@loke/mysql-orm (1.12.0), bell.js (>=2.0.0-alpha.1, <=2.0.5) +31 more potentially affected by CVE-2016-10550 via sequelize (>=3.0.1, <=3.14.2)

sequelize NPM version =3.0.1, =2.0.0-alpha.1, =0.1.0, =0.0.1, =10.0.2, =0.0.1, =0.1.0, =1.0.2, =0.0.1, =5.0.0-rc, =0.3.0, =0.8.6 - passport-local-mysequelize 0.0.1 - passport-local-sequelize 0.6.0 and more Source cves: CVE-2016-10550 Source advisory: OSV:GHSA-98PQ-PMW9-4GPM...

alke (>=0.0.1, <=0.0.2), audit.sequelize (0.0.1) +21 more potentially affected by CVE-2016-10554 via sequelize (>=1.0.2, <=1.6.0-beta4)

sequelize NPM version =1.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.7, =0.5.0-beta.2, =0.1.2, =0.0.1, =0.0.1, =0.3.0, =0.3.0, =0.0.3, =0.1.0, =0.1.2 and more Source cves: CVE-2016-10554 Source advisory: OSV:GHSA-X2JC-PWFJ-H9P3...

@loke/mysql-orm (1.12.0), bell.js (>=2.0.0-alpha.1, <=2.0.5) +37 more potentially affected by CVE-2016-10556 via sequelize (>=3.0.1, <=3.19.3)

sequelize NPM version =3.0.1, =2.0.0-alpha.1, =1.0.2, =0.1.0, =2.8.0, =0.0.1, =10.0.2, =0.0.1, =0.0.1, =0.1.0, =1.0.2, =0.0.1, =5.0.0-rc, =6.0.0-rc6 and more Source cves: CVE-2016-10556 Source advisory: OSV:GHSA-9C2P-JW8P-F84V...

asez (>=0.0.0, <=0.0.1) potentially affected by CVE-2016-10558 via aerospike (2.4.1)

aerospike NPM version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on aerospike and may be impacted: - asez =0.0.0, =0.0.1 Source cves: CVE-2016-10558 Source advisory: OSV:GHSA-V5V3-8JQF-VG27...

beaker-plugin-ipfs (>=1.0.0, <=2.0.1), go-ipfs (>=0.4.0-hacky2, <=0.4.3-npmfix1) +2 more potentially affected by CVE-2016-10563 via go-ipfs-dep (>=0.4.0-1, <=0.4.3-2)

go-ipfs-dep NPM version =0.4.0-1, =1.0.0, =0.4.0-hacky2, =0.9.0, =1.0.0, =1.6.0 Source cves: CVE-2016-10563 Source advisory: OSV:GHSA-G3XP-V2FF-X5C3...

connect-db2 (>=0.0.1, <=0.5.0), db2-wrapper (>=0.0.1, <=0.0.3) +10 more potentially affected by CVE-2016-10577 via ibm_db (>=1.0.0, <=1.0.1)

ibmdb NPM version =1.0.0, =0.0.1, =0.0.1, =2.0.0, =1.0.1, =1.0.18, =1.0.1, =1.0.1, =1.0.7, =6.0.0, =0.2.21, =0.2.24 - sails-db2 1.0.0 Source cves: CVE-2016-10577 Source advisory: OSV:GHSA-C4QP-H3M6-785F...

chrome-js (>=0.1.8, <=0.2.0), cpos (>=0.1.3, <=0.1.9) +26 more potentially affected by CVE-2016-10580 via nodewebkit (>=0.7.5, <=0.11.6)

nodewebkit NPM version =0.7.5, =0.1.8, =0.1.3, =0.1.0, =0.0.1, =0.1.0, =0.0.0, =0.0.1, =0.0.0, =0.0.24, =0.0.6, =1.6.1, =0.0.0, =0.1.0, =1.0.1, =1.0.2 and more Source cves: CVE-2016-10580 Source advisory: OSV:GHSA-GC6C-5V9W-XMHW...

apeman-demo-static (>=2.0.0, <=2.0.8), apeman-demo-web (3.0.1) +23 more potentially affected by CVE-2016-10582 via closurecompiler (>=1.1.4, <=1.6.1)

closurecompiler NPM version =1.1.4, =2.0.0, =1.5.6, =1.0.0, =0.2.0, =0.1.0, =0.4.0, =0.9.0, =1.0.0, =0.3.0, =0.1.0, =0.1.3, =0.0.1, =0.1.1 - makona-editor 0.0.1 and more Source cves: CVE-2016-10582 Source advisory: OSV:GHSA-HJGP-8FFR-HWWR...

allume (>=0.32.1, <=0.45.2), bespoke-pdf (0.0.0) +35 more potentially affected by CVE-2016-10588 via nw (>=0.12.0, <=0.23.1)

nw NPM version =0.12.0, =0.32.1, =1.0.0, =0.3.1, =0.64.0, =0.1.0, =0.1.7, =0.0.1, =0.0.10, =0.0.1, =0.1.3-alpha.3, =0.0.16, =0.0.17 and more Source cves: CVE-2016-10588 Source advisory: OSV:GHSA-HV96-XXX2-5V7W...

@jser/classifier-item-category (1.0.1) potentially affected by CVE-2016-10592 via jser-stat (4.0.3)

jser-stat NPM version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on jser-stat and may be impacted: - @jser/classifier-item-category 1.0.1 Source cves: CVE-2016-10592 Source advisory: OSV:GHSA-5W4P-H4GM-3W26...

anione (>=1.2.0, <=1.2.7), gulp-imageoptim (0.1.0) potentially affected by CVE-2016-10596 via imageoptim (>=0.3.4, <=0.4.2)

imageoptim NPM version =0.3.4, =1.2.0, =1.2.7 - gulp-imageoptim 0.1.0 Source cves: CVE-2016-10596 Source advisory: OSV:GHSA-MM7H-323R-9P4G...

backender (>=0.0.1, <=0.0.7), gulp-backender (>=0.0.4, <=0.0.5) potentially affected by CVE-2016-10604 via dalek-browser-chrome (0.0.11)

dalek-browser-chrome NPM version 0.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on dalek-browser-chrome and may be impacted: - backender =0.0.1, =0.0.4, =0.0.5 Source cves: CVE-2016-10604 Source advisory: OSV:GHSA-6Q8Q-RVF4-M4PG...

strider (>=1.4.0, <=1.4.5) potentially affected by CVE-2016-10611 via strider-sauce (0.6.2)

strider-sauce NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on strider-sauce and may be impacted: - strider =1.4.0, =1.4.5 Source cves: CVE-2016-10611 Source advisory: OSV:GHSA-8GF4-PCJ6-54RP...

cocos2d-coffee-autocomplete (>=0.1.0, <=0.1.3), codeforces-tool (>=0.1.1, <=0.1.2) +13 more potentially affected by CVE-2016-10614 via httpsync (>=0.0.7, <=0.0.8)

httpsync NPM version =0.0.7, =0.1.0, =0.1.1, =0.0.1, =0.1.0, =0.0.6b, =0.1.0, =0.0.2, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.0.9, =0.0.10 Source cves: CVE-2016-10614 Source advisory: OSV:GHSA-4X5J-V9V9-W8GW...

openframe (>=0.1.6, <=0.1.33) potentially affected by CVE-2016-10616 via openframe-image (0.1.8)

openframe-image NPM version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on openframe-image and may be impacted: - openframe =0.1.6, =0.1.33 Source cves: CVE-2016-10616 Source advisory: OSV:GHSA-MGR2-3MPV-43GC...

tpr (>=0.2.0, <=0.2.2) potentially affected by CVE-2016-10634 via scalajs-standalone-bin (0.4.3)

scalajs-standalone-bin NPM version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on scalajs-standalone-bin and may be impacted: - tpr =0.2.0, =0.2.2 Source cves: CVE-2016-10634 Source advisory: OSV:GHSA-CVX3-PQMJ-X57X...

fiskit (>=0.0.27, <=0.0.28) potentially affected by CVE-2016-10660 via fis-parser-sass-bin (1.0.1)

fis-parser-sass-bin NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on fis-parser-sass-bin and may be impacted: - fiskit =0.0.27, =0.0.28 Source cves: CVE-2016-10660 Source advisory: OSV:GHSA-5PQ8-2Q24-MJ3P...

libsbmlsim (>=0.0.1, <=0.0.2) potentially affected by CVE-2016-10668 via libsbml (0.0.2)

libsbml NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on libsbml and may be impacted: - libsbmlsim =0.0.1, =0.0.2 Source cves: CVE-2016-10668 Source advisory: OSV:GHSA-432J-4FW9-2G6F...

nightwatch-commands (>=1.8.0, <=2.0.0) potentially affected by CVE-2016-10559 via selenium-download (2.0.6)

selenium-download NPM version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on selenium-download and may be impacted: - nightwatch-commands =1.8.0, =2.0.0 Source cves: CVE-2016-10559 Source advisory: OSV:GHSA-2MVM-66Q7-M256...

adriannodejs (1.0.0), angular-resource-sails (>=1.1.8, <=1.1.10) +73 more potentially affected by CVE-2016-10549 via sails (>=0.10.5, <=0.12.4)

sails NPM version =0.10.5, =1.1.8, =0.0.0-semantic-release, =1.2.0, =0.0.0, =0.1.0, =0.0.0, =1.0.2, =1.0.0, =0.1.0, =1.0.2, =2.1.5, =0.1.26, =0.1.32 and more Source cves: CVE-2016-10549 Source advisory: OSV:GHSA-QMV4-JGP7-MF68...