Denial Of Service (DoS) Through Infinite Loop

github.com/appc/docker2aci is vulnerable to denial of service DoS attacks. A local attacker could cause an infinite loop with a crafted image due to lack of essential checks in the cyclic dependency chain in getAncestry function resulting in an application crash...

@aliyun-sls/sql (>=0.2.9-dev-10, <=0.3.10-dev-9), @dpjayasekara/tscore (>=0.0.1, <=0.1.1) +29 more potentially affected by CVE-2020-7596 +1 more via codecov (>=3.0.0, <=3.6.1)

codecov NPM version =3.0.0, =0.2.9-dev-10, =0.0.1, =0.0.29, =1.0.10, =1.0.18, =1.0.0, =1.7.0, =1.0.1, =1.0.8, =0.1.1, =0.1.6, =0.1.1, =0.0.1, =1.17.0, =1.22.16 and more Source cves: CVE-2020-7596, CVE-2020-7597 Source advisory: SNYK:JS-CODECOV-548879...

@hpcc-js/dgrid-shim (>=0.1.10, <=0.1.12), bryaktestgrid (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2019-10785 via dojox (>=1.11.2, <=1.13.0)

dojox NPM version =1.11.2, =0.1.10, =0.0.1, =0.1.0, =0.0.1, =0.5.24 Source cves: CVE-2019-10785 Source advisory: SNYK:JS-DOJOX-548257...

bincrypt (>=0.3.0, <=0.3.1), fcp_cryptoauth (>=0.1.0, <=0.4.0) +12 more potentially affected by unknown CVE via rust_sodium (>=0.1.2, <=0.10.2)

rustsodium CARGO version =0.1.2, =0.3.0, =0.1.0, =0.0.1-alpha1, =0.1.0, =0.1.0, =1.0.0, =0.4.0, =0.7.0, =0.2.0, =0.10.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0003...

@aliyun-sls/sql (>=0.2.9-dev-10, <=0.3.10-dev-9), @dpjayasekara/tscore (>=0.0.1, <=0.1.1) +29 more potentially affected by CVE-2020-7596 via codecov (>=3.0.0, <=3.6.1)

codecov NPM version =3.0.0, =0.2.9-dev-10, =0.0.1, =0.0.29, =1.0.10, =1.0.18, =1.0.0, =1.7.0, =1.0.1, =1.0.8, =0.1.1, =0.1.6, =0.1.1, =0.0.1, =1.17.0, =1.22.16 and more Source cves: CVE-2020-7596 Source advisory: SNYK:JS-CODECOV-543183...

@choiceform/ui-foundation (>=0.16.3, <=0.16.6), @gulpjs/update-template (0.1.0) +15 more potentially affected by CVE-2019-10776 via git-diff-apply (>=0.0.5, <=0.22.1)

git-diff-apply NPM version =0.0.5, =0.16.3, =0.1.0, =0.1.0, =0.8.0, =0.1.9, =0.0.1, =0.7.1, =0.2.2, =0.2.3 - ember-precondition 0.2.0 - ember-promise-helpers 1.0.8 and more Source cves: CVE-2019-10776 Source advisory: SNYK:JS-GITDIFFAPPLY-540774...

@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +81 more potentially affected by CVE-2019-16777 via npm (>=6.0.0, <=6.13.2)

npm NPM version =6.0.0, =0.0.1, =0.1.2, =0.4.3, =1.0.0-beta.0, =1.0.0-beta.15, =1.1.58, =3.2.2, =2.0.0, =0.0.1, =3.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2019-16777 Source advisory: OSV:GHSA-4328-8HGF-7WJR...

generator-jhipster-grpc (>=0.19.0, <=0.19.1), generator-jhipster-kotlin (>=0.8.0, <=1.1.0) +6 more potentially affected by unknown CVE via generator-jhipster (>=6.0.1, <=6.3.0)

generator-jhipster NPM version =6.0.1, =0.19.0, =0.8.0, =2.0.0, =2.1.5, =0.0.2, =1.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-MC84-XR9P-938R...

@6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2), @jamesbliss/react-flickity (>=1.0.0, <=1.4.0) +26 more potentially affected by CVE-2019-5448 via yarn (>=1.0.2, <=1.16.0)

yarn NPM version =1.0.2, =1.0.2-6river, =1.0.0, =1.9.9-1, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.0-semantic-release, =1.9.7, =5.0.0-ts.4, =0.0.4, =0.0.14 and more Source cves: CVE-2019-5448 Source advisory: SNYK:JS-YARN-451571...

amethyst_derive (>=0.4.0, <=0.5.0), amethyst_test (>=0.2.0, <=0.3.0) +81 more potentially affected by unknown CVE via boxfnonce (>=0.0.3, <=0.1.1)

boxfnonce CARGO version =0.0.3, =0.4.0, =0.2.0, =0.1.0, =0.2.5, =0.5.0, =0.3.1, =0.2.0, =0.5.0, =0.0.0, =3.0.0, =0.1.3, =0.0.1, =0.4.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0040...

contentful-import (5.0.2-beta1), http_bouncer_client (>=1.0.1, <=1.0.3) +1 more potentially affected by unknown CVE via http-proxy-agent (2.0.0)

http-proxy-agent NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy-agent and may be impacted: - contentful-import 5.0.2-beta1 - httpbouncerclient =1.0.1, =1.0.3 - request-light 0.2.2 Source cves: unknown CVE Source advisory:...

afterburn (4.1.0), aoaddons (>=0.1.1, <=0.1.6) +50 more potentially affected by CVE-2019-25054 via pnet (>=0.12.0, <=0.26.0)

pnet CARGO version =0.12.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.4.0 and more Source cves: CVE-2019-25054 Source advisory: OSV:RUSTSEC-2019-0037...

auth (0.1.0), dat-network-protocol (>=0.1.3, <=0.1.4) +16 more potentially affected by CVE-2019-15544 via protobuf (>=1.0.24, <=1.7.4)

protobuf CARGO version =1.0.24, =0.1.3, =0.3.1, =0.3.1, =1.7.2, =0.3.1, =0.0.1, =0.1.0, =0.1.2, =0.1.4 and more Source cves: CVE-2019-15544 Source advisory: OSV:RUSTSEC-2019-0003...

@any4/model (>=0.0.1, <=1.2.4), @boundstate/hapi-typeorm (0.0.1) +35 more potentially affected by unknown CVE via typeorm (>=0.0.2-alpha.43, <=0.1.14)

typeorm NPM version =0.0.2-alpha.43, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.6.2, =0.1.2, =0.1.19, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W7Q7-VJP8-7JV4...

@byted/beejs (>=1.1.2, <=1.2.18), @wenbo/fis3-deploy-zip (1.0.0) +43 more potentially affected by unknown CVE via concat-stream (>=1.4.1, <=1.4.8)

concat-stream NPM version =1.4.1, =1.1.2, =0.0.0, =0.3.4, =0.0.0, =0.0.1, =1.0.0, =0.0.19, =0.0.1, =1.0.0, =1.0.0, =2.0.0, =0.0.7, =0.0.69 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G74R-FFVR-5Q9F...

@troveng/trov-web-config (1.0.5), @zce/ghost-cli (>=1.9.7, <=1.9.8) +13 more potentially affected by unknown CVE via generate-password (>=1.3.0, <=1.4.0)

generate-password NPM version =1.3.0, =1.9.7, =1.0.2, =1.16.0, =0.1.4, =0.1.11, =1.4.0, =0.6.0, =0.9.11, =0.0.2, =1.6.0, =4.20.9, =0.9.0, =1.0.79, =1.4.0, =1.11.0 Source cves: unknown CVE Source advisory: OSV:GHSA-6QQF-VVCR-7QRV...

0.8.18-p11 (0.8.18-p12), 37fis (>=1.0.0, <=1.0.2) +620 more potentially affected by CVE-2018-20834 via tar (>=2.0.0, <=2.2.1)

tar NPM version =2.0.0, =1.0.0, =1.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.1, =0.1.3, =0.4.3, =0.18.0, =1.1.1, =2.0.6, =2.1.0 and more Source cves: CVE-2018-20834 Source advisory: OSV:GHSA-J44M-QM6P-HP7M...

accepted (>=0.2.0, <=0.3.2), aigc_api (5.1.2) +505 more potentially affected by unknown CVE via typemap (0.3.3)

typemap CARGO version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0039...

@adobe/adobe-photoshop-api-sdk (>=1.1.0, <=1.1.1), @adobe/aio-lib-analytics (2.0.0) +23 more potentially affected by unknown CVE via fast-json-patch (>=2.0.4, <=2.1.0)

fast-json-patch NPM version =2.0.4, =1.1.0, =2.0.3, =1.0.3, =1.0.3, =0.0.4-beta.1, =2.0.2, =1.2.2, =0.3.0-next.1, =0.1.0, =2.1.32, =1.0.0, =1.2.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-FASTJSONPATCH-595663...

2co-client (>=0.0.11, <=0.0.12), 4sq (0.1.2) +860 more potentially affected by CVE-2017-16005 via http-signature (>=0.9.7, <=0.9.11)

http-signature NPM version =0.9.7, =0.0.11, =0.0.0, =0.1.43, =0.1.1, =0.1.1, =1.0.0-0, =0.0.2, =1.0.0-alpha.4, =1.0.0-alpha.3, =1.0.8, =1.0.9 and more Source cves: CVE-2017-16005 Source advisory: OSV:GHSA-Q257-VV4P-FG92...