Root has patched CVE-2016-1000223 in the @rootio/jws package for Root:npm. Multiple fixed versions available.
{ "distro": "npm", "distro_version": "", "severity": "HIGH", "source": "Root" }
[ "0.2.6-root.io.1", "0.2.6-root.io.2", "0.2.6-root.io.3" ]
""
true
"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2016-1000223.json"
3
"0.2.6-root.io.3"
[ "0.2.6-aikido.3" ]
1
"0.2.6-aikido.3"