de.cau.cs.kieler.klighd:de.cau.cs.kieler.klighd (=2.3.0.v20230606), de.cau.cs.kieler.klighd:de.cau.cs.kieler.klighd.ide (=2.3.0.v20230606) +136 more potentially affected by CVE-2023-4218 via org.eclipse.platform:org.eclipse.ui.workbench (>=3.108.3 <=3.129.0)

org.eclipse.platform:org.eclipse.ui.workbench MAVEN version =3.108.3, =0.50.0.v20230607, =1.4.0, =1.4.0, =1.6.0, =1.4.0, =1.4.2, =1.4.0, =1.4.0, =1.6.0, =1.5.3, =1.7.4 and more Source cves: CVE-2023-4218 Source advisory: OSV:GHSA-J24H-X...

net.enilink.komma:net.enilink.commons.ui (>=1.5.2 <=1.7.4), net.enilink.komma:net.enilink.komma.common.ui (>=1.5.2 <=1.7.4) +109 more potentially affected by CVE-2023-4218 via org.eclipse.platform:org.eclipse.urischeme (>=1.1.0 <=1.3.0)

org.eclipse.platform:org.eclipse.urischeme MAVEN version =1.1.0, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.7.4 - org.eclipse.emfatic:org.eclipse.gymnast.runtime.core =1.0.0 - org.eclipse.jdt:org.eclipse.jdt =3.19.100 -...

com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0 <=1.2.2), org.apache.dolphinscheduler:dolphinscheduler-alert (>=1.2.0 <=2.0.0-alpha) +12 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-dao (>=1.2.0 <=3.0.6)

org.apache.dolphinscheduler:dolphinscheduler-dao MAVEN version =1.2.0, =1.1.0, =1.2.0, =2.0.1, =1.2.0, =2.0.0, =3.0.0, =3.0.0, =2.0.2, =1.2.0, =1.3.0, =1.3.6, =1.3.9, =3.0.0, =3.0.0, =3.0.6 Source cves: CVE-2023-49620 Source advisory: OSV:GHSA-R44Q-98GX-PMH2...

com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0 <=1.2.2), org.apache.dolphinscheduler:dolphinscheduler-alert (>=1.2.0 <=2.0.0-alpha) +15 more potentially affected by CVE-2023-49620 via org.apache.dolphinscheduler:dolphinscheduler-common (>=1.2.0 <=3.0.6)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version =1.2.0, =1.1.0, =1.2.0, =2.0.1, =1.2.0, =1.2.0, =2.0.0, =3.0.0, =3.0.0, =3.0.0, =2.0.2, =1.3.5, =1.2.0, =1.3.0, =1.3.6, =1.3.9, =3.0.6 and more Source cves: CVE-2023-49620 Source adv...

aad-fastapi (>=1.0.0 <=1.1.2), aad-fastapi-dl37 (>=1.0.0 <=1.0.3) +1263 more potentially affected by CVE-2023-49083 via cryptography (>=3.1.0 <=41.0.5)

cryptography PYPI version =3.1.0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =0.4.7, =0.0.1, =0.1.1, =0.0.1, =1.77.3, =1.2.4, =0.0.3, =0.0.8 - aioasuswrt =1.3.3 and more Source cves: CVE-2023-49083 Source advisory: OSV:PYSEC-2023-254...

ai.tock:bot-test (=22.3.2), ai.tock:bot-test-base (=22.3.2) +365 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (>=1.3.0 <=1.3.11)

ch.qos.logback:logback-core MAVEN version =1.3.0, =1.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ai.tock:bot-test =22.3.2 - ai.tock:bot-test-base =22.3.2 - ai.tock:bot-toolkit =22.3.2 -...

ai.tock:bot-test (=22.3.2), ai.tock:bot-test-base (=22.3.2) +347 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (>=1.3.0 <=1.3.11)

ch.qos.logback:logback-classic MAVEN version =1.3.0, =1.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ai.tock:bot-test =22.3.2 - ai.tock:bot-test-base =22.3.2 - ai.tock:bot-toolkit =22.3.2 -...

ai.timefold.solver:timefold-solver-examples (>=1.1.0 <=1.4.0), ai.timefold.solver:timefold-solver-spring-boot-starter (=1.4.0) +5841 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (>=1.4.0 <=1.4.11)

ch.qos.logback:logback-core MAVEN version =1.4.0, =1.1.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.1 and more Source cves: CVE-2023-6378 Source advisory: OSV:GHSA-VMQ6-5M68-F53M...

ai.timefold.solver:timefold-solver-examples (>=1.1.0 <=1.4.0), ai.timefold.solver:timefold-solver-spring-boot-starter (=1.4.0) +5876 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (>=1.4.0 <=1.4.11)

ch.qos.logback:logback-classic MAVEN version =1.4.0, =1.1.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.1 and more Source cves: CVE-2023-6378 Source advisory: OSV:GHSA-VMQ6-5M68-F53M...

BiliupApi (>=0.1.0 <=0.1.7), BrandoCulqi (=1.0.1) +335 more potentially affected by CVE-2023-49092 via rsa (>=0.1.2 <=0.8.2)

rsa CARGO version =0.1.2, =0.1.0, =1.0.0, =1.0.1, =0.0.1, =0.12.0, =0.5.0, =0.2.0, =0.1.0, =1.0.1, =0.1.0, =0.3.11, =0.3.21 and more Source cves: CVE-2023-49092 Source advisory: OSV:GHSA-4GRX-2X9W-596C...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8 <=0.1.12), ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6 <=0.1.7) +8019 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=1.0.0.RELEASE <=2.7.17)

org.springframework.boot:spring-boot-actuator MAVEN version =1.0.0.RELEASE, =0.1.8, =0.1.6, =0.1.2, =0.5.0, =0.5.21, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2023-34055 Source advisory: OSV:GHSA-JJFH-589G-3H...

cloud.genesys:web-messaging-sdk (>=3.0.0 <=5.0.0), cn.acooly:acooly-auth-wechat-authenticator (=5.2.1) +557 more potentially affected by unknown CVE via org.owasp.esapi:esapi (>=2.0GA <=2.5.5.0)

org.owasp.esapi:esapi MAVEN version =2.0GA, =3.0.0, =5.0.0 - cn.acooly:acooly-auth-wechat-authenticator =5.2.1 - cn.dceast.platform:platform-security-starter =2.2.3 - com.acooly:acooly-component-account =5.2.1 - com.acooly:acooly-component-app =5.2.1 - com.acooly:acooly-component-assetmgmt =5.2.1...

cn.regionsoft:ONE (=2.1.1), co.baiku.boot:ajavaer-cache (=0.3.0-RELEASES) +49 more potentially affected by CVE-2023-33202 via org.bouncycastle:bcprov-ext-jdk16 (>=1.45 <=1.46)

org.bouncycastle:bcprov-ext-jdk16 MAVEN version =1.45, =0.0.1-RELEASE, =0.0.1.RELEASE, =0.0.3.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.3.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.9.RELEASE and more Source cves: CVE-2023-33202 Source advisor...

ae.teletronics.nlp:entityextraction (>=1.3 <=1.4), ai.h2o:h2o-app (>=0.1.22 <=0.1.25) +1040 more potentially affected by CVE-2023-33202 via org.bouncycastle:bcprov-jdk15 (>=1.38 <=1.46)

org.bouncycastle:bcprov-jdk15 MAVEN version =1.38, =1.3, =0.1.22, =0.1.22, =1.0.0, =2.1.0, =1.0.1, =4.2.0, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.0.3, =1.3.3 and more Source cves: CVE-2023-33202 Source advisory: OSV:GHSA-WJXJ-5M7G-MG7Q...

app.cash.lninvoice:ln-invoice (=0.0.1), app.cash.trifle:common (>=0.2.9 <=0.2.10) +762 more potentially affected by CVE-2023-33202 via org.bouncycastle:bcprov-jdk15to18 (>=1.63 <=1.72)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =1.0.0, =0.2.0, =0.2.0, =1.0.0.RELEASE, =1.0.0, =1.0.0.RELEASE, =2.6.4, =2.6.4, =2.8.5 and more Source cves: CVE-2023-33202 Source advisory: OSV:GHSA-WJXJ-5M7G-MG7Q...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1 <=1.0.2), aero.m-click:mcpdf (>=0.2.3 <=0.2.10) +30376 more potentially affected by CVE-2023-33202 via org.bouncycastle:bcprov-jdk15on (>=1.46 <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2023-33202 Source advisory: OSV:GHSA-WJXJ-5M7G-MG7Q...

br.com.swconsultoria:java-cte (>=3.00.4 <=3.00.8), br.com.swconsultoria:java-mdfe (>=3.00.3 <=3.00.4) +1215 more potentially affected by CVE-2023-33202 via org.bouncycastle:bcprov-jdk16 (>=1.38 <=1.46)

org.bouncycastle:bcprov-jdk16 MAVEN version =1.38, =3.00.4, =3.00.3, =4.00.10, =1.0, =2.0, =1.2.4, =2.0.0, =2.1, =2.1, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2023-33202 Source advisory: OSV:GHSA-WJXJ-5M7G-MG7Q...

org.apache.atlas:storm-bridge (>=2.4.0 <=2.5.0), org.apache.atlas:storm-bridge-shim (>=2.4.0 <=2.5.0) potentially affected by CVE-2023-43123 via org.apache.storm:storm-core (=2.4.0)

org.apache.storm:storm-core MAVEN version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.atlas:storm-bridge =2.4.0, =2.4.0, =2.5.0 Source cves: CVE-2023-43123 Source advisory:...

bitcoin-harness (=0.1.0), bitcoin_rpc_client (>=0.5.0 <=0.6.1) +80 more potentially affected by unknown CVE via openssl (>=0.10.22 <=0.10.57)

openssl CARGO version =0.10.22, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.1.24, =0.37.0, =0.4.0, =0.37.0, =0.37.0, =0.38.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0072...

nautobot-device-resources (=1.0.0) potentially affected by CVE-2023-48705 via nautobot (=2.0.0)

nautobot PYPI version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-device-resources =1.0.0 Source cves: CVE-2023-48705 Source advisory: OSV:PYSEC-2023-285...