com.gitee.pulanos.pangu:pangu-gateway-spring-boot-starter (>=5.0.7 <=5.1.0), org.apache.shenyu:shenyu-admin (>=2.4.0 <=2.4.1) +108 more potentially affected by CVE-2022-23945 via org.apache.shenyu:shenyu-common (>=2.4.0 <=2.4.1)

org.apache.shenyu:shenyu-common MAVEN version =2.4.0, =5.0.7, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.1 and more Source cves: CVE-2022-23945 Source advisory: OSV:GHSA-7RJP-FGWJ-47RW...

com.gitee.pulanos.pangu:pangu-gateway-spring-boot-starter (>=5.0.7 <=5.1.0), org.apache.shenyu:shenyu-admin (>=2.4.0 <=2.4.1) +108 more potentially affected by CVE-2022-23944 via org.apache.shenyu:shenyu-common (>=2.4.0 <=2.4.1)

org.apache.shenyu:shenyu-common MAVEN version =2.4.0, =5.0.7, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.1 and more Source cves: CVE-2022-23944 Source advisory: OSV:GHSA-6V39-P2XQ-G5C3...

@stackstorm/st2-build (>=2.3.1 <=2.4.3), ccxt-without-theocean (=1.18.151) +3 more potentially affected by CVE-2021-23518 via cached-path-relative (=1.0.2)

cached-path-relative NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cached-path-relative and may be impacted: - @stackstorm/st2-build =2.3.1, =1.0.0, =1.18.173, =1.18.242 Source cves: CVE-2021-23518 Source advisory:...

abeja-sdk (>=1.0.2 <=1.0.2rc1), acg-feature-extractor (=0.0.2) +270 more potentially affected by CVE-2021-22570 via protobuf (>=2.6.0 <=3.14.0rc3)

protobuf PYPI version =2.6.0, =1.0.2, =0.1.2, =1.1.2, =0.7.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =2.0.0, =2.0.1, =0.0.8, =0.0.1, =0.1.3, =1.3.0 and more Source cves: CVE-2021-22570 Source advisory: OSV:PYSEC-2022-48...

aiohttp-init (=0.0.1), airhttprunner (>=3.1.4 <=3.1.6) +152 more potentially affected by CVE-2022-0338 via loguru (>=0.2.4 <=0.5.2)

loguru PYPI version =0.2.4, =3.1.4, =0.1.5, =0.1.1, =2.0.0, =0.2.3, =4.6.4, =2.3.2, =0.39.0, =0.52.0 and more Source cves: CVE-2022-0338 Source advisory: OSV:GHSA-39PH-WR67-J4XQ...

grid2viz (>=1.1.0 <=1.3.1), trenchripper (>=0.1.4 <=0.2.1) potentially affected by CVE-2022-21697 via jupyter-server-proxy (>=1.3.2 <=1.6.0)

jupyter-server-proxy PYPI version =1.3.2, =1.1.0, =0.1.4, =0.2.1 Source cves: CVE-2022-21697 Source advisory: OSV:PYSEC-2022-16...

02.aula (=1.0.0), 19json-validator (>=0.0.3 <=0.0.4) +2004 more potentially affected by CVE-2021-23566 via nanoid (>=3.0.0 <=3.1.30)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =0.1.3, =1.0.0, =0.1.1-alpha.51, =0.0.20, =1.0.1, =0.0.1, =0.4.2, =0.4.11 - @agrippa-io/node-connection-manager =1.0.0 and more Source cves: CVE-2021-23566 Source advisory: OSV:GHSA-QRPM-P2H7-HRV2...

org.apache.knox:gateway-release (>=1.0.0 <=1.1.0), org.apache.knox:gateway-test-release (>=1.0.0 <=1.1.0) +3 more potentially affected by CVE-2021-42357 via org.apache.knox:gateway-service-knoxsso (>=1.0.0 <=1.1.0)

org.apache.knox:gateway-service-knoxsso MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.1.0 Source cves: CVE-2021-42357 Source advisory: OSV:GHSA-VV38-4XCJ-Q4RW...

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 00ld8nuivn (=2.1.0) +40711 more potentially affected by CVE-2022-0122 via node-forge (>=0.10.0 <=0.9.2)

node-forge NPM version =0.10.0, =1.0.1, =1.1.0 - 00ld8nuivn =2.1.0 - 00rqiw31nd =2.1.0 - 01dk01majk =2.1.0 - 02rjq8i863 =1.1.0 - 02vx8qsp01 =2.1.0 - 05y6tjgmws =1.1.0 - 066m7q8o0z =2.1.0 - 06buj9h3su =2.1.0 - 06dre15t8r =2.1.0 - 0726react =0.1.1 - 07fgapmu9l =1.1.0 - 07t2xvu6t4 =2.1.0 - 0850u4lkp...

org.zenframework.z8.dependencies:z8-dependencies-commons (=2.0) potentially affected by CVE-2022-23302 via org.zenframework.z8.dependencies.commons:log4j-1.2.17 (=2.0)

org.zenframework.z8.dependencies.commons:log4j-1.2.17 MAVEN version =2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.zenframework.z8.dependencies.commons:log4j-1.2.17 and may be impacted: - org.zenframework.z8.dependencies:z8-dependencies-commo...

RPD:bmc-rpd (=1.1), ae.teletronics.nlp:entityextraction (>=1.3 <=1.4) +40407 more potentially affected by CVE-2022-23305 via log4j:log4j (>=1.1.3 <=1.2.17)

log4j:log4j MAVEN version =1.1.3, =1.3, =0.0.5, =1.0.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.2.10 and more Source cves: CVE-2022-23305 Source advisory: OSV:GHSA-65FG-84F6-3JQ3...

org.zenframework.z8.dependencies:z8-dependencies-commons (=2.0) potentially affected by CVE-2022-23305 via org.zenframework.z8.dependencies.commons:log4j-1.2.17 (=2.0)

org.zenframework.z8.dependencies.commons:log4j-1.2.17 MAVEN version =2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.zenframework.z8.dependencies.commons:log4j-1.2.17 and may be impacted: - org.zenframework.z8.dependencies:z8-dependencies-commo...

africa.absa:inception-application (>=1.0.0 <=1.2.0), africa.absa:inception-test (>=1.0.0 <=1.2.0) +5756 more potentially affected by CVE-2022-23221 via com.h2database:h2 (>=1.0.63 <=2.0.206)

com.h2database:h2 MAVEN version =1.0.63, =1.0.0, =1.0.0, =0.5.0, =0.5.0, =0.1.0, =0.2.0, =0.2.0, =1.0.0, =0.5.2, =0.9.6, =1.0, =1.0.0, =1.0.5 and more Source cves: CVE-2022-23221 Source advisory: OSV:GHSA-45HX-WFHJ-473X...

abracadabra (>=0.0.0 <=0.0.5), ai-economist (>=1.0.0 <=1.1.1) +106 more potentially affected by CVE-2022-21699 via ipython (>=6.0.0 <=7.16.1)

ipython PYPI version =6.0.0, =0.0.0, =1.0.0, =0.1.2, =0.0.4, =1.0.2, =0.10.0, =1.0.0, =0.0.4, =1.0.0rc1, =20210206.0.0, =2.2.2b1, =0.1.0, =0.3.4, =0.1.0rc1, =1.0.2 - civis-compute =0.2.0 and more Source cves: CVE-2022-21699 Source advisory: OSV:GHSA-PQ7M-3GW7-GQ5X...

aglow (>=0.1.0rc3 <=0.1.0rc4), ai-flow (>=0.1.0 <=0.3.1) +113 more potentially affected by CVE-2021-45230 via apache-airflow (>=1.10.1 <=2.0.0)

apache-airflow PYPI version =1.10.1, =0.1.0rc3, =0.1.0, =1.0.7, =0.5.1, =0.1.0, =0.1.1, =0.0.7, =2.4.2, =1.0.1, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =1.2.1, =1.6.2 and more Source cves: CVE-2021-45230 Source advisory: OSV:PYSEC-2022-11...

ang (=0.0.2), astx (>=0.5.0 <=0.6.0) +5 more potentially affected by CVE-2022-21699 via ipython (>=8.0.0 <=8.0.0rc1)

ipython PYPI version =8.0.0, =0.5.0, =1.3.0, =0.1.23, =0.1.3, =0.1.5 - quantum-viz =1.0.3 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

abracadabra (>=0.0.0 <=0.0.5), ai-economist (>=1.0.0 <=1.1.1) +106 more potentially affected by CVE-2022-21699 via ipython (>=6.0.0 <=7.16.1)

ipython PYPI version =6.0.0, =0.0.0, =1.0.0, =0.1.2, =0.0.4, =1.0.2, =0.10.0, =1.0.0, =0.0.4, =1.0.0rc1, =20210206.0.0, =2.2.2b1, =0.1.0, =0.3.4, =0.1.0rc1, =1.0.2 - civis-compute =0.2.0 and more Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

@alma-oss/vite-plugin-spirit-icons (=1.1.0), @camptocamp/closure-util (>=1.23.0 <=1.27.0) +132 more potentially affected by CVE-2020-7792 +1 more via mout (>=1.0.0 <=1.2.3)

mout NPM version =1.0.0, =1.23.0, =0.12.2, =1.36.0, =0.0.1, =1.0.0, =0.1.1, =0.1.0, =2.94.2, =0.3.0, =0.3.6 and more Source cves: CVE-2020-7792, CVE-2022-21213 Source advisory: SNYK:JS-MOUT-2342654...

@stackstorm/st2-build (>=2.3.1 <=2.4.3), ccxt-without-theocean (=1.18.151) +3 more potentially affected by CVE-2021-23518 via cached-path-relative (=1.0.2)

cached-path-relative NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cached-path-relative and may be impacted: - @stackstorm/st2-build =2.3.1, =1.0.0, =1.18.173, =1.18.242 Source cves: CVE-2021-23518 Source advisory:...

mongo-rest-api (=0.1.0), pine-ql (>=0.1.0 <=0.5.4) potentially affected by CVE-2020-28272 +1 more via keyget (=1.0.1)

keyget NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api =0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2020-28272, CVE-2021-23760 Source advisory: SNYK:JS-KEYGET-2342624...