@abstract.tech/brad-cli (>=0.0.4, <=1.0.1), @bandwidth/shared-components (>=6.0.2, <=6.2.2) +106 more potentially affected by CVE-2020-36632 via flat (>=4.0.0, <=4.1.0)

flat NPM version =4.0.0, =0.0.4, =6.0.2, =1.0.7, =4.2.2, =1.2.10, =2.1.31, =1.0.11, =2.0.11, =1.1.11, =1.0.27, =2.0.8, =1.0.0, =0.0.6, =0.0.1, =0.0.2, =0.0.8 and more Source cves: CVE-2020-36632 Source advisory: SNYK:JS-FLAT-596927...

@badgeup/badgeup-ionic-client (>=1.0.1, <=1.0.3), @codedungeon/code-assistant (>=0.0.1, <=0.0.4-dev.53) +42 more potentially affected by CVE-2020-8116 via dot-prop (>=4.0.0, <=4.2.0)

dot-prop NPM version =4.0.0, =1.0.1, =0.0.1, =0.0.1-dev.9, =0.0.3, =0.0.4, =1.1.0, =1.0.0-alpha.5, =0.10.1, =3.0.0, =1.0.0-beta.1, =0.1.12, =1.0.0, =1.0.2 - falcor-array 0.0.1 - flipcache 0.0.1 and more Source cves: CVE-2020-8116 Source advisory: OSV:GHSA-FF7X-QRG7-QGGM...

Introspection in schema validation in Apollo Server

We encourage all users of Apollo Server to read this advisory in its entirety to understand the impact. The Resolution section contains details on patched versions. Impact If subscriptions: false is passed to the ApolloServer constructor options, there is no impact. If implementors were not...

@enhavo/form (>=0.1.2, <=0.8.5), @enhavo/translation (>=0.8.4, <=0.8.5) +22 more potentially affected by CVE-2019-1010091 via tinymce (>=5.0.6, <=5.2.1)

tinymce NPM version =5.0.6, =0.1.2, =0.8.4, =0.18.0, =15.0.1, =0.0.46, =0.0.14, =1.0.11-beta.17, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2019-1010091 Source advisory: OSV:GHSA-C78W-2GW7-GJV3...

1st_test_yamineo (0.1.0), @akaterra.co/apidog (>=0.0.4, <=0.0.5) +885 more potentially affected by unknown CVE via markdown (>=0.1.2, <=0.5.0)

markdown NPM version =0.1.2, =0.0.4, =0.0.102, =0.1.0, =0.4.0, =0.0.5, =2.1.1, =2.0.0, =0.0.2, =2.1.1, =2.1.1, =2.1.1, =2.1.1, =2.9.14 and more Source cves: unknown CVE Source advisory: SNYK:JS-MARKDOWN-560793...

java security update

CentOS Errata and Security Advisory CESA-2020:1507 An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

RHEL 7 : qemu-kvm-ma (RHSA-2020:1505)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1505 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-ma packages provide the...

berkano:berkano-bookmarks (>=dev-20050722, <=20050901-2), br.com.thiagomoreira.bancodobrasil:credit-card-report-converter (>=0.1, <=1.0.0) +213 more potentially affected by unknown CVE via freemarker:freemarker (>=2.3.1, <=2.3.9)

freemarker:freemarker MAVEN version =2.3.1, =dev-20050722, =0.1, =1.7.0, =0.1, =0.1.3, =2.0.4, =1.0.0.release, =9.00.2110.07.220316, =9.00.2112.03.220528 - com.github.youribonnaffe.gradle.format:com.github.youribonnaffe.gradle.format.gradle.plugin 1.2 - com.gnizr:gnizr-robot 2.4.0-m4 -...

wireshark security update

CentOS Errata and Security Advisory CESA-2020:1047 An update for wireshark is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

qt security update

CentOS Errata and Security Advisory CESA-2020:1172 An update for qt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

bluez security update

CentOS Errata and Security Advisory CESA-2020:1101 An update for bluez is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

icu, libicu security update

CentOS Errata and Security Advisory CESA-2020:0896 An update for icu is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

@fanatic/oracle (>=1.0.0, <=1.3.0), @ghg/amplifier (>=0.0.2, <=0.5.7) +8 more potentially affected by CVE-2020-7609 via node-rules (>=3.2.0, <=4.0.2)

node-rules NPM version =3.2.0, =1.0.0, =0.0.2, =0.0.2, =0.0.13, =0.0.1, =0.0.1, =0.2.7, =0.2.2, =0.2.3 Source cves: CVE-2020-7609 Source advisory: SNYK:JS-NODERULES-560426...

@antv/chart-linter (>=1.1.5, <=1.1.6), @dljsbook/data (>=0.3.2, <=0.6.1) +59 more potentially affected by CVE-2019-10806 via vega-util (>=1.1.4, <=1.12.2)

vega-util NPM version =1.1.4, =1.1.5, =0.3.2, =0.6.0, =0.0.4, =1.0.0, =0.8.0, =1.0.0-alpha.4, =0.0.0-placeholder, =0.2.4-beta.1, =0.4.3-dev10, =1.0.0, =1.4.0, =5.0.0, =6.0.2-alpha.0 and more Source cves: CVE-2019-10806 Source advisory: SNYK:JS-VEGAUTIL-559223...

@choiceform/ui-foundation (>=0.16.3, <=0.16.6), @gulpjs/update-template (0.1.0) +15 more potentially affected by CVE-2019-10776 via git-diff-apply (>=0.0.5, <=0.22.1)

git-diff-apply NPM version =0.0.5, =0.16.3, =0.1.0, =0.1.0, =0.8.0, =0.1.9, =0.0.1, =0.7.1, =0.2.2, =0.2.3 - ember-precondition 0.2.0 - ember-promise-helpers 1.0.8 and more Source cves: CVE-2019-10776 Source advisory: OSV:GHSA-84CM-V6JP-GJMR...

@mdslab/iotronic-lightning-rod (>=2.3.1, <=2.3.6), @servicenow/cli-archetype-dev (>=17.0.2, <=24.0.1) +14 more potentially affected by CVE-2019-10783 via lsof (0.1.0)

lsof NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on lsof and may be impacted: - @mdslab/iotronic-lightning-rod =2.3.1, =17.0.2, =17.0.2, =17.0.2, =0.1.0, =0.0.2, =0.0.1, =0.2.2, =0.11.0, =0.3.5, =0.0.1, =2.0.9, =2.0.12 and more Sourc...

10er10 (0.23.0), 1405-authtokens (>=1.0.1, <=1.0.5) +3112 more potentially affected by CVE-2016-1000236 via cookie-signature (>=1.0.0, <=1.0.3)

cookie-signature NPM version =1.0.0, =1.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =1.0.6 - @axerunners/p2pool-scanner 0.0.2 - @azu/api-mock 1.0.0 - @bear-fe/dbl 1.0.8 and more Source cves: CVE-2016-1000236 Source advisory: OSV:GHSA-92VM-WFM5-MXVV...

java security update

CentOS Errata and Security Advisory CESA-2019:3127 An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20190920)

Security Fixes : - A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway,...

nspr, nss security update

CentOS Errata and Security Advisory CESA-2019:2237 An update for nss, nss-softokn, nss-util, and nspr is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whi...