@ardibos/taekbos (1.1.4), @conlan2/cmpt315as2 (>=1.0.0, <=1.0.1) +8 more potentially affected by unknown CVE via public (0.1.5)

public NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on public and may be impacted: - @ardibos/taekbos 1.1.4 - @conlan2/cmpt315as2 =1.0.0, =1.0.8, =0.1.0, =0.1.2 - weektwoabc 1.0.0 - wjwrk9 1.0.1 - yyjchhym 1.0.0 Source cves: unknown C...

@27works/posto (2.0.2), jstransformer-bracket-template (0.0.1) +1 more potentially affected by unknown CVE via bracket-template (1.1.5)

bracket-template NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bracket-template and may be impacted: - @27works/posto 2.0.2 - jstransformer-bracket-template 0.0.1 - roo-bid =0.0.5, =0.0.7 Source cves: unknown CVE Source advisory:...

@1hive/wrapper (5.0.0), @300k/dydx-v3-client (>=1.14.2, <=1.14.7) +505 more potentially affected by unknown CVE via web3 (>=1.0.0-beta.24, <=1.5.2)

web3 NPM version =1.0.0-beta.24, =1.14.2, =0.0.3, =0.1.2, =1.4.3, =1.1.0-1, =5.0.0, =0.5.0, =1.61.0, =0.0.1-beta, =0.24.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-27V7-QHFV-RQQ8...

dotnetreport (>=4.3.0, <=5.4.2) potentially affected by unknown CVE via bootbox (5.3.4)

bootbox NPM version 5.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on bootbox and may be impacted: - dotnetreport =4.3.0, =5.4.2 Source cves: unknown CVE Source advisory: OSV:GHSA-87MG-H5R3-HW88...

@dashlane/dep-cache (>=0.10.2, <=0.10.7), @evops/mongodb-backup (>=2.0.4, <=2.0.7) +46 more potentially affected by CVE-2019-13173 via fstream (>=1.0.1, <=1.0.11)

fstream NPM version =1.0.1, =0.10.2, =2.0.4, =1.2.2, =2.0.6, =0.0.5, =1.2.3, =0.0.20, =0.0.5, =0.3.4, =1.0.0, =2.5.15, =2.5.22 and more Source cves: CVE-2019-13173 Source advisory: OSV:GHSA-XF7W-R453-M56C...

cmd-resume (>=3.0.72, <=3.1.0) potentially affected by unknown CVE via jquery.terminal (1.4.3)

jquery.terminal NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on jquery.terminal and may be impacted: - cmd-resume =3.0.72, =3.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-2HWP-G4G7-MWWJ...

athena-beta (>=1.0.0, <=2.0.4), athena-html (>=1.2.10, <=2.0.0-alpha.8) +8 more potentially affected by unknown CVE via concat-with-sourcemaps (>=1.0.0, <=1.0.4)

concat-with-sourcemaps NPM version =1.0.0, =1.0.0, =1.2.10, =1.0.0, =1.0.1, =0.0.2, =0.3.0, =1.0.0, =1.0.8 - peachhtmlproduction 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-2XV3-H762-CCXV...

krueger-ui (>=1.0.0, <=1.0.2) potentially affected by CVE-2019-12313 via shave (2.1.3)

shave NPM version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on shave and may be impacted: - krueger-ui =1.0.0, =1.0.2 Source cves: CVE-2019-12313 Source advisory: OSV:GHSA-GH4G-3GM9-5WRQ...

@abdelilah/react-rich-text (0.0.1), @bemit/flood-admin (>=0.1.2, <=0.1.6) +36 more potentially affected by CVE-2019-12043 via remarkable (>=1.3.0, <=1.7.1)

remarkable NPM version =1.3.0, =0.1.2, =0.1.0, =0.1.0, =4.0.0--beta.10.0, =5.17.1, =1.1.2, =0.0.23, =0.0.23, =0.1.0, =2.0.0-beta0, =0.1.9, =0.2.1 - docpack 1.0.0-alpha and more Source cves: CVE-2019-12043 Source advisory: OSV:GHSA-36M4-6V6M-4VPR...

verdaccio-gitlab (>=2.0.0, <=2.2.0) potentially affected by CVE-2019-14772 via verdaccio (>=3.6.0, <=3.8.6)

verdaccio NPM version =3.6.0, =2.0.0, =2.2.0 Source cves: CVE-2019-14772 Source advisory: OSV:GHSA-78J5-GCMF-VQC8...

@troveng/trov-web-config (1.0.5), @zce/ghost-cli (>=1.9.7, <=1.9.8) +13 more potentially affected by unknown CVE via generate-password (>=1.3.0, <=1.4.0)

generate-password NPM version =1.3.0, =1.9.7, =1.0.2, =1.16.0, =0.1.4, =0.1.11, =1.4.0, =0.6.0, =0.9.11, =0.0.2, =1.6.0, =4.20.9, =0.9.0, =1.0.79, =1.4.0, =1.11.0 Source cves: unknown CVE Source advisory: OSV:GHSA-6QQF-VVCR-7QRV...

@aliens-lyon.fr/ep_mypads (1.7.24), @buzuli/all (>=1.0.0, <=1.1.0) +811 more potentially affected by unknown CVE via mysql (>=2.0.0, <=2.13.0)

mysql NPM version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2, =4.49.0, =1.0.0, =3.2.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5F7M-MMPC-QHH4...

@500tech/react-scripts (>=3.0.0-alpha.8, <=5.1.0), @51npm/freedom-middleware-webpack4 (>=1.0.0, <=1.1.0) +149 more potentially affected by unknown CVE via webpack-bundle-analyzer (>=3.0.1, <=3.2.0)

webpack-bundle-analyzer NPM version =3.0.1, =3.0.0-alpha.8, =1.0.0, =0.9.0, =0.0.1-canary.49, =0.1.0, =9.0.0, =2.0.0-1, =1.12.0, =0.3.0, =1.0.0-1.0.0-beta.34.0, =0.1.0, =6.0.0-alpha.1, =0.0.1, =1.0.0, =0.0.1-alpha.151, =0.0.1-alpha.153 and more Source cves: unknown CVE Source advisory:...

libp2p-dns (>=0.3.0, <=0.4.0), libp2p-floodsub (>=0.3.0, <=0.4.0) +13 more potentially affected by CVE-2019-15545 via libp2p-core (>=0.3.4, <=0.4.0)

libp2p-core CARGO version =0.3.4, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.4.0 Source cves: CVE-2019-15545 Source advisory: OSV:RUSTSEC-2019-0004...

simple-mqtt (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (4.1.1)

mqtt-packet NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - simple-mqtt 1.0.0 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

iopa-mqtt (>=0.2.0, <=1.3.3), iopa-mqtt-packet (>=0.2.16, <=1.3.7) +2 more potentially affected by CVE-2019-5432 via mqtt-packet (>=3.2.0, <=3.4.3)

mqtt-packet NPM version =3.2.0, =0.2.0, =0.2.16, =1.0.0, =1.0.1 - mqtt-stack 0.0.2 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

mqtt-super (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (6.0.0)

mqtt-packet NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - mqtt-super 1.0.0 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

@levi-m/ide-kit (10.1.0-beta.14), dltsign-mobile (0.1.0) +8 more potentially affected by CVE-2018-19048 via simditor (>=2.1.14, <=2.3.21)

simditor NPM version =2.1.14, =1.0.91, =0.0.1, =2.0.2, =1.0.1, =2.0.4, =0.1.7, =1.1.24 Source cves: CVE-2018-19048 Source advisory: OSV:GHSA-8V67-X8Q5-3X3G...

buf-ref-reader (0.3.0), buf_redux (>=0.7.0, <=0.8.1) +9 more potentially affected by CVE-2019-15543 via slice-deque (0.1.16)

slice-deque CARGO version 0.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on slice-deque and may be impacted: - buf-ref-reader 0.3.0 - bufredux =0.7.0, =0.1.0, =0.2.0, =0.1.0, =0.12.0, =0.14.0 - reactive-rs 0.1.1 - rtplot 0.2.0 - seqio 0.3.0 -...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +136 more potentially affected by CVE-2018-20835 via tar-fs (>=1.0.0, <=1.16.0)

tar-fs NPM version =1.0.0, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.1.3, =0.0.65, =1.8.2 and more Source cves: CVE-2018-20835 Source advisory: OSV:GHSA-X2MC-8FGJ-3WMR...