@careteam/mfe-init (=0.0.8), @topfeed/topfeed (>=0.0.30 <=0.0.44) +68 more potentially affected by CVE-2018-3720 via assign-deep (>=0.1.2 <=0.4.6)

assign-deep NPM version =0.1.2, =0.0.30, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.2.0, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =2.3.0 and more Source cves: CVE-2018-3720 Source advisory: OSV:GHSA-XCVV-84J5-JW9H...

dev-srv (>=0.1.3 <=0.3.1), gfm-srv (>=0.0.2 <=1.1.3) potentially affected by CVE-2018-3714 via node-srv (>=0.3.3 <=1.2.6)

node-srv NPM version =0.3.3, =0.1.3, =0.0.2, =1.1.3 Source cves: CVE-2018-3714 Source advisory: OSV:GHSA-52R9-G5G6-2HJP...

0.app1 (=1.0.52), 0.edsql (>=1.0.49 <=1.0.50) +521 more potentially affected by CVE-2017-16151 via electron (>=0.1.2 <=1.6.13)

electron NPM version =0.1.2, =1.0.49, =1.0.49, =1.0.49, =1.0.0, =1.0.6, =4.0.23, =0.0.7, =0.0.73, =1.0.0, =2.0.0, =2.0.2 and more Source cves: CVE-2017-16151 Source advisory: OSV:GHSA-4W88-RJJ3-X7WP...

many-versioned-wheel (>=0.1.0 <=0.2.1), pyzotero (=1.4.9) potentially affected by CVE-2012-2921 via feedparser (>=5.0.0 <=5.1.0)

feedparser PYPI version =5.0.0, =0.1.0, =0.2.1 - pyzotero =1.4.9 Source cves: CVE-2012-2921 Source advisory: OSV:GHSA-HJF3-R7GW-9RWG...

react-icons (>=0.2.0 <=0.2.1) potentially affected by CVE-2017-16023 via decamelize (=1.1.1)

decamelize NPM version =1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on decamelize and may be impacted: - react-icons =0.2.0, =0.2.1 Source cves: CVE-2017-16023 Source advisory: OSV:GHSA-Q5C4-39F5-M68J...

theo (>=6.0.0-alpha.7 <=6.0.0-beta.7) potentially affected by CVE-2017-16099 via no-case (=2.3.1)

no-case NPM version =2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on no-case and may be impacted: - theo =6.0.0-alpha.7, =6.0.0-beta.7 Source cves: CVE-2017-16099 Source advisory: OSV:GHSA-FF6R-5JWM-8292...

acidjs (>=0.0.2 <=1.0.1), acl-knex (>=0.1.2 <=0.1.3) +41 more potentially affected by CVE-2017-16082 via pg (>=3.0.3 <=3.6.3)

pg NPM version =3.0.3, =0.0.2, =0.1.2, =0.0.1, =0.0.2, =0.1.0, =0.0.4, =0.3.0, =0.0.11, =0.0.12, =0.1.2, =0.0.2, =0.0.1, =0.0.64 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@arpinum/postgres (>=4.0.0-beta12 <=4.0.0-beta14), appointmed-epr-template-common (>=0.0.46 <=0.0.65) +9 more potentially affected by CVE-2017-16082 via pg (>=6.2.2 <=6.2.3)

pg NPM version =6.2.2, =4.0.0-beta12, =0.0.46, =0.0.35, =0.13.3, =0.0.1, =0.0.1, =1.0.0, =1.0.3 - pg-promise-strict =0.3.4 - pgo =0.2.1 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@emartech/me-psql-query-builder (>=1.0.0 <=1.1.0), @evocodes/parse-server (>=2.2.17 <=2.2.27) +50 more potentially affected by CVE-2017-16082 via pg (>=5.0.0 <=5.1.0)

pg NPM version =5.0.0, =1.0.0, =2.2.17, =0.9.28, =1.0.0, =0.4.0, =0.1.0, =0.0.2, =0.1.3, =0.2.30, =0.2.33 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

mapdemotest1 (=0.0.1), websocketsli (=1.0.0) potentially affected by CVE-2017-16045 via jquery.js (=0.0.2-security)

jquery.js NPM version =0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on jquery.js and may be impacted: - mapdemotest1 =0.0.1 - websocketsli =1.0.0 Source cves: CVE-2017-16045 Source advisory: OSV:GHSA-JP27-CWP2-5QQR...

book-cli (=1.2.0) potentially affected by CVE-2017-16152 via static-html-server (=0.1.2)

static-html-server NPM version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on static-html-server and may be impacted: - book-cli =1.2.0 Source cves: CVE-2017-16152 Source advisory: OSV:GHSA-9J5M-873F-XH76...

wtm-cli (>=1.0.0-beta.1 <=1.0.0-beta.6) potentially affected by CVE-2017-16223 via nodeaaaaa (=1.3.0)

nodeaaaaa NPM version =1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on nodeaaaaa and may be impacted: - wtm-cli =1.0.0-beta.1, =1.0.0-beta.6 Source cves: CVE-2017-16223 Source advisory: OSV:GHSA-XJ3H-VC9J-J823...

many-versioned-wheel (>=0.1.0 <=0.2.0) potentially affected by CVE-2011-1157 via feedparser (=5.0.0)

feedparser PYPI version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1157 Source advisory: OSV:GHSA-2P78-8HH6-96XC...

many-versioned-wheel (>=0.1.0 <=0.2.0) potentially affected by CVE-2011-1158 via feedparser (=5.0.0)

feedparser PYPI version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1158 Source advisory: OSV:GHSA-4M72-RMM9-2QJR...

many-versioned-wheel (>=0.1.0 <=0.2.0) potentially affected by CVE-2011-1156 via feedparser (=5.0.0)

feedparser PYPI version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1156 Source advisory: OSV:GHSA-6H52-4VMH-8X4F...

Boa (>=0.9.0 <=0.10.0), GetPDB (>=0.1.0 <=1.0.1) +5077 more potentially affected by CVE-2018-20991 via smallvec (>=0.6.13 <=0.6.14)

smallvec CARGO version =0.6.13, =0.9.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.5.3, =0.1.0, =0.5.0, =0.5.0, =0.5.2 and more Source cves: CVE-2018-20991 Source advisory: OSV:RUSTSEC-2018-0003...

tribe (>=1.2.0 <=1.3.0) potentially affected by CVE-2017-16763 via confire (=0.2.0)

confire PYPI version =0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on confire and may be impacted: - tribe =1.2.0, =1.3.0 Source cves: CVE-2017-16763 Source advisory: OSV:GHSA-M85C-9MF8-M2M6...

astronomia (>=1.3.1 <=1.3.2) potentially affected by CVE-2017-5954 via serialize-to-js (=0.5.0)

serialize-to-js NPM version =0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on serialize-to-js and may be impacted: - astronomia =1.3.1, =1.3.2 Source cves: CVE-2017-5954 Source advisory: OSV:GHSA-MM62-WXC8-CF7M...

django-saml2-auth (>=1.0.2 <=1.1.4), django-saml2-auth-custom (>=1.0.0 <=1.0.4) +4 more potentially affected by CVE-2017-1000433 via pysaml2 (>=4.0.2 <=4.4.0)

pysaml2 PYPI version =4.0.2, =1.0.2, =1.0.0, =12.0.2, =0.6.1, =3.4.8 Source cves: CVE-2017-1000433 Source advisory: OSV:GHSA-924M-4PMX-C67H...

monasca-agent (>=1.3.0 <=1.4.0) potentially affected by CVE-2017-2592 via oslo-middleware (=3.20.0)

oslo-middleware PYPI version =3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-middleware and may be impacted: - monasca-agent =1.3.0, =1.4.0 Source cves: CVE-2017-2592 Source advisory: OSV:GHSA-XCP8-HH74-F6MC...