1508-cli (>=1.0.0, <=1.0.6), 1k (>=0.0.1, <=0.0.11) +9565 more potentially affected by CVE-2019-1010266 via lodash (>=4.7.0, <=4.17.10)

lodash NPM version =4.7.0, =1.0.0, =0.0.1, =0.0.2, =0.1.1, =1.0.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.7, =0.4.20, =1.0.0-beta.1, =1.0.6 - @36node/template-service 0.3.5 and more Source cves: CVE-2019-1010266 Source advisory: OSV:GHSA-X5RQ-J2XG-H7QM...

@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2019-1010266 via lodash-amd (4.16.4)

lodash-amd NPM version 4.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on lodash-amd and may be impacted: - @dojo/cli-test-intern =0.1.0, =4.1.1, =3.4.0, =0.0.1, =1.0.14, =0.0.7, =0.0.1, =0.1.5 - xirtam--matrix-operations 0.1.3 Source cves:...

@admui/grid (>=0.1.10, <=0.3.1), @atlantis-lab/grid (>=0.1.0, <=0.1.2) +99 more potentially affected by CVE-2019-1010266 via lodash-es (>=4.13.1, <=4.17.10)

lodash-es NPM version =4.13.1, =0.1.10, =0.1.0, =0.1.0-alpha.1, =3.2.3, =0.0.18-vojty-doc-split-components-2017-06-06T13-48-34-024Z, =57.1.8-pbenes-pb-jquery-2018-11-07T06-24-59-378Z, =3.1.5-pbenes-pb-jquery-2018-11-07T06-21-47-886Z, =1.0.0, =0.8.0-beta.1, =10.0.0-beta.1, =0.2.3, =0.0.7-beta.34,...

actix (>=0.5.0, <=0.7.7), actix-ogn (0.1.0) +259 more potentially affected by CVE-2019-15553 via memoffset (>=0.1.0, <=0.2.1)

memoffset CARGO version =0.1.0, =0.5.0, =0.7.5, =0.2.5, =0.4.0, =0.11.0, =0.2.0, =0.6.0, =0.5.0, =0.4.0, =0.5.0, =0.6.0, =0.3.0, =0.5.0 and more Source cves: CVE-2019-15553 Source advisory: OSV:RUSTSEC-2019-0011...

@6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2), @jamesbliss/react-flickity (>=1.0.0, <=1.4.0) +26 more potentially affected by CVE-2019-5448 via yarn (>=1.0.2, <=1.16.0)

yarn NPM version =1.0.2, =1.0.2-6river, =1.0.0, =1.9.9-1, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.0-semantic-release, =1.9.7, =5.0.0-ts.4, =0.0.4, =0.0.14 and more Source cves: CVE-2019-5448 Source advisory: SNYK:JS-YARN-451571...

@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2019-10744 via lodash-amd (4.16.4)

lodash-amd NPM version 4.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on lodash-amd and may be impacted: - @dojo/cli-test-intern =0.1.0, =4.1.1, =3.4.0, =0.0.1, =1.0.14, =0.0.7, =0.0.1, =0.1.5 - xirtam--matrix-operations 0.1.3 Source cves:...

@anjuna/charts (>=1.0.0-preview.45, <=1.0.0-preview.47), @badgeup/badgeup-browser-client (>=0.3.0, <=3.0.0) +186 more potentially affected by CVE-2019-10744 via lodash.defaultsdeep (>=4.3.2, <=4.6.0)

lodash.defaultsdeep NPM version =4.3.2, =1.0.0-preview.45, =0.3.0, =0.1.0, =0.3.0, =6.0.2, =1.0.0-rc.1, =1.2.0, =1.0.0, =0.9.16, =0.0.1, =0.275.1-chore-update-deps.3894.0, =0.18.2-alpha.1, =3.0.0, =6.8.1, =7.1.11 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

@admui/grid (>=0.1.10, <=0.3.1), @astro-my/design-systems (>=0.3.14, <=0.4.42) +158 more potentially affected by CVE-2019-10744 via lodash-es (>=4.0.0, <=4.17.12)

lodash-es NPM version =4.0.0, =0.1.10, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +13129 more potentially affected by CVE-2019-10744 via lodash (>=4.0.0, <=4.17.11)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.4 - 9wares-react 0.0.2 - @0x663/readclass 1.1.0 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

@amitport/useful (>=0.5.0, <=0.5.2), @bb-cli/bb-test-plugin-ngmock (1.5.8) +688 more potentially affected by unknown CVE via angular (>=1.0.8, <=1.5.11)

angular NPM version =1.0.8, =0.5.0, =0.2.7, =1.0.21, =0.2.1, =1.10.5, =0.2.0, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.0, =1.0.0, =3.0.2, =4.5.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-28HP-FGCR-2R4H...

@cidroy/frappe-gantt (0.8.2), @hatchloyalty/hatch-lab (>=1.0.2, <=1.0.6) +47 more potentially affected by CVE-2018-21270 via stringstream (>=0.0.4, <=0.0.5)

stringstream NPM version =0.0.4, =1.0.2, =0.1.0, =1.0.3-beta, =1.1.2, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2018-21270 Source advisory: OSV:GHSA-MF6X-7MM4-X2G7...

configly (>=5.0.0, <=5.0.1) potentially affected by CVE-2019-10750 via deeply (3.0.0)

deeply NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on deeply and may be impacted: - configly =5.0.0, =5.0.1 Source cves: CVE-2019-10750 Source advisory: SNYK:JS-DEEPLY-451026...

api-browser (>=0.0.1, <=0.0.3), koa2-swagger-ui (2.2.1) +2 more potentially affected by unknown CVE via swagger-ui (>=3.0.5, <=3.13.3)

swagger-ui NPM version =3.0.5, =0.0.1, =0.0.1, =3.0.12, =3.1.8 Source cves: unknown CVE Source advisory: OSV:GHSA-X9P2-FXQ6-2M5F...

@amcorvi/loadout (>=0.0.0, <=0.1.2), @amory/clean (>=2018.8.13-0, <=2018.8.13-2) +152 more potentially affected by unknown CVE via esm (>=3.0.14, <=3.0.84)

esm NPM version =3.0.14, =0.0.0, =2018.8.13-0, =2018.8.13-0, =2018.8.9-0, =2018.10.14-0, =2018.10.16-0, =2018.8.13-0, =2018.10.14-0, =2018.10.12-0, =2018.8.8-0, =2018.8.13-0, =0.4.1, =2.1.0-beta.0, =2.2.0-beta.1, =2.1.0-beta.0, =2.3.0-beta.10 and more Source cves: unknown CVE Source advisory:...

amethyst_derive (>=0.4.0, <=0.5.0), amethyst_test (>=0.2.0, <=0.3.0) +81 more potentially affected by unknown CVE via boxfnonce (>=0.0.3, <=0.1.1)

boxfnonce CARGO version =0.0.3, =0.4.0, =0.2.0, =0.1.0, =0.2.5, =0.5.0, =0.3.1, =0.2.0, =0.5.0, =0.0.0, =3.0.0, =0.1.3, =0.0.1, =0.4.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0040...

@essential-projects/sequelize_connection_manager (>=3.0.0-7a12b2e-b1, <=3.0.0-df349f85-b6), @nelreina/node-sequelize (>=3.5.3, <=3.5.5) +26 more potentially affected by CVE-2019-10748 via sequelize (>=5.0.0-beta.11, <=5.8.10)

sequelize NPM version =5.0.0-beta.11, =3.0.0-7a12b2e-b1, =3.5.3, =4.0.0-beta.2, =10.0.0-004477d6-b2, =6.0.0-54bba797-b2, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =1.1.5, =5.4.0, =5.4.0, =5.4.1 and more Source cves: CVE-2019-10748 Source advisory: SNYK:JS-SEQUELIZE-450221...

@aaa-backend-stack/graphql (>=1.16.1, <=2.4.4), @aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9) +114 more potentially affected by CVE-2019-10748 via sequelize (>=3.0.1, <=3.34.0)

sequelize NPM version =3.0.1, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.12.0, =1.0.22, =2.0.10, =1.0.97, =1.6.489, =1.6.735 and more Source cves: CVE-2019-10748 Source advisory: SNYK:JS-SEQUELIZE-450221...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +13129 more potentially affected by CVE-2019-10744 via lodash (>=4.0.0, <=4.17.11)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.4 - 9wares-react 0.0.2 - @0x663/readclass 1.1.0 and more Source cves: CVE-2019-10744 Source advisory: SNYK:JS-LODASH-450202...

@admui/grid (>=0.1.10, <=0.3.1), @astro-my/design-systems (>=0.3.14, <=0.4.42) +157 more potentially affected by CVE-2019-10744 via lodash-es (>=4.0.0, <=4.17.11)

lodash-es NPM version =4.0.0, =0.1.10, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 and more Source cves: CVE-2019-10744 Source advisory: SNYK:JS-LODASHES-2434290...

@maxts/waterline-adapter-tests (1.0.3), driver-interface (1.0.2) +9 more potentially affected by CVE-2019-10744 via @sailshq/lodash (3.10.2)

@sailshq/lodash NPM version 3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sailshq/lodash and may be impacted: - @maxts/waterline-adapter-tests 1.0.3 - driver-interface 1.0.2 - machinepack-sockets =2.0.0, =5.2.0-0, =1.0.1, =0.9.1, =2.1.14,...