com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

ch.epfl.bbp.nlp:bluima_module (1.0.1), ch.epfl.bbp.nlp:bluima_parent (1.0.0) +334 more potentially affected by CVE-2021-23926 via org.apache.xmlbeans:xmlbeans (2.4.0)

org.apache.xmlbeans:xmlbeans MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.xmlbeans:xmlbeans and may be impacted: - ch.epfl.bbp.nlp:bluimamodule 1.0.1 - ch.epfl.bbp.nlp:bluimaparent 1.0.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.0), ca.uhn.hapi.fhir:hapi-fhir-igpacks (4.0.0) +2 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.0.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.1.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (4.1.0) +16 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.1.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.1.0 -...

aero.champ:cargojson (1.0), ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12) +16722 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (>=1.0.0, <=1.1.11)

ch.qos.logback:logback-core MAVEN version =1.0.0, =0.1.8, =0.1.6, =0.1.4-sb1x, =0.11.0, =0.7.0, =0.6.1, =0.11.0, =0.6.1, =0.13.0 and more Source cves: CVE-2017-5929 Source advisory: OSV:GHSA-VMFG-RJJM-RJRJ...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (3.0.4), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (3.0.4) +285 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (>=9.0.0, <=9.2.0)

org.apache.wicket:wicket-core MAVEN version =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.2.1 and more Source cves: CVE-2021-23937 Source advis...

org.apache.camel.kafkaconnector:camel-rabbitmq-kafka-connector (0.1.0), org.apache.camel.quarkus:camel-quarkus-rabbitmq (1.0.0-m6) +3 more potentially affected by CVE-2020-11972 via org.apache.camel:camel-rabbitmq (>=3.0.0, <=3.1.0)

org.apache.camel:camel-rabbitmq MAVEN version =3.0.0, =3.0.0, =3.1.0 Source cves: CVE-2020-11972 Source advisory: GHSA-2X6R-7427-95CM...

nl.vpro.camel:camel-filewatcher (1.4.0), org.apache.camel.karaf:camel-karaf-commands (>=3.0.0-rc2, <=3.1.0) +607 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-management (>=3.0.0-rc2, <=3.1.0)

org.apache.camel:camel-management MAVEN version =3.0.0-rc2, =3.0.0-rc2, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1 and more Source cves: CVE-2020-11971 Source advisory: OSV:GHSA-HFG5-XPVW-C9X4...

com.quamto.jira:plugins-base (>=1.1.1-rc, <=1.6.1) potentially affected by CVE-2021-26074 via com.atlassian.connect:atlassian-connect-spring-boot-starter (>=1.2.1, <=1.5.0)

com.atlassian.connect:atlassian-connect-spring-boot-starter MAVEN version =1.2.1, =1.1.1-rc, =1.6.1 Source cves: CVE-2021-26074 Source advisory: GHSA-CPCR-74Q9-74GP...

com.quamto.jira:plugins-base (>=1.1.1-rc, <=1.6.1) potentially affected by CVE-2021-26074 via com.atlassian.connect:atlassian-connect-spring-boot-starter (>=1.2.1, <=1.5.0)

com.atlassian.connect:atlassian-connect-spring-boot-starter MAVEN version =1.2.1, =1.1.1-rc, =1.6.1 Source cves: CVE-2021-26074 Source advisory: OSV:GHSA-CPCR-74Q9-74GP...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (>=3.0.1-rc, <=3.0.3-rc), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=3.0.1-rc, <=3.0.3-rc) +271 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (>=9.0.0-m1, <=9.0.0-m5)

org.apache.wicket:wicket-core MAVEN version =9.0.0-m1, =3.0.1-rc, =3.0.1-rc, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m5.1 - com.googlecode.wick...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...