apostrophe-tumblr (>=0.5.1, <=0.5.13) potentially affected by CVE-2017-16017 via sanitize-html (1.1.4)

sanitize-html NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - apostrophe-tumblr =0.5.1, =0.5.13 Source cves: CVE-2017-16017 Source advisory: OSV:GHSA-WG96-3933-J2W5...

3c (>=0.0.1-alpha, <=1.0.0), @loklaan/npm-hook-slack (>=1.0.1, <=1.1.0-testing.2) +312 more potentially affected by CVE-2017-16018 via restify (>=2.1.1, <=4.0.4)

restify NPM version =2.1.1, =0.0.1-alpha, =1.0.1, =0.1.2, =0.2.5, =0.1.9, =0.0.1, =0.2.20, =0.3.7, =2.0.0, =1.0.1, =0.0.0, =0.0.1, =0.0.1, =0.5.1 and more Source cves: CVE-2017-16018 Source advisory: OSV:GHSA-QW3G-35HC-FCRH...

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +20118 more potentially affected by CVE-2017-16026 via request (>=2.2.6, <=2.67.0)

request NPM version =2.2.6, =2.67.0 is affected by a known vulnerability. The following packages have a transitive dependency on request and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 -...

angular-validator (>=1.2.8, <=1.2.9), announce.js (>=0.1.0, <=0.2.31) +232 more potentially affected by CVE-2017-16031 via socket.io (>=0.5.3, <=0.9.6)

socket.io NPM version =0.5.3, =1.2.8, =0.1.0, =1.1.0, =0.3.0, =0.1.0, =0.1.8, =0.3.1, =0.0.5, =0.0.1, =0.2.4 and more Source cves: CVE-2017-16031 Source advisory: OSV:GHSA-QV2V-M59F-V5FW...

3loc (>=0.2.0, <=0.4.0), @zambezi/ez-doc (1.0.0-prepare-for-open-source.1) +41 more potentially affected by CVE-2016-10547 via nunjucks (>=2.0.0, <=2.4.2)

nunjucks NPM version =2.0.0, =0.2.0, =0.4.0, =1.0.0, =0.0.7, =0.0.4, =0.0.2, =2.0.0-alpha.1, =0.3.0, =2.3.0-beta, =1.0.0, =1.0.3, =1.0.4 and more Source cves: CVE-2016-10547 Source advisory: OSV:GHSA-F7PH-P5RV-PHW2...

whistle.combo (>=1.0.0, <=1.0.2) potentially affected by CVE-2018-16474 via tianma-static (1.0.4)

tianma-static NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on tianma-static and may be impacted: - whistle.combo =1.0.0, =1.0.2 Source cves: CVE-2018-16474 Source advisory: OSV:GHSA-JHGP-HVJ6-X2P2...

fw-host-discovery (>=1.0.0, <=1.0.5) potentially affected by CVE-2018-16461 via libnmap (0.2.33)

libnmap NPM version 0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on libnmap and may be impacted: - fw-host-discovery =1.0.0, =1.0.5 Source cves: CVE-2018-16461 Source advisory: OSV:GHSA-7G2W-6R25-2J7P...

@blackbaud/skyux-deploy (>=1.0.0-beta.0, <=1.4.0), @cysonius/json-utils (>=0.0.1, <=0.0.5) +354 more potentially affected by CVE-2018-16469 via merge (>=1.0.0, <=1.2.0)

merge NPM version =1.0.0, =1.0.0-beta.0, =0.0.1, =0.0.2, =0.0.12, =1.0.0, =0.0.1, =0.0.1, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =0.52.0-typescript3-1, =0.52.0-src-build, =1.2.0, =1.2.4 and more Source cves: CVE-2018-16469 Source advisory: OSV:GHSA-F9CM-QMX5-M98H...

@dailybruin/lux (>=1.0.0, <=1.0.4), @dsbn/slate (0.0.1) +18 more potentially affected by CVE-2018-14731 via parcel-bundler (>=1.2.0, <=1.9.7)

parcel-bundler NPM version =1.2.0, =1.0.0, =1.1.0, =0.2.5, =1.0.0-alpha.2, =1.0.0-alpha.2, =0.0.12, =1.2.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2018-14731 Source advisory: OSV:GHSA-37Q6-576Q-VGR7...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +2427 more potentially affected by CVE-2014-6393 via express (>=3.0.0, <=3.10.5)

express NPM version =3.0.0, =0.0.1, =0.0.1, =0.0.1, =0.25.0, =1.0.4, =0.0.1, =0.0.4, =0.0.1, =0.0.6 and more Source cves: CVE-2014-6393 Source advisory: OSV:GHSA-GPVR-G6GH-9MC2...

1405-authtokens (>=1.0.1, <=1.0.5), 2048.io (0.0.1) +471 more potentially affected by CVE-2014-6393 via express (>=4.0.0, <=4.4.5)

express NPM version =4.0.0, =1.0.1, =1.0.0, =0.0.5-SNAPSHOT.11, =0.1.0, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.7, =0.0.1, =1.3.2-1, =1.3.2-2 - alexa-app 1.0.0 and more Source cves: CVE-2014-6393 Source advisory: OSV:GHSA-GPVR-G6GH-9MC2...

@visiosoft/medium-editor-insert-plugin (>=2.4.1, <=2.4.3), ai-django-fileupload (0.1.15) +6 more potentially affected by CVE-2018-9206 via blueimp-file-upload (>=9.5.8, <=9.22.0)

blueimp-file-upload NPM version =9.5.8, =2.4.1, =0.12.0-beta.1, =2.3.0, =0.17.3, =0.1.3, =3.0.0-prerelease.20170216T120000Z, =3.1.0 Source cves: CVE-2018-9206 Source advisory: OSV:GHSA-4CJ8-G9CP-V5WR...

@hpcc-js/dgrid-shim (>=0.1.10, <=0.1.12), bryaktestgrid (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2018-15494 via dojox (>=1.11.2, <=1.13.0)

dojox NPM version =1.11.2, =0.1.10, =0.0.1, =0.1.0, =0.0.1, =0.5.24 Source cves: CVE-2018-15494 Source advisory: OSV:GHSA-84CM-X2Q5-8225...

@nteract/commuter (>=5.6.7, <=5.6.9), @nteract/play (>=1.6.6, <=1.6.8) +6 more potentially affected by CVE-2018-18282 via next (>=7.0.0, <=7.0.1)

next NPM version =7.0.0, =5.6.7, =1.6.6, =7.0.0, =0.29.3, =1.0.1, =0.0.1-beta.9, =2.0.0, =0.1.1, =0.1.4 Source cves: CVE-2018-18282 Source advisory: OSV:GHSA-QW96-MM2G-C8M7...

192.168.0.172 (4.6.1), 3loc (>=0.2.0, <=0.4.0) +3455 more potentially affected by CVE-2016-1000232 via tough-cookie (>=2.0.0, <=2.2.2)

tough-cookie NPM version =2.0.0, =0.2.0, =0.0.1, =0.0.1, =2.1.0, =0.0.0, =0.1.0-alpha.1, =1.0.1, =0.11.0-atomist-update-branch-master-1541106195325.20181102202646, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =0.2.2-20180615211533, =0.2.4-20180621213746, =0.1.0-20180815155955,...

cucumber-html-reporter-common-functions (>=1.0.24, <=1.0.32), cucumber-report-generator (1.0.3) +10 more potentially affected by CVE-2017-16077 via mongose (0.0.2-security)

mongose NPM version 0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on mongose and may be impacted: - cucumber-html-reporter-common-functions =1.0.24, =1.0.0, =1.0.7, =1.0.58, =1.0.12, =1.0.17, =1.1.11 - owltech 1.0.0 - reports-server 1.0.0...

actix (>=0.5.0, <=0.5.8), actix-ogn (0.1.0) +12 more potentially affected by CVE-2018-20994 via trust-dns-proto (>=0.2.0, <=0.3.3)

trust-dns-proto CARGO version =0.2.0, =0.5.0, =1.4.0, =0.2.0, =0.1.0, =0.11.0, =0.7.0, =0.2.2, =0.7.0, =0.8.2 - zicsv-tool 0.1.0 Source cves: CVE-2018-20994 Source advisory: OSV:RUSTSEC-2018-0007...

@antodip/tech-utils (>=0.1.0, <=0.1.9), @applicaster/zapp-pipes-dev-kit (>=1.2.2, <=1.2.6) +122 more potentially affected by CVE-2017-16013 via hapi (>=15.0.2, <=16.1.0)

hapi NPM version =15.0.2, =0.1.0, =1.2.2, =1.0.8-rc.1, =1.0.0-alpha.1, =1.1.0, =4.0.0, =1.2.3, =0.1.0, =0.1.0, =0.1.0, =0.9.28, =0.17.44, =1.0.0-quotes.26, =1.0.27, =1.0.29 and more Source cves: CVE-2017-16013 Source advisory: OSV:GHSA-CQJG-WHMM-8GV6...

@applicaster/zapp-pipes-dev-kit (1.2.2), @concordant/c-service (>=1.1.2, <=1.1.4) +78 more potentially affected by CVE-2018-3745 via atob (>=2.0.0, <=2.0.3)

atob NPM version =2.0.0, =1.1.2, =6.3.4, =6.5.2, =1.1.1, =6.4.2, =6.4.2, =2.3.2, =8.8.7, =8.9.6 and more Source cves: CVE-2018-3745 Source advisory: OSV:GHSA-8W4H-3CM3-2PM2...

08cms (1.0.0), 3dshex (>=0.1.0, <=0.5.3) +9441 more potentially affected by CVE-2018-3750 via deep-extend (>=0.2.2, <=0.5.0)

deep-extend NPM version =0.2.2, =0.1.0, =1.0.0, =1.1.0, =4.0.0, =1.0.0, =0.3.12-20180525105709, =1.0.0, =0.0.1, =0.0.1, =0.2.2, =0.2.3 and more Source cves: CVE-2018-3750 Source advisory: OSV:GHSA-HR2V-3952-633Q...