@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2019-10759 via safer-eval (1.2.3)

safer-eval NPM version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on safer-eval and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2019-10759 Source advisory: OSV:GHSA-R3X4-WR4H-PW33...

63pokupki-nodejs-common (0.0.2), @63pokupki/nodejs-common (>=0.0.2, <=0.0.85) +1436 more potentially affected by CVE-2019-10757 via knex (>=0.1.8, <=0.19.4)

knex NPM version =0.1.8, =0.0.2, =1.0.10, =0.0.1, =4.0.0, =0.0.1, =0.1.0, =0.0.1, =0.2.0, =0.1.0, =0.1.1, =0.5.0 and more Source cves: CVE-2019-10757 Source advisory: OSV:GHSA-58V4-QWX5-7F59...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2019-10760 via safer-eval (1.2.3)

safer-eval NPM version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on safer-eval and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2019-10760 Source advisory: OSV:GHSA-HGCH-JJMR-GP7W...

@magento/upward-spec (>=2.0.0-rc.19, <=3.0.0), @nowtilus/nemo-lib (>=0.3.0, <=0.3.3) +18 more potentially affected by CVE-2019-17592 via csv-parse (>=4.0.0, <=4.4.5)

csv-parse NPM version =4.0.0, =2.0.0-rc.19, =0.3.0, =5.4.0, =0.3.0, =3.3.1, =5.4.0-RC1, =1.0.35, =0.6.2, =2.1.0-beta.2939, =4.2.3, =0.0.1, =0.1.4, =0.44.1, =0.48.7 and more Source cves: CVE-2019-17592 Source advisory: OSV:GHSA-582F-P4PG-XC74...

api-browser (>=0.0.1, <=0.0.3), decoupled-swagger-editor (1.0.0) +3 more potentially affected by CVE-2019-17495 via swagger-ui (>=3.0.5, <=3.20.7)

swagger-ui NPM version =3.0.5, =0.0.1, =0.0.1, =3.0.12, =3.1.8 Source cves: CVE-2019-17495 Source advisory: OSV:GHSA-C427-HJC3-WRFW...

devp2p (>=0.4.0, <=0.4.1), dpt (>=0.3.0, <=0.3.1) +10 more potentially affected by CVE-2019-25003 via libsecp256k1 (0.1.3)

libsecp256k1 CARGO version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on libsecp256k1 and may be impacted: - devp2p =0.4.0, =0.3.0, =0.3.4, =0.3.4, =0.9.2, =0.9.1, =0.4.0, =0.8.2, =0.11.0-beta.0 Source cves: CVE-2019-25003 Source advisory:...

bem-register (>=1.0.0, <=1.0.5), itstep_server (0.0.1) +4 more potentially affected by CVE-2019-10758 via mongo-express (>=0.19.0, <=0.53.0)

mongo-express NPM version =0.19.0, =1.0.0, =0.1.1, =1.0.0, =1.5.0, =1.6.1 Source cves: CVE-2019-10758 Source advisory: SNYK:JS-MONGOEXPRESS-473215...

b2b (0.1.0), box_stream (>=0.1.0, <=0.2.1) +57 more potentially affected by CVE-2019-25002 via sodiumoxide (>=0.0.4, <=0.1.0)

sodiumoxide CARGO version =0.0.4, =0.1.0, =0.0.7, =0.1.0, =0.5.0, =0.0.0, =2.0.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.9, =0.2.5 and more Source cves: CVE-2019-25002 Source advisory: OSV:RUSTSEC-2019-0026...

63pokupki-nodejs-common (0.0.2), @63pokupki/nodejs-common (>=0.0.2, <=0.0.85) +1436 more potentially affected by CVE-2019-10757 via knex (>=0.1.8, <=0.19.4)

knex NPM version =0.1.8, =0.0.2, =1.0.10, =0.0.1, =4.0.0, =0.0.1, =0.1.0, =0.0.1, =0.2.0, =0.1.0, =0.1.1, =0.5.0 and more Source cves: CVE-2019-10757 Source advisory: SNYK:JS-KNEX-471962...

akaze (>=0.1.0, <=0.1.2), babelfish (>=0.1.0, <=0.1.1) +73 more potentially affected by CVE-2019-25001 via serde_cbor (>=0.3.3, <=0.9.0)

serdecbor CARGO version =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.0, =0.10.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.3 - ec-client 0.1.0 and more Source cves: CVE-2019-25001 Source advisory: OSV:RUSTSEC-2019-0025...

status-board-cli (>=1.1.0, <=2.0.51) potentially affected by CVE-2019-15478 via status-board (>=1.1.12, <=1.1.80)

status-board NPM version =1.1.12, =1.1.0, =2.0.51 Source cves: CVE-2019-15478 Source advisory: OSV:GHSA-6M4R-CGM3-6Q7Q...

status-board-cli (>=1.1.0, <=2.0.51) potentially affected by CVE-2019-15479 via status-board (>=1.1.12, <=1.1.80)

status-board NPM version =1.1.12, =1.1.0, =2.0.51 Source cves: CVE-2019-15479 Source advisory: OSV:GHSA-8864-RHMW-5M6F...

generator-jhipster-grpc (>=0.19.0, <=0.19.1), generator-jhipster-kotlin (>=0.8.0, <=1.1.0) +6 more potentially affected by unknown CVE via generator-jhipster (>=6.0.1, <=6.3.0)

generator-jhipster NPM version =6.0.1, =0.19.0, =0.8.0, =2.0.0, =2.1.5, =0.0.2, =1.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-MC84-XR9P-938R...

@absolunet/nwayo-cli (>=1.0.0, <=3.6.1), @absolunet/nwayo-workflow (>=3.3.0, <=3.6.1) +479 more potentially affected by CVE-2019-5484 via bower (>=1.1.2, <=1.8.4)

bower NPM version =1.1.2, =1.0.0, =3.3.0, =0.1.16-master.20181116180810, =0.1.2, =1.2.6, =1.0.1, =1.0.0, =0.2.44, =1.0.0, =1.1.1, =1.2.1 - @pattern-lab/uikit-workshop 1.0.0-alpha.7 - @pgswe/ics.js 0.1.3 - @pvsundarram/grunt-bower-task 0.4.2 - @rbrlortie/nwayo-cli 1.4.0 - @rbrlortie/nwayo-workflow...

@angstone/microservice (>=0.0.0, <=0.0.3), @nodeframe/seneca (>=2.1.0, <=2.2.20) +11 more potentially affected by CVE-2019-5483 via seneca (>=3.1.0, <=3.7.0)

seneca NPM version =3.1.0, =0.0.0, =2.1.0, =0.4.4, =0.1.0, =0.0.0, =0.0.0, =0.0.0, =1.7.9, =1.8.5 - seneca-in-practice 0.2.0 - seneca-kue 0.1.1-alpha.1 - seneca-telldus-live 0.1.0 - tfk-seneca-seeiendom-lookup 1.0.17 Source cves: CVE-2019-5483 Source advisory: OSV:GHSA-2XWV-3CC9-FP7C...

larvitlog (>=0.1.0, <=0.3.4), larvituser-api (>=0.2.0, <=0.4.0) potentially affected by CVE-2019-5479 via larvitbase-api (>=0.2.2, <=0.5.1)

larvitbase-api NPM version =0.2.2, =0.1.0, =0.2.0, =0.4.0 Source cves: CVE-2019-5479 Source advisory: OSV:GHSA-XF27-JQWV-GF3R...

dijit (>=1.10.0, <=1.10.7), dojox (1.10.3) +1 more potentially affected by CVE-2010-2273 via dojo (>=1.10.0, <=1.10.7)

dojo NPM version =1.10.0, =1.10.0, =0.3.0-alpha.1, =0.3.0-alpha.32 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

dijit (>=1.12.1, <=1.12.3), dojox (>=1.12.1, <=1.12.3) potentially affected by CVE-2010-2273 via dojo (>=1.12.1, <=1.12.3)

dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.3 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +3 more potentially affected by CVE-2010-2273 via dojo (1.13.0)

dojo NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojo and may be impacted: - @agrc/helpers =1.0.0, =4.0.0-alpha.1, =0.1.10, =0.1.12 - dijit 1.13.0 - dojox 1.13.0 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

bryaktestgrid (>=0.0.1, <=0.0.6), dijit (>=1.11.0-rc1, <=1.11.5) +3 more potentially affected by CVE-2010-2273 via dojo (>=1.11.0, <=1.11.5)

dojo NPM version =1.11.0, =0.0.1, =1.11.0-rc1, =0.1.0, =1.11.0-rc1, =0.0.1, =0.5.24 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...