@sematext/logagent (>=2.0.101, <=2.0.126), cashew-mqtt (>=0.0.6, <=0.1.20) +7 more potentially affected by CVE-2018-3778 via aedes (>=0.9.0, <=0.34.1)

aedes NPM version =0.9.0, =2.0.101, =0.0.6, =0.1.0, =0.0.1, =0.5.1, =1.0.2, =0.0.1, =0.5.1, =0.5.16 Source cves: CVE-2018-3778 Source advisory: OSV:GHSA-4CMX-HRQ9-C23P...

libsbmlsim (>=0.0.1, <=0.0.2), wa-bisnis-bot (1.0.0) potentially affected by CVE-2016-10642 via cmake (>=0.0.1, <=0.0.4)

cmake NPM version =0.0.1, =0.0.1, =0.0.2 - wa-bisnis-bot 1.0.0 Source cves: CVE-2016-10642 Source advisory: OSV:GHSA-4J59-HFW6-6W7H...

webshotgun (>=0.0.2, <=1.0.1) potentially affected by CVE-2016-10644 via slimerjs-edge (0.10.0-pre-3)

slimerjs-edge NPM version 0.10.0-pre-3 is affected by a known vulnerability. The following packages have a transitive dependency on slimerjs-edge and may be impacted: - webshotgun =0.0.2, =1.0.1 Source cves: CVE-2016-10644 Source advisory: OSV:GHSA-5RC6-2R3R-FV79...

duckietv-builder (>=1.0.0, <=1.0.11) potentially affected by CVE-2016-10646 via resourcehacker (4.2.51)

resourcehacker NPM version 4.2.51 is affected by a known vulnerability. The following packages have a transitive dependency on resourcehacker and may be impacted: - duckietv-builder =1.0.0, =1.0.11 Source cves: CVE-2016-10646 Source advisory: OSV:GHSA-P65H-233C-JXVM...

@fannarsh/trident (>=0.1.0, <=0.2.0), @hola.org/http-signature (1.1.1-hola.1) +22 more potentially affected by CVE-2018-3737 via sshpk (>=1.0.4, <=1.13.1)

sshpk NPM version =1.0.4, =0.1.0, =2.67.0-hola.5, =2.67.0-lum.3, =0.0.1, =0.9.0-beta.1, =2.0.0, =0.3.3, =1.1.0, =7.5.0, =2.0.0, =2.4.1 and more Source cves: CVE-2018-3737 Source advisory: OSV:GHSA-2M39-62FM-Q8R3...

@afshin/custom404-extension (>=0.1.1, <=0.1.3), @apache-royale/cli (>=0.1.0, <=0.2.2) +443 more potentially affected by CVE-2018-3774 via url-parse (>=1.0.2, <=1.4.1)

url-parse NPM version =1.0.2, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.1.1, =0.1.1-beta.0, =0.1.0, =0.1.0, =0.1.0, =1.1.1, =2.0.0, =2.0.0, =4.1.0 - @datalayer/jupyterlab-hub-extension 0.8.1 and more Source cves: CVE-2018-3774 Source advisory: OSV:GHSA-PV4C-P2J5-38J4...

@jamie452/open-graph-scraper (2.3.2), bind-rest (>=1.4.0, <=1.4.6) +2 more potentially affected by CVE-2017-16098 via charset (1.0.0)

charset NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on charset and may be impacted: - @jamie452/open-graph-scraper 2.3.2 - bind-rest =1.4.0, =2.2.2, =2.5.4 - request-url-open-graph 1.1.2 Source cves: CVE-2017-16098 Source advisory:...

@bahmutov/add-typescript-to-cypress (>=1.0.2, <=1.1.1), @betit/orion (>=1.0.0-beta.1, <=1.0.0-beta.6) +178 more potentially affected by CVE-2017-16137 via debug (>=3.0.0, <=3.0.1)

debug NPM version =3.0.0, =1.0.2, =1.0.0-beta.1, =1.0.0-beta.6, =2.0.1-SNAPSHOT.88, =0.0.4, =0.0.12, =1.0.1, =1.0.0, =1.0.0, =0.1.5, =2.8.0, =1.0.71, =1.0.10-14, =1.1.16 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...

1ib (>=1.0.9, <=1.0.11), 20190403-utils (1.0.0) +10597 more potentially affected by CVE-2017-16137 via debug (>=4.0.0, <=4.3.0)

debug NPM version =4.0.0, =1.0.9, =1.0.1, =1.1.2, =1.0.0, =4.11.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0-alpha.19, =1.2.3 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...

@0ti.me/test-deps (>=0.1.1, <=0.1.22), @0ti.me/ts-test-deps (>=0.1.0, <=0.1.3) +2449 more potentially affected by CVE-2017-16137 via debug (>=3.2.0, <=3.2.6)

debug NPM version =3.2.0, =0.1.1, =0.1.0, =1.0.0, =0.2.39, =1.0.2, =2.0.3, =1.1.1, =0.0.34, =1.0.1, =1.0.2, =1.0.2, =0.0.2, =0.0.2, =0.1.0, =0.3.0 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...

6aika-paatos-client (>=0.0.1, <=0.0.2), @agilegravity/ai-client (1.0.0) +515 more potentially affected by CVE-2017-16129 via superagent (>=3.0.0, <=3.6.3)

superagent NPM version =3.0.0, =0.0.1, =1.0.0-beta.11, =2.0.0-beta.1, =0.1.4, =1.0.1, =0.2.0, =12.0.0-rc.1, =14.6.0 and more Source cves: CVE-2017-16129 Source advisory: OSV:GHSA-8225-6CVR-8PQP...

@maxbeatty/aws-lambda-deploy (>=2.1.0, <=2.2.0), @mean-expert/fireloop (>=1.0.0-alpha.16, <=1.0.0-alpha.26) +170 more potentially affected by CVE-2016-3956 via npm (>=2.0.0, <=2.15.0)

npm NPM version =2.0.0, =2.1.0, =1.0.0-alpha.16, =1.0.28, =0.0.4, =0.0.3, =0.1.0, =0.0.1, =0.1.0, =1.2.1, =1.5.5 - att 4.2.4 and more Source cves: CVE-2016-3956 Source advisory: OSV:GHSA-M5H6-HR3Q-22H5...

@49ing/ngx-videogular (5.0.1), @akashic/akashic-cli-commons (0.1.3) +52 more potentially affected by CVE-2016-3956 via npm (>=3.1.0, <=3.7.5)

npm NPM version =3.1.0, =0.1.2, =0.0.3, =0.0.3, =0.1.0, =1.0.0-open-source.0, =0.0.1, =0.1.0 and more Source cves: CVE-2016-3956 Source advisory: OSV:GHSA-M5H6-HR3Q-22H5...

autotest-engine (>=1.0.0, <=1.3.9), grunt-newman (1.0.7) +11 more potentially affected by CVE-2016-2515 via hawk (>=3.1.0, <=3.1.2)

hawk NPM version =3.1.0, =1.0.0, =1.0.0, =0.1.6, =1.2.25, =0.0.1, =0.0.6-prealpha.1, =1.0.0, =4.0.3, =1.0.0, =2.1.2, =2.2.0 Source cves: CVE-2016-2515 Source advisory: OSV:GHSA-JCPV-G9RR-QXRC...

grunt-http (>=2.0.0, <=2.2.0) potentially affected by CVE-2016-2515 via hawk (4.0.1)

hawk NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on hawk and may be impacted: - grunt-http =2.0.0, =2.2.0 Source cves: CVE-2016-2515 Source advisory: OSV:GHSA-JCPV-G9RR-QXRC...

gulp-haxe (>=0.3.0, <=0.4.5) potentially affected by CVE-2016-10692 via haxeshim (>=0.5.6, <=0.6.3)

haxeshim NPM version =0.5.6, =0.3.0, =0.4.5 Source cves: CVE-2016-10692 Source advisory: OSV:GHSA-CR6C-85FH-CQPG...

aurelius (>=0.1.8, <=0.1.13), barust (0.1.0) +53 more potentially affected by unknown CVE via chan (0.1.23)

chan CARGO version 0.1.23 is affected by a known vulnerability. The following packages have a transitive dependency on chan and may be impacted: - aurelius =0.1.8, =0.0.2, =0.1.0, =0.2.0, =0.2.9, =0.2.0, =0.1.0, =0.1.0, =0.6.1, =0.3.6, =0.3.0, =0.1.0, =0.0.1, =0.1.0 and more Source cves: unknown...

@elastic/eui (>=0.0.1-prealpha, <=0.0.11), @pl-test/c (>=1.1.0, <=1.1.1) +4 more potentially affected by CVE-2018-3712 via serve (>=6.0.0, <=6.4.4)

serve NPM version =6.0.0, =0.0.1-prealpha, =1.1.0, =4.1.8, =4.1.13 Source cves: CVE-2018-3712 Source advisory: OSV:GHSA-Q2QH-CGC2-QHR3...

37fis (>=1.0.0, <=1.0.2), @alohahealth/aloha-react-sdk (>=0.1.5, <=0.1.9) +1327 more potentially affected by CVE-2018-1002204 via adm-zip (>=0.1.4, <=0.4.10)

adm-zip NPM version =0.1.4, =1.0.0, =0.1.5, =0.1.0, =0.7.0, =0.5.9, =1.10.1, =1.0.1, =0.1.28, =0.0.5, =2.5.1, =2.6.1 - @cr4zyc4t/phantom-html2pdf 1.0.3 - @cypress/core-example 0.3.1 and more Source cves: CVE-2018-1002204 Source advisory: OSV:GHSA-3V6H-HQM4-2RG6...

@alminde/geonames-stream (2.2.1), @essex/powerbi-visual-scripts (1.1.0) +35 more potentially affected by CVE-2018-1002203 via unzipper (>=0.3.0, <=0.8.11)

unzipper NPM version =0.3.0, =1.0.0, =1.0.0, =1.1.47, =1.0.0-alpha.53, =0.0.1, =1.1.0, =0.0.41, =1.0.2, =0.0.1, =2.1.0, =2.2.0 and more Source cves: CVE-2018-1002203 Source advisory: OSV:GHSA-884W-698F-927F...