@emartech/fake-server (1.2.0), escher-auth (1.0.0) +5 more potentially affected by CVE-2018-1000620 via cryptiles (3.1.2)

cryptiles NPM version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptiles and may be impacted: - @emartech/fake-server 1.2.0 - escher-auth 1.0.0 - escher-suiteapi-js =10.0.0, =2.5.3, =13.0.0, =15.1.0 Source cves: CVE-2018-1000620 Source...

alcazar (>=0.0.0, <=0.0.1), beaver (>=0.0.1, <=0.0.3) +20 more potentially affected by CVE-2017-16115 via timespan (>=2.0.1, <=2.2.0)

timespan NPM version =2.0.1, =0.0.0, =0.0.1, =1.1.2, =0.6.0, =0.0.1, =0.1.0, =1.2.3, =2.0.3-alpha, =1.0.2, =0.1.1, =0.2.1, =0.2.2 and more Source cves: CVE-2017-16115 Source advisory: OSV:GHSA-F523-2F5J-GFCG...

autotest-engine (>=1.0.0, <=1.3.9), grunt-newman (1.0.7) +11 more potentially affected by CVE-2016-2515 via hawk (>=3.1.0, <=3.1.2)

hawk NPM version =3.1.0, =1.0.0, =1.0.0, =0.1.6, =1.2.25, =0.0.1, =0.0.6-prealpha.1, =1.0.0, =4.0.3, =1.0.0, =2.1.2, =2.2.0 Source cves: CVE-2016-2515 Source advisory: OSV:GHSA-JCPV-G9RR-QXRC...

grunt-http (>=2.0.0, <=2.2.0) potentially affected by CVE-2016-2515 via hawk (4.0.1)

hawk NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on hawk and may be impacted: - grunt-http =2.0.0, =2.2.0 Source cves: CVE-2016-2515 Source advisory: OSV:GHSA-JCPV-G9RR-QXRC...

@mlnmln/test-component (>=0.0.0, <=0.0.1), algoliasearch-extensions-bundle (>=1.2.1, <=4.3.9) +56 more potentially affected by CVE-2016-7103 via jquery-ui (>=1.10.4, <=1.10.5)

jquery-ui NPM version =1.10.4, =0.0.0, =1.2.1, =0.0.7-g, =0.0.1-a, =1.0.2, =0.10.1, =0.12.1, =0.1.1, =0.3.0, =0.0.1, =0.0.5, =0.0.3, =0.0.4 and more Source cves: CVE-2016-7103 Source advisory: OSV:GHSA-HPCF-8VF9-Q4GJ...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +675 more potentially affected by CVE-2016-10931 via openssl (>=0.2.18, <=0.8.3)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0, =0.2.1 and more Source cves: CVE-2016-10931 Source advisory: OSV:RUSTSEC-2016-0001...

Out-of-bounds

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

CVE-2013-6623

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...

CVE-2013-6623

The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service out-of-bounds read by leveraging the use of tree order, rather than transitive dependency order, for layout...