@blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1), @blackbaud/skyux-builder (>=1.10.1, <=1.31.0) +72 more potentially affected by CVE-2018-3721 via lodash.mergewith (>=4.0.3, <=4.6.0)

lodash.mergewith NPM version =4.0.3, =1.10.0, =1.10.1, =5.0.0, =5.2.8, =5.0.0, =5.0.0, =5.1.1, =1.3.0, =1.0.0-alpha.1, =1.0.4, =1.1.3, =1.0.0-alpha.4, =1.1.11, =1.0.3, =1.0.0-alpha.3, =1.0.0 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHMERGEWITH-174137...

@admui/grid (>=0.1.10, <=0.3.1), @atlantis-lab/grid (>=0.1.0, <=0.1.2) +66 more potentially affected by CVE-2018-3721 via lodash-es (>=4.0.0, <=4.17.4)

lodash-es NPM version =4.0.0, =0.1.10, =0.1.0, =0.1.0-alpha.1, =3.2.3, =0.0.18-vojty-doc-split-components-2017-06-06T13-48-34-024Z, =1.0.0, =0.8.0-beta.1, =1.0.4, =5.0.2, =4.0.0, =3.2.2, =2.0.0-alpha.1, =0.2.0, =0.7.1 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHES-2434288...

enfscopy (>=0.0.3, <=0.1.0), enfsensure (>=0.0.1, <=0.1.0) +7 more potentially affected by CVE-2017-18077 via brace-expansion (>=1.1.0, <=1.1.5)

brace-expansion NPM version =1.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =1.0.9, =0.0.1, =0.0.3 - thehelp-project 3.5.1 - zero.lib 0.0.2 Source cves: CVE-2017-18077 Source advisory: OSV:GHSA-832H-XG76-4GV6...

@bani2812/teasilent (1.1.4), @cetiak/tea-open-source1 (1.0.1) +60 more potentially affected by CVE-2018-6184 via next (>=1.2.3, <=4.2.1)

next NPM version =1.2.3, =0.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =0.1.8, =0.1.0, =1.0.2, =1.3.21, =0.0.80, =1.0.0, =1.1.0 and more Source cves: CVE-2018-6184 Source advisory: OSV:GHSA-M34X-WGRH-G897...

0624zmj (1.0.0), 192.168.0.172 (4.6.1) +570 more potentially affected by CVE-2015-9251 via jquery (>=1.5.1, <=1.12.1)

jquery NPM version =1.5.1, =0.0.3, =0.0.6, =1.0.0, =0.1.0, =1.0.4, =0.1.0, =0.1.2 - @mavenomics/config-server 0.1.2 and more Source cves: CVE-2015-9251 Source advisory: OSV:GHSA-RMXG-73GG-4P98...

000demo (>=1.0.0, <=1.1.0), 03-npm-abc (>=1.0.0, <=1.1.0) +4894 more potentially affected by CVE-2015-9251 via jquery (>=1.12.3, <=2.2.4)

jquery NPM version =1.12.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.2.1, =0.1.75, =0.3.0, =1.0.0, =4.13.7-rc4, =0.65.0, =0.17.0, =0.24.2 and more Source cves: CVE-2015-9251 Source advisory: OSV:GHSA-RMXG-73GG-4P98...

@absinthe/graphiql-workspace (>=1.1.4, <=1.1.5), @agilys/custom-graphiql (>=2.0.0-beta1, <=2.0.3) +1303 more potentially affected by CVE-2017-1000427 via marked (>=0.0.1, <=0.3.6)

marked NPM version =0.0.1, =1.1.4, =2.0.0-beta1, =1.0.1, =0.25.0, =0.0.0-development, =3.3.1, =0.0.1, =0.0.0, =0.0.3 and more Source cves: CVE-2017-1000427 Source advisory: OSV:GHSA-7PX7-7XJX-HXM8...

@awearsolutions/node-red (>=0.17.5, <=0.17.6-rc.1), @device-management/device-base (>=0.0.1, <=0.1.0) +71 more potentially affected by CVE-2017-10910 via mqtt (>=2.0.1, <=2.14.0)

mqtt NPM version =2.0.1, =0.17.5, =0.0.1, =1.0.0, =1.0.0, =4.0.0-beta.15, =1.0.76, =1.0.2, =0.1.1, =0.0.5, =1.0.0, =0.4.1, =2.0.0, =2.0.3, =2.0.4 and more Source cves: CVE-2017-10910 Source advisory: OSV:GHSA-H9MJ-FGHC-664W...

@cimpress/simple-auth-wrapper (>=2.2.0, <=2.2.3), @expo/auth0-lock (10.16.0) +18 more potentially affected by CVE-2017-17068 via auth0-js (>=8.0.0-beta.1, <=8.11.3)

auth0-js NPM version =8.0.0-beta.1, =2.2.0, =1.1.0, =1.1.0, =1.1.0, =1.0.0, =0.0.18, =1.5.0, =0.0.1, =10.8.0-beta.2, =1.0.8, =1.0.15 - ds-auth0-lock 1.0.0 and more Source cves: CVE-2017-17068 Source advisory: OSV:GHSA-3RPR-MG43-XHQ4...

@carnesen/mathjs-app (>=0.0.2, <=0.0.5), @ia-cloud/node-red-contrib-ia-cloud-fds-raspberry-pi (>=0.1.0, <=0.1.1) +29 more potentially affected by CVE-2017-1001003 via mathjs (>=3.4.1, <=3.16.5)

mathjs NPM version =3.4.1, =0.0.2, =0.1.0, =1.0.0-beta.1, =1.19.0, =1.13.0, =1.1.8, =0.0.3, =1.0.16, =0.1.0, =1.0.0, =1.0.2 - mdlt 0.0.4 and more Source cves: CVE-2017-1001003 Source advisory: OSV:GHSA-PV8X-P9HQ-J328...

@carnesen/mathjs-app (>=0.0.2, <=0.0.5), @ia-cloud/node-red-contrib-ia-cloud-fds-raspberry-pi (>=0.1.0, <=0.1.1) +29 more potentially affected by CVE-2017-1001002 via mathjs (>=3.4.1, <=3.16.5)

mathjs NPM version =3.4.1, =0.0.2, =0.1.0, =1.0.0-beta.1, =1.19.0, =1.13.0, =1.1.8, =0.0.3, =1.0.16, =0.1.0, =1.0.0, =1.0.2 - mdlt 0.0.4 and more Source cves: CVE-2017-1001002 Source advisory: OSV:GHSA-VX5C-87QX-CV6C...

@bani2812/teasilent (1.1.4), @cetiak/tea-open-source1 (1.0.1) +17 more potentially affected by CVE-2017-16877 via next (>=1.2.3, <=2.2.0)

next NPM version =1.2.3, =0.0.109, =0.1.1, =0.0.3-beta.1, =0.6.0, =2.1.0, =0.1.5, =0.2.1, =0.4.2 and more Source cves: CVE-2017-16877 Source advisory: OSV:GHSA-3F5C-4QXJ-VMPF...

192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +621 more potentially affected by CVE-2017-1000228 via ejs (>=2.0.8, <=2.5.4)

ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000228 Source advisory: OSV:GHSA-3W5V-P54C-F74X...

192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +621 more potentially affected by CVE-2017-1000188 via ejs (>=2.0.8, <=2.5.4)

ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000188 Source advisory: OSV:GHSA-HWCF-PP87-7X6P...

@genny-project/keycloak-react (>=1.0.3, <=1.0.8), angular-spa (>=0.3.3, <=1.0.0) +3 more potentially affected by CVE-2017-7474 via keycloak-js (2.5.5)

keycloak-js NPM version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on keycloak-js and may be impacted: - @genny-project/keycloak-react =1.0.3, =0.3.3, =0.0.1, =0.0.3, =0.0.11, =0.0.12 Source cves: CVE-2017-7474 Source advisory:...

attester (>=1.1.0, <=1.2.0), awsboxen (>=0.1.0, <=0.5.1) +7 more potentially affected by CVE-2013-4660 via js-yaml (>=2.0.1, <=2.0.4)

js-yaml NPM version =2.0.1, =1.1.0, =0.1.0, =0.13.13, =0.5.0, =0.8.3, =0.0.2, =0.1.8, =0.0.1, =0.2.4 Source cves: CVE-2013-4660 Source advisory: OSV:GHSA-XXVW-45RP-3MJ2...

@arakoodev/edgechains.js (>=0.25.0, <=0.30.1), @barnas2/polymer (1.0.0) +815 more potentially affected by CVE-2015-8854 via marked (>=0.0.1, <=0.3.3)

marked NPM version =0.0.1, =0.25.0, =0.0.1, =0.0.0, =0.1.0, =2.0.5, =2.0.1, =26.0.1, =34.4.5 and more Source cves: CVE-2015-8854 Source advisory: OSV:GHSA-HJCP-J389-59FF...

08cms (1.0.0), 24_hrs_js (1.0.0) +6201 more potentially affected by CVE-2015-8855 via semver (>=1.0.7, <=4.3.1)

semver NPM version =1.0.7, =0.0.1-alpha, =0.0.2, =0.0.1, =0.11.6, =1.2.0, =0.1.3-v1, =0.0.1, =0.0.11, =0.0.1, =1.0.0 and more Source cves: CVE-2015-8855 Source advisory: OSV:GHSA-X6FG-F45M-JF5Q...

@bcpros/bitcore-wallet-service (8.25.45), @cron-eu/gulp-iconify (>=0.5.1, <=0.6.1) +72 more potentially affected by CVE-2015-8862 via mustache (>=2.0.0, <=2.2.0)

mustache NPM version =2.0.0, =0.5.1, =0.0.0, =0.0.0, =2.0.0-alpha.8, =0.2.0, =0.1.0, =0.3.0, =0.1.0, =1.0.0, =0.0.1, =3.0.0, =3.1.1 and more Source cves: CVE-2015-8862 Source advisory: OSV:GHSA-W3W8-37JV-2C58...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7454 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7454 Source advisory: OSV:GHSA-Q4QQ-FM7Q-CWP5...