Root has patched CVE-2019-2391 in the @rootio/bson package for Root:npm. Multiple fixed versions available.
{ "distro": "npm", "distro_version": "", "severity": "MEDIUM", "source": "Root" }
""
[ "1.0.9-root.io.1" ]
true
1.0
"1.0.9-root.io.1"
"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2019-2391.json"
[ "1.0.9-aikido.1" ]
"1.0.9-aikido.1"