.0), @eui/deps-base (>=10.0.0-beta.1, <=10.3.0-snapshot-1601287379391) potentially affected by CVE-2020-7735 via ng-packagr (>=10.0.0, <=10.1.0)

ng-packagr NPM version =10.0.0, =10.0.0-beta.1, =10.3.0-snapshot-1601287379391 Source cves: CVE-2020-7735 Source advisory: OSV:GHSA-QM28-7HQV-WG5J...

@absorbtv/schema (>=0.0.1, <=0.0.3), @anacoelhovicente/primecore (0.3.4-beta.1-webhook) +262 more potentially affected by CVE-2020-8158 via typeorm (>=0.0.2-alpha.43, <=0.2.24)

typeorm NPM version =0.0.2-alpha.43, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.3, =0.0.3, =0.0.1, =6.5.1, =1.7.7-feat-bd-422-move-api-middlewares-to-shared-library.5, =0.0.1, =0.0.3, =0.1.0, =0.3.2 and more Source cves: CVE-2020-8158 Source advisory: OSV:GHSA-PF2J-9QMP-JQR2...

@antv/chart-linter (>=1.1.5, <=1.1.6), @dljsbook/data (>=0.3.2, <=0.6.1) +59 more potentially affected by CVE-2019-10806 via vega-util (>=1.1.4, <=1.12.2)

vega-util NPM version =1.1.4, =1.1.5, =0.3.2, =0.6.0, =0.0.4, =1.0.0, =0.8.0, =1.0.0-alpha.4, =0.0.0-placeholder, =0.2.4-beta.1, =0.4.3-dev10, =1.0.0, =1.4.0, =5.0.0, =6.0.2-alpha.0 and more Source cves: CVE-2019-10806 Source advisory: OSV:GHSA-6HWH-RQWF-CXXR...

@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +332 more potentially affected by CVE-2020-7733 via ua-parser-js (>=0.6.2, <=0.7.21)

ua-parser-js NPM version =0.6.2, =0.16.9, =2018.7.11-0, =2.0.1, =1.0.0-beta.11, =2.0.0-beta.1, =1.0.0, =5.0.0, =2.6.6, =6.6.0, =3.0.1, =0.1.3, =0.3.8 - @chessboard/nwb 0.25.3-next.0 and more Source cves: CVE-2020-7733 Source advisory: OSV:GHSA-662X-FHQG-9P8V...

sulu-file-system-view-prompt-here (>=1.0.2, <=1.0.4) potentially affected by CVE-2020-7602 via node-prompt-here (1.0.1)

node-prompt-here NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on node-prompt-here and may be impacted: - sulu-file-system-view-prompt-here =1.0.2, =1.0.4 Source cves: CVE-2020-7602 Source advisory: OSV:GHSA-F8FH-8RGM-227H...

exframe-integration (>=1.0.0, <=1.1.15) potentially affected by CVE-2020-7606 via docker-compose-remote-api (0.1.4)

docker-compose-remote-api NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on docker-compose-remote-api and may be impacted: - exframe-integration =1.0.0, =1.1.15 Source cves: CVE-2020-7606 Source advisory: OSV:GHSA-Q6PJ-JH94-5FPR...

@ioup/mia-bot (0.0.1) potentially affected by CVE-2021-23378 via picotts (0.1.1)

picotts NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on picotts and may be impacted: - @ioup/mia-bot 0.0.1 Source cves: CVE-2021-23378 Source advisory: OSV:GHSA-WQ7Q-5V6J-XFV6...

2fa (0.0.1), @blizzardbots/guild-emblem-generator (1.3.0) +336 more potentially affected by CVE-2020-8215 via canvas (>=1.0.0, <=1.6.10)

canvas NPM version =1.0.0, =0.0.21, =1.0.1-1, =0.99.5-beta.0, =1.2.0, =0.0.1, =1.1.0, =1.0.0, =0.4.0, =0.0.6, =0.0.7 and more Source cves: CVE-2020-8215 Source advisory: OSV:GHSA-73RG-X683-M3QW...

02-sms-async (1.0.0), 1405-authtokens (>=1.0.1, <=1.0.5) +5962 more potentially affected by CVE-2020-7610 via bson (>=1.0.1, <=1.1.1)

bson NPM version =1.0.1, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.1.4, =0.1.0, =0.1.0, =0.0.1, =0.1.3 and more Source cves: CVE-2020-7610 Source advisory: OSV:GHSA-V8W9-2789-6HHR...

abc-ecs (>=0.1.0, <=0.2.1), abc_game_engine (>=0.1.0, <=0.1.2) +308 more potentially affected by CVE-2021-38187 via anymap (>=0.10.3, <=1.0.0-beta.2)

anymap CARGO version =0.10.3, =0.1.0, =0.1.0, =1.0.0-alpha.1, =0.1.6, =0.1.0-alpha.2, =0.8.0, =0.1.0, =5.0.0, =5.2.2, =0.0.1-alpha+3, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.2 and more Source cves: CVE-2021-38187 Source advisory: OSV:RUSTSEC-2021-0065...

@adobe/aem-site-template-builder (>=0.1.7, <=0.1.8), vulnerable-js (>=1.0.0, <=1.0.2) potentially affected by CVE-2020-7730 via bestzip (2.1.6)

bestzip NPM version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on bestzip and may be impacted: - @adobe/aem-site-template-builder =0.1.7, =1.0.0, =1.0.2 Source cves: CVE-2020-7730 Source advisory: OSV:GHSA-6XV6-JPVW-CX6Q...

@benningfield-group/grunt-build-angularjs (>=0.1.0, <=0.1.2), @brandonli8/grunt-config (>=0.0.0-dev.7, <=0.0.0-dev.22) +165 more potentially affected by CVE-2020-7729 via grunt (>=1.0.0, <=1.2.1)

grunt NPM version =1.0.0, =0.1.0, =0.0.0-dev.7, =0.0.16-alpha, =1.0.0, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =0.0.13, =1.0.0, =1.0.0, =0.0.1, =1.0.7, =1.0.1, =1.1.12 and more Source cves: CVE-2020-7729 Source advisory: OSV:GHSA-M5PJ-VJJF-4M3H...