5846 matches found
@fanswoo/core (>=1.0.0, <=1.3.8), brws-upload (>=1.0.2, <=1.0.3) +4 more potentially affected by unknown CVE via jquery-mobile (>=1.4.1, <=1.5.0-alpha.1)
jquery-mobile NPM version =1.4.1, =1.0.0, =1.0.2, =1.0.0, =1.0.2, =2.0.0, =0.0.1, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-FJ93-7WM4-8X2G...
bismagul_project08_quiz (>=1.0.0, <=1.0.1), cli-advanture-game (1.0.0) +5 more potentially affected by unknown CVE via calk (0.0.1-security)
calk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on calk and may be impacted: - bismagulproject08quiz =1.0.0, =1.0.0, =1.0.0, =1.0.1 - todoterminallist 1.0.0 - zhs-cli-advanture-game 1.0.0 Source cves: unknown CVE Source...
@planningcenter/icons (>=3.0.0-7, <=3.0.0-15), feathers-commands (>=0.0.1, <=0.1.4) +11 more potentially affected by unknown CVE via smart-extend (1.7.4)
smart-extend NPM version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on smart-extend and may be impacted: - @planningcenter/icons =3.0.0-7, =0.0.1, =1.0.4, =1.0.2, =0.0.1, =1.0.0, =1.0.0, =1.0.2, =1.0.0, =0.1.0, =1.0.1, =2.0.0, =3.0.5 Source cve...
@achingbrain/ngrok (0.2.2), @atomist/sdm-automation (>=0.1.16-master.20181116180810, <=0.1.59-master.20200611224542) +603 more potentially affected by unknown CVE via decompress-zip (>=0.0.2, <=0.2.0)
decompress-zip NPM version =0.0.2, =0.1.16-master.20181116180810, =14.0.5, =0.1.2, =1.2.6, =1.0.1, =1.0.0, =1.1.1, =5.0.1, =1.0.0, =5.2.1, =5.3.0 - @paulcbetts/squirrel-windows 1.2.1 - @pgswe/ics.js 0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-73V8-V6G4-VRPM...
@colmena/colmena-loopback (>=0.0.4, <=0.2.1), loopback-component-meta (1.0.0) +2 more potentially affected by unknown CVE via loopback (>=2.8.6, <=2.36.2)
loopback NPM version =2.8.6, =0.0.4, =0.2.1 - loopback-component-meta 1.0.0 - loopback-connector-couchbase 1.0.6 - loopback-connector-couchbase-mappingport 1.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-8WGC-JJVV-CV6V...
@colmena/api (0.1.0), @sp-temp/composer-rest-server (>=0.20.8, <=0.20.14) +9 more potentially affected by unknown CVE via loopback (>=3.0.0-alpha.2, <=3.18.2)
loopback NPM version =3.0.0-alpha.2, =0.20.8, =0.20.8, =0.13.0-beta.1, =0.13.2-20171004211143, =0.13.2-20171004211143, =0.0.1, =0.13.2-20171004211143, =1.0.0, =0.0.5, =0.0.39 Source cves: unknown CVE Source advisory: OSV:GHSA-8WGC-JJVV-CV6V...
@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)
swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G336-C7WV-8HP3...
Open Redirect in hekto
Withdrawn: Duplicate of GHSA-qmm9-x5gr-4gfm...
Cross-Site Scripting in keystone
Withdrawn: Duplicate of GHSA-7qcx-jmrc-h2rr...
Regular Expression Denial of Service in highcharts
Withdrawn: Duplicate of GHSA-xmc8-cjfr-phx3...
Sandbox Breakout / Arbitrary Code Execution in safer-eval
Withdrawn: Duplicate of GHSA-hgch-jjmr-gp7w...
Denial of Service in protobufjs
Withdrawn: Duplicate of GHSA-762f-c2wg-m8c8...
Denial of Service in https-proxy-agent
Withdrawn: Duplicate of GHSA-8g7p-74h8-hg48...
Regular Expression Denial of Service in is-my-json-valid
Withdrawn: Duplicate of GHSA-f522-ffg8-j8r6...
Withdrawn
Withdrawn: duplicate of GHSA-2m39-62fm-q8r3...
Withdrawn
Withdrawn: duplicate of GHSA-wjr4-2jgw-hmv8...
coturn < 4.5.1.3 Information Disclosure Vulnerability
coturn is prone to an information disclosure vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CVE-2020-15084
In express-jwt NPM package up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization bypass. You are affected by this...
