com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +1 more potentially affected by CVE-2023-28669 via org.jenkins-ci.plugins:jacoco (>=1.0.9, <=1.0.19)

org.jenkins-ci.plugins:jacoco MAVEN version =1.0.9, =1.7.2, =1.0.0, =1.7, =1.12.3 Source cves: CVE-2023-28669 Source advisory: MEND:CVE-2023-28669...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.5.0), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.5.0) +1 more potentially affected by CVE-2023-1454 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.5.0)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.0 Source cves: CVE-2023-1454 Source advisory: OSV:GHSA-J72F-4HGP-3MWC...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.5.0), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.5.0) +1 more potentially affected by CVE-2023-1454 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.5.0)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.0 Source cves: CVE-2023-1454 Source advisory: GHSA-J72F-4HGP-3MWC...

com.groupon.jenkins-ci.plugins:dotci-fig-template (>=1.0.1, <=1.0.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.1.1) +6 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.518)

org.jenkins-ci.main:jenkins-core MAVEN version 1.518 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-fig-template =1.0.1, =1.0.0, =1.1, =1.2 -...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2023-27900 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

de.adorsys.oauth:oauth-wildfly-support (>=0.12, <=0.35), io.undertow:undertow-servlet (1.1.8.final) +4 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.1.8.final)

io.undertow:undertow-core MAVEN version 1.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.adorsys.oauth:oauth-wildfly-support =0.12, =7.12.0, =1.2.6.release, =1.2.7.release -...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.4.2, <=1.7.1) +3 more potentially affected by CVE-2023-25761 via org.jenkins-ci.plugins:junit (1.8)

org.jenkins-ci.plugins:junit MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack =1.7.2, =1.4.2, =2.0, =2.0.1, =2.2.13, =2.2.17...

SUSE CVE-2019-11328

An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system e.g. ssh could exploit this vulnerability due to insecure permissions allowing a user to edit files within /run/singularity/instances/sing//. The manipulation of those files ca...

org.nutz:nutzboot-starter-tio (>=2.2.3, <=2.2.5), org.nutz:nutzboot-starter-tio-mvc (>=2.2.3, <=2.2.5) +8 more potentially affected by CVE-2023-24162 via cn.hutool:hutool-all (4.1.2)

cn.hutool:hutool-all MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - org.nutz:nutzboot-starter-tio =2.2.3, =2.2.3, =2.2.5 - org.t-io:tio-core 3.1.3.v20180720-release -...

com.grjky:cloud-starter (1.0.0), io.github.jos12580:cloud-grjky-starter (1.0.0) potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.3)

cn.hutool:hutool-all MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.grjky:cloud-starter 1.0.0 - io.github.jos12580:cloud-grjky-starter 1.0.0 Source cves: CVE-2023-24163 Source advisor...

com.github.tuhe32:seed-spring-boot-starter (>=0.1.2, <=0.1.4) potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.4.3)

cn.hutool:hutool-all MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.github.tuhe32:seed-spring-boot-starter =0.1.2, =0.1.4 Source cves: CVE-2023-24163 Source advisory:...

com.github.tuhe32:seed-spring-boot-starter (>=0.1.2, <=0.1.4) potentially affected by CVE-2023-24162 via cn.hutool:hutool-all (4.4.3)

cn.hutool:hutool-all MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.github.tuhe32:seed-spring-boot-starter =0.1.2, =0.1.4 Source cves: CVE-2023-24162 Source advisory:...

cn.jiangzeyin.fast-boot:common-boot (>=1.2.24, <=1.2.27), cn.jiangzeyin.fast-boot:common-redis (>=1.2.24, <=1.2.27) +3 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.4.5)

cn.hutool:hutool-all MAVEN version 4.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.2.24, =1.2.24, =1.0.2-rc.7, =1.0.0, =0.0.1, =1.0.2 Source cves: CVE-2023-24163...

com.grjky:cloud-starter (1.0.0), io.github.jos12580:cloud-grjky-starter (1.0.0) potentially affected by CVE-2023-24162 via cn.hutool:hutool-all (4.1.3)

cn.hutool:hutool-all MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.grjky:cloud-starter 1.0.0 - io.github.jos12580:cloud-grjky-starter 1.0.0 Source cves: CVE-2023-24162 Source advisor...

com.bstek.uflo:uflo-console (>=2.0.0, <=2.1.5), com.syyai.spring.boot:uflo-spring-boot-starter (2.1.4) +1 more potentially affected by CVE-2022-25894 via com.bstek.uflo:uflo-core (>=2.0.0, <=2.1.5)

com.bstek.uflo:uflo-core MAVEN version =2.0.0, =2.0.0, =2.0, =2.5.1.v20220215 Source cves: CVE-2022-25894 Source advisory: GHSA-8M9F-C5P9-WQCH...