@amitport/koangular-users (0.0.0), @antimatter-studios/dredd (>=14.1.0, <=16.1.0) +201 more potentially affected by CVE-2020-7709 via json-pointer (>=0.0.4, <=0.6.0)

json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =0.1.0, =1.0.1 - ajv-moment 1.0.0 and more Source cves: CVE-2020-7709 Source advisory: SNYK:JS-JSONPOINTER-596925...

config3 (1.1.0) potentially affected by CVE-2020-7751 via pathval (1.1.0)

pathval NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pathval and may be impacted: - config3 1.1.0 Source cves: CVE-2020-7751 Source advisory: SNYK:JS-PATHVAL-596926...

@diogoabu/adminjs (>=6.8.7-1, <=6.8.7-19), @emartech/angular-translate (>=2.0.0, <=2.3.0) +52 more potentially affected by CVE-2020-36632 via flat (>=5.0.0, <=5.0.1)

flat NPM version =5.0.0, =6.8.7-1, =2.0.0, =1.2.0, =0.0.1, =0.0.1-prerelease.8, =0.0.2, =0.5.2, =3.34.3, =2.3.0, =2.7.0, =0.1.2, =6.7.6, =1.0.0, =0.2.2, =1.1.0 and more Source cves: CVE-2020-36632 Source advisory: SNYK:JS-FLAT-596927...

@biesbjerg/ng2-translate-extract (>=0.5.0, <=0.6.0), @biesbjerg/ngx-translate-extract (>=1.0.0, <=2.3.4) +67 more potentially affected by CVE-2020-36632 via flat (>=2.0.0, <=2.0.1)

flat NPM version =2.0.0, =0.5.0, =1.0.0, =9.16.1-rc.0, =0.0.1, =0.0.2-beta1, =1.2.7, =2.1.27, =2.0.7, =1.1.9, =2.3.4-atknatk.1, =0.0.1, =1.0.0, =1.0.0, =2.3.4, =2.3.5, =2.3.6 and more Source cves: CVE-2020-36632 Source advisory: SNYK:JS-FLAT-596927...

@braneframe/plugin-github (>=0.1.53-main.2922731, <=0.6.7), @dxos/plugin-github (>=0.6.8-main.046e6cf, <=0.7.4) +26 more potentially affected by CVE-2020-8203 via lodash.update (4.10.2)

lodash.update NPM version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.update and may be impacted: - @braneframe/plugin-github =0.1.53-main.2922731, =0.6.8-main.046e6cf, =0.2.19, =0.0.1, =5.5.0, =22.1.0-pre.1, =5.2.0, =4.0.0, =1.0.0,...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2020-35874 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2020-35874 Source advisory: OSV:RUSTSEC-2020-0017...

@neuraflash/einstein-lang (1.0.0), @safwanuk/sk-npm-hello-world (>=6.0.1, <=6.0.2) +38 more potentially affected by CVE-2020-7646 via curlrequest (1.0.1)

curlrequest NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on curlrequest and may be impacted: - @neuraflash/einstein-lang 1.0.0 - @safwanuk/sk-npm-hello-world =6.0.1, =1.0.2, =0.0.1, =1.0.0, =1.0.25, =0.0.1, =0.4.1, =1.0.0, =0.0.1,...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @ec.components/tinymce (>=0.5.7, <=0.6.0) +37 more potentially affected by CVE-2019-1010091 via tinymce (>=4.5.1, <=4.9.8)

tinymce NPM version =4.5.1, =1.0.0, =0.5.7, =0.1.1, =0.0.13, =1.3.0, =8.0.0, =0.8.8, =0.6.3, =1.2.0, =1.0.0-alpha.0, =1.1.0, =2.2.0 - common-library 0.0.0 - connectwise-manager 10.0.0 and more Source cves: CVE-2019-1010091 Source advisory: OSV:GHSA-C78W-2GW7-GJV3...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5, <=4.4.3)

bigint CARGO version =1.0.5, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:RUSTSEC-2020-0025...

@neuraflash/einstein-lang (1.0.0), @safwanuk/sk-npm-hello-world (>=6.0.1, <=6.0.2) +63 more potentially affected by CVE-2020-7646 via curlrequest (>=0.3.10, <=1.0.1)

curlrequest NPM version =0.3.10, =6.0.1, =1.0.2, =0.2.0, =0.0.1, =0.1.0, =0.6.0, =0.0.1, =1.0.0, =0.3.0-a, =1.0.25, =0.1.0, =0.5.0 and more Source cves: CVE-2020-7646 Source advisory: SNYK:JS-CURLREQUEST-568274...

a3mo_lib (>=0.1.0, <=0.1.1), aaa_csv_challenge (0.1.0) +6415 more potentially affected by CVE-2019-25010 +1 more via failure (>=0.1.0, <=0.1.8)

failure CARGO version =0.1.0, =0.1.0, =0.0.1, =0.1.0-pre.1, =0.5.0, =0.3.0, =0.3.0-alpha.1, =0.1.0, =0.2.0-alpha.2 - accept-encoding-fork 0.2.0-alpha.3 and more Source cves: CVE-2019-25010, CVE-2020-25575 Source advisory: OSV:RUSTSEC-2020-0036...

@aconex/styleguide (>=2.0.1, <=2.2.0), @acornfamily/site (>=1.1.0, <=1.3.0) +1350 more potentially affected by CVE-2017-1000048 via qs (>=6.2.0, <=6.2.1)

qs NPM version =6.2.0, =2.0.1, =1.1.0, =0.1.0, =0.0.0, =0.7.15, =0.0.0, =1.0.23, =1.0.10, =3.3.91, =0.0.0, =0.1.0, =1.2.17, =0.5.6, =0.5.7 and more Source cves: CVE-2017-1000048 Source advisory: OSV:GHSA-GQGV-6JQ5-JJJ9...

0.8.18-p11 (0.8.18-p12), 08cms (1.0.0) +2101 more potentially affected by CVE-2015-8851 via node-uuid (>=1.1.0, <=1.4.3)

node-uuid NPM version =1.1.0, =0.0.1, =0.0.1-alpha, =0.0.1, =0.0.1, =0.0.2, =0.0.7, =0.0.7, =1.0.14, =2.2.0, =2.2.1 and more Source cves: CVE-2015-8851 Source advisory: OSV:GHSA-265Q-28RP-CHQ5...

compare-eslint-config (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-7629 via install-package (0.1.0)

install-package NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on install-package and may be impacted: - compare-eslint-config =0.1.0, =0.1.1 Source cves: CVE-2020-7629 Source advisory: SNYK:JS-INSTALLPACKAGE-564267...

dijit (>=1.12.1, <=1.12.7), dojox (>=1.12.1, <=1.12.7) potentially affected by CVE-2020-5258 via dojo (>=1.12.1, <=1.12.7)

dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.7 Source cves: CVE-2020-5258 Source advisory: OSV:GHSA-JXFH-8WGV-VFR2...

dijit (>=1.15.0, <=1.15.2), dojox (>=1.15.0, <=1.15.2) potentially affected by CVE-2020-5258 via dojo (>=1.15.0, <=1.15.2)

dojo NPM version =1.15.0, =1.15.0, =1.15.0, =1.15.2 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

@bloomreach/hippo-theme (2.2.3), @covisint/cui-idm-b2x (>=0.2.1, <=1.3.0) +369 more potentially affected by CVE-2019-14863 via angular (>=1.0.8, <=1.4.14)

angular NPM version =1.0.8, =0.2.1, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.4, =0.1.1, =1.0.4, =1.1.24, =1.0.3, =1.0.12, =1.0.7, =0.0.1, =3.2.10-0, =3.2.10-1 and more Source cves: CVE-2019-14863 Source advisory: OSV:GHSA-R5FX-8R73-V86C...

@archanova/contracts (>=1.0.0-beta.1, <=1.0.0-beta.3), @archanova/solidity (>=0.0.7, <=0.0.10) +13 more potentially affected by CVE-2020-5232 via @ensdomains/ens (>=0.1.1, <=0.3.11)

@ensdomains/ens NPM version =0.1.1, =1.0.0-beta.1, =0.0.7, =0.0.3, =0.0.3, =1.0.0, =0.0.2, =1.0.11, =1.1.1, =1.0.0, =3.1.0-ens-events.0, =0.6.1, =0.6.0, =0.0.8, =0.0.45 - ethregistrar 1.0.0 Source cves: CVE-2020-5232 Source advisory: OSV:GHSA-8F9F-PC5V-9R5H...

@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +81 more potentially affected by CVE-2019-16776 via npm (>=6.0.0, <=6.13.2)

npm NPM version =6.0.0, =0.0.1, =0.1.2, =0.4.3, =1.0.0-beta.0, =1.0.0-beta.15, =1.1.58, =3.2.2, =2.0.0, =0.0.1, =3.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2019-16776 Source advisory: OSV:GHSA-X8QC-RRCW-4R46...

@pnpm/headless (>=8.0.0, <=10.0.4), @pnpm/modules-cleaner (>=5.0.0, <=7.0.3) +4 more potentially affected by CVE-2019-10773 via @pnpm/package-bins (4.0.0)

@pnpm/package-bins NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @pnpm/package-bins and may be impacted: - @pnpm/headless =8.0.0, =5.0.0, =0.1.0, =0.1.0, =0.1.0, =0.35.0, =0.36.6 Source cves: CVE-2019-10773 Source advisory:...

app.io (>=0.0.1, <=0.0.4), feathers-validation (>=0.5.0, <=0.5.1) +6 more potentially affected by CVE-2019-10781 via schema-inspector (>=1.4.2, <=1.6.8)

schema-inspector NPM version =1.4.2, =0.0.1, =0.5.0, =3.8.1, =1.0.2, =1.0.0, =0.2.0, =0.5.0 Source cves: CVE-2019-10781 Source advisory: SNYK:JS-SCHEMAINSPECTOR-536970...

maidsafe_client (>=0.1.0, <=0.1.2), maidsafe_types (>=0.0.9, <=0.2.3) +8 more potentially affected by unknown CVE via crust (>=0.0.3, <=0.4.2)

crust CARGO version =0.0.3, =0.1.0, =0.0.9, =0.0.3, =0.0.6, =0.1.4, =0.1.0, =0.1.0, =0.1.5, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0032...

@6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2), @jamesbliss/react-flickity (>=1.0.0, <=1.4.0) +26 more potentially affected by CVE-2019-5448 via yarn (>=1.0.2, <=1.16.0)

yarn NPM version =1.0.2, =1.0.2-6river, =1.0.0, =1.9.9-1, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.0-semantic-release, =1.9.7, =5.0.0-ts.4, =0.0.4, =0.0.14 and more Source cves: CVE-2019-5448 Source advisory: SNYK:JS-YARN-451571...

@cidroy/frappe-gantt (0.8.2), @hatchloyalty/hatch-lab (>=1.0.2, <=1.0.6) +47 more potentially affected by CVE-2018-21270 via stringstream (>=0.0.4, <=0.0.5)

stringstream NPM version =0.0.4, =1.0.2, =0.1.0, =1.0.3-beta, =1.1.2, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2018-21270 Source advisory: OSV:GHSA-MF6X-7MM4-X2G7...

@amcorvi/loadout (>=0.0.0, <=0.1.2), @amory/clean (>=2018.8.13-0, <=2018.8.13-2) +152 more potentially affected by unknown CVE via esm (>=3.0.14, <=3.0.84)

esm NPM version =3.0.14, =0.0.0, =2018.8.13-0, =2018.8.13-0, =2018.8.9-0, =2018.10.14-0, =2018.10.16-0, =2018.8.13-0, =2018.10.14-0, =2018.10.12-0, =2018.8.8-0, =2018.8.13-0, =0.4.1, =2.1.0-beta.0, =2.2.0-beta.1, =2.1.0-beta.0, =2.3.0-beta.10 and more Source cves: unknown CVE Source advisory:...

alpha-g-analysis (0.1.0), apecrunch (>=0.0.1, <=0.0.3) +179 more potentially affected by CVE-2019-15547 +1 more via ncurses (>=5.94.0, <=6.0.1)

ncurses CARGO version =5.94.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.7 - btui 0.6.5 and more Source cves: CVE-2019-15547, CVE-2019-15548 Source advisory: OSV:RUSTSEC-2019-0006...

@gkatsev/grunt-harp (>=0.18.0, <=0.19.0), @mobify/documentation-theme (>=1.11.3, <=2.0.0-preview.2-dev) +21 more potentially affected by CVE-2019-5437 via harp (>=0.9.5, <=0.32.0)

harp NPM version =0.9.5, =0.18.0, =1.11.3, =1.11.3, =0.0.3, =0.0.8-pre2, =0.0.1, =0.0.1, =0.0.1-1, =0.0.1, =0.1.0, =0.1.0, =0.2.9 - n-p-m 1.1.0 and more Source cves: CVE-2019-5437 Source advisory: OSV:GHSA-46HV-7769-J7RX...

@aabenoja/karma-phantomjs-launcher (0.2.1), @aabenoja/phantomjs (2.0.0) +183 more potentially affected by unknown CVE via npmconf (>=2.0.9, <=2.1.2)

npmconf NPM version =2.0.9, =0.1.28, =1.2.6, =2.7.2, =4.5.201902251314, =1.5.0-alpha.1, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =1.0.3, =2.0.0, =2.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-57CF-349J-352G...

@amitport/auth-server (0.0.3), @amitport/koangular-users (0.0.0) +319 more potentially affected by unknown CVE via jwt-simple (>=0.1.0, <=0.5.1)

jwt-simple NPM version =0.1.0, =1.0.2, =1.1.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =0.2.0, =0.10.2, =0.11.2 - @sysdoc/sysdoc-web-stack 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8V5F-HP78-JGXQ...

@5rabbits/create-lib (>=0.1.0, <=0.4.0), @5rabbits/create-react-lib (0.4.0) +174 more potentially affected by unknown CVE via dot (>=1.0.0, <=1.1.2)

dot NPM version =1.0.0, =0.1.0, =0.1.16-master.20181116180810, =0.1.0, =4.6.201910241203, =4.6.201905201019, =4.6.201906121726, =4.6.201908201256, =4.6.201907131632, =4.6.201908021805, =4.6.201905201531, =4.6.201907081200, =4.6.201908311200 and more Source cves: unknown CVE Source advisory:...

alions (0.0.1), ax-rocketmq (>=3.0.0, <=3.0.2) +10 more potentially affected by unknown CVE via byte (>=1.0.0, <=1.4.0)

byte NPM version =1.0.0, =3.0.0, =1.0.0, =1.0.0, =1.2.0, =1.2.4, =2.0.0, =0.0.2, =0.0.10, =0.0.13 - zoodubbo 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-XM7F-X4WX-WMGV...

09-nodejs (1.0.0), 11.17r (1.0.0) +1753 more potentially affected by unknown CVE via concat-stream (>=1.5.0, <=1.5.1)

concat-stream NPM version =1.5.0, =0.0.1, =0.0.2, =0.0.1, =0.1.0, =0.1.0, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.0.0, =1.0.0-alpha.0, =1.0.0-alpha.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G74R-FFVR-5Q9F...

athena-beta (>=1.0.0, <=2.0.4), athena-html (>=1.2.10, <=2.0.0-alpha.8) +8 more potentially affected by unknown CVE via concat-with-sourcemaps (>=1.0.0, <=1.0.4)

concat-with-sourcemaps NPM version =1.0.0, =1.0.0, =1.2.10, =1.0.0, =1.0.1, =0.0.2, =0.3.0, =1.0.0, =1.0.8 - peachhtmlproduction 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-2XV3-H762-CCXV...

verdaccio-gitlab (>=2.0.0, <=2.2.0) potentially affected by CVE-2019-14772 via verdaccio (>=3.6.0, <=3.8.6)

verdaccio NPM version =3.6.0, =2.0.0, =2.2.0 Source cves: CVE-2019-14772 Source advisory: OSV:GHSA-78J5-GCMF-VQC8...

1tp (>=0.0.1, <=0.11.2), @balderdash/sails-edge (>=0.12.0-edge9, <=0.50.0) +774 more potentially affected by CVE-2016-10542 via ws (>=1.0.0, <=1.1.0)

ws NPM version =1.0.0, =0.0.1, =0.12.0-edge9, =0.0.1, =1.8.4, =1.0.0, =1.0.30, =0.0.5, =1.1.1, =0.1.0, =1.0.14, =3.0.2 and more Source cves: CVE-2016-10542 Source advisory: OSV:GHSA-6663-C963-2GQG...

@dequelabs/amaze-tdd (>=0.2.9, <=0.3.2), @holisticon/angularjs-common (>=0.2.0-23, <=0.5.3) +15 more potentially affected by CVE-2016-10579 via chromedriver (>=2.10.0, <=2.25.1)

chromedriver NPM version =2.10.0, =0.2.9, =0.2.0-23, =0.2.6, =0.0.5, =0.0.10, =1.3.2, =0.0.1, =0.1.0, =1.0.0, =1.3.9, =0.0.1, =1.4.23, =4.0.0 - testarmada-performance-reporter 1.1.1 and more Source cves: CVE-2016-10579 Source advisory: OSV:GHSA-JH5W-6964-X5CF...

wiotpwidgets (0.1.0) potentially affected by CVE-2016-10518 via ws (1.0.0)

ws NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ws and may be impacted: - wiotpwidgets 0.1.0 Source cves: CVE-2016-10518 Source advisory: OSV:GHSA-2MHH-W6Q8-5HXW...

beaker-plugin-ipfs (>=1.0.0, <=2.0.1), go-ipfs (>=0.4.0-hacky2, <=0.4.3-npmfix1) +2 more potentially affected by CVE-2016-10563 via go-ipfs-dep (>=0.4.0-1, <=0.4.3-2)

go-ipfs-dep NPM version =0.4.0-1, =1.0.0, =0.4.0-hacky2, =0.9.0, =1.0.0, =1.6.0 Source cves: CVE-2016-10563 Source advisory: OSV:GHSA-G3XP-V2FF-X5C3...

macaca-android-dingtalk (1.0.30) potentially affected by CVE-2016-10586 via macaca-chromedriver (1.0.15)

macaca-chromedriver NPM version 1.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on macaca-chromedriver and may be impacted: - macaca-android-dingtalk 1.0.30 Source cves: CVE-2016-10586 Source advisory: OSV:GHSA-769C-QPHH-G3WM...

strider (>=1.4.0, <=1.4.5) potentially affected by CVE-2016-10611 via strider-sauce (0.6.2)

strider-sauce NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on strider-sauce and may be impacted: - strider =1.4.0, =1.4.5 Source cves: CVE-2016-10611 Source advisory: OSV:GHSA-8GF4-PCJ6-54RP...

@panosoft/prince-server (>=0.1.0, <=0.1.2), componentdoc (>=0.9.0, <=0.9.3) +2 more potentially affected by CVE-2016-10591 via prince (>=1.0.5, <=1.2.1)

prince NPM version =1.0.5, =0.1.0, =0.9.0, =0.9.0, =0.0.1, =0.2.4 Source cves: CVE-2016-10591 Source advisory: OSV:GHSA-CR79-9PWF-R6F5...

192.168.0.172 (4.6.1), 3nit-utils (>=0.13.0, <=1.0.2) +2493 more potentially affected by CVE-2018-16492 via extend (>=3.0.0, <=3.0.1)

extend NPM version =3.0.0, =0.13.0, =1.3.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =3.0.0, =0.1.1, =5.0.0-alpha.1, =1.0.0, =1.1.0, =1.0.0, =2018.6.20-0, =2018.8.16-1 and more Source cves: CVE-2018-16492 Source advisory: OSV:GHSA-QRMC-FJ45-QFC2...

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +20115 more potentially affected by CVE-2017-16026 via request (>=2.2.6, <=2.67.0)

request NPM version =2.2.6, =2.67.0 is affected by a known vulnerability. The following packages have a transitive dependency on request and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 -...

@taotieh/back_giscom (1.0.7), @taotieh/back_giscom__sample (>=0.1.2, <=0.1.7) +4 more potentially affected by CVE-2018-3786 via egg-scripts (2.6.0)

egg-scripts NPM version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on egg-scripts and may be impacted: - @taotieh/backgiscom 1.0.7 - @taotieh/backgiscomsample =0.1.2, =0.2.0, =0.1.2, =0.1.9 - @taotieh/backgiscomtiletransform 0.0.0 Source cves:...

amethyst_config (0.3.0), amqpr (>=0.1.0, <=0.2.2) +147 more potentially affected by unknown CVE via serde_yaml (>=0.6.2, <=0.7.5)

serdeyaml CARGO version =0.6.2, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.1, =3.1.3, =0.1.0, =0.1.1, =0.2.4, =0.3.1-alpha.2, =0.4.0, =0.4.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0005...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by CVE-2018-16487 +1 more via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source advisory:...

37fis (>=1.0.0, <=1.0.2), @alohahealth/aloha-react-sdk (>=0.1.5, <=0.1.9) +1328 more potentially affected by CVE-2018-1002204 via adm-zip (>=0.1.4, <=0.4.10)

adm-zip NPM version =0.1.4, =1.0.0, =0.1.5, =0.1.0, =0.7.0, =0.5.9, =1.10.1, =1.0.1, =0.1.28, =0.0.5, =2.5.1, =2.6.1 - @cr4zyc4t/phantom-html2pdf 1.0.3 - @cypress/core-example 0.3.1 and more Source cves: CVE-2018-1002204 Source advisory: OSV:GHSA-3V6H-HQM4-2RG6...

@partygame.show/demo (>=1.0.0-alpha.0, <=1.0.0-alpha.5), ember-superstatic (>=0.6.0, <=1.0.0) potentially affected by unknown CVE via superstatic (5.0.1)

superstatic NPM version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on superstatic and may be impacted: - @partygame.show/demo =1.0.0-alpha.0, =0.6.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-WM77-Q74P-5763...

1508-cli (>=1.0.0, <=1.0.6), 1k (>=0.0.1, <=0.0.11) +8497 more potentially affected by CVE-2018-3721 via lodash (>=4.0.0, <=4.17.4)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =1.0.0-beta.1, =1.16.1, =2.4.4 and more Source cves: CVE-2018-3721 Source advisory: OSV:GHSA-FVQR-27WR-82FM...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by CVE-2018-3721 via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHMERGE-173733...