@fdnpm/fd-module-cli (>=4.0.4, <=4.0.7), @finviet-jsrpt/jsrpt-electron-pdf (>=1.0.5, <=1.0.6) +148 more potentially affected by CVE-2018-1000118 via electron (>=1.3.1, <=1.8.1)

electron NPM version =1.3.1, =4.0.4, =1.0.5, =2.1.1, =1.0.0, =0.0.7, =1.3.0, =4.1.0, =0.1.6, =0.6.0, =1.0.1, =1.0.0, =1.0.1, =1.0.2 and more Source cves: CVE-2018-1000118 Source advisory: OSV:GHSA-FJQR-FX3F-G4RV...

@devpodio/application-manager (>=0.3.16, <=0.3.20), @devpodio/bunyan (>=0.3.16, <=0.3.20) +148 more potentially affected by CVE-2018-1000136 via electron (>=1.8.1, <=1.8.3)

electron NPM version =1.8.1, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.20 and more Source cves: CVE-2018-1000136 Source advisory: OSV:GHSA-8XWG-WV7V-4VQP...

@architect/data (1.0.0), @architect/workflows (>=1.0.11, <=2.8.2) +23 more potentially affected by CVE-2018-1000096 via tiny-json-http (>=1.0.3, <=6.2.0)

tiny-json-http NPM version =1.0.3, =1.0.11, =3.0.0, =0.0.1, =1.1.5, =0.0.1, =3.0.0-beta.1, =0.17.717, =0.4.1-alpha.1, =0.4.1, =1.0.0-alpha.2 and more Source cves: CVE-2018-1000096 Source advisory: OSV:GHSA-7H42-5VJ2-CQ39...

alchemy-embed-medias (>=0.4.0, <=0.5.0), globe-iframe-resizer (>=0.0.0, <=0.0.2) +4 more potentially affected by CVE-2018-1000086 via pym.js (0.4.5)

pym.js NPM version 0.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pym.js and may be impacted: - alchemy-embed-medias =0.4.0, =0.0.0, =0.2.1, =0.1.0, =0.3.0, =1.0.0, =4.0.0 Source cves: CVE-2018-1000086 Source advisory: OSV:GHSA-82GW-PQF7-Q3J2...

@cimpress/simple-auth-wrapper (>=3.0.0, <=6.4.6), @p2/core (>=1.2.0-alpha.0, <=1.2.0) +7 more potentially affected by CVE-2018-7307 via auth0-js (>=9.0.0, <=9.2.2)

auth0-js NPM version =9.0.0, =3.0.0, =1.2.0-alpha.0, =1.2.0-alpha.0, =1.2.0-alpha.0, =1.3.47, =11.0.0-beta.2, =1.3.0, =1.3.2 - olymp-auth 20.1.42 Source cves: CVE-2018-7307 Source advisory: OSV:GHSA-WPQ7-Q8J4-72JG...

421752593pro (5.6.0), @pnpm/default-fetcher (>=0.3.0, <=0.3.2) +8 more potentially affected by CVE-2018-7651 via ssri (>=5.0.0, <=5.2.1)

ssri NPM version =5.0.0, =0.3.0, =0.3.4, =1.19.6, =1.23.2, =1.4.9, =0.7.12, =0.7.13, =2.2.2 Source cves: CVE-2018-7651 Source advisory: OSV:GHSA-325J-24F4-QV5X...

192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +621 more potentially affected by CVE-2017-1000189 via ejs (>=2.0.8, <=2.5.4)

ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000189 Source advisory: OSV:GHSA-6X77-RPQF-J6MW...

111-react-simpleform (>=1.0.0, <=1.0.6), 1405_logging (1.0.0) +5115 more potentially affected by CVE-2017-18214 via moment (>=2.0.0, <=2.19.2)

moment NPM version =2.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.4, =0.2.0, =0.0.1, =0.2.1, =0.0.2, =1.0.0-beta.1, =1.43.0, =1.70.1, =1.70.1, =1.103.2 and more Source cves: CVE-2017-18214 Source advisory: OSV:GHSA-446M-MV8F-Q348...

abd-clam (>=0.22.2, <=0.30.0), abrute (>=0.1.2, <=0.1.9) +2257 more potentially affected by unknown CVE via tempdir (>=0.1.0, <=0.3.7)

tempdir CARGO version =0.1.0, =0.22.2, =0.1.2, =0.1.1, =0.1.0, =0.2.0, =2.1.0, =0.1.0-rc1, =0.10.0, =0.11.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0017...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by CVE-2018-3721 via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHMERGE-173733...

@anjuna/charts (>=1.0.0-preview.45, <=1.0.0-preview.47), @badgeup/badgeup-browser-client (>=0.3.0, <=3.0.0) +186 more potentially affected by CVE-2018-3721 via lodash.defaultsdeep (>=4.3.2, <=4.6.0)

lodash.defaultsdeep NPM version =4.3.2, =1.0.0-preview.45, =0.3.0, =0.1.0, =0.3.0, =6.0.2, =1.0.0-rc.1, =1.2.0, =1.0.0, =0.9.16, =0.0.1, =0.275.1-chore-update-deps.3894.0, =0.18.2-alpha.1, =3.0.0, =6.8.1, =7.1.11 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHDEFAULTSDEEP-4501...

angular-rome (>=0.2.4, <=0.2.9), api-gate (>=0.0.8, <=0.0.14) +74 more potentially affected by CVE-2018-3721 via lodash._basemerge (>=2.0.0, <=2.4.1)

lodash.basemerge NPM version =2.0.0, =0.2.4, =0.0.8, =0.1.2, =0.5.0, =0.0.3, =0.0.2, =0.0.0, =0.1.3, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.18, =1.1.16 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHBASEMERGE-450201...

@maxts/waterline-adapter-tests (1.0.3), driver-interface (1.0.2) +9 more potentially affected by CVE-2018-3721 via @sailshq/lodash (3.10.2)

@sailshq/lodash NPM version 3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sailshq/lodash and may be impacted: - @maxts/waterline-adapter-tests 1.0.3 - driver-interface 1.0.2 - machinepack-sockets =2.0.0, =5.2.0-0, =1.0.1, =0.9.1, =2.1.14,...

@blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1), @blackbaud/skyux-builder (>=1.10.1, <=1.31.0) +72 more potentially affected by CVE-2018-3721 via lodash.mergewith (>=4.0.3, <=4.6.0)

lodash.mergewith NPM version =4.0.3, =1.10.0, =1.10.1, =5.0.0, =5.2.8, =5.0.0, =5.0.0, =5.1.1, =1.3.0, =1.0.0-alpha.1, =1.0.4, =1.1.3, =1.0.0-alpha.4, =1.1.11, =1.0.3, =1.0.0-alpha.3, =1.0.0 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHMERGEWITH-174137...

@admui/grid (>=0.1.10, <=0.3.1), @atlantis-lab/grid (>=0.1.0, <=0.1.2) +66 more potentially affected by CVE-2018-3721 via lodash-es (>=4.0.0, <=4.17.4)

lodash-es NPM version =4.0.0, =0.1.10, =0.1.0, =0.1.0-alpha.1, =3.2.3, =0.0.18-vojty-doc-split-components-2017-06-06T13-48-34-024Z, =1.0.0, =0.8.0-beta.1, =1.0.4, =5.0.2, =4.0.0, =3.2.2, =2.0.0-alpha.1, =0.2.0, =0.7.1 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHES-2434288...

enfscopy (>=0.0.3, <=0.1.0), enfsensure (>=0.0.1, <=0.1.0) +7 more potentially affected by CVE-2017-18077 via brace-expansion (>=1.1.0, <=1.1.5)

brace-expansion NPM version =1.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =1.0.9, =0.0.1, =0.0.3 - thehelp-project 3.5.1 - zero.lib 0.0.2 Source cves: CVE-2017-18077 Source advisory: OSV:GHSA-832H-XG76-4GV6...

@bani2812/teasilent (1.1.4), @cetiak/tea-open-source1 (1.0.1) +60 more potentially affected by CVE-2018-6184 via next (>=1.2.3, <=4.2.1)

next NPM version =1.2.3, =0.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =0.1.8, =0.1.0, =1.0.2, =1.3.21, =0.0.80, =1.0.0, =1.1.0 and more Source cves: CVE-2018-6184 Source advisory: OSV:GHSA-M34X-WGRH-G897...

@finviet-jsrpt/jsrpt-electron-pdf (>=1.0.5, <=1.0.6), @infosupport/kc-cli (>=2.1.1, <=2.3.8) +25 more potentially affected by CVE-2018-1000006 via electron (>=1.6.0, <=1.6.15)

electron NPM version =1.6.0, =1.0.5, =2.1.1, =1.0.0, =4.1.0, =0.6.0, =0.0.2, =0.0.2, =1.1.3, =1.3.0, =1.6.0, =1.8.0 - electron-prebuilt-compile-jest 1.6.1 and more Source cves: CVE-2018-1000006 Source advisory: OSV:GHSA-W222-53C6-C86P...

0624zmj (1.0.0), 192.168.0.172 (4.6.1) +570 more potentially affected by CVE-2015-9251 via jquery (>=1.5.1, <=1.12.1)

jquery NPM version =1.5.1, =0.0.3, =0.0.6, =1.0.0, =0.1.0, =1.0.4, =0.1.0, =0.1.2 - @mavenomics/config-server 0.1.2 and more Source cves: CVE-2015-9251 Source advisory: OSV:GHSA-RMXG-73GG-4P98...

000demo (>=1.0.0, <=1.1.0), 03-npm-abc (>=1.0.0, <=1.1.0) +4894 more potentially affected by CVE-2015-9251 via jquery (>=1.12.3, <=2.2.4)

jquery NPM version =1.12.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.2.1, =0.1.75, =0.3.0, =1.0.0, =4.13.7-rc4, =0.65.0, =0.17.0, =0.24.2 and more Source cves: CVE-2015-9251 Source advisory: OSV:GHSA-RMXG-73GG-4P98...