@7ninjas/scss-mixins (>=0.0.0, <=1.0.0-alpha3), @afiniti/design-system (>=0.0.1, <=0.0.8) +557 more potentially affected by CVE-2018-14042 via bootstrap (>=4.0.0, <=4.1.1)

bootstrap NPM version =4.0.0, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0-alpha.1, =0.0.1-1.alpha, =0.0.1, =1.1.0, =0.1.0, =1.0.0, =0.3.0, =1.0.0, =2.0.0, =1.0.0, =1.0.31 and more Source cves: CVE-2018-14042 Source advisory: OSV:GHSA-7MVR-5X2G-WFC8...

@antarctica/bas-style-kit (>=0.5.0-alpha, <=0.5.0), @antistatique/retraitespopulaires-styleguide (>=0.0.1, <=1.8.4) +153 more potentially affected by CVE-2018-14042 via bootstrap-sass (>=2.3.2, <=3.3.7)

bootstrap-sass NPM version =2.3.2, =0.5.0-alpha, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui 8.3.3 and more Source cves: CVE-2018-14042 Source advisory: OSV:GHSA-7MVR-5X2G-WFC8...

@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +453 more potentially affected by CVE-2018-14042 via bootstrap (>=3.1.1, <=3.3.7)

bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-14042 Source advisory: OSV:GHSA-7MVR-5X2G-WFC8...

@7ninjas/scss-mixins (>=0.0.0, <=1.0.0-alpha3), @afiniti/design-system (>=0.0.1, <=0.0.8) +557 more potentially affected by CVE-2018-14041 via bootstrap (>=4.0.0, <=4.1.1)

bootstrap NPM version =4.0.0, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0-alpha.1, =0.0.1-1.alpha, =0.0.1, =1.1.0, =0.1.0, =1.0.0, =0.3.0, =1.0.0, =2.0.0, =1.0.0, =1.0.31 and more Source cves: CVE-2018-14041 Source advisory: OSV:GHSA-PJ7M-G53M-7638...

@xhubio/table-export-spreadsheet-decision (>=1.1.6, <=1.1.8), nodejs-lib (>=2.3.0, <=2.3.5) potentially affected by CVE-2018-16459 via exceljs (>=1.0.0, <=1.5.1)

exceljs NPM version =1.0.0, =1.1.6, =2.3.0, =2.3.5 Source cves: CVE-2018-16459 Source advisory: OSV:GHSA-2J2J-8RRV-264G...

@emartech/fake-server (1.2.0), escher-auth (1.0.0) +5 more potentially affected by CVE-2018-1000620 via cryptiles (3.1.2)

cryptiles NPM version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptiles and may be impacted: - @emartech/fake-server 1.2.0 - escher-auth 1.0.0 - escher-suiteapi-js =10.0.0, =2.5.3, =13.0.0, =15.1.0 Source cves: CVE-2018-1000620 Source...

@admui/grid (>=0.1.10, <=0.3.1), @atlantis-lab/grid (>=0.1.0, <=0.1.2) +102 more potentially affected by CVE-2018-16487 +1 more via lodash-es (>=4.0.0, <=4.17.10)

lodash-es NPM version =4.0.0, =0.1.10, =0.1.0, =0.1.0-alpha.1, =3.2.3, =0.0.18-vojty-doc-split-components-2017-06-06T13-48-34-024Z, =57.1.8-pbenes-pb-jquery-2018-11-07T06-24-59-378Z, =3.1.5-pbenes-pb-jquery-2018-11-07T06-21-47-886Z, =1.0.0, =0.8.0-beta.1, =10.0.0-beta.1, =0.2.3, =0.0.7-beta.34,...

@maxts/waterline-adapter-tests (1.0.3), driver-interface (1.0.2) +9 more potentially affected by CVE-2018-16487 +1 more via @sailshq/lodash (3.10.2)

@sailshq/lodash NPM version 3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sailshq/lodash and may be impacted: - @maxts/waterline-adapter-tests 1.0.3 - driver-interface 1.0.2 - machinepack-sockets =2.0.0, =5.2.0-0, =1.0.1, =0.9.1, =2.1.14,...

angular-rome (>=0.2.4, <=0.2.9), api-gate (>=0.0.8, <=0.0.14) +74 more potentially affected by CVE-2018-16487 +1 more via lodash._basemerge (>=2.0.0, <=2.4.1)

lodash.basemerge NPM version =2.0.0, =0.2.4, =0.0.8, =0.1.2, =0.5.0, =0.0.3, =0.0.2, =0.0.0, =0.1.3, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.18, =1.1.16 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source advisory: SNYK:JS-LODASHBASEMERGE-450200...

@alyzenpublic/craco (>=3.2.3-dev, <=3.2.3-dev2), @amory/core (>=2018.8.29-1, <=2018.8.31-0) +153 more potentially affected by CVE-2018-16487 +1 more via lodash.mergewith (>=4.0.3, <=4.6.1)

lodash.mergewith NPM version =4.0.3, =3.2.3-dev, =2018.8.29-1, =2018.8.29-0, =2018.8.31-0, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =1.0.0, =1.10.0, =1.10.1, =1.0.0, =1.0.0, =1.0.0, =5.0.0, =5.2.8, =6.2.0 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by CVE-2018-16487 +1 more via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source advisory:...

1508-cli (>=1.0.0, <=1.0.6), 1k (>=0.0.1, <=0.0.11) +10671 more potentially affected by CVE-2018-16487 +1 more via lodash (>=4.0.0, <=4.17.10)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.7, =0.4.20, =0.4.21 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source advisory: SNYK:JS-LODASH-73638...

coap.mqtt.lwm2m (>=1.0.0, <=1.0.4), list-gateway (>=0.0.12, <=0.0.14) +2 more potentially affected by CVE-2018-11615 via mosca (>=2.2.0, <=2.7.0)

mosca NPM version =2.2.0, =1.0.0, =0.0.12, =2.0.13, =2.0.18 Source cves: CVE-2018-11615 Source advisory: OSV:GHSA-WQG7-VRJ7-V82H...

@ekyc_qoobiss/qbs-ect-cmp (>=4.7.16, <=4.7.140), @ekycsolutions/ml-js-sdk (>=0.0.9-alpha, <=0.0.10-alpha.13) +13 more potentially affected by CVE-2017-16066 via opencv.js (1.2.1)

opencv.js NPM version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on opencv.js and may be impacted: - @ekycqoobiss/qbs-ect-cmp =4.7.16, =0.0.9-alpha, =1.1.2, =0.3.1, =1.0.0, =0.7.1, =4.0.0, =2.0.1, =2.0.0, =1.11.0, =0.0.112, =0.1.7 Source cves:...

alcazar (>=0.0.0, <=0.0.1), beaver (>=0.0.1, <=0.0.3) +20 more potentially affected by CVE-2017-16115 via timespan (>=2.0.1, <=2.2.0)

timespan NPM version =2.0.1, =0.0.0, =0.0.1, =1.1.2, =0.6.0, =0.0.1, =0.1.0, =1.2.3, =2.0.3-alpha, =1.0.2, =0.1.1, =0.2.1, =0.2.2 and more Source cves: CVE-2017-16115 Source advisory: OSV:GHSA-F523-2F5J-GFCG...

audrey (0.1.0) potentially affected by CVE-2018-20992 via claxon (0.2.1)

claxon CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on claxon and may be impacted: - audrey 0.1.0 Source cves: CVE-2018-20992 Source advisory: OSV:RUSTSEC-2018-0004...

@felixrieseberg/electron-prebuilt-compile (>=2.0.0-beta.1, <=2.0.7), @ngx-electron/cli (>=0.0.3, <=0.0.10) +22 more potentially affected by CVE-2018-15685 via electron (>=2.0.0, <=2.0.7)

electron NPM version =2.0.0, =2.0.0-beta.1, =0.0.3, =0.0.2, =0.0.1, =0.0.1, =2.1.0, =0.0.4, =2.0.0-beta.1, =0.0.10, =19.1.0, =19.3.1 and more Source cves: CVE-2018-15685 Source advisory: OSV:GHSA-HV9C-QWQG-QJ3V...

@ftnk/electron-prebuilt-compile (1.7.3), @philipptrenz/photo-booth (>=1.0.1, <=1.0.6) +68 more potentially affected by CVE-2018-15685 via electron (>=1.7.0, <=1.7.13)

electron NPM version =1.7.0, =1.0.1, =1.0.0, =1.0.1, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.2.0-next.0148a1fd, =0.2.0-next.29255833, =0.2.0-next.29255833, =0.2.0-next.0148a1fd, =0.2.1, =0.2.0-next.29255833, =0.4.0-next.ff386514 and more Source...

@devpodio/application-manager (>=0.3.16, <=0.3.20), @devpodio/bunyan (>=0.3.16, <=0.3.20) +158 more potentially affected by CVE-2018-15685 via electron (>=1.8.1, <=1.8.7)

electron NPM version =1.8.1, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.20 and more Source cves: CVE-2018-15685 Source advisory: OSV:GHSA-HV9C-QWQG-QJ3V...

@drubin/garden-cli (>=0.8.0-rc10, <=0.8.0-rc8), eysi-garden-test (>=0.8.1-ci-test, <=0.8.1-ci-test-3) +5 more potentially affected by CVE-2018-3784 via cryo (>=0.0.5, <=0.0.6)

cryo NPM version =0.0.5, =0.8.0-rc10, =0.8.1-ci-test, =0.0.1, =0.1.0-alpha.0e685d62, =0.1.1, =0.1.2 Source cves: CVE-2018-3784 Source advisory: OSV:GHSA-38F5-GHC2-FCMV...