@eclipse-che/theia-terminal (>=0.0.1-1552991237, <=0.0.1-1566494904), @theia/cpp (>=0.4.0-next.01667bab, <=0.4.0-next.fc6e8217) +7 more potentially affected by CVE-2019-0542 via xterm (3.9.1)

xterm NPM version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on xterm and may be impacted: - @eclipse-che/theia-terminal =0.0.1-1552991237, =0.4.0-next.01667bab, =0.4.0-next.01667bab, =0.4.0-next.01667bab, =0.4.0-next.01667bab,...

@jango/terminal-extension (>=0.1.0, <=0.1.1), @jiayihu/bdi-ui (>=3.0.1, <=3.0.11) +45 more potentially affected by CVE-2019-0542 via xterm (>=3.0.1, <=3.8.0)

xterm NPM version =3.0.1, =0.1.0, =3.0.1, =0.1.0, =0.17.1, =0.17.0-0, =0.17.0-0, =1.0.105, =1.0.44, =1.0.31, =1.0.116, =0.0.1, =0.0.2, =1.0.3, =1.0.11 - @renku/renku-jupyterlab-ts 0.2.0 and more Source cves: CVE-2019-0542 Source advisory: OSV:GHSA-MC23-976P-J42X...

@akiolabs/analytics (>=0.0.3, <=0.0.4), @akiolabs/app (>=0.0.2, <=0.0.4) +223 more potentially affected by CVE-2018-6341 via react-dom (>=16.4.0, <=16.4.1)

react-dom NPM version =16.4.0, =0.0.3, =0.0.2, =0.0.1, =2018.5.24-0, =2018.6.17-2, =2018.7.11-0, =0.4.1, =0.1.0-latest.1a450bb3, =1.0.0-beta.0, =0.0.2, =0.0.22-alpha.1, =1.1.0, =1.0.0, =1.6.1 and more Source cves: CVE-2018-6341 Source advisory: OSV:GHSA-MVJJ-GQQ2-P4HW...

@anujboddu/searchbar (>=2.0.0, <=2.1.1), @dlghq/dialog-components (>=0.146.0, <=0.149.7) +42 more potentially affected by CVE-2018-6341 via react-dom (>=16.1.0, <=16.1.1)

react-dom NPM version =16.1.0, =2.0.0, =0.146.0, =4.0.1, =0.0.7, =1.0.0, =1.0.0, =1.1.0, =1.3.9, =1.1.10, =1.0.6, =0.0.12, =0.1.0, =3.6.3, =3.7.4 and more Source cves: CVE-2018-6341 Source advisory: OSV:GHSA-MVJJ-GQQ2-P4HW...

@enact/cli (>=0.9.6, <=0.9.8), abt.api.web (0.0.3) +28 more potentially affected by CVE-2018-6342 via react-dev-utils (>=3.0.0, <=3.1.1)

react-dev-utils NPM version =3.0.0, =0.9.6, =4.2.0, =1.5.1, =0.15.0, =0.7.0, =0.7.0, =0.1.0, =0.1.4, =1.9.2, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2018-6342 Source advisory: OSV:GHSA-29GP-92WP-94Q8...

@1337lawyers/design (>=0.1.0, <=0.1.38), @9188/w-cli (>=1.0.0, <=1.0.4) +50 more potentially affected by CVE-2018-6342 via react-dev-utils (>=5.0.0, <=5.0.1)

react-dev-utils NPM version =5.0.0, =0.1.0, =1.0.0, =0.4.1, =0.1.0-latest.1a450bb3, =1.0.5, =1.0.0-beta.28, =1.0.1, =1.0.0, =1.0.0, =0.26.4, =0.0.0-legacy, =3.10.0-beta.0, =0.1.0-alpha.0, =2.1.16, =2.3.5 - aqxy-common-ui 0.0.1 and more Source cves: CVE-2018-6342 Source advisory:...

@5minutes2start/react-scripts (>=1.1.2, <=1.1.4), @biko/react-scripts (>=0.1.0, <=0.4.0) +132 more potentially affected by CVE-2018-6342 via react-dev-utils (>=4.0.0, <=4.2.1)

react-dev-utils NPM version =4.0.0, =1.1.2, =0.1.0, =0.8.12, =0.1.0, =0.0.1, =2.13.0, =2.14.0, =0.2.0, =0.3.0, =0.2.2, =0.2.10-SNAPSHOT.481, =0.2.10-SNAPSHOT.673 - @leizeng/react-scripts-ts 2.13.0 and more Source cves: CVE-2018-6342 Source advisory: OSV:GHSA-29GP-92WP-94Q8...

2muchcoffee-react-scripts (0.1.0), 2muchcoffee-react-scripts2 (>=0.1.0, <=0.1.2) +994 more potentially affected by CVE-2018-14732 via webpack-dev-server (>=3.0.0, <=3.1.10)

webpack-dev-server NPM version =3.0.0, =0.1.0, =0.6.2, =2.1.1, =0.1.0, =1.0.0, =2.1.0-beta.0, =2.1.0-beta.0, =2.1.2-4, =2.2.0-beta.1, =1.0.0, =0.8.8, =0.12.0 and more Source cves: CVE-2018-14732 Source advisory: OSV:GHSA-CF66-XWFP-GVC4...

h-include (1.0.0), hinclude (>=1.0.1, <=1.1.0) +4 more potentially affected by CVE-2018-16478 via simplehttpserver (>=0.0.6, <=0.2.1)

simplehttpserver NPM version =0.0.6, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2018-16478 Source advisory: OSV:GHSA-VWR2-WJ63-86GR...

@adobe/adobe-photoshop-api-sdk (>=1.1.0, <=1.1.1), @adobe/aio-lib-analytics (2.0.0) +23 more potentially affected by unknown CVE via fast-json-patch (>=2.0.4, <=2.1.0)

fast-json-patch NPM version =2.0.4, =1.1.0, =2.0.3, =1.0.3, =1.0.3, =0.0.4-beta.1, =2.0.2, =1.2.2, =0.3.0-next.1, =0.1.0, =2.1.32, =1.0.0, =1.2.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-FASTJSONPATCH-595663...

nifti (>=0.3.1, <=0.6.0), trk-io (>=0.3.0, <=0.11.0) potentially affected by CVE-2018-21000 via safe-transmute (>=0.5.0, <=0.8.0)

safe-transmute CARGO version =0.5.0, =0.3.1, =0.3.0, =0.11.0 Source cves: CVE-2018-21000 Source advisory: OSV:RUSTSEC-2018-0013...

ethers-cli (>=3.0.4, <=4.0.0), ethers-meow (>=0.1.1, <=0.1.3) +3 more potentially affected by CVE-2018-19183 via ethereumjs-vm (>=2.3.1, <=2.3.5)

ethereumjs-vm NPM version =2.3.1, =3.0.4, =0.1.1, =0.0.1, =1.1.6, =1.1.41 - remix-solidity 0.0.1 Source cves: CVE-2018-19183 Source advisory: OSV:GHSA-2MW7-WGGM-M6W3...

@aikiwangdake/nsg-editor-library (>=2.0.0, <=2.0.4), @becomes/cms-ui (>=2.0.0, <=2.0.51) +294 more potentially affected by CVE-2018-19057 via simplemde (1.11.2)

simplemde NPM version 1.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on simplemde and may be impacted: - @aikiwangdake/nsg-editor-library =2.0.0, =2.0.0, =0.1.0, =0.1.27, =0.2.6, =1.0.0-alpha.1, =1.10.0, =1.0.5, =1.0.26, =1.4.0, =1.4.4 and more...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @deja-js/component (>=3.0.0-beta.25, <=4.0.5) +18 more potentially affected by CVE-2018-17960 via ckeditor (>=4.5.11, <=4.10.1)

ckeditor NPM version =4.5.11, =1.0.0, =3.0.0-beta.25, =0.5.0, =0.5.0, =0.0.0-beta.1, =1.0.0, =1.15.5, =0.0.0, =1.0.1, =1.2.1 and more Source cves: CVE-2018-17960 Source advisory: OSV:GHSA-G68X-VVQQ-PVW3...

2co-client (>=0.0.11, <=0.0.12), 4sq (0.1.2) +860 more potentially affected by CVE-2017-16005 via http-signature (>=0.9.7, <=0.9.11)

http-signature NPM version =0.9.7, =0.0.11, =0.0.0, =0.1.43, =0.1.1, =0.1.1, =1.0.0-0, =0.0.2, =1.0.0-alpha.4, =1.0.0-alpha.3, =1.0.8, =1.0.9 and more Source cves: CVE-2017-16005 Source advisory: OSV:GHSA-Q257-VV4P-FG92...

fd-api-integration (>=0.0.2, <=0.0.9) potentially affected by CVE-2017-16055 via sqlserver (1.0.2)

sqlserver NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlserver and may be impacted: - fd-api-integration =0.0.2, =0.0.9 Source cves: CVE-2017-16055 Source advisory: OSV:GHSA-3RH7-VM4X-Q2HP...

sheetsee (>=0.0.1, <=0.0.3), sheetsee-maps (>=0.0.0, <=0.2.4) potentially affected by CVE-2017-1000043 via mapbox.js (1.3.1)

mapbox.js NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mapbox.js and may be impacted: - sheetsee =0.0.1, =0.0.0, =0.2.4 Source cves: CVE-2017-1000043 Source advisory: OSV:GHSA-Q69P-5H74-W36F...

@dormakaba/taibika-visual (>=0.1.0, <=1.6.5), cnpmjs.org (>=2.0.0-beta0, <=2.0.0-rc.9) +13 more potentially affected by CVE-2017-16006 via remarkable (>=1.3.0, <=1.6.2)

remarkable NPM version =1.3.0, =0.1.0, =2.0.0-beta0, =3.0.3, =0.0.2, =1.0.0, =0.0.1, =0.0.0, =0.2.11, =0.3.4, =1.0.0-alpha, =1.0.0-alpha.1, =1.5.0 Source cves: CVE-2017-16006 Source advisory: OSV:GHSA-MRMF-QWXG-7C3H...

nopro (0.0.2) potentially affected by CVE-2017-16014 via http-proxy (0.6.6)

http-proxy NPM version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy and may be impacted: - nopro 0.0.2 Source cves: CVE-2017-16014 Source advisory: OSV:GHSA-9XW9-PVGV-6P76...

apostrophe (>=0.5.235, <=0.5.299), apostrophe-tumblr (>=0.5.1, <=0.5.13) +5 more potentially affected by CVE-2017-16016 via sanitize-html (>=1.1.4, <=1.10.1)

sanitize-html NPM version =1.1.4, =0.5.235, =0.5.1, =0.1.0-beta.6, =0.5.1, =0.0.1, =0.0.9 Source cves: CVE-2017-16016 Source advisory: OSV:GHSA-XC6G-GGRC-QQ4R...