buildbot-legacy-slack-adapter (>=1.0.0 <=1.0.1) potentially affected by CVE-2019-12300 via buildbot (=1.3.0)

buildbot PYPI version =1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on buildbot and may be impacted: - buildbot-legacy-slack-adapter =1.0.0, =1.0.1 Source cves: CVE-2019-12300 Source advisory: OSV:PYSEC-2019-6...

ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), ai.databand:dbnd-agent (>=0.42.1 <=0.80.6) +5760 more potentially affected by CVE-2019-12086 via com.fasterxml.jackson.core:jackson-databind (>=2.7.0 <=2.7.9.5)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.7.0, =0.3.0, =0.42.1, =0.42.1, =0.40.2, =0.42.1, =0.2, =0.8.0, =3.3.3, =0.0.1, =0.0.2, =0.0.3 - at.ac.ait.lablink.clients:sync =0.0.1 - at.ac.ait.lablink:core =0.0.1 and more Source cves: CVE-2019-12086 Source advisory:...

cn.home1:oss-configserver (>=1.0.6.OSS <=1.0.7.OSS), cn.home1:spring-cloud-config-monitor (>=0.0.1 <=1.0.1.U1) +166 more potentially affected by CVE-2019-3799 via org.springframework.cloud:spring-cloud-config-server (>=1.1.0.RELEASE <=1.4.5.RELEASE)

org.springframework.cloud:spring-cloud-config-server MAVEN version =1.1.0.RELEASE, =1.0.6.OSS, =0.0.1, =0.0.1, =1.1.0-RELEASE, =1.0.0, =1.0.0, =1.5.0-Beta, =0.8.3, =0.8.3, =0.8.3, =0.8.3, =0.10.0 and more Source cves: CVE-2019-3799 Source advisory: OSV:GHSA-4X49-W62V-76Q7...

simple-mqtt (=1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (=4.1.1)

mqtt-packet NPM version =4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - simple-mqtt =1.0.0 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

4everland-pinning (>=1.0.4 <=1.0.10), @0x5e/homebridge-tuya-platform (>=1.6.0 <=1.7.0-beta.58) +3248 more potentially affected by CVE-2019-5432 via mqtt-packet (>=6.0.0 <=6.10.0)

mqtt-packet NPM version =6.0.0, =1.0.4, =1.6.0, =1.0.1, =0.2.0, =0.4.19, =0.12.0, =0.1.5, =0.1.8, =0.1.3, =0.12.0, =0.1.0, =0.8.3, =0.12.0, =0.12.0, =0.12.0, =0.14.4 and more Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

ai.hyacinth.framework:core-service-jpa-support (>=0.5.0 <=0.5.21), ai.hyacinth.framework:core-service-trigger-server (>=0.5.0 <=0.5.21) +644 more potentially affected by CVE-2019-3797 via org.springframework.data:spring-data-jpa (>=2.1.0.RELEASE <=2.1.5.RELEASE)

org.springframework.data:spring-data-jpa MAVEN version =2.1.0.RELEASE, =0.5.0, =0.5.0, =0.0.4, =0.0.8 and more Source cves: CVE-2019-3797 Source advisory: OSV:GHSA-J...

ch.sharedvd.tipi:tipi-engine (=2.0.0), cn.jbone:jbone-common (=1.0.0) +158 more potentially affected by CVE-2019-3797 via org.springframework.data:spring-data-jpa (>=2.0.0.RELEASE <=2.0.13.RELEASE)

org.springframework.data:spring-data-jpa MAVEN version =2.0.0.RELEASE, =1.2.0, =0.1.0, =1.3.0, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.3 and more Source cves: CVE-2019-3797 Source advisory: OSV:GHSA-JGMR-WRWX-MGFJ...

com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4 <=0.5), gradle.plugin.com.bytekast:serverless-local-apigateway (>=0.4 <=0.5) +1 more potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (>=0.9.0 <=1.6.0)

io.ratpack:ratpack-groovy MAVEN version =0.9.0, =0.4, =0.4, =0.9.0, =1.10.0-milestone-39 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0 <=5.5.0) +84 more potentially affected by CVE-2018-17201 via org.apache.sanselan:sanselan (=0.97-incubator)

org.apache.sanselan:sanselan MAVEN version =0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha,...

com.github.oscerd:camel-cassandra (=2.23.0), com.playtika.sleuth:sleuth-camel-core (=1.0.2) +664 more potentially affected by CVE-2019-0194 via org.apache.camel:camel-core (=2.23.0)

org.apache.camel:camel-core MAVEN version =2.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.github.oscerd:camel-cassandra =2.23.0 - com.playtika.sleuth:sleuth-camel-core =1.0.2 -...

0-dd-trace-init-first-production (>=1.0.0 <=1.0.1), 003-gas-convert (=1.0.1) +19168 more potentially affected by CVE-2018-20834 via tar (>=3.0.0 <=4.4.19)

tar NPM version =3.0.0, =1.0.0, =2.5.0, =1.0.0, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =1.0.0, =1.0.4, =1.0.0, =1.0.2 and more Source cves: CVE-2018-20834 Source advisory: OSV:GHSA-J44M-QM6P-HP7M...

0.8.18-p11 (=0.8.18-p12), 37fis (>=1.0.0 <=1.0.2) +4789 more potentially affected by CVE-2018-20834 via tar (>=0.1.12 <=2.2.1)

tar NPM version =0.1.12, =1.0.0, =1.0.0, =1.0.1, =0.6.3, =1.0.0, =1.0.0, =1.0.0, =0.1.2, =0.1.5 and more Source cves: CVE-2018-20834 Source advisory: OSV:GHSA-J44M-QM6P-HP7M...

asc (>=0.1.0 <=0.3.1), cde (>=0.1.0 <=0.2.0.1) +28 more potentially affected by CVE-2018-10055 via tensorflow (>=1.1.0 <=1.7.0)

tensorflow PYPI version =1.1.0, =0.1.0, =0.1.0, =0.0.2, =1.0.4, =0.6.4, =0.9.0rc5, =0.0.1, =1.1.0, =0.6.0.2, =0.0.0.dev1, =2.0.4, =2.0.6 and more Source cves: CVE-2018-10055 Source advisory: OSV:GHSA-Q492-F7GR-27RP...

simple-mqtt (=1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (=4.1.1)

mqtt-packet NPM version =4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - simple-mqtt =1.0.0 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...

iopa-mqtt (>=0.2.0 <=1.3.3), iopa-mqtt-packet (>=0.2.16 <=1.3.7) +2 more potentially affected by CVE-2019-5432 via mqtt-packet (>=3.2.0 <=3.4.3)

mqtt-packet NPM version =3.2.0, =0.2.0, =0.2.16, =1.0.0, =1.0.1 - mqtt-stack =0.0.2 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...

com.novocode:ornate_2.11 (>=0.3 <=0.5), com.novocode:ornate_2.12 (=0.6) +69 more potentially affected by CVE-2019-11358 via org.webjars.npm:jquery (>=2.1.1 <=3.3.1)

org.webjars.npm:jquery MAVEN version =2.1.1, =0.3, =2.4.0, =3.0.0, =3.1.0, =2.4.0, =2.4.0, =0.2.0, =1.0.4, =1.0.5 - org.webjars.npm:bootstrap-material-design =4.0.1 - org.webjars.npm:bootstrap-multiselect =0.9.15 and more Source cves: CVE-2019-11358 Source advisory: OSV:GHSA-6C3J-C64M-QHGQ...

abba-python (>=0.1.6 <=0.3.0), adpred (>=1.1.2 <=1.2.7) +360 more potentially affected by CVE-2018-8825 via tensorflow (>=1.0.1 <=1.7.0)

tensorflow PYPI version =1.0.1, =0.1.6, =1.1.2, =0.0.1, =0.3.26, =0.2.0, =0.3.1, =0.1.0, =0.4.2, =0.1.0, =0.4.0, =0.1.0, =0.3.1 and more Source cves: CVE-2018-8825 Source advisory: OSV:PYSEC-2019-208...

abeja-sdk (>=0.2.0rc1 <=1.1.0rc1), abejacli (>=1.0.2 <=1.0.2rc1) +816 more potentially affected by CVE-2019-11324 via urllib3 (>=1.10.2 <=1.24.1)

urllib3 PYPI version =1.10.2, =0.2.0rc1, =1.0.2, =0.18.0.3, =0.5.0, =0.70.0, =0.0.1, =0.5.0, =1.1.0rc6, =0.8.0, =0.0.2, =1.1.2 and more Source cves: CVE-2019-11324 Source advisory: OSV:GHSA-MH33-7RRQ-662W...

ads-api (>=0.1.7.3 <=0.1.7.5), aequitas (>=0.26.0 <=0.34.0) +218 more potentially affected by CVE-2019-7164 via sqlalchemy (>=0.7.7 <=1.3.0b2)

sqlalchemy PYPI version =0.7.7, =0.1.7.3, =0.26.0, =0.1.0, =1.10.0, =0.10.0, =1.10.3, =0.1.6, =1.0.0a0, =1.0.0, =0.0.4, =1.0.1, =0.6.7.post3, =0.0.2, =0.0.9 and more Source cves: CVE-2019-7164 Source advisory: OSV:GHSA-887W-45RQ-VXGF...

abeja-sdk (>=0.2.0rc1 <=1.1.0rc1), abejacli (>=1.0.2 <=1.0.2rc1) +857 more potentially affected by CVE-2019-11236 via urllib3 (>=1.10.2 <=1.24.2)

urllib3 PYPI version =1.10.2, =0.2.0rc1, =1.0.2, =0.18.0.3, =0.5.0, =0.70.0, =2.0.1, =0.0.1, =0.5.0, =1.1.0rc6, =0.8.0, =0.10.1 and more Source cves: CVE-2019-11236 Source advisory: OSV:PYSEC-2019-132...