aiolambda (>=0.2.0 <=0.3.0), alcazar-web-framework (=0.0.2) +161 more potentially affected by CVE-2019-10906 via jinja2 (=2.10.0)

jinja2 PYPI version =2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aiolambda =0.2.0, =1.10.3, =3.0.0, =0.1.0, =0.0.1, =0.2.0, =0.6.7.post3, =0.7.1, =0.1.1, =1.2.1, =0.0.2, =0.0.3 - burl =1.0.0 and more Source cves...

@anzeblabla/react-native-markdown-editor (>=1.0.3 <=2.1.1), @gorangajic/react-native-markdown (=0.1.1) +22 more potentially affected by CVE-2019-9844 via simple-markdown (>=0.0.9 <=0.4.2)

simple-markdown NPM version =0.0.9, =1.0.3, =1.3.0, =1.0.1, =1.0.4, =2.3.0, =0.1.0, =1.2.0, =2.4.0, =1.2.0, =1.1.0, =1.0.0, =1.10.0 and more Source cves: CVE-2019-9844 Source advisory: OSV:GHSA-QJ3F-9GMQ-FWV5...

5x5_uploader (>=1.0.0 <=1.2.2), @3t-transform/threeteeui (>=0.0.1 <=0.0.6) +251 more potentially affected by CVE-2019-11004 via materialize-css (>=0.100.2 <=1.0.0)

materialize-css NPM version =0.100.2, =1.0.0, =0.0.1, =1.0.1, =1.0.3, =1.0.0, =6.1.3, =45.4.6, =0.0.3, =1.0.2, =0.0.4, =0.0.6, =1.0.0, =0.5.0, =0.7.0 and more Source cves: CVE-2019-11004 Source advisory: OSV:GHSA-RG3Q-JXMP-PVJJ...

@gkatsev/grunt-harp (>=0.18.0 <=0.19.0), @mobify/documentation-theme (>=1.11.3 <=2.0.0-preview.2-dev) +20 more potentially affected by CVE-2019-5437 via harp (>=0.11.2 <=0.32.0)

harp NPM version =0.11.2, =0.18.0, =1.11.3, =1.11.3, =0.0.3, =0.0.8, =0.0.1, =0.0.1, =0.0.1-1, =0.0.1, =0.1.0, =0.1.0, =0.2.9 - n-p-m =1.1.0 and more Source cves: CVE-2019-5437 Source advisory: SNYK:JS-HARP-174149...

aihub-things (=0.5.0) potentially affected by CVE-2018-12680 via coapthon (=4.0.2)

coapthon PYPI version =4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on coapthon and may be impacted: - aihub-things =0.5.0 Source cves: CVE-2018-12680 Source advisory: OSV:GHSA-5XC6-FPC7-4QVG...

com.github.shyiko.ktlint:ktlint-ruleset-standard (>=0.2.0 <=0.2.2), com.github.shyiko.ktlint:ktlint-test (>=0.2.0 <=0.2.2) +1 more potentially affected by CVE-2019-1010260 via com.github.shyiko.ktlint:ktlint-core (>=0.2.0 <=0.2.2)

com.github.shyiko.ktlint:ktlint-core MAVEN version =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.2 Source cves: CVE-2019-1010260 Source advisory: OSV:GHSA-R8H9-HQ9C-2P5C...

aihub-things (=0.5.0) potentially affected by CVE-2018-12680 via coapthon (=4.0.2)

coapthon PYPI version =4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on coapthon and may be impacted: - aihub-things =0.5.0 Source cves: CVE-2018-12680 Source advisory: OSV:PYSEC-2019-165...

jhub-shibboleth-auth (>=1.0.0 <=1.4.0) potentially affected by CVE-2019-10255 via jupyterhub (>=0.8.1 <=0.9.4)

jupyterhub PYPI version =0.8.1, =1.0.0, =1.4.0 Source cves: CVE-2019-10255 Source advisory: OSV:GHSA-RV62-4PMJ-XW6H...

arpes (>=1.0.0 <=2.2.0), convert-and-download (>=0.1.3 <=0.2.4) +24 more potentially affected by CVE-2019-10255 via notebook (>=4.2.3 <=5.7.5)

notebook PYPI version =4.2.3, =1.0.0, =0.1.3, =1.0.0b1, =0.0.2, =1.31.7.dev0, =0.1.1.10, =0.2.1, =0.1.6.2, =0.1.2, =0.1.0, =0.5.0, =1.0.1, =0.1.1, =1.0.1 - marvin-python-toolbox =0.0.4 and more Source cves: CVE-2019-10255 Source advisory: OSV:GHSA-RV62-4PMJ-XW6H...

at.chrl:chrl-jms (=1.1.0), at.researchstudio.sat:won-core (>=0.2 <=0.9) +1019 more potentially affected by CVE-2019-0222 via org.apache.activemq:activemq-client (>=5.10.0 <=5.15.8)

org.apache.activemq:activemq-client MAVEN version =5.10.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner =0.3 - at.researchstudio.sat:won-owner-webapp =0.3 and more Source cves: CVE-2019-0222 Source advisory: OSV:GHSA-JPV3-G4CC-6VFX...

013-carrousel-multipe (=1.0.0), 0303-lb3-paket (=1.0.1) +18345 more potentially affected by CVE-2019-5413 via morgan (>=1.0.0 <=1.9.0)

morgan NPM version =1.0.0, =1.1.0, =1.0.2, =1.0.1, =1.0.2 and more Source cves: CVE-2019-5413 Source advisory: OSV:GHSA-GWG9-RGVJ-4H5J...

aero.champ:cargojson (=1.0), ai.chronon:aggregator_2.11 (>=0.0.1 <=thread_contention-0.0.23-dev3) +16344 more potentially affected by CVE-2018-12022 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0 <=2.9.5)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =1.3.0, =1.1.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744 and more Source cves: CVE-2018-12022 Source advisory:...

@o/mobx-bridge (>=2.4.0 <=2.5.2), marcura-common-ui-helper (>=1.0.0 <=1.0.1) +1 more potentially affected by CVE-2019-5414 via kill-port (>=1.1.0 <=1.3.1)

kill-port NPM version =1.1.0, =2.4.0, =1.0.0, =0.1.0-alpha, =0.2.0 Source cves: CVE-2019-5414 Source advisory: OSV:GHSA-PMV6-GF98-P3R5...

com.liferay:com.liferay.gradle.plugins.workspace (>=1.10.12 <=8.0.0) potentially affected by CVE-2018-1324 via com.liferay:com.liferay.portal.tools.bundle.support (>=3.2.7 <=3.7.3)

com.liferay:com.liferay.portal.tools.bundle.support MAVEN version =3.2.7, =1.10.12, =8.0.0 Source cves: CVE-2018-1324 Source advisory: OSV:GHSA-H436-432X-8FVX...

io.takari:jarmony (=0.1.0) potentially affected by CVE-2018-1324 via io.takari:commons-compress (=1.12)

io.takari:commons-compress MAVEN version =1.12 is affected by a known vulnerability. The following packages have a transitive dependency on io.takari:commons-compress and may be impacted: - io.takari:jarmony =0.1.0 Source cves: CVE-2018-1324 Source advisory: OSV:GHSA-H436-432X-8FVX...

ai.grakn.kgms:client (=1.4.3), ai.grakn:client-java (>=1.4.1 <=1.4.3) +360 more potentially affected by CVE-2018-1334 via org.apache.spark:spark-core_2.11 (>=2.2.0 <=2.2.1)

org.apache.spark:spark-core2.11 MAVEN version =2.2.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2018-1334 Source advisory: OSV:GHSA-6MQQ-8R44-VMJC...

eskapade-spark (>=0.8.0 <=0.8.2), pytispark (>=1.0.0rc2 <=1.0.1) potentially affected by CVE-2018-1334 via pyspark (=2.1.2)

pyspark PYPI version =2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - eskapade-spark =0.8.0, =1.0.0rc2, =1.0.1 Source cves: CVE-2018-1334 Source advisory: OSV:GHSA-6MQQ-8R44-VMJC...

com.antgroup.tugraph:calcite-spark (>=1.18.0-geaflow_1.0 <=1.18.0-geaflow_1.1), com.couchbase.client:spark-connector_2.10 (=2.2.0) +45 more potentially affected by CVE-2018-1334 via org.apache.spark:spark-core_2.10 (>=2.2.0 <=2.2.1)

org.apache.spark:spark-core2.10 MAVEN version =2.2.0, =1.18.0-geaflow1.0, =0.2.0, =1.0.9, =1.0.9, =0.7.3, =2.2.00.12.0, =1.21.0.138, =0.0.3, =0.2.1, =0.2.2 and more Source cves: CVE-2018-1334 Source advisory: OSV:GHSA-6MQQ-8R44-VMJC...

ai.grakn:client-java (=1.3.0), ai.grakn:grakn-bootup (>=1.1.0 <=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744) +643 more potentially affected by CVE-2018-1334 via org.apache.spark:spark-core_2.10 (>=1.0.0 <=2.1.2)

org.apache.spark:spark-core2.10 MAVEN version =1.0.0, =1.1.0, =0.7.0, =0.12.0, =1.2.0, =0.12.0, =1.0.0, =1.0.0, =0.10.0, =0.15.0, =0.6.1, =0.17.0, =1.1.0 and more Source cves: CVE-2018-1334 Source advisory: OSV:GHSA-6MQQ-8R44-VMJChttps://vulners.com/osv/OSV:GHSA-6MQQ-8R44-VMJC...

sourced-ml (=0.4.5) potentially affected by CVE-2018-1334 via pyspark (=2.2.0.post0)

pyspark PYPI version =2.2.0.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - sourced-ml =0.4.5 Source cves: CVE-2018-1334 Source advisory: OSV:GHSA-6MQQ-8R44-VMJC...