4cdl (>=1.0.1 <=1.0.7), 77cli (>=0.0.10 <=0.0.12) +364 more potentially affected by CVE-2018-15685 via electron (>=2.0.0 <=2.0.8-nightly.20180820)

electron NPM version =2.0.0, =1.0.1, =0.0.10, =3.0.5, =0.1.0, =1.0.0, =0.0.2, =0.0.1, =1.0.2, =0.0.1, =1.1.0, =0.0.1, =0.0.5 and more Source cves: CVE-2018-15685 Source advisory: OSV:GHSA-HV9C-QWQG-QJ3V...

@felixrieseberg/electron-prebuilt-compile (>=3.0.0-beta.1 <=3.0.0-beta.13), @getstation/electron-prebuilt-compile (=3.0.0-beta.12) +1 more potentially affected by CVE-2018-15685 via electron (>=3.0.0-beta.1 <=3.0.0-beta.6)

electron NPM version =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.5 Source cves: CVE-2018-15685 Source advisory: OSV:GHSA-HV9C-QWQG-QJ3V...

@philipptrenz/photo-booth (>=1.0.1 <=1.0.6), @quarks/bpmn-extension (=1.0.0) +46 more potentially affected by CVE-2018-15685 via electron (>=1.7.0 <=1.7.13)

electron NPM version =1.7.0, =1.0.1, =1.0.0, =1.0.1, =0.4.0-next.0b426d22, =0.3.3, =0.4.0-next.0cc6469e, =0.4.0-next.0b426d22, =0.3.3, =0.4.0-next.0b426d22, =0.4.0-next.0b426d22, =0.4.0-next.0b426d22, =0.4.0-next.0b426d22, =0.4.0-next.0b426d22, =0.4.0-next.0b426d22, =0.4.0-next.ff386514 and more...

conventional-changelog-semf-config (=1.0.4) potentially affected by CVE-2018-3785 via git-dummy-commit (=1.3.0)

git-dummy-commit NPM version =1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on git-dummy-commit and may be impacted: - conventional-changelog-semf-config =1.0.4 Source cves: CVE-2018-3785 Source advisory: OSV:GHSA-H3C2-X77C-7PVR...

fis-parser-sass-all (=0.2.3) potentially affected by CVE-2016-10686 via fis-sass-all (=0.2.0)

fis-sass-all NPM version =0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fis-sass-all and may be impacted: - fis-parser-sass-all =0.2.3 Source cves: CVE-2016-10686 Source advisory: OSV:GHSA-VCFP-PPQW-MF23...

libsbmlsim (>=0.0.1 <=0.0.2), wa-bisnis-bot (=1.0.0) potentially affected by CVE-2016-10642 via cmake (>=0.0.1 <=0.0.4)

cmake NPM version =0.0.1, =0.0.1, =0.0.2 - wa-bisnis-bot =1.0.0 Source cves: CVE-2016-10642 Source advisory: OSV:GHSA-4J59-HFW6-6W7H...

webshotgun (>=0.0.2 <=1.0.1) potentially affected by CVE-2016-10644 via slimerjs-edge (=0.10.0-pre-3)

slimerjs-edge NPM version =0.10.0-pre-3 is affected by a known vulnerability. The following packages have a transitive dependency on slimerjs-edge and may be impacted: - webshotgun =0.0.2, =1.0.1 Source cves: CVE-2016-10644 Source advisory: OSV:GHSA-5RC6-2R3R-FV79...

duckietv-builder (>=1.0.0 <=1.0.11) potentially affected by CVE-2016-10646 via resourcehacker (=4.2.51)

resourcehacker NPM version =4.2.51 is affected by a known vulnerability. The following packages have a transitive dependency on resourcehacker and may be impacted: - duckietv-builder =1.0.0, =1.0.11 Source cves: CVE-2016-10646 Source advisory: OSV:GHSA-P65H-233C-JXVM...

@fannarsh/trident (>=0.1.0 <=0.2.0), @hola.org/http-signature (=1.1.1-hola.1) +13 more potentially affected by CVE-2018-3737 via sshpk (>=1.0.4 <=1.13.1)

sshpk NPM version =1.0.4, =0.1.0, =2.67.0-hola.5, =2.67.0-lum.3, =1.1.0, =5.6.1, =1.4.2, =5.0.0, =0.0.0, =0.9.4, =0.9.12 Source cves: CVE-2018-3737 Source advisory: OSV:GHSA-2M39-62FM-Q8R3...

@bahmutov/add-typescript-to-cypress (>=1.0.2 <=1.1.1), @betit/orion (>=1.0.0-beta.1 <=1.0.0-beta.6) +178 more potentially affected by CVE-2017-16137 via debug (>=3.0.0 <=3.0.1)

debug NPM version =3.0.0, =1.0.2, =1.0.0-beta.1, =1.0.0-beta.6, =2.0.1-SNAPSHOT.88, =0.0.4, =0.0.12, =1.0.1, =1.0.0, =1.0.0, =0.1.5, =2.8.0, =1.0.71, =1.0.10-14, =1.1.16 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...

7ghost (>=4.11.0 <=4.11.46), @igames/ghost (>=3.41.6 <=4.0.0-alpha.2) +20 more potentially affected by CVE-2018-3773 via metascraper (>=1.0.7 <=5.29.8)

metascraper NPM version =1.0.7, =4.11.0, =3.41.6, =1.0.0, =1.1.0, =1.0.0, =2.0.0, =3.9.0, =3.17.1, =1.0.0, =1.0.3 and more Source cves: CVE-2018-3773 Source advisory: OSV:GHSA-8F64-Q7JC-CCGP...

beanstalk-dispatch (>=0.0.3 <=0.0.5), cklauth (>=0.1.0 <=0.3.0) +132 more potentially affected by CVE-2018-14574 via django (>=2.0.0 <=2.0.7)

django PYPI version =2.0.0, =0.0.3, =0.1.0, =0.5.0, =3.0.0, =2.1.0, =0.0.1, =1.1.0, =0.0.7, =0.1.0, =0.0.2, =1.3.0, =2.0.0, =2.0.2 and more Source cves: CVE-2018-14574 Source advisory: OSV:PYSEC-2018-2...

grunt-http (>=2.0.0 <=2.2.0) potentially affected by CVE-2016-2515 via hawk (=4.0.1)

hawk NPM version =4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on hawk and may be impacted: - grunt-http =2.0.0, =2.2.0 Source cves: CVE-2016-2515 Source advisory: OSV:GHSA-JCPV-G9RR-QXRC...

aepp-sdk (>=0.18.0.3 <=0.18.0.4), aletheia (=0.0.1) +63 more potentially affected by CVE-2018-10903 via cryptography (>=1.9.0 <=2.2.2)

cryptography PYPI version =1.9.0, =0.18.0.3, =3.1.0, =0.2.0, =0.2.2, =0.7.1, =1.2.1.20160901, =0.8.0, =0.0.1, =0.5.4, =0.9.191, =0.7.0, =0.3.1, =0.4.0 and more Source cves: CVE-2018-10903 Source advisory: OSV:GHSA-FCF9-3QW3-GXMJ...

@risingstack/trace (=2.0.1), democracyos-notifier (>=1.3.0 <=2.1.3) +1 more potentially affected by CVE-2018-3723 via defaults-deep (=0.2.3)

defaults-deep NPM version =0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on defaults-deep and may be impacted: - @risingstack/trace =2.0.1 - democracyos-notifier =1.3.0, =2.1.3 - oddvoter-notifier =1.1.1 Source cves: CVE-2018-3723 Source advisory:...

@careteam/mfe-init (=0.0.8), @topfeed/topfeed (>=0.0.30 <=0.0.44) +68 more potentially affected by CVE-2018-3720 via assign-deep (>=0.1.2 <=0.4.6)

assign-deep NPM version =0.1.2, =0.0.30, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.2.0, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =2.3.0 and more Source cves: CVE-2018-3720 Source advisory: OSV:GHSA-XCVV-84J5-JW9H...

dev-srv (>=0.1.3 <=0.3.1), gfm-srv (>=0.0.2 <=1.1.3) potentially affected by CVE-2018-3714 via node-srv (>=0.3.3 <=1.2.6)

node-srv NPM version =0.3.3, =0.1.3, =0.0.2, =1.1.3 Source cves: CVE-2018-3714 Source advisory: OSV:GHSA-52R9-G5G6-2HJP...

0.app1 (=1.0.52), 0.edsql (>=1.0.49 <=1.0.50) +521 more potentially affected by CVE-2017-16151 via electron (>=0.1.2 <=1.6.13)

electron NPM version =0.1.2, =1.0.49, =1.0.49, =1.0.49, =1.0.0, =1.0.6, =4.0.23, =0.0.7, =0.0.73, =1.0.0, =2.0.0, =2.0.2 and more Source cves: CVE-2017-16151 Source advisory: OSV:GHSA-4W88-RJJ3-X7WP...

many-versioned-wheel (>=0.1.0 <=0.2.1), pyzotero (=1.4.9) potentially affected by CVE-2012-2921 via feedparser (>=5.0.0 <=5.1.0)

feedparser PYPI version =5.0.0, =0.1.0, =0.2.1 - pyzotero =1.4.9 Source cves: CVE-2012-2921 Source advisory: OSV:GHSA-HJF3-R7GW-9RWG...

react-icons (>=0.2.0 <=0.2.1) potentially affected by CVE-2017-16023 via decamelize (=1.1.1)

decamelize NPM version =1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on decamelize and may be impacted: - react-icons =0.2.0, =0.2.1 Source cves: CVE-2017-16023 Source advisory: OSV:GHSA-Q5C4-39F5-M68J...