configly (>=5.0.0, <=5.0.1) potentially affected by CVE-2019-10750 via deeply (3.0.0)

deeply NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on deeply and may be impacted: - configly =5.0.0, =5.0.1 Source cves: CVE-2019-10750 Source advisory: SNYK:JS-DEEPLY-451026...

api-browser (>=0.0.1, <=0.0.3), koa2-swagger-ui (2.2.1) +2 more potentially affected by unknown CVE via swagger-ui (>=3.0.5, <=3.13.3)

swagger-ui NPM version =3.0.5, =0.0.1, =0.0.1, =3.0.12, =3.1.8 Source cves: unknown CVE Source advisory: OSV:GHSA-X9P2-FXQ6-2M5F...

@amcorvi/loadout (>=0.0.0, <=0.1.2), @amory/clean (>=2018.8.13-0, <=2018.8.13-2) +152 more potentially affected by unknown CVE via esm (>=3.0.14, <=3.0.84)

esm NPM version =3.0.14, =0.0.0, =2018.8.13-0, =2018.8.13-0, =2018.8.9-0, =2018.10.14-0, =2018.10.16-0, =2018.8.13-0, =2018.10.14-0, =2018.10.12-0, =2018.8.8-0, =2018.8.13-0, =0.4.1, =2.1.0-beta.0, =2.2.0-beta.1, =2.1.0-beta.0, =2.3.0-beta.10 and more Source cves: unknown CVE Source advisory:...

amethyst_derive (>=0.4.0, <=0.5.0), amethyst_test (>=0.2.0, <=0.3.0) +81 more potentially affected by unknown CVE via boxfnonce (>=0.0.3, <=0.1.1)

boxfnonce CARGO version =0.0.3, =0.4.0, =0.2.0, =0.1.0, =0.2.5, =0.5.0, =0.3.1, =0.2.0, =0.5.0, =0.0.0, =3.0.0, =0.1.3, =0.0.1, =0.4.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0040...

@essential-projects/sequelize_connection_manager (>=3.0.0-7a12b2e-b1, <=3.0.0-df349f85-b6), @nelreina/node-sequelize (>=3.5.3, <=3.5.5) +26 more potentially affected by CVE-2019-10748 via sequelize (>=5.0.0-beta.11, <=5.8.10)

sequelize NPM version =5.0.0-beta.11, =3.0.0-7a12b2e-b1, =3.5.3, =4.0.0-beta.2, =10.0.0-004477d6-b2, =6.0.0-54bba797-b2, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =1.1.5, =5.4.0, =5.4.0, =5.4.1 and more Source cves: CVE-2019-10748 Source advisory: SNYK:JS-SEQUELIZE-450221...

@aaa-backend-stack/graphql (>=1.16.1, <=2.4.4), @aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9) +114 more potentially affected by CVE-2019-10748 via sequelize (>=3.0.1, <=3.34.0)

sequelize NPM version =3.0.1, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.12.0, =1.0.22, =2.0.10, =1.0.97, =1.6.489, =1.6.735 and more Source cves: CVE-2019-10748 Source advisory: SNYK:JS-SEQUELIZE-450221...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +13132 more potentially affected by CVE-2019-10744 via lodash (>=4.0.0, <=4.17.11)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.4 - 9wares-react 0.0.2 - @0x663/readclass 1.1.0 and more Source cves: CVE-2019-10744 Source advisory: SNYK:JS-LODASH-450202...

@admui/grid (>=0.1.10, <=0.3.1), @astro-my/design-systems (>=0.3.14, <=0.4.42) +157 more potentially affected by CVE-2019-10744 via lodash-es (>=4.0.0, <=4.17.11)

lodash-es NPM version =4.0.0, =0.1.10, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 and more Source cves: CVE-2019-10744 Source advisory: SNYK:JS-LODASHES-2434290...

@maxts/waterline-adapter-tests (1.0.3), driver-interface (1.0.2) +9 more potentially affected by CVE-2019-10744 via @sailshq/lodash (3.10.2)

@sailshq/lodash NPM version 3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sailshq/lodash and may be impacted: - @maxts/waterline-adapter-tests 1.0.3 - driver-interface 1.0.2 - machinepack-sockets =2.0.0, =5.2.0-0, =1.0.1, =0.9.1, =2.1.14,...

@idearium/cli (>=1.0.0, <=4.3.0), @stoplight/command (>=0.0.11-1, <=0.0.24) +27 more potentially affected by CVE-2019-10747 via set-value (3.0.0)

set-value NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on set-value and may be impacted: - @idearium/cli =1.0.0, =0.0.11-1, =0.0.11-29, =0.0.11-1, =0.0.11-1, =0.0.11-1, =0.0.18, =0.0.11-1, =0.0.11-1, =0.0.11-30, =0.0.11-1, =0.0.18,...

ts-node-server (>=1.1.0, <=2.0.0) potentially affected by CVE-2019-10746 via mixin-deep (2.0.0)

mixin-deep NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mixin-deep and may be impacted: - ts-node-server =1.1.0, =2.0.0 Source cves: CVE-2019-10746 Source advisory: SNYK:JS-MIXINDEEP-450212...

@peak-stone/vue-admin (>=1.0.1, <=2.1.1) potentially affected by CVE-2019-10745 via assign-deep (1.0.0)

assign-deep NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on assign-deep and may be impacted: - @peak-stone/vue-admin =1.0.1, =2.1.1 Source cves: CVE-2019-10745 Source advisory: SNYK:JS-ASSIGNDEEP-450211...

askii (>=0.1.0, <=0.5.4), atomsh (0.1.0) +58 more potentially affected by CVE-2019-15546 via pancurses (>=0.6.0, <=0.17.0)

pancurses CARGO version =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.1.0, =0.1.0, =0.16.0, =0.4.0, =0.13.1, =0.2.0, =0.3.1 and more Source cves: CVE-2019-15546 Source advisory: OSV:RUSTSEC-2019-0005...

alpha-g-analysis (0.1.0), apecrunch (>=0.0.1, <=0.0.3) +179 more potentially affected by CVE-2019-15547 +1 more via ncurses (>=5.94.0, <=6.0.1)

ncurses CARGO version =5.94.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.7 - btui 0.6.5 and more Source cves: CVE-2019-15547, CVE-2019-15548 Source advisory: OSV:RUSTSEC-2019-0006...

digger (1.2.11), edge-server (0.1.2) +9 more potentially affected by unknown CVE via lactate (>=0.6.0, <=0.13.12)

lactate NPM version =0.6.0, =0.3.8, =0.7.0, =0.4.4, =0.3.6, =0.1.1, =0.1.0, =0.0.1, =0.2.4, =0.4.2 - zetta-beaglebone-proxy 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-68GR-CMCP-G3MJ...

@allenbrowntech/lemon-lui (>=1.0.1, <=2.0.0), @angular-template/ng1-build (>=2.0.0-beta.1, <=2.0.0-beta.6) +738 more potentially affected by unknown CVE via underscore.string (>=3.0.3, <=3.3.4)

underscore.string NPM version =3.0.3, =1.0.1, =2.0.0-beta.1, =0.0.1, =0.0.1, =1.2.0, =1.0.0, =1.1.1, =2.0.0-beta.1, =0.7.8, =0.3.0, =0.7.0-alpha.5e822d8d, =1.0.0, =1.0.0, =1.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V2P6-4MP7-3R9V...

04_nodeblog (1.0.0), 10tcl (>=0.0.1, <=0.0.10) +3262 more potentially affected by unknown CVE via constantinople (3.0.2)

constantinople NPM version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on constantinople and may be impacted: - 04nodeblog 1.0.0 - 10tcl =0.0.1, =1.0.1, =0.1.1, =0.0.7, =1.0.23, =1.0.0, =1.0.0, =0.0.0, =1.0.0, =0.0.1-alpha-1.3, =0.1.30 and more...

88slot-ap (1.0.0), @brainsights/models (>=2.1.0, <=3.3.0) +21 more potentially affected by unknown CVE via squel (>=5.0.4, <=5.12.2)

squel NPM version =5.0.4, =2.1.0, =1.1.2, =0.0.1, =1.0.2, =0.1.1, =0.1.1, =0.0.2, =0.0.2, =0.0.31, =0.0.4, =1.0.0, =1.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4QHX-G9WP-G9M6...

@devsisters/passport (>=1.1.0, <=1.1.2), @project-sunbird/ext-framework-server (8.0.0) +4 more potentially affected by CVE-2019-10157 via keycloak-connect (>=4.0.0-beta.1, <=4.5.0)

keycloak-connect NPM version =4.0.0-beta.1, =1.1.0, =0.0.2, =0.0.1, =0.0.1-alpha-1, =1.2.7 Source cves: CVE-2019-10157 Source advisory: OSV:GHSA-68HW-VFH7-XVG8...

ids-enterprise-ng (>=4.10.0-beta.0, <=5.3.0) potentially affected by unknown CVE via ids-enterprise (>=4.10.0, <=4.18.1)

ids-enterprise NPM version =4.10.0, =4.10.0-beta.0, =5.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-49R3-3H96-RWJ6...