alchemy-embed-medias (>=0.4.0, <=0.5.0), globe-iframe-resizer (>=0.0.0, <=0.0.2) +4 more potentially affected by CVE-2018-1000086 via pym.js (0.4.5)

pym.js NPM version 0.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pym.js and may be impacted: - alchemy-embed-medias =0.4.0, =0.0.0, =0.2.1, =0.1.0, =0.3.0, =1.0.0, =4.0.0 Source cves: CVE-2018-1000086 Source advisory: OSV:GHSA-82GW-PQF7-Q3J2...