GHSA-9W9F-6MG8-JP7W vulnerabilities

Vulnerabilities for packages: mattermost-fips, grafana, gitea-fips, gitness, gitea...

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-43306 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-43306 Source advisory: GHSA-J9M2-H2PV-WVPH...

MAL-2022-618 Malicious code in @superbet-group/testsandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3c841d01eabde154bcbc04ef8e906e2a21f4ca241cae38408ca9748e5087c01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-59 Malicious code in @adam_baldwin/sample_4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 157fb357cdb3276c31d81267de4c1bb20d9e43865b3e5000e37953ed1a58cad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-94 Malicious code in @azure-test2/test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2768ecb9a8286366492bf441b8138e8288dcaa230ad23edc23ae4d1da9769413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7086 Malicious code in web3-util-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a079ce568f965c6fa2d0c2fa555d7c1956d79fa87d4e252ca54afaa5e677d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-C75V-2VQ8-878F vulnerabilities

Vulnerabilities for packages: solr, kubeflow-katib...

club.dawdler:dawdler-boot-web-undertow (>=0.0.1-jdk1.8-releases, <=0.1.6-jdk1.8-releases), club.dawdler:dawdler-boot-web-undertow-jsp (>=0.0.1-jdk1.8-releases, <=0.1.6-jdk1.8-releases) +53 more potentially affected by CVE-2021-3629 via io.undertow:undertow-core (1.4.28.final)

io.undertow:undertow-core MAVEN version 1.4.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - club.dawdler:dawdler-boot-web-undertow =0.0.1-jdk1.8-releases, =0.0.1-jdk1.8-releases,...

io.undertow:undertow-http2-test-suite (1.3.0.beta13), io.undertow:undertow-servlet (1.3.0.beta13) +20 more potentially affected by CVE-2021-3629 via io.undertow:undertow-core (1.3.0.beta13)

io.undertow:undertow-core MAVEN version 1.3.0.beta13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta13 - io.undertow:undertow-servlet 1.3.0.beta13 -...

io.undertow:undertow-servlet (1.0.0.beta29), io.undertow:undertow-websockets-jsr (1.0.0.beta29) potentially affected by CVE-2021-3629 via io.undertow:undertow-core (1.0.0.beta29)

io.undertow:undertow-core MAVEN version 1.0.0.beta29 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta29 - io.undertow:undertow-websockets-jsr 1.0.0.beta29 Source...

cn.dubby:itbus (>=0.2.7, <=0.2.8), com.github.gmcoringa:coordinator (0.0.2) +62 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.4.13.final)

io.undertow:undertow-core MAVEN version 1.4.13.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cn.dubby:itbus =0.2.7, =0.7.0.release, =0.7.0.release, =1.5.1, =4.4.0-rc1, =4.4.0-rc1, =4.4.0-rc1,...

ai.tock:bot-test (>=19.9.0, <=19.9.2), ai.tock:bot-test-base (>=19.9.0, <=19.9.2) +137 more potentially affected by CVE-2021-20328 via org.mongodb:mongodb-driver (>=3.11.0, <=3.11.2)

org.mongodb:mongodb-driver MAVEN version =3.11.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.1, =19.9.0, =19.9.1, =19.9.1, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.1, =19.9.2 and more Source cves: CVE-2021-20328 Source advisory: GHSA-RGHW-6PX2-FGWC...

com.yo1000:fake-keycloak-spring-security-adapter (>=1.0.0-keycloak-3.4, <=1.1.0-keycloak-3.4), de.adorsys.aspsp:aspsp-mock-server (>=1.2, <=1.10-rc1) +25 more potentially affected by CVE-2019-10169 via org.keycloak:keycloak-authz-client (3.4.3.final)

org.keycloak:keycloak-authz-client MAVEN version 3.4.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-authz-client and may be impacted: - com.yo1000:fake-keycloak-spring-security-adapter =1.0.0-keycloak-3.4, =1.2, =1.2, =1....

bert-multitask-learning (>=0.1.0, <=0.2.9), miscnn (>=0.6.0, <=0.28.0) potentially affected by CVE-2022-29213 via tensorflow-gpu (1.13.1)

tensorflow-gpu PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - bert-multitask-learning =0.1.0, =0.6.0, =0.28.0 Source cves: CVE-2022-29213 Source advisory: OSV:GHSA-5889-7V45-Q28M...

cellunet (>=0.1.0, <=0.2.2), color2vec (1.0.0) +12 more potentially affected by CVE-2022-29212 via tensorflow (1.8.0)

tensorflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cellunet =0.1.0, =0.0.5.1, =0.1.0, =0.1.1.1, =1.1.0, =0.9.0a7, =0.1.0, =0.11.0, =0.4.1, =0.5.2, =0.5.5 Source cves: CVE-2022-29212 Source...

abmarl (>=0.1.1, <=0.1.3), accuinsight (>=1.0.47, <=3.0.0) +517 more potentially affected by CVE-2022-29212 via tensorflow (>=2.0.0, <=2.6.3)

tensorflow PYPI version =2.0.0, =0.1.1, =1.0.47, =1.0.0, =1.2.0, =1.1.5, =0.0.1, =2.1.0, =0.5.6, =0.5.0, =0.1.0, =0.1.8 and more Source cves: CVE-2022-29212 Source advisory: GHSA-8WWM-6264-X792...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +34 more potentially affected by CVE-2022-29206 via tensorflow (>=2.7.0, <=2.7.1)

tensorflow PYPI version =2.7.0, =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =1.2.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 and more Source cves: CVE-2022-29206 Source advisory: GHSA-RC9W-5C64-9VQQ...

animl (>=1.1.2, <=1.1.4), audio-classification-models (1.0.1) +42 more potentially affected by CVE-2022-29205 via tensorflow-gpu (>=2.0.0, <=2.6.2)

tensorflow-gpu PYPI version =2.0.0, =1.1.2, =0.0.1, =0.0.9, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.1.5, =0.2.0, =0.2.1 and more Source cves: CVE-2022-29205 Source advisory: GHSA-54CH-GJQ5-4976...

animl (>=1.1.2, <=1.1.4), audio-classification-models (1.0.1) +42 more potentially affected by CVE-2022-29199 via tensorflow-gpu (>=2.0.0, <=2.6.2)

tensorflow-gpu PYPI version =2.0.0, =1.1.2, =0.0.1, =0.0.9, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.1.5, =0.2.0, =0.2.1 and more Source cves: CVE-2022-29199 Source advisory: GHSA-P9RC-RMR5-529J...

abmarl (>=0.1.1, <=0.1.3), accuinsight (>=1.0.47, <=3.0.0) +517 more potentially affected by CVE-2022-29191 via tensorflow (>=2.0.0, <=2.6.3)

tensorflow PYPI version =2.0.0, =0.1.1, =1.0.47, =1.0.0, =1.2.0, =1.1.5, =0.0.1, =2.1.0, =0.5.6, =0.5.0, =0.1.0, =0.1.8 and more Source cves: CVE-2022-29191 Source advisory: GHSA-FV25-WRFF-WF86...