7ghost (>=4.11.0, <=4.11.46), @0x18b2ee/parse-server (>=3.10.1, <=3.11.0) +2859 more potentially affected by CVE-2021-28918 +1 more via netmask (>=1.0.4, <=1.0.6)

netmask NPM version =1.0.4, =4.11.0, =3.10.1, =0.1.0, =0.1.0, =1.6.1, =0.0.1, =2.0.0, =0.0.9, =0.0.175, =0.0.81, =2.0.0, =0.9.17-pre.6, =1.0.5 and more Source cves: CVE-2021-28918, CVE-2021-29418 Source advisory: OSV:GHSA-4C7M-WXVM-R7GC...

@convergence/jointjs-utils (0.4.0), aihub (>=1.0.1, <=1.0.2) +7 more potentially affected by CVE-2020-28479 via jointjs (>=3.1.0, <=3.2.0)

jointjs NPM version =3.1.0, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =0.9.0, =0.10.1 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2020-28479 Source advisory: OSV:GHSA-CQ8R-FC3Q-6HG2...

@scullyio/init (1.0.0-beta.4), @scullyio/scully-plugin-google-analytics (>=1.0.0-beta.0, <=1.0.0) potentially affected by CVE-2020-28470 via @scullyio/scully (1.0.0-beta.5)

@scullyio/scully NPM version 1.0.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on @scullyio/scully and may be impacted: - @scullyio/init 1.0.0-beta.4 - @scullyio/scully-plugin-google-analytics =1.0.0-beta.0, =1.0.0 Source cves: CVE-2020-28470...

@scullyio/init (1.0.0-beta.4) potentially affected by CVE-2020-28470 via @scullyio/ng-lib (1.0.0-beta.1)

@scullyio/ng-lib NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on @scullyio/ng-lib and may be impacted: - @scullyio/init 1.0.0-beta.4 Source cves: CVE-2020-28470 Source advisory: OSV:GHSA-R96P-V3CR-GFV8...

0726react (0.1.1), 0x0.icu.anima (0.1.0) +13088 more potentially affected by CVE-2020-7693 via sockjs (>=0.0.4, <=0.3.19)

sockjs NPM version =0.0.4, =1.0.4, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.4.0, =1.4.1 and more Source cves: CVE-2020-7693 Source advisory: OSV:GHSA-C9G6-9335-X697...

diversion (>=0.2.0, <=0.4.6), push-it (>=0.1.0, <=0.1.4) +1 more potentially affected by CVE-2020-8823 via sockjs (>=0.0.4, <=0.2.1)

sockjs NPM version =0.0.4, =0.2.0, =0.1.0, =0.0.0pre25, =0.0.0pre31 Source cves: CVE-2020-8823 Source advisory: OSV:GHSA-HH8V-JMH3-9437...

jsreport-keycloak-auth (>=0.0.1, <=0.0.2) potentially affected by CVE-2020-8128 via jsreport (2.0.0)

jsreport NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jsreport and may be impacted: - jsreport-keycloak-auth =0.0.1, =0.0.2 Source cves: CVE-2020-8128 Source advisory: OSV:GHSA-5FJJ-CFH2-GHC5...

@dfeidao/server (>=5.0.0, <=5.0.1), @mm-works/p000005 (>=1.0.202004231823, <=1.0.202004272011) +6 more potentially affected by CVE-2020-7762 via jsreport-chrome-pdf (>=1.0.0, <=1.9.0)

jsreport-chrome-pdf NPM version =1.0.0, =5.0.0, =1.0.202004231823, =1.0.202003051337, =1.6.2-patch.1, =2.0.0, =0.0.1, =0.0.2 - jsreport-worker 0.3.1 Source cves: CVE-2020-7762 Source advisory: OSV:GHSA-934W-HVJ4-7FR6...

@attraqt/activity (>=0.0.1, <=1.3.0), @attraqt/xo-js (0.0.1) +2 more potentially affected by CVE-2020-28464 via djv (2.1.3-alpha.0)

djv NPM version 2.1.3-alpha.0 is affected by a known vulnerability. The following packages have a transitive dependency on djv and may be impacted: - @attraqt/activity =0.0.1, =1.1.8, =1.0.3, =1.1.6 Source cves: CVE-2020-28464 Source advisory: OSV:GHSA-4HV7-3Q38-97M8...

@dfeidao/server (>=4.5.201902251314, <=4.6.201910181238), @feidao-factory/server (>=5.0.201901071713, <=5.1.201902201403) +26 more potentially affected by CVE-2020-8129 via script-manager (>=0.2.0, <=0.8.6)

script-manager NPM version =0.2.0, =4.5.201902251314, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =2.0.0, =1.6.2-patch.1, =1.0.0, =1.0.1, =1.0.0, =0.4.0, =1.1.1, =0.0.1, =1.0.1, =1.0.3 and more Source cves: CVE-2020-8129 Source advisory:...

eslint-plugin-mozilla (>=2.7.0, <=2.9.2), gatsby (>=2.24.6-telemetry-test.19, <=2.24.6-telemetry-test.20) +3 more potentially affected by CVE-2020-28448 via multi-ini (2.1.0)

multi-ini NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on multi-ini and may be impacted: - eslint-plugin-mozilla =2.7.0, =2.24.6-telemetry-test.19, =2.12.64-telemetry-test.19, =0.1.54-telemetry-test.19, =1.3.21-telemetry-test.19,...

eslint-plugin-mozilla (>=2.7.0, <=2.9.2), gatsby (>=2.24.6-telemetry-test.19, <=2.24.6-telemetry-test.20) +3 more potentially affected by CVE-2020-28460 via multi-ini (2.1.0)

multi-ini NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on multi-ini and may be impacted: - eslint-plugin-mozilla =2.7.0, =2.24.6-telemetry-test.19, =2.12.64-telemetry-test.19, =0.1.54-telemetry-test.19, =1.3.21-telemetry-test.19,...

machinepack-npm (>=6.0.0, <=6.3.0) potentially affected by CVE-2019-10801 via enpeem (2.1.0)

enpeem NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on enpeem and may be impacted: - machinepack-npm =6.0.0, =6.3.0 Source cves: CVE-2019-10801 Source advisory: OSV:GHSA-HMW2-MVVH-JF5J...

@joshmccall/atomic-stories (>=0.0.0-semantically-released, <=1.9.5), abmcontent (0.1.0) +3 more potentially affected by CVE-2020-7787 via react-adal (>=0.3.15, <=0.4.24)

react-adal NPM version =0.3.15, =0.0.0-semantically-released, =0.1.0, =0.1.3 - widgettestcomponent 0.1.0 Source cves: CVE-2020-7787 Source advisory: OSV:GHSA-7MPX-VG3C-CMR4...

@bigab/gulp-testee (>=0.0.1, <=0.0.2), books-fe-polymer-dev-sample (1.0.0) +13 more potentially affected by CVE-2021-23330 via launchpad (>=0.2.1, <=0.7.5)

launchpad NPM version =0.2.1, =0.0.1, =0.3.1, =0.0.1, =0.0.1, =1.0.1, =0.2.0, =0.0.1, =0.0.5, =2.0.15, =1.0.1, =2.0.3, =3.4.2 Source cves: CVE-2021-23330 Source advisory: OSV:GHSA-7H8X-WMQ2-7MFF...

@csnext/cs-timeline (>=0.0.101-beta.22, <=0.0.132-beta.446), @net7/components (>=3.0.2-rc.2, <=4.3.2) +4 more potentially affected by CVE-2020-28487 via vis-timeline (>=7.1.3, <=7.4.2)

vis-timeline NPM version =7.1.3, =0.0.101-beta.22, =3.0.2-rc.2, =2.0.0-alpha2, =1.3.0, =3.1.1-build1667201258, =3.1.2 Source cves: CVE-2020-28487 Source advisory: OSV:GHSA-9MRV-456V-PF22...

@jheubuch/ng-ws-template (>=1.0.1, <=1.0.2), pg-generator (>=3.5.0, <=4.8.3) +1 more potentially affected by CVE-2021-26275 via eslint-fixer (0.1.5)

eslint-fixer NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on eslint-fixer and may be impacted: - @jheubuch/ng-ws-template =1.0.1, =3.5.0, =4.8.3 - pg-generator-react-template 0.1.0 Source cves: CVE-2021-26275 Source advisory:...

@theia/debug (>=1.1.0-next.14531578, <=1.8.0-next.fea40a2c), @theia/plugin-dev (>=1.1.0-next.14531578, <=1.8.0-next.fea40a2c) +4 more potentially affected by CVE-2021-28161 via @theia/console (>=1.1.0-next.a62a6b92, <=1.8.0-next.61200efc)

@theia/console NPM version =1.1.0-next.a62a6b92, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.8.0-next.fea40a2c Source cves: CVE-2021-28161 Source advisory: OSV:GHSA-CWG9-C9CR-P5FQ...

@theia/plantuml (>=0.1.2, <=0.1.7), @theia/plugin-dev (>=0.9.0-next.d57c6a91, <=0.13.0-next.fb398d67) +6 more potentially affected by CVE-2019-17636 via @theia/mini-browser (>=0.3.19, <=0.15.0-next.87487802)

@theia/mini-browser NPM version =0.3.19, =0.1.2, =0.9.0-next.d57c6a91, =0.9.0-next.d57c6a91, =0.9.0-next.d57c6a91, =0.13.0-next.0860ab1b, =0.3.14, =0.0.4, =0.0.33 - coffee-workflow-analyzer 1.0.1 Source cves: CVE-2019-17636 Source advisory: OSV:GHSA-F7VX-J8MP-3H2X...

chhyun-utils (>=1.0.12, <=1.0.39), s3-uploader (>=2.0.0-rc.1, <=2.0.3) +3 more potentially affected by CVE-2019-10788 via im-metadata (3.0.1)

im-metadata NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on im-metadata and may be impacted: - chhyun-utils =1.0.12, =2.0.0-rc.1, =0.0.1, =2.0.2, =2.0.3 - wn-s3-uploader 1.0.0 Source cves: CVE-2019-10788 Source advisory:...

chhyun-utils (>=1.0.12, <=1.0.39), jotunheimr (>=1.11.0, <=1.12.1) +4 more potentially affected by CVE-2019-10787 via im-resize (>=2.0.2, <=2.3.2)

im-resize NPM version =2.0.2, =1.0.12, =1.11.0, =1.0.0-rc.1, =0.0.1, =2.0.2, =2.0.3 - wn-s3-uploader 1.0.0 Source cves: CVE-2019-10787 Source advisory: OSV:GHSA-R9VM-RHMF-7HXX...

applets-helper (>=1.0.1, <=1.0.5), git-metric (0.1.7) +1 more potentially affected by CVE-2021-26541 via gitlog (4.0.3)

gitlog NPM version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitlog and may be impacted: - applets-helper =1.0.1, =1.0.2, =1.0.5 Source cves: CVE-2021-26541 Source advisory: OSV:GHSA-67MM-M3WX-J7FR...

m2345a-atm (>=1.0.0, <=1.0.1), ndsh (>=1.5.1, <=1.5.5) +1 more potentially affected by CVE-2020-28490 via async-git (1.13.0)

async-git NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on async-git and may be impacted: - m2345a-atm =1.0.0, =1.5.1, =1.8.1, =1.9.1 Source cves: CVE-2020-28490 Source advisory: OSV:GHSA-6QPR-9MC5-7GCH...

@alisowski/homebridge-samsungtv-control (2.0.2), @dustinblackman/homebridge-samsungtv-control (>=2.0.1, <=2.0.2) +2 more potentially affected by CVE-2020-7786 via macfromip (1.1.1)

macfromip NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on macfromip and may be impacted: - @alisowski/homebridge-samsungtv-control 2.0.2 - @dustinblackman/homebridge-samsungtv-control =2.0.1, =2.0.0-alpha.1, =0.0.5, =0.2.7 Source cves...

cobalt-bin (>=0.15.1, <=0.17.5), hyper-static-server (>=0.1.1, <=0.5.1) +10 more potentially affected by unknown CVE via sass-rs (0.2.2)

sass-rs CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on sass-rs and may be impacted: - cobalt-bin =0.15.1, =0.1.1, =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.1-alpha1, =0.7.0, =0.1.0, =0.1.2, =0.1.8 Source cves: unknown CVE Source advisor...

actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:RUSTSEC-2021-0113...

@rioclaid/cdk-constructs (>=0.7.10, <=0.7.30), @taimos/projen (>=0.0.1, <=0.0.35) +2 more potentially affected by CVE-2021-21423 via projen (>=0.6.22, <=0.15.18)

projen NPM version =0.6.22, =0.7.10, =0.0.1, =0.0.4, =0.0.2, =0.0.35 Source cves: CVE-2021-21423 Source advisory: OSV:GHSA-GG2G-M5WC-VCCQ...

@finsemble/finsemble-electron-adapter (>=5.4.0, <=5.4.8), @hydrooj/hydrojudge (>=2.3.11, <=2.4.13) +5 more potentially affected by CVE-2021-21388 via systeminformation (>=5.0.6, <=5.6.3)

systeminformation NPM version =5.0.6, =5.4.0, =2.3.11, =1.15.3, =1.16.0, =9.14.2, =2.18.0, =9.14.2, =9.15.5 Source cves: CVE-2021-21388 Source advisory: OSV:GHSA-JFF2-QJW8-5476...

@bifot/adapter-knex (12.0.2), @blitzjs/cli (>=0.25.0-canary.2, <=0.45.2) +74 more potentially affected by CVE-2021-21414 via @prisma/sdk (>=2.0.0-alpha.919, <=2.19.0)

@prisma/sdk NPM version =2.0.0-alpha.919, =0.25.0-canary.2, =0.35.0-canary.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =12.0.0, =10.0.0, =1.0.3, =7.3.8, =7.5.2 and more Source cves: CVE-2021-21414 Source advisory: OSV:GHSA-PXCC-HJ8W-FMM7...

7ghost (>=4.11.0, <=4.11.46), @100k/type-graphql-filter-mikroorm (>=0.0.1, <=0.3.5) +844 more potentially affected by unknown CVE via validator (>=13.0.0, <=13.5.2)

validator NPM version =13.0.0, =4.11.0, =0.0.1, =1.1.0, =1.2.336, =1.0.0, =1.3.6, =0.0.1, =0.0.7, =0.13.3, =0.13.3, =0.13.2, =0.13.3, =0.1.5, =0.1.16, =0.13.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-VALIDATOR-1090602...

7ghost (>=4.11.0, <=4.11.46), @100k/type-graphql-filter-mikroorm (>=0.0.1, <=0.3.5) +844 more potentially affected by unknown CVE via validator (>=13.0.0, <=13.5.2)

validator NPM version =13.0.0, =4.11.0, =0.0.1, =1.1.0, =1.2.336, =1.0.0, =1.3.6, =0.0.1, =0.0.7, =0.13.3, =0.13.3, =0.13.2, =0.13.3, =0.1.5, =0.1.16, =0.13.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-VALIDATOR-1090601...

7ghost (>=4.11.0, <=4.11.46), @100k/type-graphql-filter-mikroorm (>=0.0.1, <=0.3.5) +844 more potentially affected by unknown CVE via validator (>=13.0.0, <=13.5.2)

validator NPM version =13.0.0, =4.11.0, =0.0.1, =1.1.0, =1.2.336, =1.0.0, =1.3.6, =0.0.1, =0.0.7, =0.13.3, =0.13.3, =0.13.2, =0.13.3, =0.1.5, =0.1.16, =0.13.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-VALIDATOR-1090599...

01homework (>=1.0.0, <=1.0.1), 6ix (0.0.0-canary.0) +2335 more potentially affected by CVE-2021-3765 via validator (>=11.1.0, <=13.6.0)

validator NPM version =11.1.0, =1.0.0, =4.11.0, =0.0.0-canary.0, =0.0.1, =0.0.62-test, =0.0.1, =0.4.0, =11.1.0, =2.0.0-beta.43, =2.7.0, =0.1.1-alpha.51, =0.0.16-development, =1.1.0, =1.1.0, =1.2.390 and more Source cves: CVE-2021-3765 Source advisory: SNYK:JS-VALIDATOR-1090600...

@random-guys/coralpay-pgp (>=0.0.1, <=0.1.0), @woocommerce/components (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2021-23392 via locutus (>=2.0.10, <=2.0.14)

locutus NPM version =2.0.10, =0.0.1, =1.0.0, =1.1.0, =1.0.2, =1.0.52, =0.1.0, =0.2.1 Source cves: CVE-2021-23392 Source advisory: SNYK:JS-LOCUTUS-1090597...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9375 more potentially affected by CVE-2021-23368 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23368 Source advisory: SNYK:JS-POSTCSS-1090595...

@100mslive/hms-video-react (>=0.3.27, <=0.3.59), @aagames-fe/google-translate (>=0.0.2, <=0.0.14) +529 more potentially affected by CVE-2021-23368 via postcss (>=8.0.0, <=8.2.9)

postcss NPM version =8.0.0, =0.3.27, =0.0.2, =1.1.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.0.3, =0.5.4, =2.0.0-alpha.0, =2.8.0-canary.4, =2.7.5, =2.8.0-canary.5, =0.1101.0-next.0, =0.1200.0-next.8 - @arnosaine/react-scripts 4.0.3 - @astuteo/build-config 5.4.5 -...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +18068 more potentially affected by CVE-2021-23364 via browserslist (>=4.0.0, <=4.16.4)

browserslist NPM version =4.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0...

a2d (>=0.1.0, <=0.1.11), aart (>=0.1.0, <=0.1.1) +1017 more potentially affected by unknown CVE via rusttype (>=0.1.2, <=0.9.3)

rusttype CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.4.0, =0.3.0, =0.1.0, =0.2.0, =0.0.10, =0.9.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0140...

@agneta/cli (>=0.14.7, <=0.14.15), @servisbot/servisbot-cli (>=9.4.0, <=10.3.2) +3 more potentially affected by CVE-2020-7774 via y18n (4.0.0)

y18n NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on y18n and may be impacted: - @agneta/cli =0.14.7, =9.4.0, =0.14.4, =1.0.0-rc.1, =1.0.0-rc.7 Source cves: CVE-2020-7774 Source advisory: OSV:GHSA-C4W7-XM78-47VH...

@codedungeon/gunner (>=0.0.1-dev.9, <=0.80.1), @codedungeon/laravel-versions-cli (>=0.0.3, <=0.1.0) +74 more potentially affected by CVE-2020-8298 via fs-path (>=0.0.22, <=0.0.24)

fs-path NPM version =0.0.22, =0.0.1-dev.9, =0.0.3, =0.0.9, =1.0.2, =1.0.1, =0.0.1, =1.0.0, =1.0.0, =0.0.40, =1.0.1, =0.0.1, =1.0.1, =0.1.0, =1.0.0, =1.0.2 and more Source cves: CVE-2020-8298 Source advisory: OSV:GHSA-8MRF-64FW-2X75...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23389 +1 more via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23389, CVE-2021-32831 Source advisory: SNYK:JS-TOTALJS-6056532...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23389 +1 more via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23389, CVE-2021-32831 Source advisory: SNYK:JS-TOTALJS-1088607...

@alicd/oc-address (>=0.1.0-beta.0, <=0.1.3), @alicd/oc-table (>=0.0.1-beta.0, <=0.0.6) +294 more potentially affected by CVE-2021-23370 via swiper (>=6.0.0, <=6.5.0)

swiper NPM version =6.0.0, =0.1.0-beta.0, =0.0.1-beta.0, =0.0.1, =2.0.0-beta.23, =0.1.0, =2.0.0-beta.0, =1.1.8, =0.1.0, =0.1.4, =0.1.0, =0.1.20, =0.1.24 - @aligov/clark-helper-plugin 0.0.8 - @aligov/clark-helper-rax 0.1.0 - @aligov/mobile-app-search 0.1.1 and more Source cves: CVE-2021-23370 Sour...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23344 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23344 Source advisory: OSV:GHSA-3WJ8-VP9H-RM6M...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +11764 more potentially affected by CVE-2021-28092 via is-svg (>=2.1.0, <=4.2.1)

is-svg NPM version =2.1.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =1.1.8, =1.0.0, =1.0.4 - 4design 0.0.1 and more Source cves: CVE-2021-28092 Source advisory: OSV:GHSA-7R28-3M3F-R2PR...

1.1.0 (1.0.0), 1c (>=6.2.0, <=8.0.0) +7248 more potentially affected by CVE-2021-27290 via ssri (>=5.2.2, <=6.0.1)

ssri NPM version =5.2.2, =6.2.0, =0.0.1, =2.0.0, =0.1.0, =0.0.2, =0.3.0, =1.0.0, =1.0.0-beta.1, =1.0.4, =1.0.1, =1.6.1 and more Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...

@eik/core (>=1.0.0-alpha.19, <=1.2.6), @eik/service (>=1.0.0-alpha.13, <=1.2.32) +2 more potentially affected by CVE-2021-27290 via ssri (8.0.0)

ssri NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ssri and may be impacted: - @eik/core =1.0.0-alpha.19, =1.0.0-alpha.13, =26.4.0, =2.4.7, =2.5.4 Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...

byte-common (1.0.0), registry-sync (>=2.4.1, <=2.4.6) potentially affected by CVE-2021-27290 via ssri (>=7.0.0, <=7.1.0)

ssri NPM version =7.0.0, =2.4.1, =2.4.6 Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...

1ib (>=1.0.9, <=1.0.11), 4front-cli (>=0.0.1, <=0.0.20) +375 more potentially affected by CVE-2021-23354 via printf (>=0.0.4, <=0.6.0)

printf NPM version =0.0.4, =1.0.9, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.5, =1.3.0-beta.0, =1.2.26, =1.2.31, =7.54.0 and more Source cves: CVE-2021-23354 Source advisory: OSV:GHSA-XFHP-GMH8-R8V2...

@servable/server (>=1.0.0, <=1.14.0), dockertools (1.8.2) +5 more potentially affected by CVE-2020-7785 via node-ps (0.0.2)

node-ps NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-ps and may be impacted: - @servable/server =1.0.0, =1.0.0, =1.5.1, =0.2.1, =0.0.3, =0.0.4 - servable-publishable 1.1.0 Source cves: CVE-2020-7785 Source advisory:...