io.github.graphql-java:graphql-java-annotations (>=5.0.4, <=5.0.7), net.nemerosa.ontrack:ontrack-extension-git (>=experimental-pipeline-a6e0b79, <=3.34.17) +7 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (5.0)

com.graphql-java:graphql-java MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.github.graphql-java:graphql-java-annotations =5.0.4, =experimental-pipeline-a6e0b79,...

arcus (1.2.5), gstorm (>=0.5.0, <=0.6.1) +2 more potentially affected by CVE-2023-26145 via pydash (4.8.0)

pydash PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydash and may be impacted: - arcus 1.2.5 - gstorm =0.5.0, =0.1.1, =2.0.0, =2.0.3 Source cves: CVE-2023-26145 Source advisory: OSV:GHSA-8MJR-6C96-39W8...

arcus (1.2.5), gstorm (>=0.5.0, <=0.6.1) +2 more potentially affected by CVE-2023-26145 via pydash (4.8.0)

pydash PYPI version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydash and may be impacted: - arcus 1.2.5 - gstorm =0.5.0, =0.1.1, =2.0.0, =2.0.3 Source cves: CVE-2023-26145 Source advisory: OSV:PYSEC-2023-179...