alpine-analytics (>=0.0.7, <=0.0.15), alpine-logging (>=0.0.11, <=0.0.14) potentially affected by unknown CVE via nforce (0.5.1)

nforce NPM version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on nforce and may be impacted: - alpine-analytics =0.0.7, =0.0.11, =0.0.14 Source cves: unknown CVE Source advisory: MEND:WS-2017-0230...

CVE-2006-1117: Undefined Security Weakness

nCipher firmware before V10, as used by 1 nShield, 2 nForce, 3 netHSM, 4 payShield, 5 SecureDB, 6 DSE200 Document Sealing Engine, 7 Time Source Master Clock TSMC, and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote...