@codedungeon/gunner (>=0.0.1 <=0.80.1), @codedungeon/laravel-versions-cli (>=0.0.3 <=0.1.0) +74 more potentially affected by unknown CVE via fs-path (>=0.0.22 <=0.0.24)

fs-path NPM version =0.0.22, =0.0.1, =0.0.3, =0.0.9, =1.0.2, =1.0.1, =0.0.1, =1.0.0, =1.0.0, =0.0.40, =1.0.1, =0.0.1, =1.0.1, =0.1.0, =1.0.0, =1.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GC94-6W89-HPQR...

@any4/model (>=0.0.1 <=1.2.4), @boundstate/hapi-typeorm (=0.0.1) +33 more potentially affected by unknown CVE via typeorm (>=0.0.10 <=0.1.14)

typeorm NPM version =0.0.10, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.6.2, =0.1.2, =0.1.19, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W7Q7-VJP8-7JV4...

08cms (=1.0.0), 0ad-tools (=0.0.1) +9594 more potentially affected by unknown CVE via marked (>=0.3.14 <=0.6.1)

marked NPM version =0.3.14, =0.1.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =4.13.7-rc4, =1.0.0, =1.0.0, =0.0.1, =0.0.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XF5P-87CH-GXW2...

@abeai/node-sdk (>=6.2.1 <=7.3.1), @after-work.js/aw (>=6.0.0 <=6.0.5) +62 more potentially affected by unknown CVE via handlebars (>=4.1.0 <=4.1.1)

handlebars NPM version =4.1.0, =6.2.1, =6.0.0, =6.0.0, =0.0.41, =0.9.9, =0.4.0, =1.0.4, =0.2.6, =1.2.0-6a4545aa-b24, =1.0.0-beta.2, =3.9.4, =1.5.3, =7.0.0, =7.0.21 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q42P-PG8M-CQH6...

@gooddollar/gun-appendonly (>=1.0.1 <=1.0.3), @notabug/gun-suppressor-sear (>=0.1.0 <=0.1.1) +16 more potentially affected by unknown CVE via gun (>=0.1.0 <=0.2019.413)

gun NPM version =0.1.0, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =1.0.2, =0.0.1, =1.0.0, =0.0.100, =1.0.0, =0.3.700, =0.1.0-beta.1, =0.1.0-beta.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-886V-MM6P-4M66...

forwardho (>=0.0.4 <=0.0.7) potentially affected by unknown CVE via floody (=0.0.1)

floody NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on floody and may be impacted: - forwardho =0.0.4, =0.0.7 Source cves: unknown CVE Source advisory: OSV:GHSA-3P92-886G-QXPQ...

@averoft/dvscrypto (=1.0.0), @kangyasin/crypt-aes-node (>=1.0.3 <=1.0.4) +30 more potentially affected by unknown CVE via bl (=1.0.0)

bl NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on bl and may be impacted: - @averoft/dvscrypto =1.0.0 - @kangyasin/crypt-aes-node =1.0.3, =1.0.1, =0.1.0, =1.13.0, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.3 and more Source cves: unknown...

ask (>=1.1.0 <=1.5.0), bid (>=0.1.0 <=1.0.0) +15 more potentially affected by unknown CVE via deap (>=0.1.2 <=0.2.2)

deap NPM version =0.1.2, =1.1.0, =0.1.0, =0.0.1, =0.1.0, =0.2.0, =0.0.4, =0.1.0, =0.1.0, =0.6.0, =0.3.0, =0.4.0, =0.4.0, =0.4.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XRMP-99WJ-P6JC...

@conversationai/moderator-backend-api (>=1.0.0 <=1.0.6), @conversationai/moderator-backend-core (>=1.0.0 <=1.0.6) +436 more potentially affected by unknown CVE via mysql (>=2.0.0-alpha8 <=2.13.0)

mysql NPM version =2.0.0-alpha8, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =0.0.3, =0.0.2, =0.0.2, =0.0.1, =4.0.0, =4.2.34 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5F7M-MMPC-QHH4...

@capriza/far (>=0.1.2 <=2.4.2), @cobalt-engine/cobower (=2.0.0) +365 more potentially affected by CVE-2018-20835 via tar-fs (>=0.1.8 <=1.16.0)

tar-fs NPM version =0.1.8, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.1.3, =1.1.15 - @monsieurbarti/micro-connector =3.1.7 and more Source cves: CVE-2018-20835 Source advisory: OSV:GHSA-X2MC-8FGJ-3WMR...

aiolambda (>=0.2.0 <=0.3.0), alcazar-web-framework (=0.0.2) +161 more potentially affected by CVE-2019-10906 via jinja2 (=2.10.0)

jinja2 PYPI version =2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aiolambda =0.2.0, =1.10.3, =3.0.0, =0.1.0, =0.0.1, =0.2.0, =0.6.7.post3, =0.7.1, =0.1.1, =1.2.1, =0.0.2, =0.0.3 - burl =1.0.0 and more Source cves...

@anzeblabla/react-native-markdown-editor (>=1.0.3 <=2.1.1), @gorangajic/react-native-markdown (=0.1.1) +22 more potentially affected by CVE-2019-9844 via simple-markdown (>=0.0.9 <=0.4.2)

simple-markdown NPM version =0.0.9, =1.0.3, =1.3.0, =1.0.1, =1.0.4, =2.3.0, =0.1.0, =1.2.0, =2.4.0, =1.2.0, =1.1.0, =1.0.0, =1.10.0 and more Source cves: CVE-2019-9844 Source advisory: OSV:GHSA-QJ3F-9GMQ-FWV5...

eskapade-spark (>=0.8.0 <=0.8.2), pytispark (>=1.0.0rc2 <=1.0.1) potentially affected by CVE-2018-1334 via pyspark (=2.1.2)

pyspark PYPI version =2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - eskapade-spark =0.8.0, =1.0.0rc2, =1.0.1 Source cves: CVE-2018-1334 Source advisory: OSV:GHSA-6MQQ-8R44-VMJC...

apeman-demo-static (>=2.0.0 <=2.0.8), apeman-demo-web (=3.0.1) +23 more potentially affected by CVE-2016-10582 via closurecompiler (>=1.1.4 <=1.6.1)

closurecompiler NPM version =1.1.4, =2.0.0, =1.5.6, =1.0.0, =0.2.0, =0.1.0, =0.4.0, =0.9.0, =1.0.0, =0.3.0, =0.1.0, =0.1.3, =0.0.1, =0.1.1 - makona-editor =0.0.1 and more Source cves: CVE-2016-10582 Source advisory: OSV:GHSA-HJGP-8FFR-HWWR...

0x00-pl--avg-pack-to-ttf (>=0.0.2 <=0.0.6), 0x00-pl--svg-pack-to-ttf (>=0.0.7 <=0.0.15) +3410 more potentially affected by CVE-2016-10538 via cli (>=0.10.0 <=0.9.0)

cli NPM version =0.10.0, =0.0.2, =0.0.7, =1.2.0, =2.2.4, =2.11.4, =2.0.0, =2.11.4, =3.0.0, =0.1.4, =1.1.0, =0.1.0, =1.0.0, =1.1.0, =1.1.0, =1.1.5 and more Source cves: CVE-2016-10538 Source advisory: OSV:GHSA-6CPC-MJ5C-M9RQ...

1tp (>=0.0.1 <=0.11.2), 5aces-service-registry (=1.0.1) +498 more potentially affected by CVE-2016-10536 via engine.io-client (>=0.1.0 <=1.6.8)

engine.io-client NPM version =0.1.0, =0.0.1, =1.0.1, =0.12.0-edge9, =0.0.1, =1.8.4, =1.0.0, =1.0.30, =0.1.0, =2.0.0-beta.1, =3.6.0, =3.7.0 and more Source cves: CVE-2016-10536 Source advisory: OSV:GHSA-4R4M-HJWJ-43P8...

cklauth (>=0.1.0 <=0.3.0), dj-saml-idp (>=1.1.0 <=1.2.1) +18 more potentially affected by CVE-2019-6975 via django (>=2.0.0 <=2.0.1)

django PYPI version =2.0.0, =0.1.0, =1.1.0, =4.3.1, =1.2.7, =0.1.0, =1.7.0, =0.0.3, =0.0.20, =0.1.0 - djangotheming =0.1.0 - fastaudiovisal =0.0.1 - fastaudiovisual =0.0.1 and more Source cves: CVE-2019-6975 Source advisory: OSV:GHSA-WH4H-V3F2-R2PP...

GHSA-VX85-MJ8C-4QM6 vulnerabilities

Vulnerabilities for packages: trino, druid...

GHSA-9MXF-G3X6-WV74 vulnerabilities

Vulnerabilities for packages: hive...

com.github.CCweixiao:hbase-sdk-thrift-core_1.x (>=2.0.7 <=2.0.8), org.apache.hbase:hbase-assembly (>=1.4.0 <=1.4.13) +1 more potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (>=1.4.0 <=1.4.4)

org.apache.hbase:hbase-thrift MAVEN version =1.4.0, =2.0.7, =1.4.0, =1.4.0, =1.4.13 Source cves: CVE-2018-8025 Source advisory: OSV:GHSA-R86J-2GC6-2CQ9...