Cross-Site Scripting (XSS)

lazysizes is vulnerable to cross-site scripting XSS. The attributes data-vimeo, data-vimeoparams, data-youtube and data-ytparams are not sanitized by the video-embed plugin, allowing a remote attacker to inject and execute arbitrary Javascript in the user's browser via the affected parameters...

ai.hyacinth.framework:core-service-admin-server (0.5.24), ai.hyacinth.framework:core-service-config-server (0.5.24) +828 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.29, <=9.0.30)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.29, =0.0.1, =1.6, =1.8 - cloud.altemista.fwk.framework:cloud-altemistafwk-boot-conf 3.1.0.release - cloud.altemista.fwk.framework:cloud-altemistafwk-documentation 3.1.0.release -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.99), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.99) +1 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.99 -...

cn.springboot:best-pay-sdk (>=1.3.3, <=1.3.7), com.aceql:aceql-http (>=4.0, <=4.1) +42 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.49, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.49, =1.3.3, =4.0, =3.0.6, =3.0.6, =3.0.6, =3.0.6, =3.0.9, =3.0.9, =3.0.9, =3.0.9, =3.0.9, =3.0.9, =3.0.11 - com.heroku:webapp-runner 8.5.50.0 and more Source cves: CVE-2019-17569 Source advisory: GHSA-767J-JFH2-JVRC...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.99), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.99) +1 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.99 -...

cn.springboot:best-pay-sdk (>=1.3.3, <=1.3.7), com.aceql:aceql-http (>=4.0, <=4.1) +42 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.49, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.49, =1.3.3, =4.0, =3.0.6, =3.0.6, =3.0.6, =3.0.6, =3.0.9, =3.0.9, =3.0.9, =3.0.9, =3.0.9, =3.0.9, =3.0.11 - com.heroku:webapp-runner 8.5.50.0 and more Source cves: CVE-2019-17569 Source advisory: OSV:GHSA-767J-JFH2-JVRC...

ai.hyacinth.framework:core-service-admin-server (0.5.24), ai.hyacinth.framework:core-service-config-server (0.5.24) +828 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.29, <=9.0.30)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.29, =0.0.1, =1.6, =1.8 - cloud.altemista.fwk.framework:cloud-altemistafwk-boot-conf 3.1.0.release - cloud.altemista.fwk.framework:cloud-altemistafwk-documentation 3.1.0.release -...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2020-1935 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-1935 Source advisory: OSV:GHSA-QXF4-CHVG-4R8R...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4541 more potentially affected by CVE-2020-1935 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2020-1935 Source advisory: GHSA-QXF4-CHVG-4R8R...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-1938 Source advisory: MEND:CVE-2020-1938...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3363 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.30)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2020-1938 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4541 more potentially affected by CVE-2020-1938 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2020-1938 Source advisory: MEND:CVE-2020-1938...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2020-1935 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-1935 Source advisory: MEND:CVE-2020-1935...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3363 more potentially affected by CVE-2020-1935 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.30)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 - ai.ylyue:yue-library-web 2.1.0 and more Source cves: CVE-2020-1935 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4541 more potentially affected by CVE-2020-1935 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2020-1935 Source advisory: MEND:CVE-2020-1935...

cn.springboot:best-pay-sdk (>=1.3.3, <=1.3.7), com.aceql:aceql-http (>=4.0, <=4.1) +42 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.49, <=8.5.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.49, =1.3.3, =4.0, =3.0.6, =3.0.6, =3.0.6, =3.0.6, =3.0.9, =3.0.9, =3.0.9, =3.0.9, =3.0.9, =3.0.9, =3.0.11 - com.heroku:webapp-runner 8.5.50.0 and more Source cves: CVE-2019-17569 Source advisory: MEND:CVE-2019-17569...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.99), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.99) +1 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.99 -...

ai.hyacinth.framework:core-service-admin-server (0.5.24), ai.hyacinth.framework:core-service-config-server (0.5.24) +828 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.29, <=9.0.30)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.29, =0.0.1, =1.6, =1.8 - cloud.altemista.fwk.framework:cloud-altemistafwk-boot-conf 3.1.0.release - cloud.altemista.fwk.framework:cloud-altemistafwk-documentation 3.1.0.release -...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +285 more potentially affected by CVE-2019-12418 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.96)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2019-12418 Source advisory: OSV:GHSA-HH3J-X4MC-G48R...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4519 more potentially affected by CVE-2019-12418 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.47)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =10 and more Source cves: CVE-2019-12418 Source advisory: OSV:GHSA-HH3J-X4MC-G48R...