iopa-mqtt (>=0.2.0, <=1.3.3), iopa-mqtt-packet (>=0.2.16, <=1.3.7) +2 more potentially affected by CVE-2019-5432 via mqtt-packet (>=3.2.0, <=3.4.3)

mqtt-packet NPM version =3.2.0, =0.2.0, =0.2.16, =1.0.0, =1.0.1 - mqtt-stack 0.0.2 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

mqtt-super (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (6.0.0)

mqtt-packet NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - mqtt-super 1.0.0 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...

@levi-m/ide-kit (10.1.0-beta.14), dltsign-mobile (0.1.0) +8 more potentially affected by CVE-2018-19048 via simditor (>=2.1.14, <=2.3.21)

simditor NPM version =2.1.14, =1.0.91, =0.0.1, =2.0.2, =1.0.1, =2.0.4, =0.1.7, =1.1.24 Source cves: CVE-2018-19048 Source advisory: OSV:GHSA-8V67-X8Q5-3X3G...

buf-ref-reader (0.3.0), buf_redux (>=0.7.0, <=0.8.1) +9 more potentially affected by CVE-2019-15543 via slice-deque (0.1.16)

slice-deque CARGO version 0.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on slice-deque and may be impacted: - buf-ref-reader 0.3.0 - bufredux =0.7.0, =0.1.0, =0.2.0, =0.1.0, =0.12.0, =0.14.0 - reactive-rs 0.1.1 - rtplot 0.2.0 - seqio 0.3.0 -...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +136 more potentially affected by CVE-2018-20835 via tar-fs (>=1.0.0, <=1.16.0)

tar-fs NPM version =1.0.0, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.1.3, =0.0.65, =1.8.2 and more Source cves: CVE-2018-20835 Source advisory: OSV:GHSA-X2MC-8FGJ-3WMR...

mqtt-super (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (6.0.0)

mqtt-packet NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - mqtt-super 1.0.0 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...

simple-mqtt (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (4.1.1)

mqtt-packet NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - simple-mqtt 1.0.0 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...

000demo (>=1.0.0, <=1.1.0), 03-npm-abc (>=1.0.0, <=1.1.0) +6198 more potentially affected by CVE-2019-11358 via jquery (>=1.5.1, <=3.3.1)

jquery NPM version =1.5.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.2.1, =0.1.75, =0.2.0 - 4.yarntest 1.0.3 - 4design 0.0.1 and more Source cves: CVE-2019-11358 Source advisory: OSV:GHSA-6C3J-C64M-QHGQ...

aho-corasick (>=0.6.7, <=0.6.10), aigc_secp256k1zkp (0.7.12) +131 more potentially affected by CVE-2020-25576 via rand_core (>=0.1.0, <=0.2.2)

randcore CARGO version =0.1.0, =0.6.7, =0.7.0, =0.7.1, =1.0.0, =2.0.1, =1.0.0, =1.2.5, =0.4.0, =0.1.0, =0.3.0 and more Source cves: CVE-2020-25576 Source advisory: OSV:RUSTSEC-2019-0035...

@nodefony/sequelize-bundle (>=4.0.0-beta.2, <=4.2.0-beta.2), @sequelizejs/next (5.0.0-beta.16) +5 more potentially affected by CVE-2019-11069 via sequelize (>=5.0.0-beta.11, <=5.2.3)

sequelize NPM version =5.0.0-beta.11, =4.0.0-beta.2, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =1.0.0-beta1, =1.0.0-beta2.2 Source cves: CVE-2019-11069 Source advisory: OSV:GHSA-2777-2VQ8-C4V4...

@gkatsev/grunt-harp (>=0.18.0, <=0.19.0), @mobify/documentation-theme (>=1.11.3, <=2.0.0-preview.2-dev) +21 more potentially affected by CVE-2019-5437 via harp (>=0.9.5, <=0.32.0)

harp NPM version =0.9.5, =0.18.0, =1.11.3, =1.11.3, =0.0.3, =0.0.8-pre2, =0.0.1, =0.0.1, =0.0.1-1, =0.0.1, =0.1.0, =0.1.0, =0.2.9 - n-p-m 1.1.0 and more Source cves: CVE-2019-5437 Source advisory: SNYK:JS-HARP-174149...

accepted (>=0.2.0, <=0.3.2), aigc_api (5.1.2) +505 more potentially affected by unknown CVE via typemap (0.3.3)

typemap CARGO version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0039...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2019-10260 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2019-10260 Source advisory: OSV:GHSA-72P5-2R6G-FM6V...

chainsql-remixd (1.0.0), fusuma (0.11.4) +1 more potentially affected by CVE-2019-5417 via serve (7.0.0)

serve NPM version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on serve and may be impacted: - chainsql-remixd 1.0.0 - fusuma 0.11.4 - remixd =0.1.8-alpha.11, =0.1.8-alpha.16 Source cves: CVE-2019-5417 Source advisory: OSV:GHSA-XG75-3277-GVVJ...

@jpmorganchase/perspective-viewer-highcharts (>=0.1.7, <=0.1.13), angular-universe (>=0.0.1, <=0.0.2) +3 more potentially affected by CVE-2018-20801 via highcharts (>=6.0.1, <=6.0.7)

highcharts NPM version =6.0.1, =0.1.7, =0.0.1, =1.1.0, =2.1.0 - web-platform-library 0.0.2 - zeppelin-highmaps 1.0.0 Source cves: CVE-2018-20801 Source advisory: OSV:GHSA-XMC8-CJFR-PHX3...

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2019-10760 via safer-eval (1.2.3)

safer-eval NPM version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on safer-eval and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2019-10760 Source advisory: SNYK:JS-SAFEREVAL-473029...

de.learnlib.distribution:learnlib-distribution (0.15.0), io.github.lhogie:onlinegraph (0.0.1) +9 more potentially affected by unknown CVE via com.paypal.digraph:digraph-parser (1.0)

com.paypal.digraph:digraph-parser MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.paypal.digraph:digraph-parser and may be impacted: - de.learnlib.distribution:learnlib-distribution 0.15.0 - io.github.lhogie:onlinegraph 0.0.1 -...

1tp (>=0.0.1, <=0.11.2), @balderdash/sails-edge (>=0.12.0-edge9, <=0.50.0) +774 more potentially affected by CVE-2016-10542 via ws (>=1.0.0, <=1.1.0)

ws NPM version =1.0.0, =0.0.1, =0.12.0-edge9, =0.0.1, =1.8.4, =1.0.0, =1.0.30, =0.0.5, =1.1.1, =0.1.0, =1.0.14, =3.0.2 and more Source cves: CVE-2016-10542 Source advisory: OSV:GHSA-6663-C963-2GQG...

@nlammertyn/electrify-vidtext (>=1.0.0, <=1.1.15), dhaptfccui (0.0.67) +27 more potentially affected by CVE-2016-10534 via electron-packager (>=5.2.1, <=6.0.2)

electron-packager NPM version =5.2.1, =1.0.0, =0.0.1, =2.0.0, =3.1.2, =0.1.0, =0.0.2, =0.1.0, =0.0.1, =0.0.1, =1.0.0, =1.0.1, =0.1.0, =0.4.0, =1.4.0 and more Source cves: CVE-2016-10534 Source advisory: OSV:GHSA-Q43M-FFWR-RPCC...

@arakoodev/edgechains.js (>=0.25.0, <=0.30.1), @autonomousorganization/ao-cli (0.0.6) +1024 more potentially affected by CVE-2016-10531 via marked (>=0.0.1, <=0.3.5)

marked NPM version =0.0.1, =0.25.0, =3.3.1, =0.0.1, =0.0.0, =0.1.0, =2.0.5, =0.2.0, =1.0.13, =1.0.35 - @fundcount/fc-keystone 0.3.21-7 and more Source cves: CVE-2016-10531 Source advisory: OSV:GHSA-VFVF-MQQ8-RWQC...