@alyzenpublic/craco (>=3.2.3-dev, <=3.2.3-dev2), @amory/core (>=2018.8.29-1, <=2018.8.31-0) +153 more potentially affected by CVE-2018-16487 +1 more via lodash.mergewith (>=4.0.3, <=4.6.1)

lodash.mergewith NPM version =4.0.3, =3.2.3-dev, =2018.8.29-1, =2018.8.29-0, =2018.8.31-0, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =1.0.0, =1.10.0, =1.10.1, =1.0.0, =1.0.0, =1.0.0, =5.0.0, =5.2.8, =6.2.0 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source...

angular-rome (>=0.2.4, <=0.2.9), api-gate (>=0.0.8, <=0.0.14) +74 more potentially affected by CVE-2018-16487 +1 more via lodash._basemerge (>=2.0.0, <=2.4.1)

lodash.basemerge NPM version =2.0.0, =0.2.4, =0.0.8, =0.1.2, =0.5.0, =0.0.3, =0.0.2, =0.0.0, =0.1.3, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.18, =1.1.16 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source advisory: SNYK:JS-LODASHBASEMERGE-450200...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by CVE-2018-16487 +1 more via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source advisory:...

1508-cli (>=1.0.0, <=1.0.6), 1k (>=0.0.1, <=0.0.11) +10671 more potentially affected by CVE-2018-16487 +1 more via lodash (>=4.0.0, <=4.17.10)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.7, =0.4.20, =0.4.21 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source advisory: SNYK:JS-LODASH-73638...

coap.mqtt.lwm2m (>=1.0.0, <=1.0.4), list-gateway (>=0.0.12, <=0.0.14) +2 more potentially affected by CVE-2018-11615 via mosca (>=2.2.0, <=2.7.0)

mosca NPM version =2.2.0, =1.0.0, =0.0.12, =2.0.13, =2.0.18 Source cves: CVE-2018-11615 Source advisory: OSV:GHSA-WQG7-VRJ7-V82H...

@ekyc_qoobiss/qbs-ect-cmp (>=4.7.16, <=4.7.140), @ekycsolutions/ml-js-sdk (>=0.0.9-alpha, <=0.0.10-alpha.13) +13 more potentially affected by CVE-2017-16066 via opencv.js (1.2.1)

opencv.js NPM version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on opencv.js and may be impacted: - @ekycqoobiss/qbs-ect-cmp =4.7.16, =0.0.9-alpha, =1.1.2, =0.3.1, =1.0.0, =0.7.1, =4.0.0, =2.0.1, =2.0.0, =1.11.0, =0.0.112, =0.1.7 Source cves:...

alcazar (>=0.0.0, <=0.0.1), beaver (>=0.0.1, <=0.0.3) +20 more potentially affected by CVE-2017-16115 via timespan (>=2.0.1, <=2.2.0)

timespan NPM version =2.0.1, =0.0.0, =0.0.1, =1.1.2, =0.6.0, =0.0.1, =0.1.0, =1.2.3, =2.0.3-alpha, =1.0.2, =0.1.1, =0.2.1, =0.2.2 and more Source cves: CVE-2017-16115 Source advisory: OSV:GHSA-F523-2F5J-GFCG...

audrey (0.1.0) potentially affected by CVE-2018-20992 via claxon (0.2.1)

claxon CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on claxon and may be impacted: - audrey 0.1.0 Source cves: CVE-2018-20992 Source advisory: OSV:RUSTSEC-2018-0004...

@felixrieseberg/electron-prebuilt-compile (>=2.0.0-beta.1, <=2.0.7), @ngx-electron/cli (>=0.0.3, <=0.0.10) +22 more potentially affected by CVE-2018-15685 via electron (>=2.0.0, <=2.0.7)

electron NPM version =2.0.0, =2.0.0-beta.1, =0.0.3, =0.0.2, =0.0.1, =0.0.1, =2.1.0, =0.0.4, =2.0.0-beta.1, =0.0.10, =19.1.0, =19.3.1 and more Source cves: CVE-2018-15685 Source advisory: OSV:GHSA-HV9C-QWQG-QJ3V...

@ftnk/electron-prebuilt-compile (1.7.3), @philipptrenz/photo-booth (>=1.0.1, <=1.0.6) +68 more potentially affected by CVE-2018-15685 via electron (>=1.7.0, <=1.7.13)

electron NPM version =1.7.0, =1.0.1, =1.0.0, =1.0.1, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.2.0-next.0148a1fd, =0.2.0-next.29255833, =0.2.0-next.29255833, =0.2.0-next.0148a1fd, =0.2.1, =0.2.0-next.29255833, =0.4.0-next.ff386514 and more Source...

@devpodio/application-manager (>=0.3.16, <=0.3.20), @devpodio/bunyan (>=0.3.16, <=0.3.20) +158 more potentially affected by CVE-2018-15685 via electron (>=1.8.1, <=1.8.7)

electron NPM version =1.8.1, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.20 and more Source cves: CVE-2018-15685 Source advisory: OSV:GHSA-HV9C-QWQG-QJ3V...

@drubin/garden-cli (>=0.8.0-rc10, <=0.8.0-rc8), eysi-garden-test (>=0.8.1-ci-test, <=0.8.1-ci-test-3) +5 more potentially affected by CVE-2018-3784 via cryo (>=0.0.5, <=0.0.6)

cryo NPM version =0.0.5, =0.8.0-rc10, =0.8.1-ci-test, =0.0.1, =0.1.0-alpha.0e685d62, =0.1.1, =0.1.2 Source cves: CVE-2018-3784 Source advisory: OSV:GHSA-38F5-GHC2-FCMV...

@sematext/logagent (>=2.0.101, <=2.0.126), cashew-mqtt (>=0.0.6, <=0.1.20) +7 more potentially affected by CVE-2018-3778 via aedes (>=0.9.0, <=0.34.1)

aedes NPM version =0.9.0, =2.0.101, =0.0.6, =0.1.0, =0.0.1, =0.5.1, =1.0.2, =0.0.1, =0.5.1, =0.5.16 Source cves: CVE-2018-3778 Source advisory: OSV:GHSA-4CMX-HRQ9-C23P...

libsbmlsim (>=0.0.1, <=0.0.2), wa-bisnis-bot (1.0.0) potentially affected by CVE-2016-10642 via cmake (>=0.0.1, <=0.0.4)

cmake NPM version =0.0.1, =0.0.1, =0.0.2 - wa-bisnis-bot 1.0.0 Source cves: CVE-2016-10642 Source advisory: OSV:GHSA-4J59-HFW6-6W7H...

webshotgun (>=0.0.2, <=1.0.1) potentially affected by CVE-2016-10644 via slimerjs-edge (0.10.0-pre-3)

slimerjs-edge NPM version 0.10.0-pre-3 is affected by a known vulnerability. The following packages have a transitive dependency on slimerjs-edge and may be impacted: - webshotgun =0.0.2, =1.0.1 Source cves: CVE-2016-10644 Source advisory: OSV:GHSA-5RC6-2R3R-FV79...

duckietv-builder (>=1.0.0, <=1.0.11) potentially affected by CVE-2016-10646 via resourcehacker (4.2.51)

resourcehacker NPM version 4.2.51 is affected by a known vulnerability. The following packages have a transitive dependency on resourcehacker and may be impacted: - duckietv-builder =1.0.0, =1.0.11 Source cves: CVE-2016-10646 Source advisory: OSV:GHSA-P65H-233C-JXVM...

@fannarsh/trident (>=0.1.0, <=0.2.0), @hola.org/http-signature (1.1.1-hola.1) +22 more potentially affected by CVE-2018-3737 via sshpk (>=1.0.4, <=1.13.1)

sshpk NPM version =1.0.4, =0.1.0, =2.67.0-hola.5, =2.67.0-lum.3, =0.0.1, =0.9.0-beta.1, =2.0.0, =0.3.3, =1.1.0, =7.5.0, =2.0.0, =2.4.1 and more Source cves: CVE-2018-3737 Source advisory: OSV:GHSA-2M39-62FM-Q8R3...

@afshin/custom404-extension (>=0.1.1, <=0.1.3), @apache-royale/cli (>=0.1.0, <=0.2.2) +443 more potentially affected by CVE-2018-3774 via url-parse (>=1.0.2, <=1.4.1)

url-parse NPM version =1.0.2, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.1.1, =0.1.1-beta.0, =0.1.0, =0.1.0, =0.1.0, =1.1.1, =2.0.0, =2.0.0, =4.1.0 - @datalayer/jupyterlab-hub-extension 0.8.1 and more Source cves: CVE-2018-3774 Source advisory: OSV:GHSA-PV4C-P2J5-38J4...

@jamie452/open-graph-scraper (2.3.2), bind-rest (>=1.4.0, <=1.4.6) +2 more potentially affected by CVE-2017-16098 via charset (1.0.0)

charset NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on charset and may be impacted: - @jamie452/open-graph-scraper 2.3.2 - bind-rest =1.4.0, =2.2.2, =2.5.4 - request-url-open-graph 1.1.2 Source cves: CVE-2017-16098 Source advisory:...

@bahmutov/add-typescript-to-cypress (>=1.0.2, <=1.1.1), @betit/orion (>=1.0.0-beta.1, <=1.0.0-beta.6) +178 more potentially affected by CVE-2017-16137 via debug (>=3.0.0, <=3.0.1)

debug NPM version =3.0.0, =1.0.2, =1.0.0-beta.1, =1.0.0-beta.6, =2.0.1-SNAPSHOT.88, =0.0.4, =0.0.12, =1.0.1, =1.0.0, =1.0.0, =0.1.5, =2.8.0, =1.0.71, =1.0.10-14, =1.1.16 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...