@joshyzou/sendcrypto (>=1.0.0 <=1.0.2), accept-bitcoin (>=0.0.6 <=0.0.9) +14 more potentially affected by CVE-2018-1000023 via insight-api (=0.4.3)
insight-api NPM version =0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on insight-api and may be impacted: - @joshyzou/sendcrypto =1.0.0, =0.0.6, =0.0.1, =4.0.0, =1.1.1, =4.1.0, =0.0.1, =4.1.1, =0.5.1, =0.8.7 and more Source cves: CVE-2018-1000023...