@essential-projects/sequelize_connection_manager (>=3.0.0-7a12b2e-b1, <=3.0.0-df349f85-b6), @nelreina/node-sequelize (>=3.5.3, <=3.5.5) +26 more potentially affected by CVE-2019-10748 via sequelize (>=5.0.0-beta.11, <=5.8.10)

sequelize NPM version =5.0.0-beta.11, =3.0.0-7a12b2e-b1, =3.5.3, =4.0.0-beta.2, =10.0.0-004477d6-b2, =6.0.0-54bba797-b2, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =1.1.5, =5.4.0, =5.4.0, =5.4.1 and more Source cves: CVE-2019-10748 Source advisory: SNYK:JS-SEQUELIZE-450221...

@aaa-backend-stack/graphql (>=1.16.1, <=2.4.4), @aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9) +114 more potentially affected by CVE-2019-10748 via sequelize (>=3.0.1, <=3.34.0)

sequelize NPM version =3.0.1, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.12.0, =1.0.22, =2.0.10, =1.0.97, =1.6.489, =1.6.735 and more Source cves: CVE-2019-10748 Source advisory: SNYK:JS-SEQUELIZE-450221...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +13127 more potentially affected by CVE-2019-10744 via lodash (>=4.0.0, <=4.17.11)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.4 - 9wares-react 0.0.2 - @0x663/readclass 1.1.0 and more Source cves: CVE-2019-10744 Source advisory: SNYK:JS-LODASH-450202...

@admui/grid (>=0.1.10, <=0.3.1), @astro-my/design-systems (>=0.3.14, <=0.4.42) +157 more potentially affected by CVE-2019-10744 via lodash-es (>=4.0.0, <=4.17.11)

lodash-es NPM version =4.0.0, =0.1.10, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 and more Source cves: CVE-2019-10744 Source advisory: SNYK:JS-LODASHES-2434290...

@maxts/waterline-adapter-tests (1.0.3), driver-interface (1.0.2) +9 more potentially affected by CVE-2019-10744 via @sailshq/lodash (3.10.2)

@sailshq/lodash NPM version 3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sailshq/lodash and may be impacted: - @maxts/waterline-adapter-tests 1.0.3 - driver-interface 1.0.2 - machinepack-sockets =2.0.0, =5.2.0-0, =1.0.1, =0.9.1, =2.1.14,...

@idearium/cli (>=1.0.0, <=4.3.0), @stoplight/command (>=0.0.11-1, <=0.0.24) +27 more potentially affected by CVE-2019-10747 via set-value (3.0.0)

set-value NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on set-value and may be impacted: - @idearium/cli =1.0.0, =0.0.11-1, =0.0.11-29, =0.0.11-1, =0.0.11-1, =0.0.11-1, =0.0.18, =0.0.11-1, =0.0.11-1, =0.0.11-30, =0.0.11-1, =0.0.18,...

ts-node-server (>=1.1.0, <=2.0.0) potentially affected by CVE-2019-10746 via mixin-deep (2.0.0)

mixin-deep NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mixin-deep and may be impacted: - ts-node-server =1.1.0, =2.0.0 Source cves: CVE-2019-10746 Source advisory: SNYK:JS-MIXINDEEP-450212...

@peak-stone/vue-admin (>=1.0.1, <=2.1.1) potentially affected by CVE-2019-10745 via assign-deep (1.0.0)

assign-deep NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on assign-deep and may be impacted: - @peak-stone/vue-admin =1.0.1, =2.1.1 Source cves: CVE-2019-10745 Source advisory: SNYK:JS-ASSIGNDEEP-450211...

alpha-g-analysis (0.1.0), apecrunch (>=0.0.1, <=0.0.3) +179 more potentially affected by CVE-2019-15547 +1 more via ncurses (>=5.94.0, <=6.0.1)

ncurses CARGO version =5.94.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.7 - btui 0.6.5 and more Source cves: CVE-2019-15547, CVE-2019-15548 Source advisory: OSV:RUSTSEC-2019-0006...

askii (>=0.1.0, <=0.5.4), atomsh (0.1.0) +58 more potentially affected by CVE-2019-15546 via pancurses (>=0.6.0, <=0.17.0)

pancurses CARGO version =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.1.0, =0.1.0, =0.16.0, =0.4.0, =0.13.1, =0.2.0, =0.3.1 and more Source cves: CVE-2019-15546 Source advisory: OSV:RUSTSEC-2019-0005...

digger (1.2.11), edge-server (0.1.2) +9 more potentially affected by unknown CVE via lactate (>=0.6.0, <=0.13.12)

lactate NPM version =0.6.0, =0.3.8, =0.7.0, =0.4.4, =0.3.6, =0.1.1, =0.1.0, =0.0.1, =0.2.4, =0.4.2 - zetta-beaglebone-proxy 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-68GR-CMCP-G3MJ...

@allenbrowntech/lemon-lui (>=1.0.1, <=2.0.0), @angular-template/ng1-build (>=2.0.0-beta.1, <=2.0.0-beta.6) +737 more potentially affected by unknown CVE via underscore.string (>=3.0.3, <=3.3.4)

underscore.string NPM version =3.0.3, =1.0.1, =2.0.0-beta.1, =0.0.1, =0.0.1, =1.2.0, =1.0.0, =1.1.1, =2.0.0-beta.1, =0.7.8, =0.3.0, =0.7.0-alpha.5e822d8d, =1.0.0, =1.0.0, =1.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V2P6-4MP7-3R9V...

04_nodeblog (1.0.0), 10tcl (>=0.0.1, <=0.0.10) +3259 more potentially affected by unknown CVE via constantinople (3.0.2)

constantinople NPM version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on constantinople and may be impacted: - 04nodeblog 1.0.0 - 10tcl =0.0.1, =1.0.1, =0.1.1, =0.0.7, =1.0.23, =1.0.0, =1.0.0, =0.0.0, =1.0.0, =0.0.1-alpha-1.3, =0.1.30 and more...

@devsisters/passport (>=1.1.0, <=1.1.2), @project-sunbird/ext-framework-server (8.0.0) +4 more potentially affected by CVE-2019-10157 via keycloak-connect (>=4.0.0-beta.1, <=4.5.0)

keycloak-connect NPM version =4.0.0-beta.1, =1.1.0, =0.0.2, =0.0.1, =0.0.1-alpha-1, =1.2.7 Source cves: CVE-2019-10157 Source advisory: OSV:GHSA-68HW-VFH7-XVG8...

01-numacert (>=1.0.0, <=3.0.0), 12g (>=0.0.15, <=1.0.1) +3429 more potentially affected by unknown CVE via diff (>=3.0.0, <=3.4.0)

diff NPM version =3.0.0, =1.0.0, =0.0.15, =1.0.4, =5.4.4, =5.4.4, =2.2.1, =1.1.8, =1.0.0, =0.0.1, =1.0.1, =1.4.7, =1.4.5, =2.0.3, =2.4.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H6CH-V84P-W6P9...

anjiayi-elf (>=1.0.0, <=1.0.9), anjiayi-exp (>=1.0.0, <=1.2.6) +5 more potentially affected by unknown CVE via lutils-merge (>=0.1.4, <=0.2.6)

lutils-merge NPM version =0.1.4, =1.0.0, =1.0.0, =1.0.0, =0.0.1-alpha, =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F7QW-5PVG-MMWP...

@gkatsev/grunt-harp (>=0.18.0, <=0.19.0), @mobify/documentation-theme (>=1.11.3, <=2.0.0-preview.2-dev) +21 more potentially affected by CVE-2019-5438 via harp (>=0.9.5, <=0.32.0)

harp NPM version =0.9.5, =0.18.0, =1.11.3, =1.11.3, =0.0.3, =0.0.8-pre2, =0.0.1, =0.0.1, =0.0.1-1, =0.0.1, =0.1.0, =0.1.0, =0.2.9 - n-p-m 1.1.0 and more Source cves: CVE-2019-5438 Source advisory: OSV:GHSA-6FMM-47QC-P4M4...

@gkatsev/grunt-harp (>=0.18.0, <=0.19.0), @mobify/documentation-theme (>=1.11.3, <=2.0.0-preview.2-dev) +21 more potentially affected by CVE-2019-5437 via harp (>=0.9.5, <=0.32.0)

harp NPM version =0.9.5, =0.18.0, =1.11.3, =1.11.3, =0.0.3, =0.0.8-pre2, =0.0.1, =0.0.1, =0.0.1-1, =0.0.1, =0.1.0, =0.1.0, =0.2.9 - n-p-m 1.1.0 and more Source cves: CVE-2019-5437 Source advisory: OSV:GHSA-46HV-7769-J7RX...

@codedungeon/gunner (>=0.0.1-dev.9, <=0.80.1), @codedungeon/laravel-versions-cli (>=0.0.3, <=0.1.0) +74 more potentially affected by unknown CVE via fs-path (>=0.0.22, <=0.0.24)

fs-path NPM version =0.0.22, =0.0.1-dev.9, =0.0.3, =0.0.9, =1.0.2, =1.0.1, =0.0.1, =1.0.0, =1.0.0, =0.0.40, =1.0.1, =0.0.1, =1.0.1, =0.1.0, =1.0.0, =1.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GC94-6W89-HPQR...

@aabenoja/karma-phantomjs-launcher (0.2.1), @aabenoja/phantomjs (2.0.0) +183 more potentially affected by unknown CVE via npmconf (>=2.0.9, <=2.1.2)

npmconf NPM version =2.0.9, =0.1.28, =1.2.6, =2.7.2, =4.5.201902251314, =1.5.0-alpha.1, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =1.0.3, =2.0.0, =2.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-57CF-349J-352G...