sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)

md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-HGR5-82RC-P936...

@chris-sorrells/snowflakes (1.0.0), @haukeland-mgm/plateviewer (1.0.2) +25 more potentially affected by unknown CVE via buefy (>=0.3.2, <=0.7.1)

buefy NPM version =0.3.2, =0.1.47, =0.0.1, =1.2.0, =3.2.160, =1.0.13, =1.0.0, =1.0.0, =0.6.0, =1.0.1, =1.0.0, =0.0.2, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XWQW-RF2Q-XMHF...

@cicctencent/tars-deploy (>=1.0.1, <=1.0.10), @conga/framework-profiler (>=2.0.0, <=2.0.5) +12 more potentially affected by CVE-2017-16034 via pidusage (>=1.0.1, <=1.1.4)

pidusage NPM version =1.0.1, =1.0.1, =2.0.0, =0.0.1, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =0.1.4-rc.1, =0.1.4 - shady-background 0.0.1 - shady-worker 0.0.4 - trek-status-monitor 0.3.3 - wf-pm2 1.1.3 Source cves: CVE-2017-16034 Source advisory: OSV:GHSA-HFQ9-RFPV-J8R8...

adafruit_gps (>=0.1.0, <=0.4.1), afetch (>=0.0.2, <=0.0.3) +891 more potentially affected by unknown CVE via mach (>=0.0.3, <=0.3.2)

mach CARGO version =0.0.3, =0.1.0, =0.0.2, =0.2.0, =0.1.4, =0.1.1, =0.1.1, =0.1.0, =0.5.0, =0.1.0, =0.8.0, =0.3.0, =0.8.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0168...

@10yun/cv-mobile-ui (0.3.20), @accordproject/cicero-cli (>=0.3.4, <=0.8.0) +496 more potentially affected by CVE-2020-14966 via jsrsasign (>=4.8.2, <=8.0.18)

jsrsasign NPM version =4.8.2, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.0.61-20180603194157, =0.0.61-20180603194157, =0.0.61-20180603194157, =0.14.7, =2.0.1-alpha.0, =1.0.0-beta.0, =1.0.0-beta.0, =2.0.1-alpha.0, =1.0.0-beta.0, =1.2.1-alpha.0 and more Source cves: CVE-2020-14966 Source advisory:...

accepted (>=0.2.0, <=0.3.1), acme-client (>=0.1.0, <=0.2.0) +1501 more potentially affected by CVE-2020-35881 via traitobject (>=0.0.1, <=0.1.1)

traitobject CARGO version =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.2.0, =0.4.6 and more Source cves: CVE-2020-35881 Source advisory: OSV:RUSTSEC-2020-0027...

@neuraflash/einstein-lang (1.0.0), @safwanuk/sk-npm-hello-world (>=6.0.1, <=6.0.2) +38 more potentially affected by CVE-2020-7646 via curlrequest (1.0.1)

curlrequest NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on curlrequest and may be impacted: - @neuraflash/einstein-lang 1.0.0 - @safwanuk/sk-npm-hello-world =6.0.1, =1.0.2, =0.0.1, =1.0.0, =1.0.25, =0.0.1, =0.4.1, =1.0.0, =0.0.1,...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +51 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5, <=4.4.3)

bigint CARGO version =1.0.5, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.3.0, =0.1.2, =0.1.0, =0.1.0, =0.3.2, =0.0.0, =0.1.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:RUSTSEC-2020-0025...

a2d (>=0.1.0, <=0.1.11), aart (>=0.1.0, <=0.1.1) +521 more potentially affected by unknown CVE via stb_truetype (>=0.1.2, <=0.3.1)

stbtruetype CARGO version =0.1.2, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.4.0, =0.3.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0020...

ula-vp-controller (0.1.0) potentially affected by unknown CVE via vp-toolkit (0.1.1)

vp-toolkit NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vp-toolkit and may be impacted: - ula-vp-controller 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-P94W-42G3-F7H4...

@colmena/api (0.1.0), @colmena/colmena-loopback (>=0.0.4, <=0.2.1) +54 more potentially affected by CVE-2019-15597 via node-df (>=0.1.1, <=0.1.4)

node-df NPM version =0.1.1, =0.0.4, =0.0.1, =1.1.0, =3.0.0-alpha.8, =3.0.0-alpha.1, =3.0.0-alpha.0, =0.1.0, =1.30.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.1.3 and more Source cves: CVE-2019-15597 Source advisory: OSV:GHSA-WP7M-MRVF-599C...

ansi2png-rs (>=0.1.0, <=0.1.1), artano (>=0.2.9, <=0.3.5) +85 more potentially affected by unknown CVE via rulinalg (>=0.1.0, <=0.4.2)

rulinalg CARGO version =0.1.0, =0.1.0, =0.2.9, =14.1.0, =0.1.5, =0.1.0, =0.1.0, =0.4.0, =1.0.0, =0.3.2, =0.3.3 - dali 0.3.0 - dcc-lsystem 0.6.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0147...

aart (>=0.1.0, <=0.1.1), advancedresearch-higher_order_point (>=0.1.0, <=0.3.0) +624 more potentially affected by unknown CVE via lzw (>=0.5.0, <=0.10.0)

lzw CARGO version =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.6.0, =0.6.0, =0.5.0, =0.6.0, =0.7.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0144...

svg-sketch-pdf (>=1.0.12, <=1.0.28) potentially affected by unknown CVE via rgb2hex (0.1.0)

rgb2hex NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on rgb2hex and may be impacted: - svg-sketch-pdf =1.0.12, =1.0.28 Source cves: unknown CVE Source advisory: OSV:GHSA-65P8-3HM4-H9H8...

CVE-2019-14696

CVE-2019-14696 affects Open-School 3.0 and Community Edition 2.3, exposing a Cross-Site Scripting (XSS) flaw. The vulnerability occurs in the GET parameter osv/index.php?r=students/guardians/create id, allowing injection of arbitrary JavaScript in the victim’s browser. This could enable session h...

PT-2019-13790

Name of the Vulnerable Software and Affected Versions Open-School version 3.0 Community Edition version 2.3 Description The issue allows for XSS via the "osv/index.php?r=students/guardians/create" API endpoint, specifically through the id parameter. Recommendations For Open-School version 3.0,...

CVE-2019-14696: Improper Neutralization of Input During Web Page Generation

Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter...

archivefs (1.0.0), arcon_compiler (>=0.1.0, <=0.1.1) +42 more potentially affected by unknown CVE via boxfnonce (>=0.0.3, <=0.1.1)

boxfnonce CARGO version =0.0.3, =0.1.0, =0.2.5, =0.5.0, =0.2.0, =0.5.0, =0.2.0, =3.0.0, =0.4.0, =0.1.12, =0.0.1, =0.1.2, =0.1.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0040...

alpha-g-analysis (0.1.0), apecrunch (>=0.0.1, <=0.0.3) +155 more potentially affected by CVE-2019-15547 +1 more via ncurses (>=5.94.0, <=6.0.1)

ncurses CARGO version =5.94.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0 and more Source cves: CVE-2019-15547, CVE-2019-15548 Source advisory: OSV:RUSTSEC-2019-0006...

askii (>=0.1.0, <=0.5.4), atomsh (0.1.0) +54 more potentially affected by CVE-2019-15546 via pancurses (>=0.6.0, <=0.17.0)

pancurses CARGO version =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.1.0, =0.1.0, =0.16.0, =0.4.0, =0.13.1, =0.2.0, =0.1.0, =0.1.2 and more Source cves: CVE-2019-15546 Source advisory: OSV:RUSTSEC-2019-0005...