reasy (>=1.0.0, <=1.5.1), reasy-pure (>=0.0.5, <=1.0.4) +1 more potentially affected by CVE-2017-16097 via tiny-http (>=1.2.2, <=2.0.8)

tiny-http NPM version =1.2.2, =1.0.0, =0.0.5, =1.1.0, =2.1.4 Source cves: CVE-2017-16097 Source advisory: OSV:GHSA-CCH6-5X4H-6QC5...

xtalk-demo (>=0.0.2, <=0.0.8) potentially affected by CVE-2017-16091 via xtalk (>=0.0.3, <=0.0.5)

xtalk NPM version =0.0.3, =0.0.2, =0.0.8 Source cves: CVE-2017-16091 Source advisory: OSV:GHSA-CQV6-7FWC-8M3C...

sysmonitor-client (>=0.0.1, <=1.0.0), sytemmonitor-client (0.0.1) potentially affected by CVE-2017-1000219 via windows-cpu (0.1.4)

windows-cpu NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on windows-cpu and may be impacted: - sysmonitor-client =0.0.1, =1.0.0 - sytemmonitor-client 0.0.1 Source cves: CVE-2017-1000219 Source advisory: OSV:GHSA-63M4-FHF2-CMF7...

@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +37 more potentially affected by CVE-2013-4939 via yui (>=3.5.0, <=3.9.1)

yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4939 Source advisory: OSV:GHSA-MJ87-8XF8-FP4W...

@c12e/cortex-studio-skill-lab-extension (>=0.4.4, <=0.4.7), @faicon/core (>=0.0.24, <=0.0.27) +37 more potentially affected by CVE-2017-16009 via ag-grid (>=18.0.1, <=18.1.2)

ag-grid NPM version =18.0.1, =0.4.4, =0.0.24, =5.2.0-alpha26-fix1, =1.0.2-alpha.0, =1.0.0, =1.0.0, =8.9.0, =0.2.1, =1.0.1, =1.0.0, =0.1.0, =1.1.0 and more Source cves: CVE-2017-16009 Source advisory: OSV:GHSA-WFW3-RGFR-6G67...

apish (1.2.11), apish-fork (1.2.12) +6 more potentially affected by CVE-2016-1000249 via fury-adapter-swagger (>=0.6.2, <=0.9.1)

fury-adapter-swagger NPM version =0.6.2, =1.1.0, =1.0.0, =1.2.8, =0.1.1, =0.3.35 Source cves: CVE-2016-1000249 Source advisory: OSV:GHSA-2R7F-4H2C-5X73...

gfe (1.1.0) potentially affected by CVE-2017-16040 via gfe-sass (1.0.19)

gfe-sass NPM version 1.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on gfe-sass and may be impacted: - gfe 1.1.0 Source cves: CVE-2017-16040 Source advisory: OSV:GHSA-72Q2-5RXX-XFFF...

airc (>=0.1.3, <=0.1.8), airc2 (>=1.0.0, <=1.3.1) potentially affected by CVE-2016-10647 via node-air-sdk (>=0.1.0, <=0.3.0)

node-air-sdk NPM version =0.1.0, =0.1.3, =1.0.0, =1.3.1 Source cves: CVE-2016-10647 Source advisory: OSV:GHSA-7HVM-29RF-2GF2...

frames-simulator (>=1.0.8, <=1.0.9) potentially affected by CVE-2016-10649 via frames-compiler (1.0.8)

frames-compiler NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on frames-compiler and may be impacted: - frames-simulator =1.0.8, =1.0.9 Source cves: CVE-2016-10649 Source advisory: OSV:GHSA-9CHW-XRWX-F86J...

amino-deploy (>=0.0.1, <=0.1.1), amino-drone (>=0.0.1, <=0.1.2) +65 more potentially affected by CVE-2013-4116 via npm (>=1.1.70, <=1.3.1)

npm NPM version =1.1.70, =0.0.1, =0.0.1, =0.3.4, =0.0.0, =0.12.3, =6.5.1-dev, =0.0.2, =1.0.30, =0.0.0, =0.0.1, =0.0.1, =0.2.0, =0.2.6 and more Source cves: CVE-2013-4116 Source advisory: OSV:GHSA-V3JV-WRF4-5845...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G336-C7WV-8HP3...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by CVE-2016-5682 via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: CVE-2016-5682 Source advisory: OSV:GHSA-P239-93F7-H6XF...

@corex/argon-theme (>=1.1.1, <=1.1.33), @creative-tim-official/argon-dashboard-free (1.2.0) +14 more potentially affected by CVE-2016-1000227 via bootstrap-tagsinput (0.7.1)

bootstrap-tagsinput NPM version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-tagsinput and may be impacted: - @corex/argon-theme =1.1.1, =0.27.0-rc1, =0.0.1, =0.1.0, =3.0.0, =1.2.0, =0.1.0, =0.2.0, =0.1.1, =1.2.6, =1.4.0, =0.1.89,...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by CVE-2016-1000226 via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: CVE-2016-1000226 Source advisory: OSV:GHSA-7F59-X49P-V8MQ...

@loke/mysql-orm (1.12.0), @starboard/models (>=3.0.0, <=3.0.1) +51 more potentially affected by CVE-2016-1000225 via sequelize (>=3.4.1, <=3.23.4)

sequelize NPM version =3.4.1, =3.0.0, =2.0.2, =0.0.1, =0.0.1, =2.0.0-alpha.1, =1.0.2, =0.1.0, =2.8.0, =0.0.1, =10.0.2, =1.0.1, =0.5.2, =0.0.1, =1.2.7 and more Source cves: CVE-2016-1000225 Source advisory: OSV:GHSA-5V9H-Q3GJ-C32X...

10er10 (0.23.0), 7th-setin (1.0.2) +404 more potentially affected by CVE-2015-7982 via gm (>=1.0.5, <=1.20.0)

gm NPM version =1.0.5, =0.0.13, =0.0.1, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =0.3.4, =0.5.0, =0.3.1, =0.0.1, =1.3.0, =3.9.1-patch1, =3.11.2-patch1 and more Source cves: CVE-2015-7982 Source advisory: OSV:GHSA-PJH3-JV7W-9JPR...

@akryum/hotel (>=0.8.8, <=0.8.12), @bdefore/nivo-patterned-radial-arc (0.79.1) +19 more potentially affected by CVE-2015-9239 via ansi2html (0.0.1)

ansi2html NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansi2html and may be impacted: - @akryum/hotel =0.8.8, =0.8.7, =2.0.4, =10.3.3, =1.1.0, =1.4.1, =0.9.0-0, =9.12.5, =9.12.9 and more Source cves: CVE-2015-9239 Source advisory:...

docpad-plugin-posteditor (>=2.0.0, <=2.1.2) potentially affected by CVE-2014-8881 via bleach (0.3.0)

bleach NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - docpad-plugin-posteditor =2.0.0, =2.1.2 Source cves: CVE-2014-8881 Source advisory: OSV:GHSA-MVMF-CVFX-QG55...

47pages-keystone (>=0.0.1, <=0.0.5), @amitport/koangular-users (0.0.0) +363 more potentially affected by CVE-2014-8882 via validator (>=3.1.0, <=3.19.1)

validator NPM version =3.1.0, =0.0.1, =0.0.1, =0.3.21-3, =0.3.1-integration, =1.7.99, =9.7.4, =0.6.0, =1.0.0, =0.0.1, =0.0.3 and more Source cves: CVE-2014-8882 Source advisory: OSV:GHSA-F5W6-R7RG-MCGQ...

1405-authtokens (>=1.0.1, <=1.0.5), 2048.io (0.0.1) +1308 more potentially affected by CVE-2015-1164 via serve-static (>=1.0.1, <=1.7.1)

serve-static NPM version =1.0.1, =1.0.1, =0.2.0, =1.0.37, =7.0.0, =0.0.2, =1.0.0, =0.0.1, =0.13.7, =0.0.5-SNAPSHOT.11, =3.14.2 and more Source cves: CVE-2015-1164 Source advisory: OSV:GHSA-C3X7-GJMX-R2FF...