@49ing/ngx-videogular (5.0.1), @akashic/akashic-cli-commons (0.1.3) +52 more potentially affected by CVE-2016-3956 via npm (>=3.1.0, <=3.7.5)

npm NPM version =3.1.0, =0.1.2, =0.0.3, =0.0.3, =0.1.0, =1.0.0-open-source.0, =0.0.1, =0.1.0 and more Source cves: CVE-2016-3956 Source advisory: OSV:GHSA-M5H6-HR3Q-22H5...

autotest-engine (>=1.0.0, <=1.3.9), grunt-newman (1.0.7) +11 more potentially affected by CVE-2016-2515 via hawk (>=3.1.0, <=3.1.2)

hawk NPM version =3.1.0, =1.0.0, =1.0.0, =0.1.6, =1.2.25, =0.0.1, =0.0.6-prealpha.1, =1.0.0, =4.0.3, =1.0.0, =2.1.2, =2.2.0 Source cves: CVE-2016-2515 Source advisory: OSV:GHSA-JCPV-G9RR-QXRC...

grunt-http (>=2.0.0, <=2.2.0) potentially affected by CVE-2016-2515 via hawk (4.0.1)

hawk NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on hawk and may be impacted: - grunt-http =2.0.0, =2.2.0 Source cves: CVE-2016-2515 Source advisory: OSV:GHSA-JCPV-G9RR-QXRC...

gulp-haxe (>=0.3.0, <=0.4.5) potentially affected by CVE-2016-10692 via haxeshim (>=0.5.6, <=0.6.3)

haxeshim NPM version =0.5.6, =0.3.0, =0.4.5 Source cves: CVE-2016-10692 Source advisory: OSV:GHSA-CR6C-85FH-CQPG...

aurelius (>=0.1.8, <=0.1.13), barust (0.1.0) +53 more potentially affected by unknown CVE via chan (0.1.23)

chan CARGO version 0.1.23 is affected by a known vulnerability. The following packages have a transitive dependency on chan and may be impacted: - aurelius =0.1.8, =0.0.2, =0.1.0, =0.2.0, =0.2.9, =0.2.0, =0.1.0, =0.1.0, =0.6.1, =0.3.6, =0.3.0, =0.1.0, =0.0.1, =0.1.0 and more Source cves: unknown...

@elastic/eui (>=0.0.1-prealpha, <=0.0.11), @pl-test/c (>=1.1.0, <=1.1.1) +4 more potentially affected by CVE-2018-3712 via serve (>=6.0.0, <=6.4.4)

serve NPM version =6.0.0, =0.0.1-prealpha, =1.1.0, =4.1.8, =4.1.13 Source cves: CVE-2018-3712 Source advisory: OSV:GHSA-Q2QH-CGC2-QHR3...

37fis (>=1.0.0, <=1.0.2), @alohahealth/aloha-react-sdk (>=0.1.5, <=0.1.9) +1327 more potentially affected by CVE-2018-1002204 via adm-zip (>=0.1.4, <=0.4.10)

adm-zip NPM version =0.1.4, =1.0.0, =0.1.5, =0.1.0, =0.7.0, =0.5.9, =1.10.1, =1.0.1, =0.1.28, =0.0.5, =2.5.1, =2.6.1 - @cr4zyc4t/phantom-html2pdf 1.0.3 - @cypress/core-example 0.3.1 and more Source cves: CVE-2018-1002204 Source advisory: OSV:GHSA-3V6H-HQM4-2RG6...

@alminde/geonames-stream (2.2.1), @essex/powerbi-visual-scripts (1.1.0) +35 more potentially affected by CVE-2018-1002203 via unzipper (>=0.3.0, <=0.8.11)

unzipper NPM version =0.3.0, =1.0.0, =1.0.0, =1.1.47, =1.0.0-alpha.53, =0.0.1, =1.1.0, =0.0.41, =1.0.2, =0.0.1, =2.1.0, =2.2.0 and more Source cves: CVE-2018-1002203 Source advisory: OSV:GHSA-884W-698F-927F...

@partygame.show/demo (>=1.0.0-alpha.0, <=1.0.0-alpha.5), ember-superstatic (>=0.6.0, <=1.0.0) potentially affected by unknown CVE via superstatic (5.0.1)

superstatic NPM version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on superstatic and may be impacted: - @partygame.show/demo =1.0.0-alpha.0, =0.6.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-WM77-Q74P-5763...

@getty.io/taskapp (>=1.2.1, <=1.2.7), bbc-a11y (>=2.1.0, <=2.2.1) +9 more potentially affected by CVE-2018-3739 via https-proxy-agent (>=2.0.0, <=2.1.1)

https-proxy-agent NPM version =2.0.0, =1.2.1, =2.1.0, =2.0.0, =1.0.1, =0.8.0, =1.12.0, =1.12.0-beta.1576, =1.15.0-beta.1701 - request-light 0.2.2 - shippable-bbs-oauth 0.9.22 Source cves: CVE-2018-3739 Source advisory: OSV:GHSA-8G7P-74H8-HG48...

@risingstack/trace (2.0.1), democracyos-notifier (>=1.3.0, <=2.1.3) +1 more potentially affected by CVE-2018-3723 via defaults-deep (0.2.3)

defaults-deep NPM version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on defaults-deep and may be impacted: - @risingstack/trace 2.0.1 - democracyos-notifier =1.3.0, =2.1.3 - oddvoter-notifier 1.1.1 Source cves: CVE-2018-3723 Source advisory:...

1508-cli (>=1.0.0, <=1.0.6), 1k (>=0.0.1, <=0.0.11) +8500 more potentially affected by CVE-2018-3721 via lodash (>=4.0.0, <=4.17.4)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =1.0.0-beta.1, =1.16.1, =2.4.4 and more Source cves: CVE-2018-3721 Source advisory: OSV:GHSA-FVQR-27WR-82FM...

@careteam/mfe-init (0.0.8), @topfeed/topfeed (>=0.0.30, <=0.0.44) +68 more potentially affected by CVE-2018-3720 via assign-deep (>=0.1.2, <=0.4.6)

assign-deep NPM version =0.1.2, =0.0.30, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.2.0, =0.0.1, =1.0.0-alpha.5, =1.0.0-alpha.5, =0.0.1, =0.0.1, =1.0.0-alpha.5, =2.3.0 and more Source cves: CVE-2018-3720 Source advisory: OSV:GHSA-XCVV-84J5-JW9H...

10er10 (0.23.0), 10tcl (>=0.0.1, <=0.0.10) +3192 more potentially affected by CVE-2018-3717 via connect (>=2.0.0, <=2.13.1)

connect NPM version =2.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =0.0.5, =0.0.2, =1.0.0, =3.2.63 and more Source cves: CVE-2018-3717 Source advisory: OSV:GHSA-RCH9-XH7R-MQGW...

10er10 (0.23.0), 10tcl (>=0.0.1, <=0.0.10) +11449 more potentially affected by CVE-2017-16119 via fresh (>=0.0.1, <=0.5.1)

fresh NPM version =0.0.1, =0.0.1, =1.0.1, =1.0.3, =1.0.2, =1.0.0, =0.2.0, =0.1.0, =0.0.1, =0.0.1, =0.0.5 - 4design 0.0.1 and more Source cves: CVE-2017-16119 Source advisory: OSV:GHSA-9QJ9-36JM-PRPV...

0xble (>=7.1.0, <=13.3.1), 3dguysplayer (1.0.0) +1587 more potentially affected by CVE-2017-16116 via string (>=3.0.0, <=3.3.3)

string NPM version =3.0.0, =7.1.0, =1.0.0, =0.0.5, =0.2.2, =1.0.1, =1.0.3, =0.3.4, =0.2.1, =0.7.6-alpha.1, =1.0.0, =1.0.0, =1.32.7 and more Source cves: CVE-2017-16116 Source advisory: OSV:GHSA-G36H-6R4F-3MQP...

@botsbotsbots/botbuilder (>=0.1.0-latest.1a450bb3, <=0.5.0-latest.e3c9593d), @chronosmicro/display (12.0.1) +180 more potentially affected by CVE-2017-16117 via slug (>=0.1.1, <=0.9.1)

slug NPM version =0.1.1, =0.1.0-latest.1a450bb3, =1.1.1, =0.5.1, =0.4.0, =2.0.0, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.8, =0.0.15 and more Source cves: CVE-2017-16117 Source advisory: OSV:GHSA-JXQQ-CQM6-PFQ9...

style-pot (>=0.0.15, <=0.0.22), toolbag (>=0.14.0, <=1.0.0) +3 more potentially affected by CVE-2017-16025 via nes (>=6.2.1, <=6.3.1)

nes NPM version =6.2.1, =0.0.15, =0.14.0, =0.0.5, =0.0.13 Source cves: CVE-2017-16025 Source advisory: OSV:GHSA-3PWH-5MMC-MWRX...

@fdnpm/fd-module-cli (>=4.0.4, <=4.0.7), @finviet-jsrpt/jsrpt-electron-pdf (>=1.0.5, <=1.0.6) +68 more potentially affected by CVE-2017-16151 via electron (>=1.3.1, <=1.6.13)

electron NPM version =1.3.1, =4.0.4, =1.0.5, =2.1.1, =1.0.0, =0.0.7, =1.3.0, =4.1.0, =0.6.0, =1.3.3, =0.0.18, =0.0.2, =1.0.0, =1.3.4 and more Source cves: CVE-2017-16151 Source advisory: OSV:GHSA-4W88-RJJ3-X7WP...

react-icons (>=0.2.0, <=0.2.1) potentially affected by CVE-2017-16023 via decamelize (1.1.1)

decamelize NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on decamelize and may be impacted: - react-icons =0.2.0, =0.2.1 Source cves: CVE-2017-16023 Source advisory: OSV:GHSA-Q5C4-39F5-M68J...