org.grails:grails-datastore-gorm-mongo (>=1.0.0.rc5, <=1.0.0.release), org.grails:grails-datastore-mongo (>=1.0.0.rc5, <=1.0.0.release) +2 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.0.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:grails-datastore-gorm-mongo =1.0.0.rc5, =1.0.0.rc5,...

org.grails:grails-datastore-gorm-mongo (>=1.1.0.release, <=1.2.0.release), org.grails:grails-datastore-mongo (>=1.1.0.release, <=1.2.0.release) +2 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.1.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:grails-datastore-gorm-mongo =1.1.0.release,...

org.inigma.shared:inigma-mongo (>=0.6.1, <=0.10.0), org.springframework.data:spring-data-mongodb-cross-store (1.1.2.release) potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.1.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.inigma.shared:inigma-mongo =0.6.1, =0.10.0 -...

com.github.jknack:mwa-mongo (0.4.0), com.github.jknack:mwa-morphia (0.4.0) +1 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.2.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo 0.4.0 - com.github.jknack:mwa-morph...

com.github.jknack:mwa-mongo (>=0.4.1, <=0.4.2), com.github.jknack:mwa-morphia (>=0.4.1, <=0.4.2) +7 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.3.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo =0.4.1, =0.4.1, =4.1.0, =3.0.6,...

MAL-2022-1519 Malicious code in bfx-facs-db-mongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7673e8b6a14af3814a12ce10f7a83cb13821adae60918e914bca452b1bf8cc7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in bfx-facs-db-mongo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in bfx-facs-db-mongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7673e8b6a14af3814a12ce10f7a83cb13821adae60918e914bca452b1bf8cc7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1480 Malicious code in bcoin-mongo-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87b09d27793d80c018b01839a3055f8291ea7e7399a2986a040821aa9f141dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in bcoin-mongo-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in bcoin-mongo-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87b09d27793d80c018b01839a3055f8291ea7e7399a2986a040821aa9f141dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1481 Malicious code in bcoin-mongo-models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60b502cd2230d7460f774b28808ee0919a97069cc001cd8dc7465a3a0f8ba937 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in bcoin-mongo-models

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in bcoin-mongo-models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60b502cd2230d7460f774b28808ee0919a97069cc001cd8dc7465a3a0f8ba937 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mongo.rabbit.bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef04fad2f4cc89e04245dbb8e3687a649270fe37322fcdb204d24c2a54398277 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.twitter.ambrose:ambrose-common (>=0.2.0, <=0.3.0), com.twitter.ambrose:ambrose-hive (>=0.2.6, <=0.3.0) +8 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (0.22.0)

org.apache.hadoop:hadoop-common MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - com.twitter.ambrose:ambrose-common =0.2.0, =0.2.6, =0.2.0, =1.0.0, =1.0.5 -...

PT-2022-4943 · Unknown · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 5 Rocket.Chat versions prior to 4.8.2 Rocket.Chat versions prior to 4.7.5 Description: An information disclosure issue exists due to insufficient input validation in the actionLinkHandler method, allowing Message...

ch.software-atelier:simpleflex-auth (>=2.1.1, <=2.2.4), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +227 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.11.0, <=3.11.2)

org.mongodb:mongo-java-driver MAVEN version =3.11.0, =2.1.1, =0.1.28, =0.1.0, =1.0.0-rc1, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.1.8, =5.1.8, =5.6.2, =5.6.4 and more Source cves: CVE-2021-20328 Source advisory: GHSA-RGHW-6PX2-FGWC...

ch.software-atelier:simpleflex-auth (>=2.1.1, <=2.2.4), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +227 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.11.0, <=3.11.2)

org.mongodb:mongo-java-driver MAVEN version =3.11.0, =2.1.1, =0.1.28, =0.1.0, =1.0.0-rc1, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.1.8, =5.1.8, =5.6.2, =5.6.4 and more Source cves: CVE-2021-20328 Source advisory: OSV:GHSA-RGHW-6PX2-FGWC...

ai.tripl:arc-mongodb-pipeline-plugin_2.12 (>=1.3.0, <=1.4.0), be.personify.iam:personify-scim-server (>=1.1.5.release, <=1.2.5.release) +346 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.12.0, <=3.12.7)

org.mongodb:mongo-java-driver MAVEN version =3.12.0, =1.3.0, =1.1.5.release, =1.3.0, =1.3.0, =1.2.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =3.13.0, =3.13.0, =3.15.3, =3.16.3 - ch.exense.step:step-controller-plugins-measurements-jdbc 3.15.3 - ch.exense.step:step-controller-plugins-measurements-log 3.15....