theo (>=6.0.0-alpha.7 <=6.0.0-beta.7) potentially affected by CVE-2017-16099 via no-case (=2.3.1)

no-case NPM version =2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on no-case and may be impacted: - theo =6.0.0-alpha.7, =6.0.0-beta.7 Source cves: CVE-2017-16099 Source advisory: OSV:GHSA-FF6R-5JWM-8292...

acidjs (>=0.0.2 <=1.0.1), acl-knex (>=0.1.2 <=0.1.3) +41 more potentially affected by CVE-2017-16082 via pg (>=3.0.3 <=3.6.3)

pg NPM version =3.0.3, =0.0.2, =0.1.2, =0.0.1, =0.0.2, =0.1.0, =0.0.4, =0.3.0, =0.0.11, =0.0.12, =0.1.2, =0.0.2, =0.0.1, =0.0.64 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@arpinum/postgres (>=4.0.0-beta12 <=4.0.0-beta14), appointmed-epr-template-common (>=0.0.46 <=0.0.65) +9 more potentially affected by CVE-2017-16082 via pg (>=6.2.2 <=6.2.3)

pg NPM version =6.2.2, =4.0.0-beta12, =0.0.46, =0.0.35, =0.13.3, =0.0.1, =0.0.1, =1.0.0, =1.0.3 - pg-promise-strict =0.3.4 - pgo =0.2.1 Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

@emartech/me-psql-query-builder (>=1.0.0 <=1.1.0), @evocodes/parse-server (>=2.2.17 <=2.2.27) +50 more potentially affected by CVE-2017-16082 via pg (>=5.0.0 <=5.1.0)

pg NPM version =5.0.0, =1.0.0, =2.2.17, =0.9.28, =1.0.0, =0.4.0, =0.1.0, =0.0.2, =0.1.3, =0.2.30, =0.2.33 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

mapdemotest1 (=0.0.1), websocketsli (=1.0.0) potentially affected by CVE-2017-16045 via jquery.js (=0.0.2-security)

jquery.js NPM version =0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on jquery.js and may be impacted: - mapdemotest1 =0.0.1 - websocketsli =1.0.0 Source cves: CVE-2017-16045 Source advisory: OSV:GHSA-JP27-CWP2-5QQR...

book-cli (=1.2.0) potentially affected by CVE-2017-16152 via static-html-server (=0.1.2)

static-html-server NPM version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on static-html-server and may be impacted: - book-cli =1.2.0 Source cves: CVE-2017-16152 Source advisory: OSV:GHSA-9J5M-873F-XH76...

wtm-cli (>=1.0.0-beta.1 <=1.0.0-beta.6) potentially affected by CVE-2017-16223 via nodeaaaaa (=1.3.0)

nodeaaaaa NPM version =1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on nodeaaaaa and may be impacted: - wtm-cli =1.0.0-beta.1, =1.0.0-beta.6 Source cves: CVE-2017-16223 Source advisory: OSV:GHSA-XJ3H-VC9J-J823...

many-versioned-wheel (>=0.1.0 <=0.2.0) potentially affected by CVE-2011-1157 via feedparser (=5.0.0)

feedparser PYPI version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1157 Source advisory: OSV:GHSA-2P78-8HH6-96XC...

many-versioned-wheel (>=0.1.0 <=0.2.0) potentially affected by CVE-2011-1158 via feedparser (=5.0.0)

feedparser PYPI version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1158 Source advisory: OSV:GHSA-4M72-RMM9-2QJR...

many-versioned-wheel (>=0.1.0 <=0.2.0) potentially affected by CVE-2011-1156 via feedparser (=5.0.0)

feedparser PYPI version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1156 Source advisory: OSV:GHSA-6H52-4VMH-8X4F...

Boa (>=0.9.0 <=0.10.0), GetPDB (>=0.1.0 <=1.0.1) +5077 more potentially affected by CVE-2018-20991 via smallvec (>=0.6.13 <=0.6.14)

smallvec CARGO version =0.6.13, =0.9.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.5.3, =0.1.0, =0.5.0, =0.5.0, =0.5.2 and more Source cves: CVE-2018-20991 Source advisory: OSV:RUSTSEC-2018-0003...

tribe (>=1.2.0 <=1.3.0) potentially affected by CVE-2017-16763 via confire (=0.2.0)

confire PYPI version =0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on confire and may be impacted: - tribe =1.2.0, =1.3.0 Source cves: CVE-2017-16763 Source advisory: OSV:GHSA-M85C-9MF8-M2M6...

astronomia (>=1.3.1 <=1.3.2) potentially affected by CVE-2017-5954 via serialize-to-js (=0.5.0)

serialize-to-js NPM version =0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on serialize-to-js and may be impacted: - astronomia =1.3.1, =1.3.2 Source cves: CVE-2017-5954 Source advisory: OSV:GHSA-MM62-WXC8-CF7M...

django-saml2-auth (>=1.0.2 <=1.1.4), django-saml2-auth-custom (>=1.0.0 <=1.0.4) +4 more potentially affected by CVE-2017-1000433 via pysaml2 (>=4.0.2 <=4.4.0)

pysaml2 PYPI version =4.0.2, =1.0.2, =1.0.0, =12.0.2, =0.6.1, =3.4.8 Source cves: CVE-2017-1000433 Source advisory: OSV:GHSA-924M-4PMX-C67H...

monasca-agent (>=1.3.0 <=1.4.0) potentially affected by CVE-2017-2592 via oslo-middleware (=3.20.0)

oslo-middleware PYPI version =3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-middleware and may be impacted: - monasca-agent =1.3.0, =1.4.0 Source cves: CVE-2017-2592 Source advisory: OSV:GHSA-XCP8-HH74-F6MC...

anymail-history (=0.1.8), bmds-ui (>=24.1.0 <=25.1.0) +31 more potentially affected by CVE-2018-6596 via django-anymail (>=0.9.0 <=15.0.0)

django-anymail PYPI version =0.9.0, =24.1.0, =0.4.10, =2.18.0, =0.1.3, =1.0.5, =0.1.0, =0.5.34, =0.1.0a1, =0.0.1, =1.2.0, =2.1.0, =1.0.0, =1.4.3 and more Source cves: CVE-2018-6596 Source advisory: OSV:GHSA-HXF9-7H4C-F5JV...

aacrgenie (>=9.0.0 <=12.5.0), aalam-common (=0.1.78) +549 more potentially affected by CVE-2018-6594 via pycrypto (>=2.4.1 <=2.6.1)

pycrypto PYPI version =2.4.1, =9.0.0, =0.0.8, =1.1.3, =1.0.1, =3.4.0, =0.4.0b0, =3.0.0b1, =0.0.2, =0.0.1, =1.0.0, =0.0.4, =0.3.1 and more Source cves: CVE-2018-6594 Source advisory: OSV:GHSA-6528-WVF6-F6QG...

aequitas (>=0.26.0 <=0.42.0), codalab (>=0.5.29 <=0.5.52) +13 more potentially affected by CVE-2018-5773 via markdown2 (>=2.3.0 <=2.3.5)

markdown2 PYPI version =2.3.0, =0.26.0, =0.5.29, =3.8.3, =0.0.1, =0.7.0a1, =0.4.3, =2.1.0, =1.13.0, =2.1.0, =2.24.1, =4.2.0, =5.5.5 Source cves: CVE-2018-5773 Source advisory: OSV:GHSA-P6H9-GW49-RQM4...

eskapade-spark (>=0.8.0 <=0.8.2), pytispark (>=1.0.0rc2 <=1.0.1) potentially affected by CVE-2018-1334 via pyspark (=2.1.2)

pyspark PYPI version =2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - eskapade-spark =0.8.0, =1.0.0rc2, =1.0.1 Source cves: CVE-2018-1334 Source advisory: OSV:PYSEC-2018-25...

sourced-ml (=0.4.5) potentially affected by CVE-2018-1334 via pyspark (=2.2.0.post0)

pyspark PYPI version =2.2.0.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - sourced-ml =0.4.5 Source cves: CVE-2018-1334 Source advisory: OSV:PYSEC-2018-25...