chrome-js (>=0.1.8 <=0.2.0), cpos (>=0.1.3 <=0.1.9) +19 more potentially affected by CVE-2016-10580 via nodewebkit (>=0.10.0-rc1-3 <=0.11.6)

nodewebkit NPM version =0.10.0-rc1-3, =0.1.8, =0.1.3, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.0.24, =1.6.1, =0.0.0, =0.1.0, =1.0.1, =0.0.0, =0.0.22 and more Source cves: CVE-2016-10580 Source advisory: OSV:GHSA-GC6C-5V9W-XMHW...

macaca-android-dingtalk (=1.0.30) potentially affected by CVE-2016-10586 via macaca-chromedriver (=1.0.15)

macaca-chromedriver NPM version =1.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on macaca-chromedriver and may be impacted: - macaca-android-dingtalk =1.0.30 Source cves: CVE-2016-10586 Source advisory: OSV:GHSA-769C-QPHH-G3WM...

@jser/classifier-item-category (=1.0.1), jser-classifier-item-category (>=1.0.1 <=1.6.1) potentially affected by CVE-2016-10592 via jser-stat (>=3.1.0 <=4.0.3)

jser-stat NPM version =3.1.0, =1.0.1, =1.6.1 Source cves: CVE-2016-10592 Source advisory: OSV:GHSA-5W4P-H4GM-3W26...

nodeway-ipip (>=0.0.1 <=1.0.2) potentially affected by CVE-2016-10594 via ipip (=3.0.0)

ipip NPM version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipip and may be impacted: - nodeway-ipip =0.0.1, =1.0.2 Source cves: CVE-2016-10594 Source advisory: OSV:GHSA-9GQH-Q4CX-F2H9...

backender (>=0.0.1 <=0.0.7), gulp-backender (>=0.0.4 <=0.0.5) potentially affected by CVE-2016-10604 via dalek-browser-chrome (=0.0.11)

dalek-browser-chrome NPM version =0.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on dalek-browser-chrome and may be impacted: - backender =0.0.1, =0.0.4, =0.0.5 Source cves: CVE-2016-10604 Source advisory: OSV:GHSA-6Q8Q-RVF4-M4PG...

native-ui-toolkit (>=0.0.1 <=0.0.4), nodehotkey (>=1.0.5 <=2.0.15) +2 more potentially affected by CVE-2016-10608 via robot-js (=2.0.0)

robot-js NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on robot-js and may be impacted: - native-ui-toolkit =0.0.1, =1.0.5, =1.1.0, =1.0.0, =1.0.3 Source cves: CVE-2016-10608 Source advisory: OSV:GHSA-6V7P-J23V-4XMW...

mollusc (>=1.0.0 <=1.1.0), schlug (=1.0.0) potentially affected by CVE-2016-10610 via unicode-json (=1.0.3)

unicode-json NPM version =1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on unicode-json and may be impacted: - mollusc =1.0.0, =1.1.0 - schlug =1.0.0 Source cves: CVE-2016-10610 Source advisory: OSV:GHSA-HW4R-XR38-HM8J...

cocos2d-coffee-autocomplete (>=0.1.0 <=0.1.3), codeforces-tool (>=0.1.1 <=0.1.2) +13 more potentially affected by CVE-2016-10614 via httpsync (>=0.0.7 <=0.0.8)

httpsync NPM version =0.0.7, =0.1.0, =0.1.1, =0.0.1, =0.1.0, =0.0.6, =0.1.0, =0.0.2, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.0.9, =0.0.10 Source cves: CVE-2016-10614 Source advisory: OSV:GHSA-4X5J-V9V9-W8GW...

tpr (>=0.2.0 <=0.2.2) potentially affected by CVE-2016-10634 via scalajs-standalone-bin (=0.4.3)

scalajs-standalone-bin NPM version =0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on scalajs-standalone-bin and may be impacted: - tpr =0.2.0, =0.2.2 Source cves: CVE-2016-10634 Source advisory: OSV:GHSA-CVX3-PQMJ-X57X...

fiskit (>=0.0.27 <=0.0.28) potentially affected by CVE-2016-10660 via fis-parser-sass-bin (=1.0.1)

fis-parser-sass-bin NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on fis-parser-sass-bin and may be impacted: - fiskit =0.0.27, =0.0.28 Source cves: CVE-2016-10660 Source advisory: OSV:GHSA-5PQ8-2Q24-MJ3P...

libsbmlsim (>=0.0.1 <=0.0.2) potentially affected by CVE-2016-10668 via libsbml (=0.0.2)

libsbml NPM version =0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on libsbml and may be impacted: - libsbmlsim =0.0.1, =0.0.2 Source cves: CVE-2016-10668 Source advisory: OSV:GHSA-432J-4FW9-2G6F...

iopa-mqtt (>=0.2.0 <=1.3.3), iopa-mqtt-packet (>=0.2.16 <=1.3.7) +4 more potentially affected by CVE-2016-10523 via mqtt-packet (>=2.0.1 <=3.4.3)

mqtt-packet NPM version =2.0.1, =0.2.0, =0.2.16, =1.0.0, =1.0.0-pre.1, =1.0.0, =1.0.3 - mqtt-stack =0.0.2 Source cves: CVE-2016-10523 Source advisory: OSV:GHSA-G3R2-65GC-QPQC...

start-selenium (>=0.0.1 <=0.0.5) potentially affected by CVE-2016-10565 via operadriver (=0.2.2)

operadriver NPM version =0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on operadriver and may be impacted: - start-selenium =0.0.1, =0.0.5 Source cves: CVE-2016-10565 Source advisory: OSV:GHSA-2WRQ-WMQF-8VCC...

browsertime (>=1.0.0-alpha.0 <=1.0.0-alpha.18), sitespeed.io (=4.0.0-alpha.1) +1 more potentially affected by CVE-2016-10573 via baryton-saxophone (>=2.50.1 <=2.53.0)

baryton-saxophone NPM version =2.50.1, =1.0.0-alpha.0, =0.2.0, =0.22.4 Source cves: CVE-2016-10573 Source advisory: OSV:GHSA-6PWF-WHC8-HJF6...

grunt-kommando (>=0.1.0 <=0.1.1), kommando (>=0.0.1 <=1.0.0) potentially affected by CVE-2016-10601 via webdrvr (>=2.35.0-6 <=2.41.0-0)

webdrvr NPM version =2.35.0-6, =0.1.0, =0.0.1, =1.0.0 Source cves: CVE-2016-10601 Source advisory: OSV:GHSA-WR2C-PPJ9-F2FV...

grunt-air-sdk (>=0.1.0 <=0.1.1) potentially affected by CVE-2016-10603 via air-sdk (=16.0.0-272-9)

air-sdk NPM version =16.0.0-272-9 is affected by a known vulnerability. The following packages have a transitive dependency on air-sdk and may be impacted: - grunt-air-sdk =0.1.0, =0.1.1 Source cves: CVE-2016-10603 Source advisory: OSV:GHSA-6JX3-RQCX-G3WW...

openframe (>=0.1.6 <=0.1.33) potentially affected by CVE-2016-10607 via openframe-glslviewer (=0.1.9)

openframe-glslviewer NPM version =0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on openframe-glslviewer and may be impacted: - openframe =0.1.6, =0.1.33 Source cves: CVE-2016-10607 Source advisory: OSV:GHSA-G2PF-QJGF-6FW3...

boorunaut (>=0.1.0 <=0.4.2), cloudxns-ddns-service (=1.0.0) +116 more potentially affected by CVE-2019-6975 via django (>=2.1.0 <=2.1.5)

django PYPI version =2.1.0, =0.1.0, =0.10.0, =2.4.0, =0.3.1, =0.1.6, =0.2.0, =1.3.2, =1.3.3 - django-autoconfig =0.8.0 and more Source cves: CVE-2019-6975 Source advisory: OSV:PYSEC-2019-18...

@amalto/custom-form-dialog (>=1.1.1 <=1.2.1), @amalto/dynamic-component (>=1.1.1 <=1.2.1) +50 more potentially affected by CVE-2018-16489 via just-extend (>=1.1.22 <=3.0.0)

just-extend NPM version =1.1.22, =1.1.1, =1.1.1, =1.0.18, =1.0.32, =1.1.0, =1.0.21, =1.0.17, =0.1.0, =1.0.5, =1.3.0, =1.0.0, =0.12.0, =0.1.0-alpha.4c5f8c5a, =0.1.0-alpha.4c5f8c5a, =5.0.3-0 and more Source cves: CVE-2018-16489 Source advisory: OSV:GHSA-675M-85RW-J3W4...

3gtel-frontend-platform (=1.0.0), @achieve-all/v-element (=1.0.0) +406 more potentially affected by CVE-2018-16486 via defaults-deep (>=0.2.3 <=0.2.4)

defaults-deep NPM version =0.2.3, =0.1.1, =1.0.0, =1.0.0, =2.0.0, =2.0.7, =0.1.0, =1.0.0, =1.0.8, =0.1.2, =1.0.3, =1.0.0, =6.0.0-rc1, =7.4.3 and more Source cves: CVE-2018-16486 Source advisory: OSV:GHSA-PJXW-22XF-6PWC...