cork (>=0.1.0 <=0.2.0), dvc (>=0.8.2 <=0.8.6) +12 more potentially affected by CVE-2019-16784 via pyinstaller (>=3.0.0 <=3.5.0)

pyinstaller PYPI version =3.0.0, =0.1.0, =0.8.2, =1.0.0.dev0, =2019.6.5, =0.1.22, =0.9.94, =0.0.1, =0.4.0, =0.1.0, =1.0.1, =0.2.0, =0.7.1 Source cves: CVE-2019-16784 Source advisory: OSV:PYSEC-2020-175...

django-saml2-auth (>=1.0.2 <=1.1.4), django-saml2-auth-custom (>=1.0.0 <=1.0.4) +6 more potentially affected by CVE-2020-5390 via pysaml2 (>=4.0.2 <=4.8.0)

pysaml2 PYPI version =4.0.2, =1.0.2, =1.0.0, =0.16.11, =1.1.1, =12.0.2, =0.100.2, =0.6.1, =3.4.8 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...

ch.dvbern.oss.cdipersistence:cdi-persistence-test (=2.0.7), club.javafamily:notification-manager-all (>=2.3.2-beta.6 <=2.3.2-beta.14) +668 more potentially affected by CVE-2019-10219 via org.hibernate:hibernate-validator (>=6.0.0.Beta2 <=6.0.17.Final)

org.hibernate:hibernate-validator MAVEN version =6.0.0.Beta2, =2.3.2-beta.6, =2.3.2-beta.5, =0.8.2-release, =0.6-release, =0.8.2-release, =0.8.0-release, =0.8.2.9-release, =0.8.4.0-release, =0.8.0-release, =0.6-release, =0.8.0-release, =0.6-release, =0.6-release, =0.8.4.4-release and more Source...

NeteaseCloudMusicRustApi (=0.1.1), RustMusic (=0.1.0) +171 more potentially affected by CVE-2020-35899 via actix-service (>=0.1.6 <=0.4.2)

actix-service CARGO version =0.1.6, =0.8.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-35899 Source advisory: OSV:RUSTSEC-2020-0046...

@xapp/stentor (>=1.13.9 <=1.15.0) potentially affected by CVE-2019-10777 via aws-lambda (>=1.0.0 <=1.0.4)

aws-lambda NPM version =1.0.0, =1.13.9, =1.15.0 Source cves: CVE-2019-10777 Source advisory: SNYK:JS-AWSLAMBDA-540839...

org.zenframework.z8.dependencies:z8-dependencies-commons (=2.0) potentially affected by CVE-2019-17571 via org.zenframework.z8.dependencies.commons:log4j-1.2.17 (=2.0)

org.zenframework.z8.dependencies.commons:log4j-1.2.17 MAVEN version =2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.zenframework.z8.dependencies.commons:log4j-1.2.17 and may be impacted: - org.zenframework.z8.dependencies:z8-dependencies-commo...

bem-register (>=1.0.0 <=1.0.5), itstep_server (=0.0.1) +4 more potentially affected by CVE-2019-10758 via mongo-express (>=0.19.0 <=0.53.0)

mongo-express NPM version =0.19.0, =1.0.0, =0.1.1, =1.0.0, =1.5.0, =1.6.1 Source cves: CVE-2019-10758 Source advisory: OSV:GHSA-H47J-HC6X-H3QQ...

acclaim-badges (=0.1.0), admindjango-ckeditor-blog (=0.1.0) +158 more potentially affected by CVE-2019-19844 via django (>=1.10.0 <=1.11.26)

django PYPI version =1.10.0, =0.2.0.dev20181221, =0.1.0b2696.post0.dev1, =0.2.1, =3.1.4, =2.0.0, =0.3.1, =0.0.19, =0.0.24 and more Source cves: CVE-2019-19844 Source advisory: OSV:PYSEC-2019-16...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +35 more potentially affected by CVE-2019-16778 via tensorflow-gpu (>=1.10.1 <=1.14.0)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.1.0, =1.0.0, =0.2.3, =0.0.1, =0.0.7, =0.1.0, =0.6.0, =0.0.1, =0.0.10 and more Source cves: CVE-2019-16778 Source advisory: OSV:PYSEC-2019-234...

adpred (>=1.1.2 <=1.2.7), aether (>=0.3.26 <=0.3.32) +166 more potentially affected by CVE-2019-16778 via tensorflow (>=1.0.1 <=1.14.0)

tensorflow PYPI version =1.0.1, =1.1.2, =0.3.26, =0.2.0, =0.4.2, =0.1.1, =1.0.23, =0.1.68, =0.0.4, =0.0.5 and more Source cves: CVE-2019-16778 Source advisory: OSV:PYSEC-2019-209...

@achil/parcel-bundler (>=1.11.1 <=1.12.34), @acies/core (>=1.2.89 <=1.2.215) +134 more potentially affected by CVE-2019-10769 via safer-eval (>=1.2.3 <=1.3.6)

safer-eval NPM version =1.2.3, =1.11.1, =1.2.89, =0.1.0, =4.0.0, =4.1.0, =4.1.2, =0.9.2-pre.41, =2.0.2, =1.0.0, =1.9.3, =0.3.0, =1.12.3, =1.0.0, =0.0.1, =3.4.4 and more Source cves: CVE-2019-10769 Source advisory: OSV:GHSA-V63X-XC9J-HHVQ...

@achil/parcel-bundler (>=1.11.1 <=1.12.34), @acrylic/acrylic (>=0.1.0 <=0.1.2) +157 more potentially affected by CVE-2019-16772 via serialize-to-js (>=0.5.0 <=2.0.1)

serialize-to-js NPM version =0.5.0, =1.11.1, =0.1.0, =4.0.0, =4.1.0, =4.1.2, =0.9.2-pre.41, =2.0.2, =1.0.0, =1.9.3, =0.3.0, =1.12.3, =1.0.0, =0.0.1, =3.2.2, =3.2.4 and more Source cves: CVE-2019-16772 Source advisory: OSV:GHSA-3FJQ-93XJ-3F3F...

django-aesfield (=3.0.0), django-autoconfig (=0.8.0) +13 more potentially affected by CVE-2019-19118 via django (>=2.1.0 <=2.1.12)

django PYPI version =2.1.0, =0.1.0, =0.1.0, =0.3.0, =1.7.3, =0.0.3, =1.1.0, =0.1.2, =0.1.1, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2019-19118 Source advisory: OSV:GHSA-HVMF-R92R-27HR...

iobroker.mieleathome (=0.0.4), t-motion-detector (=0.5.42) potentially affected by CVE-2019-10767 via iobroker.js-controller (=1.5.14)

iobroker.js-controller NPM version =1.5.14 is affected by a known vulnerability. The following packages have a transitive dependency on iobroker.js-controller and may be impacted: - iobroker.mieleathome =0.0.4 - t-motion-detector =0.5.42 Source cves: CVE-2019-10767 Source advisory:...

aeropress (=0.0.5), allennlp-datalawyer (>=0.1.0 <=0.1.10) +34 more potentially affected by CVE-2019-19275 via typed-ast (>=0.6.3 <=1.3.1)

typed-ast PYPI version =0.6.3, =0.1.0, =1.0.1, =1.0.17, =2.4.1, =0.1.1, =1.0.0, =2.2.2b1, =0.31.0, =1.3.5, =1.0.0, =0.3.4, =0.9.94, =2.0.3 - hmt-escrow =0.2.0rc1 and more Source cves: CVE-2019-19275 Source advisory: OSV:PYSEC-2019-131...

datamorph-workflow-generator (=0.0.2), i2b2-import (>=0.0.1 <=1.5.34) +1 more potentially affected by CVE-2019-12417 via airflow (=0.6.0)

airflow PYPI version =0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on airflow and may be impacted: - datamorph-workflow-generator =0.0.2 - i2b2-import =0.0.1, =1.5.34 - pandasdb =0.0.10 Source cves: CVE-2019-12417 Source advisory:...

maidsafe_client (>=0.1.0 <=0.1.2), maidsafe_types (>=0.0.9 <=0.2.3) +6 more potentially affected by unknown CVE via crust (>=0.0.3 <=0.2.12)

crust CARGO version =0.0.3, =0.1.0, =0.0.9, =0.0.3, =0.0.6, =0.1.4, =0.1.0, =0.1.0, =0.1.5, =0.1.6 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0032...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.2.7 <=4.3.0), com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4 <=0.5) +88 more potentially affected by CVE-2019-10770 via io.ratpack:ratpack-core (>=0.9.10 <=1.7.5)

io.ratpack:ratpack-core MAVEN version =0.9.10, =2.2.7, =0.4, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.2, =1.2, =1.3, =1.1, =1.1, =1.5, =1.1, =1.8 and more Source cves: CVE-2019-10770 Source advisory: SNYK:JAVA-IORATPACK-534882...

DesignerHelper-rs (>=0.1.0 <=0.1.2), GetPDB (>=0.1.0 <=1.0.1) +6474 more potentially affected by CVE-2019-25010 +1 more via failure (>=0.1.0 <=0.1.8)

failure CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.4.0 - abscissacore =0.4.0 and more Source cves: CVE-2019-25010, CVE-2020-25575 Source advisory: OSV:RUSTSEC-2019-0036...

azureml-designer-classic-modules (>=0.0.105 <=0.0.112), azureml-designer-core (>=0.0.21 <=0.0.29) +36 more potentially affected by CVE-2019-12410 via pyarrow (>=0.12.0 <=0.14.1)

pyarrow PYPI version =0.12.0, =0.0.105, =0.0.21, =0.0.17, =0.0.36, =0.0.9, =1.0.48.1, =0.1.0, =1.4.2, =3.0.20190405035157, =0.1.0, =0.1.1, =1.13.4, =1.15.1 and more Source cves: CVE-2019-12410 Source advisory: OSV:PYSEC-2019-196...