a3m (=0.1.0), aa-fleet (>=1.0.0 <=1.1.0) +654 more potentially affected by CVE-2019-14233 via django (>=2.2.0 <=2.2.3)

django PYPI version =2.2.0, =1.0.0, =1.1.12, =0.1.0a0, =0.1.0a0, =1.2.0a1, =2.0.0, =0.1.0, =1.1.0, =1.4.1, =1.6.0 - aiida-crystal17 =0.11.0 and more Source cves: CVE-2019-14233 Source advisory: OSV:PYSEC-2019-12...

aero.champ:cargojson (=1.0), ai.active:webhook-sdk (>=1.0.0 <=1.0.4) +30803 more potentially affected by CVE-2019-14439 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0 <=2.9.9.1)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =1.0.0, =4.4.0.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =0.1.2, =0.1.7 - ai.genauth:genauth-java-sdk =3.1.11 - ai.grakn.kgms:client =1.4.3 and more Source cves: CVE-2019-14439 Sour...

invenio (>=3.0.0 <=3.1.0.dev20181106) potentially affected by CVE-2019-1020006 via invenio-app (=1.0.6)

invenio-app PYPI version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on invenio-app and may be impacted: - invenio =3.0.0, =3.1.0.dev20181106 Source cves: CVE-2019-1020006 Source advisory: OSV:PYSEC-2019-24...

aztarna (=1.0.0), spruce-sniffer (>=0.1.2 <=0.1.5) potentially affected by CVE-2019-1010142 via scapy (=2.4.0)

scapy PYPI version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on scapy and may be impacted: - aztarna =1.0.0 - spruce-sniffer =0.1.2, =0.1.5 Source cves: CVE-2019-1010142 Source advisory: OSV:GHSA-MPF2-Q34C-FC6J...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2019-1010259 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2019-1010259 Source advisory: OSV:PYSEC-2019-119...

actix (>=0.5.0 <=0.7.7), actix-ogn (=0.1.0) +270 more potentially affected by CVE-2019-15553 via memoffset (>=0.1.0 <=0.2.1)

memoffset CARGO version =0.1.0, =0.5.0, =0.7.5, =0.2.5, =0.4.0, =0.9.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0, =0.4.0, =0.7.0 and more Source cves: CVE-2019-15553 Source advisory: OSV:RUSTSEC-2019-0011...

@dojo/cli-test-intern (>=0.1.0 <=2.0.0-beta3.1), elstr-jslib (>=3.0.18 <=3.0.47) +25 more potentially affected by CVE-2019-10744 via lodash-amd (>=2.4.1 <=4.16.4)

lodash-amd NPM version =2.4.1, =0.1.0, =3.0.18, =0.4.0, =4.1.1, =0.1.11, =3.4.0, =0.0.1, =0.7.1, =0.1.1, =0.2.5, =0.0.3, =0.1.10, =0.1.6, =0.1.1, =0.1.4 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

@astro-my/design-systems (>=0.3.14 <=0.4.42), @astro-my/design-systems-aw (>=0.4.63 <=0.4.64) +143 more potentially affected by CVE-2019-10744 via lodash-es (>=3.0.0 <=4.17.12)

lodash-es NPM version =3.0.0, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 - @astro-my/design-systems-xuan-ts =0.1.1 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

wicked-saml (>=0.10.0 <=0.11.3) potentially affected by CVE-2017-11429 via saml2-js (=1.10.0)

saml2-js NPM version =1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on saml2-js and may be impacted: - wicked-saml =0.10.0, =0.11.3 Source cves: CVE-2017-11429 Source advisory: OSV:GHSA-5P5W-J3G7-W4WV...

h2 (=1.0.0) potentially affected by CVE-2016-6581 via hpack (=1.1.0)

hpack PYPI version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - h2 =1.0.0 Source cves: CVE-2016-6581 Source advisory: OSV:GHSA-FFQ8-576R-V26G...

com.github.igor-suhorukov:git-configuration (=1.0), com.mageddo:spring-hawtio (>=2.0.2 <=2.3.0_1.2.0) +72 more potentially affected by CVE-2019-9827 via io.hawt:hawtio-core (>=1.1 <=2.4.0)

io.hawt:hawtio-core MAVEN version =1.1, =2.0.2, =2.0.21, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =1.1.0.Beta1, =1.1.0.Beta1, =1.1.0.Beta1, =2.0-M3, =2.17.7 and more Source cves: CVE-2019-9827 Source advisory: OSV:GHSA-MCG9-64CP-XWP7...

aero.champ:cargojson (=1.0), ai.active:webhook-sdk (>=1.0.0 <=1.0.4) +30542 more potentially affected by CVE-2019-12384 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0 <=2.9.9)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =1.0.0, =4.4.0.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =0.1.2, =0.1.7 - ai.genauth:genauth-java-sdk =3.1.11 - ai.grakn.kgms:client =1.4.3 and more Source cves: CVE-2019-12384 Sour...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8 <=0.1.12), ai.snips:play-mongo-bson_2.12 (>=0.5 <=0.5.1) +6217 more potentially affected by CVE-2019-12384 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0 <=2.8.11.3)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.5, =2.3.0, =1.5.6, =4.2.1, =4.4.1, =1.0.0.RELEASE, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.9 and more Source cves: CVE-2019-12384 Source advisory: OSV:GHSA-MPH4-VHRX-MV67...

com.antgroup.tugraph:calcite-geode (>=1.18.0-geaflow_1.0 <=1.18.0-geaflow_1.1), com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10 <=2.0.2) +81 more potentially affected by CVE-2017-15694 via org.apache.geode:geode-core (>=1.0.0-incubating <=1.8.0)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating, =1.18.0-geaflow1.0, =0.10, =0.10, =1.1.0, =1.0-M3, =1.21.0.138, =0.3.12, =0.3.5, =0.1.9, =2.2.0, =1.0.0, =1.1.0 - io.pivotal.services.dataTx:gemfire-extensions-spring-security =1.0.0 and more Source cves: CVE-2017-15694 Source advisory:...

configly (>=5.0.0 <=5.0.1) potentially affected by CVE-2019-10750 via deeply (=3.0.0)

deeply NPM version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on deeply and may be impacted: - configly =5.0.0, =5.0.1 Source cves: CVE-2019-10750 Source advisory: SNYK:JS-DEEPLY-451026...

-price-checker (>=1.0.0 <=1.0.5), 0pflow (>=0.1.0-dev.0de2bc6 <=0.1.0-dev.f5622ac) +20557 more potentially affected by unknown CVE via open (>=0.0.2 <=11.0.0)

open NPM version =0.0.2, =1.0.0, =0.1.0-dev.0de2bc6, =2.5.0, =0.3.5, =0.1.0, =1.0.0, =0.3.96, =2.0.0, =2026.1.31, =0.1.0, =0.0.0, =1.0.0, =0.1.0, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-28XH-WPGR-7FM8...

@activeledger/activecore (>=2.0.0-rc5 <=2.0.0-rc.8.0.6), @aktr/node-module-a (=1.0.1) +195 more potentially affected by unknown CVE via swagger-ui (>=2.0.17 <=3.13.3)

swagger-ui NPM version =2.0.17, =2.0.0-rc5, =1.4.0, =0.0.4, =1.0.2, =7.0.0, =1.3.0, =3.0.0-alpha.0, =0.7.2, =3.0.1, =2.0.0, =0.0.1, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-X9P2-FXQ6-2M5F...

@aaa-backend-stack/graphql (>=1.16.1 <=2.4.4), @aaa-backend-stack/graphql-rest-bindings (>=1.16.0 <=1.16.9) +102 more potentially affected by CVE-2019-10749 via sequelize (>=3.0.1 <=3.34.0)

sequelize NPM version =3.0.1, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.12.0, =1.0.22, =2.0.10, =1.0.97, =1.6.489, =1.6.735 and more Source cves: CVE-2019-10749 Source advisory: SNYK:JS-SEQUELIZE-450222...

@maxts/waterline-adapter-tests (=1.0.3), driver-interface (=1.0.2) +9 more potentially affected by CVE-2019-10744 via @sailshq/lodash (=3.10.2)

@sailshq/lodash NPM version =3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sailshq/lodash and may be impacted: - @maxts/waterline-adapter-tests =1.0.3 - driver-interface =1.0.2 - machinepack-sockets =2.0.0, =5.2.0-0, =1.0.1, =0.9.1, =2.1.14,...

@astro-my/design-systems (>=0.3.14 <=0.4.42), @astro-my/design-systems-aw (>=0.4.63 <=0.4.64) +97 more potentially affected by CVE-2019-10744 via lodash-es (>=4.0.0 <=4.17.11)

lodash-es NPM version =4.0.0, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 - @astro-my/design-systems-xuan-ts =0.1.1 and more Source cves: CVE-2019-10744 Source advisory: SNYK:JS-LODASHES-2434290...