@absolunet/nwayo-workflow (>=3.2.0 <=3.3.6), @londondevstudio/gush (>=0.9.0 <=0.10.0) +53 more potentially affected by CVE-2020-7601 via gulp-scss-lint (>=0.1.12 <=1.0.0)

gulp-scss-lint NPM version =0.1.12, =3.2.0, =0.9.0, =1.0.0, =1.1.1, =0.0.27, =0.0.33, =1.0.34, =1.1.54 - fear-core-dev =1.3.2 and more Source cves: CVE-2020-7601 Source advisory: SNYK:JS-GULPSCSSLINT-560114...

grunt-dwebp (>=0.1.0 <=1.1.2), gulp-dwebp (>=0.1.0 <=1.0.2) +1 more potentially affected by CVE-2016-10633 via dwebp-bin (>=0.1.6 <=1.0.0)

dwebp-bin NPM version =0.1.6, =0.1.0, =0.1.0, =0.2.8, =0.2.9 Source cves: CVE-2016-10633 Source advisory: OSV:GHSA-4PF7-579W-F4GM...

anione (>=1.2.0 <=1.2.7), gulp-imageoptim (=0.1.0) potentially affected by CVE-2016-10596 via imageoptim (>=0.3.4 <=0.4.2)

imageoptim NPM version =0.3.4, =1.2.0, =1.2.7 - gulp-imageoptim =0.1.0 Source cves: CVE-2016-10596 Source advisory: OSV:GHSA-MM7H-323R-9P4G...

codeofwar (=6.0.0), exifhx (=0.0.1) +5 more potentially affected by CVE-2016-10602 via haxe (>=0.320.6 <=4.1.10)

haxe NPM version =0.320.6, =0.0.0, =2.0.2, =2.0.1, =1.0.9, =1.2.1 - txthx =0.9.4 Source cves: CVE-2016-10602 Source advisory: OSV:GHSA-G785-775G-F2G8...

backender (>=0.0.1 <=0.0.7), gulp-backender (>=0.0.4 <=0.0.5) potentially affected by CVE-2016-10604 via dalek-browser-chrome (=0.0.11)

dalek-browser-chrome NPM version =0.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on dalek-browser-chrome and may be impacted: - backender =0.0.1, =0.0.4, =0.0.5 Source cves: CVE-2016-10604 Source advisory: OSV:GHSA-6Q8Q-RVF4-M4PG...

browsertime (>=1.0.0-alpha.0 <=1.0.0-beta.17), gome-sitespeed.io (>=1.0.0 <=1.2.3) +6 more potentially affected by CVE-2016-10694 via alto-saxophone (>=2.21.0 <=2.25.0)

alto-saxophone NPM version =2.21.0, =1.0.0-alpha.0, =1.0.0, =1.0.0, =4.0.0, =0.2.0, =0.1.0, =0.1.3 Source cves: CVE-2016-10694 Source advisory: OSV:GHSA-2P69-GXPM-5469...

ecc-gulp-tasks (=2.4.3) potentially affected by CVE-2016-10548 via reduce-css-calc (=1.2.4)

reduce-css-calc NPM version =1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on reduce-css-calc and may be impacted: - ecc-gulp-tasks =2.4.3 Source cves: CVE-2016-10548 Source advisory: OSV:GHSA-4662-J96G-MV46...

Retire.Js - Scanner Detecting The Use Of JavaScript Libraries With Known Vulnerabilities

What you require you must also retire There is a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development,but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10...