@launchql/cli (>=0.3.34, <=0.4.44), @launchql/db-testing (>=0.0.9, <=0.1.8) +8 more potentially affected by CVE-2017-16082 via pg (>=6.4.0, <=6.4.1)

pg NPM version =6.4.0, =0.3.34, =0.0.9, =0.0.4, =1.0.0, =0.6.22, =0.6.12, =1.0.31, =1.0.61 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@starboard/models (>=2.0.0, <=3.0.1), @starboard/shared-backend (3.0.0) +24 more potentially affected by CVE-2017-16082 via pg (>=6.0.0, <=6.0.4)

pg NPM version =6.0.0, =2.0.0, =0.6.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =2.0.2, =1.3.1, =0.0.4, =0.1.0, =0.2.0, =0.6.0 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@arpinum/postgres (>=4.0.0-beta12, <=4.0.0-beta14), appointmed-epr-template-common (>=0.0.46, <=0.0.65) +9 more potentially affected by CVE-2017-16082 via pg (>=6.2.2, <=6.2.3)

pg NPM version =6.2.2, =4.0.0-beta12, =0.0.46, =0.0.35, =0.13.3, =0.0.1, =0.0.1, =1.0.0, =1.0.3 - pg-promise-strict 0.3.4 - pgo 0.2.1 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@keyv/postgres (>=1.0.7, <=1.0.9), keyv-postgres (>=1.0.5, <=1.0.6) +2 more potentially affected by CVE-2017-16082 via pg (>=7.1.0, <=7.1.1)

pg NPM version =7.1.0, =1.0.7, =1.0.5, =0.0.1, =0.0.3 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

acidjs (>=0.0.2, <=1.0.1), acl-knex (>=0.1.2, <=0.1.3) +41 more potentially affected by CVE-2017-16082 via pg (>=3.0.3, <=3.6.3)

pg NPM version =3.0.3, =0.0.2, =0.1.2, =0.0.1, =0.0.2, =0.1.0, =0.0.4, =0.3.0, =0.0.11, =0.0.12, =0.1.2, =0.0.2, =0.0.1, =0.0.64 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

asti (>=0.0.1, <=0.0.5), npm-git-registry (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2017-16083 via node-simple-router (>=0.4.7, <=0.9.4-3)

node-simple-router NPM version =0.4.7, =0.0.1, =1.0.1, =0.1.5, =0.0.1, =0.0.5 Source cves: CVE-2017-16083 Source advisory: OSV:GHSA-5W8Q-X7HC-JHP6...

@axel92/nodejs-course (1.2.0), @brocan/bond (>=2.0.0, <=3.0.2) +17 more potentially affected by CVE-2018-3711 via fastify (>=0.5.0, <=0.37.0)

fastify NPM version =0.5.0, =2.0.0, =1.5.0, =0.0.1, =0.3.0, =0.1.0, =0.0.4, =0.0.1, =0.0.1, =0.12.0, =0.1.0, =0.1.1 - schnack 0.0.1-alpha and more Source cves: CVE-2018-3711 Source advisory: OSV:GHSA-MQ6C-FH97-4GWV...

koa-static-security (>=0.0.3, <=0.0.7) potentially affected by CVE-2018-3732 via resolve-path (1.3.3)

resolve-path NPM version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on resolve-path and may be impacted: - koa-static-security =0.0.3, =0.0.7 Source cves: CVE-2018-3732 Source advisory: OSV:GHSA-62G9-6HW5-RWFP...

apoc (>=2.0.0, <=3.0.0-alpha.0), daum-trends (>=0.1.0, <=0.3.0) +11 more potentially affected by CVE-2017-16088 via safe-eval (0.2.0)

safe-eval NPM version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on safe-eval and may be impacted: - apoc =2.0.0, =0.1.0, =5.2.6, =1.0.0, =5.3.6, =0.1.0, =0.1.1, =0.0.1, =0.11.0, =2.0.2, =0.0.1, =0.0.2 Source cves: CVE-2017-16088 Source advisor...

@contrast/loopback-test-bench (3.15.0), @contrast/test-bench-utils (>=2.7.0, <=3.38.0) +34 more potentially affected by CVE-2017-5941 via node-serialize (>=0.0.3, <=0.0.4)

node-serialize NPM version =0.0.3, =2.7.0, =1.1.0, =1.0.1, =1.0.0, =1.1.1, =1.0.0, =1.0.4, =1.0.0, =1.0.0, =0.0.1, =1.0.4 and more Source cves: CVE-2017-5941 Source advisory: OSV:GHSA-Q4V7-4RHW-9HQM...

async_docker (>=0.1.0, <=0.1.1), cargo (>=0.4.0, <=0.8.0) +11 more potentially affected by CVE-2018-20990 via tar (>=0.2.14, <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole 0.1.0 Source cves: CVE-2018-20990 Source advisory: OSV:RUSTSEC-2018-0002...

@accoio/react-pdf-highlighter (>=2.0.0, <=2.0.1), @activelylearn/react-pdf (>=2.5.0, <=2.5.2) +118 more potentially affected by CVE-2018-5158 via pdfjs-dist (>=2.0.104, <=2.0.550)

pdfjs-dist NPM version =2.0.104, =2.0.0, =2.5.0, =1.0.32, =1.2.0, =1.0.9, =15.0.0, =6.0.0, =39.0.0, =7.0.0, =110.0.0, =7.0.0, =6.0.0, =3.0.6, =8.0.0, =9.0.0, =9.11.13 and more Source cves: CVE-2018-5158 Source advisory: SNYK:JS-PDFJSDIST-469200...

12g (>=0.0.15, <=1.0.1), 12g-env-template (>=1.0.4, <=1.0.6) +7233 more potentially affected by CVE-2017-16042 via growl (>=1.0.2, <=1.9.2)

growl NPM version =1.0.2, =0.0.15, =1.0.4, =1.1.8, =1.0.0, =0.1.0, =0.0.97, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.1.3 - @51npm/freedom-cli 1.0.0 and more Source cves: CVE-2017-16042 Source advisory: OSV:GHSA-QH2H-CHJ9-JFFQ...

actix-async-await (>=0.3.0-alpha.1, <=0.3.0), actix-broker (>=0.1.3, <=0.1.7) +90 more potentially affected by CVE-2018-25024 +2 more via actix-web (>=0.2.1, <=0.7.19)

actix-web CARGO version =0.2.1, =0.3.0-alpha.1, =0.1.3, =0.1.0, =0.3.0, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.4.3 and more Source cves: CVE-2018-25024, CVE-2018-25025, CVE-2018-25026 Source advisory: OSV:RUSTSEC-2018-0019...

d-pac.cms (0.5.7), keystone-db-shortcuts (>=0.0.9, <=0.1.15) +12 more potentially affected by CVE-2015-9240 via keystone (>=0.2.26, <=0.2.42)

keystone NPM version =0.2.26, =0.0.9, =0.0.1, =1.0.2, =0.0.0, =0.0.8, =0.0.8, =0.0.3, =0.0.4, =0.0.30 Source cves: CVE-2015-9240 Source advisory: OSV:GHSA-39PJ-GQ8Q-9PFJ...

@websdk/servera (>=0.0.0, <=0.0.1-mvp.0), browser-run (>=2.6.2, <=3.0.5) +7 more potentially affected by CVE-2015-9242 via ecstatic (>=1.1.0, <=1.3.1)

ecstatic NPM version =1.1.0, =0.0.0, =2.6.2, =0.1.1, =0.1.0, =0.1.0, =0.8.5, =0.8.6 - tape-run 1.1.0 - wqst 1.0.3 Source cves: CVE-2015-9242 Source advisory: OSV:GHSA-VWJC-Q9PX-R9VQ...

ecc-gulp-tasks (2.4.3) potentially affected by CVE-2016-10548 via reduce-css-calc (1.2.4)

reduce-css-calc NPM version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on reduce-css-calc and may be impacted: - ecc-gulp-tasks 2.4.3 Source cves: CVE-2016-10548 Source advisory: OSV:GHSA-4662-J96G-MV46...

@ckeditor/ckeditor5-build-balloon (>=0.0.1, <=0.2.0), @ckeditor/ckeditor5-build-balloon-toolbar (>=0.0.1, <=0.1.0) +7 more potentially affected by CVE-2018-11093 via @ckeditor/ckeditor5-link (>=0.5.1, <=1.0.0-beta.4)

@ckeditor/ckeditor5-link NPM version =0.5.1, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =1.0.0-rc.2, =0.3.0, =0.5.2 Source cves: CVE-2018-11093 Source advisory: OSV:GHSA-GVPX-9459-W3MJ...

@articulate/hapi-logging (0.0.11), @brocan/bouncer (1.0.0) +100 more potentially affected by CVE-2018-3728 via hoek (>=4.0.0, <=4.2.0)

hoek NPM version =4.0.0, =1.0.0, =1.1.1, =0.0.1, =1.0.0, =0.0.0, =0.1.0, =0.0.2, =0.0.5, =0.0.5, =0.1.21 and more Source cves: CVE-2018-3728 Source advisory: OSV:GHSA-JP4X-W63M-7WGM...

@aptoma/hapi-grimm-logger (1.0.0), graphql-io-server (>=0.0.1, <=0.9.63) +8 more potentially affected by CVE-2018-3728 via hoek (>=5.0.0, <=5.0.2)

hoek NPM version =5.0.0, =0.0.1, =1.2.8, =1.0.2, =1.0.19, =2.0.0, =1.0.1, =0.5.0, =1.0.0, =1.0.2 Source cves: CVE-2018-3728 Source advisory: OSV:GHSA-JP4X-W63M-7WGM...