data/CVE/list

@@ -36733,11 +36733,15 @@ CVE-2016-10540 (Minimatch is a minimal matching utility that works by converting
 	TODO: check
 CVE-2016-10539 (negotiator is an HTTP content negotiator for Node.js and is used by ...)
 	- node-negotiator 0.6.1-1 (unimportant)
+	NOTE: https://nodesecurity.io/advisories/106
 	NOTE: nodejs not covered by security support
 CVE-2016-10538 (The package `node-cli` before 1.0.0 insecurely uses the lock_file and ...)
 	- node-cli <unfixed> (unimportant; bug #809252)
+	NOTE: https://github.com/node-js-libs/cli/issues/81
+	NOTE: https://nodesecurity.io/advisories/95
 CVE-2016-10537 (backbone is a module that adds in structure to a JavaScript heavy ...)
 	- backbone 0.5.3-1
+	NOTE: https://nodesecurity.io/advisories/108
 CVE-2016-10536 (engine.io-client is the client for engine.io, the implementation of a ...)
 	TODO: check
 CVE-2016-10535 (csrf-lite is a cross-site request forgery protection library for ...)