@agrc/helpers (>=1.0.0 <=1.0.1), @dojo/interop (>=4.0.0 <=7.0.0) +3 more potentially affected by CVE-2010-2273 via dojo (=1.13.0)

dojo NPM version =1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojo and may be impacted: - @agrc/helpers =1.0.0, =4.0.0, =0.1.10, =0.1.12 - dijit =1.13.0 - dojox =1.13.0 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

dijit (>=1.10.0 <=1.10.1) potentially affected by CVE-2010-2273 via dojo (>=1.10.0 <=1.10.1)

dojo NPM version =1.10.0, =1.10.0, =1.10.1 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

acuity (=6.18.0), acuitypro (=6.18.0) +4 more potentially affected by CVE-2019-16225 via lmdb (>=0.92.0 <=0.97.0)

lmdb PYPI version =0.92.0, =0.1.13, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16225 Source advisory: OSV:PYSEC-2019-237...

acuity (=6.18.0), acuitypro (=6.18.0) +4 more potentially affected by CVE-2019-16226 via lmdb (>=0.92.0 <=0.97.0)

lmdb PYPI version =0.92.0, =0.1.13, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16226 Source advisory: OSV:PYSEC-2019-238...

acuity (=6.18.0), acuitypro (=6.18.0) +4 more potentially affected by CVE-2019-16228 via lmdb (>=0.92.0 <=0.97.0)

lmdb PYPI version =0.92.0, =0.1.13, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16228 Source advisory: SNYK:PYTHON-LMDB-11959241...

apidocs-cli (>=0.0.0 <=2.0.1), assemble-init (=0.1.0) +80 more potentially affected by CVE-2019-10746 via mixin-deep (>=0.1.0 <=1.0.1)

mixin-deep NPM version =0.1.0, =0.0.0, =0.1.0-beta.2, =0.1.0, =0.1.1, =0.1.2, =0.0.1, =0.0.1, =0.1.0, =1.0.2, =0.0.5, =0.2.2, =0.3.0 - create-component =0.1.1 and more Source cves: CVE-2019-10746 Source advisory: OSV:GHSA-FHJF-83WG-R2J9...

@akashic/engine-files-reftest (>=3.3.20 <=3.4.1-beta.4), @akumzy/vue-cli-plugin-electron-builder (>=0.0.1 <=0.0.4) +569 more potentially affected by unknown CVE via rgb2hex (>=0.1.0 <=0.1.10)

rgb2hex NPM version =0.1.0, =3.3.20, =0.0.1, =0.70.1, =3.5.0, =3.4.1-beta.0, =2.4.1, =0.5.9, =0.1.0, =5.0.0-beta.0, =1.0.3, =1.2.3, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-65P8-3HM4-H9H8...

alibaba-suanfa (=1.0.0), annotald (>=1.3.1 <=1.3.8) +75 more potentially affected by CVE-2019-14751 via nltk (>=2.0.4 <=3.4.4)

nltk PYPI version =2.0.4, =1.3.1, =0.0.1, =1.0.0.dev4, =2.0.0, =0.2.6, =0.2.0, =2.1.0, =0.0.5.1, =0.7.1 and more Source cves: CVE-2019-14751 Source advisory: OSV:PYSEC-2019-106...

@peak-stone/vue-admin (>=1.0.1 <=2.1.1) potentially affected by CVE-2019-10745 via assign-deep (=1.0.0)

assign-deep NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on assign-deep and may be impacted: - @peak-stone/vue-admin =1.0.1, =2.1.1 Source cves: CVE-2019-10745 Source advisory: OSV:GHSA-66RH-8FW6-59Q6...

unfurl (>=0.0.1.dev144 <=0.0.1.dev220) potentially affected by CVE-2019-15149 via mitogen (=0.2.7)

mitogen PYPI version =0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on mitogen and may be impacted: - unfurl =0.0.1.dev144, =0.0.1.dev220 Source cves: CVE-2019-15149 Source advisory: OSV:PYSEC-2019-104...

ayakashi (>=1.0.0-beta3 <=1.0.0-beta5.2), cplotter-validator (>=0.0.1 <=0.0.2) +7 more potentially affected by CVE-2019-10752 via sequelize (>=5.10.0 <=5.14.0)

sequelize NPM version =5.10.0, =1.0.0-beta3, =0.0.1, =2.0.0-alpha.2, =1.0.0-beta.15, =2.0.0, =1.0.8, =1.0.9 Source cves: CVE-2019-10752 Source advisory: SNYK:JS-SEQUELIZE-459751...

a3m (=0.1.0), aa-fleet (>=1.0.0 <=1.1.0) +654 more potentially affected by CVE-2019-14234 via django (>=2.2.0 <=2.2.3)

django PYPI version =2.2.0, =1.0.0, =1.1.12, =0.1.0a0, =0.1.0a0, =1.2.0a1, =2.0.0, =0.1.0, =1.1.0, =1.4.1, =1.6.0 - aiida-crystal17 =0.11.0 and more Source cves: CVE-2019-14234 Source advisory: OSV:GHSA-6R97-CJ55-9HRQ...

cloud.testload:jmeter-clickhouse-listener (=2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (=0.0.1) +173 more potentially affected by CVE-2019-10093 via org.apache.tika:tika-parsers (>=1.19 <=1.21)

org.apache.tika:tika-parsers MAVEN version =1.19, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =0.0.1, =1.1.1, =0.0.1, =1.1.6 - com.gitee.kamismile:stone-common-ex =1.1.3 and more Source cves: CVE-2019-10093 Source advisory: OSV:GHSA-4MQ5-MJ59-QQ9C...

admindjango-ckeditor-blog (=0.1.0), aileen (>=0.2.0.dev20181221 <=0.2.1) +43 more potentially affected by CVE-2019-14232 via django (>=1.11.0 <=1.11.22)

django PYPI version =1.11.0, =0.2.0.dev20181221, =0.0.19, =4.4.1, =1.0.0, =0.6.0, =0.5.0, =0.1.0, =1.0.0, =1.0.1 - django-defender =0.5.0 and more Source cves: CVE-2019-14232 Source advisory: OSV:GHSA-C4QH-4VGV-QC6G...

a3m (=0.1.0), aa-fleet (>=1.0.0 <=1.1.0) +654 more potentially affected by CVE-2019-14233 via django (>=2.2.0 <=2.2.3)

django PYPI version =2.2.0, =1.0.0, =1.1.12, =0.1.0a0, =0.1.0a0, =1.2.0a1, =2.0.0, =0.1.0, =1.1.0, =1.4.1, =1.6.0 - aiida-crystal17 =0.11.0 and more Source cves: CVE-2019-14233 Source advisory: OSV:PYSEC-2019-12...

admindjango-ckeditor-blog (=0.1.0), aileen (>=0.2.0.dev20181221 <=0.2.1) +43 more potentially affected by CVE-2019-14232 via django (>=1.11.0 <=1.11.22)

django PYPI version =1.11.0, =0.2.0.dev20181221, =0.0.19, =4.4.1, =1.0.0, =0.6.0, =0.5.0, =0.1.0, =1.0.0, =1.0.1 - django-defender =0.5.0 and more Source cves: CVE-2019-14232 Source advisory: OSV:PYSEC-2019-11...

aero.champ:cargojson (=1.0), ai.active:webhook-sdk (>=1.0.0 <=1.0.4) +30803 more potentially affected by CVE-2019-14439 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0 <=2.9.9.1)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =1.0.0, =4.4.0.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =0.1.2, =0.1.7 - ai.genauth:genauth-java-sdk =3.1.11 - ai.grakn.kgms:client =1.4.3 and more Source cves: CVE-2019-14439 Sour...

invenio (>=3.0.0 <=3.1.0.dev20181106) potentially affected by CVE-2019-1020006 via invenio-app (=1.0.6)

invenio-app PYPI version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on invenio-app and may be impacted: - invenio =3.0.0, =3.1.0.dev20181106 Source cves: CVE-2019-1020006 Source advisory: OSV:PYSEC-2019-24...

aztarna (=1.0.0), spruce-sniffer (>=0.1.2 <=0.1.5) potentially affected by CVE-2019-1010142 via scapy (=2.4.0)

scapy PYPI version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on scapy and may be impacted: - aztarna =1.0.0 - spruce-sniffer =0.1.2, =0.1.5 Source cves: CVE-2019-1010142 Source advisory: OSV:GHSA-MPF2-Q34C-FC6J...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2019-1010259 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2019-1010259 Source advisory: OSV:PYSEC-2019-119...