approveapi (0.1.0), approveapi_openapi (0.1.1) +185 more potentially affected by unknown CVE via tokio-proto (0.1.1)

tokio-proto CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tokio-proto and may be impacted: - approveapi 0.1.0 - approveapiopenapi 0.1.1 - arc-reactor =0.1.0, =0.2.0, =0.2.0, =1.5.0, =0.4.2, =0.5.0, =0.1.0, =0.1.0, =0.1.6 and more...

svg-sketch-pdf (>=1.0.12, <=1.0.28) potentially affected by unknown CVE via rgb2hex (0.1.0)

rgb2hex NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on rgb2hex and may be impacted: - svg-sketch-pdf =1.0.12, =1.0.28 Source cves: unknown CVE Source advisory: OSV:GHSA-65P8-3HM4-H9H8...

CVE-2019-14696

CVE-2019-14696 affects Open-School 3.0 and Community Edition 2.3, exposing a Cross-Site Scripting (XSS) flaw. The vulnerability occurs in the GET parameter osv/index.php?r=students/guardians/create id, allowing injection of arbitrary JavaScript in the victim’s browser. This could enable session h...

amethyst_derive (>=0.4.0, <=0.5.0), amethyst_test (>=0.2.0, <=0.3.0) +81 more potentially affected by unknown CVE via boxfnonce (>=0.0.3, <=0.1.1)

boxfnonce CARGO version =0.0.3, =0.4.0, =0.2.0, =0.1.0, =0.2.5, =0.5.0, =0.3.1, =0.2.0, =0.5.0, =0.0.0, =3.0.0, =0.1.3, =0.0.1, =0.4.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0040...

askii (>=0.1.0, <=0.5.4), atomsh (0.1.0) +58 more potentially affected by CVE-2019-15546 via pancurses (>=0.6.0, <=0.17.0)

pancurses CARGO version =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.1.0, =0.1.0, =0.16.0, =0.4.0, =0.13.1, =0.2.0, =0.3.1 and more Source cves: CVE-2019-15546 Source advisory: OSV:RUSTSEC-2019-0005...

alpha-g-analysis (0.1.0), apecrunch (>=0.0.1, <=0.0.3) +179 more potentially affected by CVE-2019-15547 +1 more via ncurses (>=5.94.0, <=6.0.1)

ncurses CARGO version =5.94.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.7 - btui 0.6.5 and more Source cves: CVE-2019-15547, CVE-2019-15548 Source advisory: OSV:RUSTSEC-2019-0006...

@allenbrowntech/lemon-lui (>=1.0.1, <=2.0.0), @angular-template/ng1-build (>=2.0.0-beta.1, <=2.0.0-beta.6) +738 more potentially affected by unknown CVE via underscore.string (>=3.0.3, <=3.3.4)

underscore.string NPM version =3.0.3, =1.0.1, =2.0.0-beta.1, =0.0.1, =0.0.1, =1.2.0, =1.0.0, =1.1.1, =2.0.0-beta.1, =0.7.8, =0.3.0, =0.7.0-alpha.5e822d8d, =1.0.0, =1.0.0, =1.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V2P6-4MP7-3R9V...

@gkatsev/grunt-harp (>=0.18.0, <=0.19.0), @mobify/documentation-theme (>=1.11.3, <=2.0.0-preview.2-dev) +21 more potentially affected by CVE-2019-5437 via harp (>=0.9.5, <=0.32.0)

harp NPM version =0.9.5, =0.18.0, =1.11.3, =1.11.3, =0.0.3, =0.0.8-pre2, =0.0.1, =0.0.1, =0.0.1-1, =0.0.1, =0.1.0, =0.1.0, =0.2.9 - n-p-m 1.1.0 and more Source cves: CVE-2019-5437 Source advisory: OSV:GHSA-46HV-7769-J7RX...

@aabenoja/karma-phantomjs-launcher (0.2.1), @aabenoja/phantomjs (2.0.0) +183 more potentially affected by unknown CVE via npmconf (>=2.0.9, <=2.1.2)

npmconf NPM version =2.0.9, =0.1.28, =1.2.6, =2.7.2, =4.5.201902251314, =1.5.0-alpha.1, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =1.0.3, =2.0.0, =2.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-57CF-349J-352G...

@doxteam/libs (>=1.0.0, <=1.0.3), @frenz/sql-repl (0.1.0) +111 more potentially affected by unknown CVE via sql (>=0.0.5, <=0.77.0)

sql NPM version =0.0.5, =1.0.0, =1.7.99, =1.0.0, =0.0.1, =0.1.0, =1.0.0, =0.0.2, =0.0.31, =0.1.1, =1.0.1, =0.1.0, =0.1.0, =0.0.2, =0.1.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8F93-RV4P-X4JW...

@skeleton/traffic (>=0.1.0, <=0.1.1), @vibe-reporting/core (>=1.0.14, <=1.2.5) +22 more potentially affected by unknown CVE via redbird (>=0.4.14, <=0.8.0)

redbird NPM version =0.4.14, =0.1.0, =1.0.14, =1.0.20, =1.0.2, =1.0.5, =1.0.8, =1.0.16, =1.0.0, =1.1.12, =1.1.60 - evoxy 0.0.1 - http-socket-proxy-router 0.0.1 - incremental-compiler 0.0.1 - kenjutsuui 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8948-FFC6-JG52...

@any4/model (>=0.0.1, <=1.2.4), @boundstate/hapi-typeorm (0.0.1) +35 more potentially affected by unknown CVE via typeorm (>=0.0.2-alpha.43, <=0.1.14)

typeorm NPM version =0.0.2-alpha.43, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.6.2, =0.1.2, =0.1.19, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W7Q7-VJP8-7JV4...

@allenbrowntech/lemon (>=1.0.0, <=1.6.0), @biotope/build (>=5.2.0, <=5.2.3) +83 more potentially affected by unknown CVE via clean-css (>=4.0.2, <=4.1.9)

clean-css NPM version =4.0.2, =1.0.0, =5.2.0, =1.6.1, =1.0.0, =1.0.0, =2.0.1, =1.0.0-201702012110, =0.0.17, =1.0.8, =0.0.2, =0.13.0-beta.1, =0.0.1, =1.3.3, =0.1.0, =0.0.3, =0.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WXHQ-PM8V-CW75...

08cms (1.0.0), 0ad-tools (0.0.1) +9051 more potentially affected by unknown CVE via marked (>=0.3.14, <=0.6.1)

marked NPM version =0.3.14, =0.1.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =4.13.7-rc4, =1.0.0, =1.0.0, =0.0.1, =0.0.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XF5P-87CH-GXW2...

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +29066 more potentially affected by unknown CVE via tunnel-agent (>=0.2.0, <=0.5.0)

tunnel-agent NPM version =0.2.0, =0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tunnel-agent and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1...

@troveng/trov-web-config (1.0.5), @zce/ghost-cli (>=1.9.7, <=1.9.8) +13 more potentially affected by unknown CVE via generate-password (>=1.3.0, <=1.4.0)

generate-password NPM version =1.3.0, =1.9.7, =1.0.2, =1.16.0, =0.1.4, =0.1.11, =1.4.0, =0.6.0, =0.9.11, =0.0.2, =1.6.0, =4.20.9, =0.9.0, =1.0.79, =1.4.0, =1.11.0 Source cves: unknown CVE Source advisory: OSV:GHSA-6QQF-VVCR-7QRV...

@nodefony/sequelize-bundle (>=4.0.0-beta.2, <=4.2.0-beta.2), @sequelizejs/next (5.0.0-beta.16) +5 more potentially affected by CVE-2019-11069 via sequelize (>=5.0.0-beta.11, <=5.2.3)

sequelize NPM version =5.0.0-beta.11, =4.0.0-beta.2, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =1.0.0-beta1, =1.0.0-beta2.2 Source cves: CVE-2019-11069 Source advisory: OSV:GHSA-2777-2VQ8-C4V4...

chrome-js (>=0.1.8, <=0.2.0), cpos (>=0.1.3, <=0.1.9) +26 more potentially affected by CVE-2016-10580 via nodewebkit (>=0.7.5, <=0.11.6)

nodewebkit NPM version =0.7.5, =0.1.8, =0.1.3, =0.1.0, =0.0.1, =0.1.0, =0.0.0, =0.0.1, =0.0.0, =0.0.24, =0.0.6, =1.6.1, =0.0.0, =0.1.0, =1.0.1, =1.0.2 and more Source cves: CVE-2016-10580 Source advisory: OSV:GHSA-GC6C-5V9W-XMHW...

a3mo_lib (>=0.1.0, <=0.1.1), a_r_c_h_e_r_y (>=0.4.1, <=0.4.3) +2561 more potentially affected by unknown CVE via term (>=0.1.13, <=0.6.1)

term CARGO version =0.1.13, =0.1.0, =0.4.1, =0.2.1, =0.0.1, =0.2.1, =0.1.4, =2.1.0, =0.6.0, =0.2.0, =0.1.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0015...

@afshin/custom404-extension (>=0.1.1, <=0.1.3), @apache-royale/cli (>=0.1.0, <=0.2.2) +443 more potentially affected by CVE-2018-3774 via url-parse (>=1.0.2, <=1.4.1)

url-parse NPM version =1.0.2, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.1.1, =0.1.1-beta.0, =0.1.0, =0.1.0, =0.1.0, =1.1.1, =2.0.0, =2.0.0, =4.1.0 - @datalayer/jupyterlab-hub-extension 0.8.1 and more Source cves: CVE-2018-3774 Source advisory: OSV:GHSA-PV4C-P2J5-38J4...