mqtt-super (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (6.0.0)

mqtt-packet NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - mqtt-super 1.0.0 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...

simple-mqtt (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (4.1.1)

mqtt-packet NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - simple-mqtt 1.0.0 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...

000demo (>=1.0.0, <=1.1.0), 03-npm-abc (>=1.0.0, <=1.1.0) +6198 more potentially affected by CVE-2019-11358 via jquery (>=1.5.1, <=3.3.1)

jquery NPM version =1.5.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.2.1, =0.1.75, =0.2.0 - 4.yarntest 1.0.3 - 4design 0.0.1 and more Source cves: CVE-2019-11358 Source advisory: OSV:GHSA-6C3J-C64M-QHGQ...

aho-corasick (>=0.6.7, <=0.6.10), aigc_secp256k1zkp (0.7.12) +131 more potentially affected by CVE-2020-25576 via rand_core (>=0.1.0, <=0.2.2)

randcore CARGO version =0.1.0, =0.6.7, =0.7.0, =0.7.1, =1.0.0, =2.0.1, =1.0.0, =1.2.5, =0.4.0, =0.1.0, =0.3.0 and more Source cves: CVE-2020-25576 Source advisory: OSV:RUSTSEC-2019-0035...

@nodefony/sequelize-bundle (>=4.0.0-beta.2, <=4.2.0-beta.2), @sequelizejs/next (5.0.0-beta.16) +5 more potentially affected by CVE-2019-11069 via sequelize (>=5.0.0-beta.11, <=5.2.3)

sequelize NPM version =5.0.0-beta.11, =4.0.0-beta.2, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =1.0.0-beta1, =1.0.0-beta2.2 Source cves: CVE-2019-11069 Source advisory: OSV:GHSA-2777-2VQ8-C4V4...

@gkatsev/grunt-harp (>=0.18.0, <=0.19.0), @mobify/documentation-theme (>=1.11.3, <=2.0.0-preview.2-dev) +21 more potentially affected by CVE-2019-5437 via harp (>=0.9.5, <=0.32.0)

harp NPM version =0.9.5, =0.18.0, =1.11.3, =1.11.3, =0.0.3, =0.0.8-pre2, =0.0.1, =0.0.1, =0.0.1-1, =0.0.1, =0.1.0, =0.1.0, =0.2.9 - n-p-m 1.1.0 and more Source cves: CVE-2019-5437 Source advisory: SNYK:JS-HARP-174149...

accepted (>=0.2.0, <=0.3.2), aigc_api (5.1.2) +505 more potentially affected by unknown CVE via typemap (0.3.3)

typemap CARGO version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0039...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2019-10260 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2019-10260 Source advisory: OSV:GHSA-72P5-2R6G-FM6V...

chainsql-remixd (1.0.0), fusuma (0.11.4) +1 more potentially affected by CVE-2019-5417 via serve (7.0.0)

serve NPM version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on serve and may be impacted: - chainsql-remixd 1.0.0 - fusuma 0.11.4 - remixd =0.1.8-alpha.11, =0.1.8-alpha.16 Source cves: CVE-2019-5417 Source advisory: OSV:GHSA-XG75-3277-GVVJ...

@jpmorganchase/perspective-viewer-highcharts (>=0.1.7, <=0.1.13), angular-universe (>=0.0.1, <=0.0.2) +3 more potentially affected by CVE-2018-20801 via highcharts (>=6.0.1, <=6.0.7)

highcharts NPM version =6.0.1, =0.1.7, =0.0.1, =1.1.0, =2.1.0 - web-platform-library 0.0.2 - zeppelin-highmaps 1.0.0 Source cves: CVE-2018-20801 Source advisory: OSV:GHSA-XMC8-CJFR-PHX3...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2019-10760 via safer-eval (1.2.3)

safer-eval NPM version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on safer-eval and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2019-10760 Source advisory: SNYK:JS-SAFEREVAL-473029...

de.learnlib.distribution:learnlib-distribution (0.15.0), io.github.lhogie:onlinegraph (0.0.1) +9 more potentially affected by unknown CVE via com.paypal.digraph:digraph-parser (1.0)

com.paypal.digraph:digraph-parser MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.paypal.digraph:digraph-parser and may be impacted: - de.learnlib.distribution:learnlib-distribution 0.15.0 - io.github.lhogie:onlinegraph 0.0.1 -...

1tp (>=0.0.1, <=0.11.2), @balderdash/sails-edge (>=0.12.0-edge9, <=0.50.0) +774 more potentially affected by CVE-2016-10542 via ws (>=1.0.0, <=1.1.0)

ws NPM version =1.0.0, =0.0.1, =0.12.0-edge9, =0.0.1, =1.8.4, =1.0.0, =1.0.30, =0.0.5, =1.1.1, =0.1.0, =1.0.14, =3.0.2 and more Source cves: CVE-2016-10542 Source advisory: OSV:GHSA-6663-C963-2GQG...

@nlammertyn/electrify-vidtext (>=1.0.0, <=1.1.15), dhaptfccui (0.0.67) +27 more potentially affected by CVE-2016-10534 via electron-packager (>=5.2.1, <=6.0.2)

electron-packager NPM version =5.2.1, =1.0.0, =0.0.1, =2.0.0, =3.1.2, =0.1.0, =0.0.2, =0.1.0, =0.0.1, =0.0.1, =1.0.0, =1.0.1, =0.1.0, =0.4.0, =1.4.0 and more Source cves: CVE-2016-10534 Source advisory: OSV:GHSA-Q43M-FFWR-RPCC...

@arakoodev/edgechains.js (>=0.25.0, <=0.30.1), @autonomousorganization/ao-cli (0.0.6) +1024 more potentially affected by CVE-2016-10531 via marked (>=0.0.1, <=0.3.5)

marked NPM version =0.0.1, =0.25.0, =3.3.1, =0.0.1, =0.0.0, =0.1.0, =2.0.5, =0.2.0, =1.0.13, =1.0.35 - @fundcount/fc-keystone 0.3.21-7 and more Source cves: CVE-2016-10531 Source advisory: OSV:GHSA-VFVF-MQQ8-RWQC...

@dequelabs/amaze-tdd (>=0.2.9, <=0.3.2), @holisticon/angularjs-common (>=0.2.0-23, <=0.5.3) +15 more potentially affected by CVE-2016-10579 via chromedriver (>=2.10.0, <=2.25.1)

chromedriver NPM version =2.10.0, =0.2.9, =0.2.0-23, =0.2.6, =0.0.5, =0.0.10, =1.3.2, =0.0.1, =0.1.0, =1.0.0, =1.3.9, =0.0.1, =1.4.23, =4.0.0 - testarmada-performance-reporter 1.1.1 and more Source cves: CVE-2016-10579 Source advisory: OSV:GHSA-JH5W-6964-X5CF...

scalajs-standalone-bin (>=0.1.0, <=0.4.3), tpr (>=0.2.0, <=0.2.2) potentially affected by CVE-2016-10627 via scala-bin (>=0.2.1, <=0.3.3)

scala-bin NPM version =0.2.1, =0.1.0, =0.2.0, =0.2.2 Source cves: CVE-2016-10627 Source advisory: OSV:GHSA-3VV5-42WR-M32G...

node-qrcode (>=0.0.1, <=0.0.4), ocast-dongletv (>=1.0.1, <=1.1.0) potentially affected by CVE-2016-10618 via node-browser (>=0.0.1, <=0.0.3)

node-browser NPM version =0.0.1, =0.0.1, =1.0.1, =1.1.0 Source cves: CVE-2016-10618 Source advisory: OSV:GHSA-8R98-RQG5-4VM3...

@loke/mysql-orm (1.12.0), bell.js (>=2.0.0-alpha.1, <=2.0.5) +31 more potentially affected by CVE-2016-10550 via sequelize (>=3.0.1, <=3.14.2)

sequelize NPM version =3.0.1, =2.0.0-alpha.1, =0.1.0, =0.0.1, =10.0.2, =0.0.1, =0.1.0, =1.0.2, =0.0.1, =5.0.0-rc, =0.3.0, =0.8.6 - passport-local-mysequelize 0.0.1 - passport-local-sequelize 0.6.0 and more Source cves: CVE-2016-10550 Source advisory: OSV:GHSA-98PQ-PMW9-4GPM...

alke (>=0.0.1, <=0.0.2), audit.sequelize (0.0.1) +21 more potentially affected by CVE-2016-10554 via sequelize (>=1.0.2, <=1.6.0-beta4)

sequelize NPM version =1.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.7, =0.5.0-beta.2, =0.1.2, =0.0.1, =0.0.1, =0.3.0, =0.3.0, =0.0.3, =0.1.0, =0.1.2 and more Source cves: CVE-2016-10554 Source advisory: OSV:GHSA-X2JC-PWFJ-H9P3...