@partygame.show/demo (>=1.0.0-alpha.0, <=1.0.0-alpha.5), ember-superstatic (>=0.6.0, <=1.0.0) potentially affected by unknown CVE via superstatic (5.0.1)

superstatic NPM version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on superstatic and may be impacted: - @partygame.show/demo =1.0.0-alpha.0, =0.6.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-WM77-Q74P-5763...

@getty.io/taskapp (>=1.2.1, <=1.2.7), bbc-a11y (>=2.1.0, <=2.2.1) +9 more potentially affected by CVE-2018-3739 via https-proxy-agent (>=2.0.0, <=2.1.1)

https-proxy-agent NPM version =2.0.0, =1.2.1, =2.1.0, =2.0.0, =1.0.1, =0.8.0, =1.12.0, =1.12.0-beta.1576, =1.15.0-beta.1701 - request-light 0.2.2 - shippable-bbs-oauth 0.9.22 Source cves: CVE-2018-3739 Source advisory: OSV:GHSA-8G7P-74H8-HG48...

@risingstack/trace (2.0.1), democracyos-notifier (>=1.3.0, <=2.1.3) +1 more potentially affected by CVE-2018-3723 via defaults-deep (0.2.3)

defaults-deep NPM version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on defaults-deep and may be impacted: - @risingstack/trace 2.0.1 - democracyos-notifier =1.3.0, =2.1.3 - oddvoter-notifier 1.1.1 Source cves: CVE-2018-3723 Source advisory:...

1508-cli (>=1.0.0, <=1.0.6), 1k (>=0.0.1, <=0.0.11) +8500 more potentially affected by CVE-2018-3721 via lodash (>=4.0.0, <=4.17.4)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =1.0.0-beta.1, =1.16.1, =2.4.4 and more Source cves: CVE-2018-3721 Source advisory: OSV:GHSA-FVQR-27WR-82FM...

@careteam/mfe-init (0.0.8), @topfeed/topfeed (>=0.0.30, <=0.0.44) +68 more potentially affected by CVE-2018-3720 via assign-deep (>=0.1.2, <=0.4.6)

assign-deep NPM version =0.1.2, =0.0.30, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =1.2.0, =0.0.1, =1.0.0-alpha.5, =1.0.0-alpha.5, =0.0.1, =0.0.1, =1.0.0-alpha.5, =2.3.0 and more Source cves: CVE-2018-3720 Source advisory: OSV:GHSA-XCVV-84J5-JW9H...

10er10 (0.23.0), 10tcl (>=0.0.1, <=0.0.10) +3192 more potentially affected by CVE-2018-3717 via connect (>=2.0.0, <=2.13.1)

connect NPM version =2.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =0.0.5, =0.0.2, =1.0.0, =3.2.63 and more Source cves: CVE-2018-3717 Source advisory: OSV:GHSA-RCH9-XH7R-MQGW...

10er10 (0.23.0), 10tcl (>=0.0.1, <=0.0.10) +11449 more potentially affected by CVE-2017-16119 via fresh (>=0.0.1, <=0.5.1)

fresh NPM version =0.0.1, =0.0.1, =1.0.1, =1.0.3, =1.0.2, =1.0.0, =0.2.0, =0.1.0, =0.0.1, =0.0.1, =0.0.5 - 4design 0.0.1 and more Source cves: CVE-2017-16119 Source advisory: OSV:GHSA-9QJ9-36JM-PRPV...

0xble (>=7.1.0, <=13.3.1), 3dguysplayer (1.0.0) +1587 more potentially affected by CVE-2017-16116 via string (>=3.0.0, <=3.3.3)

string NPM version =3.0.0, =7.1.0, =1.0.0, =0.0.5, =0.2.2, =1.0.1, =1.0.3, =0.3.4, =0.2.1, =0.7.6-alpha.1, =1.0.0, =1.0.0, =1.32.7 and more Source cves: CVE-2017-16116 Source advisory: OSV:GHSA-G36H-6R4F-3MQP...

10cartsharing (>=1.0.0, <=1.0.3), 1api (>=0.0.1, <=0.0.2) +7054 more potentially affected by CVE-2017-16113 via parsejson (>=0.0.1, <=0.0.3)

parsejson NPM version =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.0, =1.0.2, =1.0.1, =2.16.1, =1.0.0-RC.1, =0.1.0, =1.0.0, =1.3.2 - 88slot-ap 1.0.0 and more Source cves: CVE-2017-16113 Source advisory: OSV:GHSA-Q75G-2496-MXPP...

@botsbotsbots/botbuilder (>=0.1.0-latest.1a450bb3, <=0.5.0-latest.e3c9593d), @chronosmicro/display (12.0.1) +180 more potentially affected by CVE-2017-16117 via slug (>=0.1.1, <=0.9.1)

slug NPM version =0.1.1, =0.1.0-latest.1a450bb3, =1.1.1, =0.5.1, =0.4.0, =2.0.0, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.8, =0.0.15 and more Source cves: CVE-2017-16117 Source advisory: OSV:GHSA-JXQQ-CQM6-PFQ9...

style-pot (>=0.0.15, <=0.0.22), toolbag (>=0.14.0, <=1.0.0) +3 more potentially affected by CVE-2017-16025 via nes (>=6.2.1, <=6.3.1)

nes NPM version =6.2.1, =0.0.15, =0.14.0, =0.0.5, =0.0.13 Source cves: CVE-2017-16025 Source advisory: OSV:GHSA-3PWH-5MMC-MWRX...

@fdnpm/fd-module-cli (>=4.0.4, <=4.0.7), @finviet-jsrpt/jsrpt-electron-pdf (>=1.0.5, <=1.0.6) +68 more potentially affected by CVE-2017-16151 via electron (>=1.3.1, <=1.6.13)

electron NPM version =1.3.1, =4.0.4, =1.0.5, =2.1.1, =1.0.0, =0.0.7, =1.3.0, =4.1.0, =0.6.0, =1.3.3, =0.0.18, =0.0.2, =1.0.0, =1.3.4 and more Source cves: CVE-2017-16151 Source advisory: OSV:GHSA-4W88-RJJ3-X7WP...

react-icons (>=0.2.0, <=0.2.1) potentially affected by CVE-2017-16023 via decamelize (1.1.1)

decamelize NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on decamelize and may be impacted: - react-icons =0.2.0, =0.2.1 Source cves: CVE-2017-16023 Source advisory: OSV:GHSA-Q5C4-39F5-M68J...

@augmt/request-header-parser-microservice (0.2.4), @sealcode/crud-ui (>=0.0.1-beta1, <=0.0.18) +81 more potentially affected by CVE-2017-16030 via useragent (>=2.0.0, <=2.1.9)

useragent NPM version =2.0.0, =0.0.1-beta1, =0.1.3, =0.17.29, =1.0.4, =0.1.7, =0.0.1, =3.0.3, =0.1.6, =0.1.2, =1.2.0, =0.0.1, =0.0.2 and more Source cves: CVE-2017-16030 Source advisory: OSV:GHSA-PJMX-9XR3-82QR...

@jenkins-cd/blueocean-core-js (0.0.21-unreleased5), angular2-i18next (>=0.0.1, <=1.1.2) +46 more potentially affected by CVE-2017-16010 via i18next (>=2.0.4, <=3.4.3)

i18next NPM version =2.0.4, =0.0.1, =0.5.0, =1.0.0-rc1, =0.15.0, =1.17.9, =0.1.17, =0.12.4-beta2, =2.0.0-rc1, =1.0.0, =0.0.2, =0.1.0 - i18next-ngx 1.2.2 and more Source cves: CVE-2017-16010 Source advisory: OSV:GHSA-CMH5-QC8W-XVCQ...

theo (>=6.0.0-alpha.7, <=6.0.0-beta.7) potentially affected by CVE-2017-16099 via no-case (2.3.1)

no-case NPM version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on no-case and may be impacted: - theo =6.0.0-alpha.7, =6.0.0-beta.7 Source cves: CVE-2017-16099 Source advisory: OSV:GHSA-FF6R-5JWM-8292...

app.js (>=0.0.1, <=0.0.21), attester (>=1.0.2, <=1.2.1) +37 more potentially affected by CVE-2017-16086 via ua-parser (>=0.2.4, <=0.3.5)

ua-parser NPM version =0.2.4, =0.0.1, =1.0.2, =2.2.2, =1.0.0, =0.1.0, =0.0.1, =0.0.5, =0.0.2, =0.2.2, =0.2.16 and more Source cves: CVE-2017-16086 Source advisory: OSV:GHSA-PMG9-P9R2-6Q87...

@emartech/me-psql-query-builder (>=1.0.0, <=1.1.0), @evocodes/parse-server (>=2.2.17, <=2.2.27) +48 more potentially affected by CVE-2017-16082 via pg (>=5.0.0, <=5.1.0)

pg NPM version =5.0.0, =1.0.0, =2.2.17, =0.9.28, =1.0.0, =0.4.0, =0.1.0, =0.0.2, =0.1.3, =0.2.30, =0.2.33 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@yihangho/express-admin (1.3.2-2), analyst (>=0.0.3, <=0.0.8) +58 more potentially affected by CVE-2017-16082 via pg (>=2.0.0, <=2.11.1)

pg NPM version =2.0.0, =0.0.3, =0.1.0, =0.0.1, =0.0.62, =0.0.1, =0.0.1, =1.0.1, =0.0.1, =0.1.0, =0.0.1, =0.0.3 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@folk-org/js-dav (>=1.0.0, <=1.0.3), @lettercms/models (>=0.0.1, <=0.0.12) +187 more potentially affected by CVE-2017-16082 via pg (>=4.0.0, <=4.5.6)

pg NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.15 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...