-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42426 more potentially affected by CVE-2022-0536 via follow-redirects (>=1.0.0, <=1.14.7)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0536 Source advisory: OSV:GHSA-PW2R-VQ6V-HR8C...

@ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=2.8.0), @apolitical/apis-client (>=1.0.0, <=1.1.5) +14 more potentially affected by unknown CVE via jsrsasign (>=10.0.0, <=10.1.13)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.2.0, =0.0.11, =9.21.5, =20.12.0, =20.12.0, =1.0.11, =0.1.1, =0.1.10, =0.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H87Q-G2WP-47PJ...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 08cms (1.0.0) +17672 more potentially affected by CVE-2020-24025 via node-sass (>=2.0.0, <=6.0.1)

node-sass NPM version =2.0.0, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages 0.2.0 and more Source cves: CVE-2020-24025 Source advisory: OSV:GHSA-R8F7-9PFQ-MJMV...

4pm-cli (>=0.0.1, <=0.0.5), 7ghost (>=4.11.0, <=4.11.46) +2954 more potentially affected by CVE-2022-21803 via nconf (>=0.1.14, <=0.11.3)

nconf NPM version =0.1.14, =0.0.1, =4.11.0, =0.0.1, =0.8.7, =3.6.0-beta.3, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =3.0.0, =1.1.0, =2.0.4, =1.0.0, =1.2.10 - @algtools/leetcode-cli 1.0.0 and more Source cves: CVE-2022-21803 Source advisory: SNYK:JS-NCONF-2395478...

java security update

CentOS Errata and Security Advisory CESA-2022:0204 An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +2000 more potentially affected by CVE-2021-23566 via nanoid (>=3.0.0, <=3.1.30)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.3, =1.0.0, =0.1.1-alpha.51, =0.0.20, =1.0.1, =0.0.1, =0.4.2, =0.4.11 - @agrippa-io/node-connection-manager 1.0.0 and more Source cves: CVE-2021-23566 Source advisory: OSV:GHSA-QRPM-P2H7-HRV2...

acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1252 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-76W9-P8MG-J927...

SUSE SLED15: icu.691 / icu.691-devel / icu.691-doc / libicu69 / libicu69-bedata / etc (SUSE-SU-2021:4063-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:4063-1 advisory. - Renamed package from icu 69.1 for SUSE:SLE-15-SP3:Update. jscSLE-17893 - Fix undefined behaviour in 'ComplexUnitsConverter::applyRounder' -...

jsgui-node-file-metadata (0.3.8), jsgui-node-fs2-core (>=0.1.0, <=0.1.5) +7 more potentially affected by CVE-2022-25301 via jsgui-lang-essentials (>=0.3.8, <=0.4.3)

jsgui-lang-essentials NPM version =0.3.8, =0.1.0, =0.1.0, =0.1.0, =0.3.8, =0.3.8, =0.3.35 Source cves: CVE-2022-25301 Source advisory: SNYK:JS-JSGUILANGESSENTIALS-2316897...

@attivio/suit (>=0.0.47, <=1.0.7), @botxo_team/fe-shared (>=1.0.0, <=1.15.29) +44 more potentially affected by CVE-2021-23398 via react-bootstrap-table (>=4.0.6, <=4.3.1)

react-bootstrap-table NPM version =4.0.6, =0.0.47, =1.0.0, =0.3.1, =0.1.1, =1.21.0, =0.15.0-beta-1, =1.14.3, =1.0.1, =0.1.0, =2.0.0 - bs-table-fg2 1.0.0 - censadesignsystem 2.38.0 - chainofdemand 0.1.0 and more Source cves: CVE-2021-23398 Source advisory: OSV:GHSA-2589-W6XF-983R...

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.12), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.3.7) +109 more potentially affected by CVE-2024-21908 via tinymce (>=5.0.6, <=5.8.2)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =10.3.1-snapshot-1616513687673, =0.18.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-beta.1, =0.0.1-alpha.1, =0.0.17 and more Source cves: CVE-2024-21908 Source advisory: OSV:GHSA-5H9G-X5RV-25WG...

@accordproject/cicero-cli (>=0.3.4, <=0.23.0-alpha.1), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.0-alpha.1) +143 more potentially affected by CVE-2021-23449 via vm2 (>=3.0.0, <=3.9.3)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2018.7.11-0, =2018.8.5-0, =0.9.14, =2.0.14-alpha.1392172559 and more...

277snippet-cli (>=1.0.0, <=1.0.2), 40au-isteven-angular-multiselect (4.0.0) +741 more potentially affected by unknown CVE via node-static (>=0.5.6, <=0.7.11)

node-static NPM version =0.5.6, =1.0.0, =1.0.5, =0.0.5, =0.0.1, =0.0.1, =17.0.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8R4G-CG4M-X23C...

@agreejs/cli (>=0.0.2, <=3.2.43), @agreejs/h5-runner (3.2.1) +56 more potentially affected by CVE-2021-3804 via @tarojs/helper (>=3.0.0, <=3.3.8)

@tarojs/helper NPM version =3.0.0, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =1.0.0-alpha.1, =1.0.0, =1.1.5, =0.0.5, =1.1.0, =3.0.0-rc.0, =3.3.8 and more Source cves: CVE-2021-3804 Source advisory: OSV:GHSA-468Q-V4JJ-485H...

ceres-executor (>=0.1.0, <=0.2.0), inkpad-executor (0.1.0) +21 more potentially affected by CVE-2021-39216 +2 more via wasmtime (>=0.26.1, <=0.29.0)

wasmtime CARGO version =0.26.1, =0.1.0, =0.2.0, =0.1.2, =0.2.2, =0.3.0, =0.28.0, =0.26.0, =0.26.0, =0.27.0 and more Source cves: CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 Source advisory: OSV:GHSA-4873-36H9-WV49...

@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by unknown CVE via mixme (>=0.0.1, <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-84P7-FH9C-6G8H...

37fis (>=1.0.0, <=1.0.2), 88slot-ap (1.0.0) +950 more potentially affected by CVE-2021-37701 via tar (>=3.0.0, <=4.4.15)

tar NPM version =3.0.0, =1.0.0, =0.1.3, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.1.0 - @adobe/commerce-cif-magento-graphql 1.0.0 and more Source cves: CVE-2021-37701 Source advisory: OSV:GHSA-9R2W-394V-53QC...

libX11 security update

CentOS Errata and Security Advisory CESA-2021:3296 An update for libX11 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

barberousse (>=0.1.0, <=0.1.6), borrowing_exerci (>=0.1.0, <=0.4.51) +19 more potentially affected by CVE-2021-36753 via bat (>=0.9.0, <=0.17.1)

bat CARGO version =0.9.0, =0.1.0, =0.1.0, =0.4.0, =0.6.0, =0.1.0, =0.2.0, =0.0.2-alpha.1, =0.16.0, =0.16.0, =0.1.0-rc1, =0.5.2, =0.12.0, =0.11.1, =0.12.0, =0.14.1 and more Source cves: CVE-2021-36753 Source advisory: OSV:GHSA-P24J-H477-76Q3...

abc-ecs (>=0.1.0, <=0.1.2), aframe (>=0.1.6, <=0.5.1) +283 more potentially affected by CVE-2021-38187 via anymap (>=0.10.3, <=0.12.1)

anymap CARGO version =0.10.3, =0.1.0, =0.1.6, =0.1.0-alpha.2, =0.8.0, =0.1.0, =5.0.0, =5.2.2, =0.0.1-alpha+3, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.2 - atomichooks 0.1.0 and more Source cves: CVE-2021-38187 Source advisory: OSV:GHSA-HC92-9H3M-C39J...