@aikiwangdake/nsg-editor-library (>=2.0.0, <=2.0.4), @becomes/cms-ui (>=2.0.0, <=2.0.51) +294 more potentially affected by CVE-2018-19057 via simplemde (1.11.2)

simplemde NPM version 1.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on simplemde and may be impacted: - @aikiwangdake/nsg-editor-library =2.0.0, =2.0.0, =0.1.0, =0.1.27, =0.2.6, =1.0.0-alpha.1, =1.10.0, =1.0.5, =1.0.26, =1.4.0, =1.4.4 and more...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @deja-js/component (>=3.0.0-beta.25, <=4.0.5) +18 more potentially affected by CVE-2018-17960 via ckeditor (>=4.5.11, <=4.10.1)

ckeditor NPM version =4.5.11, =1.0.0, =3.0.0-beta.25, =0.5.0, =0.5.0, =0.0.0-beta.1, =1.0.0, =1.15.5, =0.0.0, =1.0.1, =1.2.1 and more Source cves: CVE-2018-17960 Source advisory: OSV:GHSA-G68X-VVQQ-PVW3...

2co-client (>=0.0.11, <=0.0.12), 4sq (0.1.2) +860 more potentially affected by CVE-2017-16005 via http-signature (>=0.9.7, <=0.9.11)

http-signature NPM version =0.9.7, =0.0.11, =0.0.0, =0.1.43, =0.1.1, =0.1.1, =1.0.0-0, =0.0.2, =1.0.0-alpha.4, =1.0.0-alpha.3, =1.0.8, =1.0.9 and more Source cves: CVE-2017-16005 Source advisory: OSV:GHSA-Q257-VV4P-FG92...

fd-api-integration (>=0.0.2, <=0.0.9) potentially affected by CVE-2017-16055 via sqlserver (1.0.2)

sqlserver NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlserver and may be impacted: - fd-api-integration =0.0.2, =0.0.9 Source cves: CVE-2017-16055 Source advisory: OSV:GHSA-3RH7-VM4X-Q2HP...

sheetsee (>=0.0.1, <=0.0.3), sheetsee-maps (>=0.0.0, <=0.2.4) potentially affected by CVE-2017-1000043 via mapbox.js (1.3.1)

mapbox.js NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mapbox.js and may be impacted: - sheetsee =0.0.1, =0.0.0, =0.2.4 Source cves: CVE-2017-1000043 Source advisory: OSV:GHSA-Q69P-5H74-W36F...

@dormakaba/taibika-visual (>=0.1.0, <=1.6.5), cnpmjs.org (>=2.0.0-beta0, <=2.0.0-rc.9) +13 more potentially affected by CVE-2017-16006 via remarkable (>=1.3.0, <=1.6.2)

remarkable NPM version =1.3.0, =0.1.0, =2.0.0-beta0, =3.0.3, =0.0.2, =1.0.0, =0.0.1, =0.0.0, =0.2.11, =0.3.4, =1.0.0-alpha, =1.0.0-alpha.1, =1.5.0 Source cves: CVE-2017-16006 Source advisory: OSV:GHSA-MRMF-QWXG-7C3H...

nopro (0.0.2) potentially affected by CVE-2017-16014 via http-proxy (0.6.6)

http-proxy NPM version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy and may be impacted: - nopro 0.0.2 Source cves: CVE-2017-16014 Source advisory: OSV:GHSA-9XW9-PVGV-6P76...

apostrophe (>=0.5.235, <=0.5.299), apostrophe-tumblr (>=0.5.1, <=0.5.13) +5 more potentially affected by CVE-2017-16016 via sanitize-html (>=1.1.4, <=1.10.1)

sanitize-html NPM version =1.1.4, =0.5.235, =0.5.1, =0.1.0-beta.6, =0.5.1, =0.0.1, =0.0.9 Source cves: CVE-2017-16016 Source advisory: OSV:GHSA-XC6G-GGRC-QQ4R...

@onshape/ng-i18next (0.3.12), amdblah-hbs-helpers (>=0.0.1, <=0.2.1) +21 more potentially affected by CVE-2017-16008 via i18next (>=1.5.0, <=1.10.2)

i18next NPM version =1.5.0, =0.0.1, =0.0.3, =0.4.3, =0.3.1, =0.10.11, =0.1.10, =1.0.2, =0.3.3, =0.0.1, =0.0.1, =0.11.0, =0.11.2 - openinghours 3.3.0 and more Source cves: CVE-2017-16008 Source advisory: OSV:GHSA-F89G-WHPF-6Q9M...

apostrophe-tumblr (>=0.5.1, <=0.5.13) potentially affected by CVE-2017-16017 via sanitize-html (1.1.4)

sanitize-html NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - apostrophe-tumblr =0.5.1, =0.5.13 Source cves: CVE-2017-16017 Source advisory: OSV:GHSA-WG96-3933-J2W5...

3c (>=0.0.1-alpha, <=1.0.0), @loklaan/npm-hook-slack (>=1.0.1, <=1.1.0-testing.2) +312 more potentially affected by CVE-2017-16018 via restify (>=2.1.1, <=4.0.4)

restify NPM version =2.1.1, =0.0.1-alpha, =1.0.1, =0.1.2, =0.2.5, =0.1.9, =0.0.1, =0.2.20, =0.3.7, =2.0.0, =1.0.1, =0.0.0, =0.0.1, =0.0.1, =0.5.1 and more Source cves: CVE-2017-16018 Source advisory: OSV:GHSA-QW3G-35HC-FCRH...

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +20118 more potentially affected by CVE-2017-16026 via request (>=2.2.6, <=2.67.0)

request NPM version =2.2.6, =2.67.0 is affected by a known vulnerability. The following packages have a transitive dependency on request and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 -...

angular-validator (>=1.2.8, <=1.2.9), announce.js (>=0.1.0, <=0.2.31) +232 more potentially affected by CVE-2017-16031 via socket.io (>=0.5.3, <=0.9.6)

socket.io NPM version =0.5.3, =1.2.8, =0.1.0, =1.1.0, =0.3.0, =0.1.0, =0.1.8, =0.3.1, =0.0.5, =0.0.1, =0.2.4 and more Source cves: CVE-2017-16031 Source advisory: OSV:GHSA-QV2V-M59F-V5FW...

3loc (>=0.2.0, <=0.4.0), @zambezi/ez-doc (1.0.0-prepare-for-open-source.1) +41 more potentially affected by CVE-2016-10547 via nunjucks (>=2.0.0, <=2.4.2)

nunjucks NPM version =2.0.0, =0.2.0, =0.4.0, =1.0.0, =0.0.7, =0.0.4, =0.0.2, =2.0.0-alpha.1, =0.3.0, =2.3.0-beta, =1.0.0, =1.0.3, =1.0.4 and more Source cves: CVE-2016-10547 Source advisory: OSV:GHSA-F7PH-P5RV-PHW2...

whistle.combo (>=1.0.0, <=1.0.2) potentially affected by CVE-2018-16474 via tianma-static (1.0.4)

tianma-static NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on tianma-static and may be impacted: - whistle.combo =1.0.0, =1.0.2 Source cves: CVE-2018-16474 Source advisory: OSV:GHSA-JHGP-HVJ6-X2P2...

fw-host-discovery (>=1.0.0, <=1.0.5) potentially affected by CVE-2018-16461 via libnmap (0.2.33)

libnmap NPM version 0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on libnmap and may be impacted: - fw-host-discovery =1.0.0, =1.0.5 Source cves: CVE-2018-16461 Source advisory: OSV:GHSA-7G2W-6R25-2J7P...

@blackbaud/skyux-deploy (>=1.0.0-beta.0, <=1.4.0), @cysonius/json-utils (>=0.0.1, <=0.0.5) +354 more potentially affected by CVE-2018-16469 via merge (>=1.0.0, <=1.2.0)

merge NPM version =1.0.0, =1.0.0-beta.0, =0.0.1, =0.0.2, =0.0.12, =1.0.0, =0.0.1, =0.0.1, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =0.52.0-typescript3-1, =0.52.0-src-build, =1.2.0, =1.2.4 and more Source cves: CVE-2018-16469 Source advisory: OSV:GHSA-F9CM-QMX5-M98H...

@dailybruin/lux (>=1.0.0, <=1.0.4), @dsbn/slate (0.0.1) +18 more potentially affected by CVE-2018-14731 via parcel-bundler (>=1.2.0, <=1.9.7)

parcel-bundler NPM version =1.2.0, =1.0.0, =1.1.0, =0.2.5, =1.0.0-alpha.2, =1.0.0-alpha.2, =0.0.12, =1.2.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2018-14731 Source advisory: OSV:GHSA-37Q6-576Q-VGR7...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +2427 more potentially affected by CVE-2014-6393 via express (>=3.0.0, <=3.10.5)

express NPM version =3.0.0, =0.0.1, =0.0.1, =0.0.1, =0.25.0, =1.0.4, =0.0.1, =0.0.4, =0.0.1, =0.0.6 and more Source cves: CVE-2014-6393 Source advisory: OSV:GHSA-GPVR-G6GH-9MC2...

1405-authtokens (>=1.0.1, <=1.0.5), 2048.io (0.0.1) +471 more potentially affected by CVE-2014-6393 via express (>=4.0.0, <=4.4.5)

express NPM version =4.0.0, =1.0.1, =1.0.0, =0.0.5-SNAPSHOT.11, =0.1.0, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.5-SNAPSHOT.11, =0.0.7, =0.0.1, =1.3.2-1, =1.3.2-2 - alexa-app 1.0.0 and more Source cves: CVE-2014-6393 Source advisory: OSV:GHSA-GPVR-G6GH-9MC2...