org.jenkins-ci.main:jenkins-war (>=2.34, <=2.43), org.jenkins-ci.main:test (>=2.34, <=2.43) potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (>=2.34, <=2.43)

org.jenkins-ci.main:jenkins-core MAVEN version =2.34, =2.34, =2.34, =2.43 Source cves: CVE-2017-2613 Source advisory: OSV:GHSA-PWV6-872C-GCG6...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

columnpack:columnpack-plugin (1.0.3), com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.0, <=1.6.3) +115 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.466)

org.jenkins-ci.main:jenkins-core MAVEN version 1.466 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - columnpack:columnpack-plugin 1.0.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.440), org.jenkins-ci.main:jenkins-war (1.440) +9 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.440)

org.jenkins-ci.main:jenkins-core MAVEN version 1.440 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.440 - org.jenkins-ci.main:jenkins-war 1.440 -...

org.graniteds:granite-beanvalidation (2.1.0.rc2), org.graniteds:granite-cdi (2.1.0.rc2) +9 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (2.1.0.rc2)

org.graniteds:granite-core MAVEN version 2.1.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-beanvalidation 2.1.0.rc2 - org.graniteds:granite-cdi 2.1.0.rc2 -...

org.graniteds:granite-datanucleus (2.0.0.sp1), org.graniteds:granite-eclipselink (2.0.0.sp1) +8 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (2.0.0.sp1)

org.graniteds:granite-core MAVEN version 2.0.0.sp1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-datanucleus 2.0.0.sp1 - org.graniteds:granite-eclipselink 2.0.0.sp1 -...

org.graniteds:granite-gravity (1.1.0.ga), org.graniteds:granite-guice (1.1.0.ga) +7 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (1.1.0.ga)

org.graniteds:granite-core MAVEN version 1.1.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-gravity 1.1.0.ga - org.graniteds:granite-guice 1.1.0.ga -...

org.graniteds:granite-datanucleus (2.0.0.b2), org.graniteds:granite-eclipselink (2.0.0.b2) +7 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (2.0.0.b2)

org.graniteds:granite-core MAVEN version 2.0.0.b2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-datanucleus 2.0.0.b2 - org.graniteds:granite-eclipselink 2.0.0.b2 -...

org.graniteds:granite-eclipselink (1.2.0_sp1), org.graniteds:granite-generator (1.2.0_sp1) +12 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (1.2.0_sp1)

org.graniteds:granite-core MAVEN version 1.2.0sp1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-eclipselink 1.2.0sp1 - org.graniteds:granite-generator 1.2.0sp1 -...

org.graniteds:granite-gravity (1.2.0.rc1), org.graniteds:granite-guice (1.2.0.rc1) +9 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (1.2.0.rc1)

org.graniteds:granite-core MAVEN version 1.2.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-gravity 1.2.0.rc1 - org.graniteds:granite-guice 1.2.0.rc1 -...

org.graniteds:granite-beanvalidation (>=3.0.0.m1, <=3.0.0.m3), org.graniteds:granite-cdi (>=3.0.0.m1, <=3.0.0.m3) +14 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (>=3.0.0.m1, <=3.0.0.m3)

org.graniteds:granite-core MAVEN version =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =1.2.0-m4, =1.3.1-m1, =1.3.1-m1, =1.3.1 and more Source cves: CVE-2017-3199 Source advisory: OSV:GHSA-8M35-R25C-Q...

org.graniteds:granite-beanvalidation (>=3.0.0.m1, <=3.0.0.m3), org.graniteds:granite-cdi (>=3.0.0.m1, <=3.0.0.m3) +14 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (>=3.0.0.m1, <=3.0.0.m3)

org.graniteds:granite-core MAVEN version =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =3.0.0.m1, =1.2.0-m4, =1.3.1-m1, =1.3.1-m1, =1.3.1 and more Source cves: CVE-2017-3199 Source advisory: GHSA-8M35-R25C-QR56...

org.apache.struts:struts2-assembly (>=2.0.11, <=2.3.37), org.apache.struts:struts2-showcase (>=2.0.5, <=2.3.37) +1 more potentially affected by CVE-2017-9791 via org.apache.struts:struts2-struts1-plugin (>=2.0.5, <=2.3.37)

org.apache.struts:struts2-struts1-plugin MAVEN version =2.0.5, =2.0.11, =2.0.5, =1.0, =1.1 Source cves: CVE-2017-9791 Source advisory: OSV:GHSA-29RM-6752-GVWV...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), au.com.cybernostics:theme-tree (0.9.0) +970 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.12)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =1.0.0, =1, =1, =1, =1, =1, =0.1.0, =1.0.0-rc, =0.2.1, =0.1.1, =0.1.1, =0.0.26, =0.9.6 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), au.com.cybernostics:theme-tree (0.9.0) +970 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.12)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =1.0.0, =1, =1, =1, =1, =1, =0.1.0, =1.0.0-rc, =0.2.1, =0.1.1, =0.1.1, =0.0.26, =0.9.6 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +197 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

au.com.mountain-pass:hyperstate (>=1, <=9), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +1015 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.0.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1, =0.0.6, =0.0.10, =2.0, =0.0.21, =0.0.21, =0.0.21, =0.0.25, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =1.1, =1.1.2 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

com.github.dblock.waffle:waffle-tomcat9 (1.8.1), com.github.waffle:waffle-tomcat9 (>=1.8.2, <=1.8.3) +13 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.0.m17)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.8.2, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m17 Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

com.cloudera.oryx:oryx-lambda-serving (2.3.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +53 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =1.0.0, =1.0.4, =1.8.2, =2.1, =1.9.5, =1.2.0, =0.5.0, =0.0.3, =0.0.5 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +197 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...