@questwork/authenticator (>=0.1.0 <=0.1.5), @questwork/qw-service-tools (>=0.0.8 <=0.1.4) +22 more potentially affected by CVE-2021-23561 via comb (>=0.0.6 <=2.0.0)

comb NPM version =0.0.6, =0.1.0, =0.0.8, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2021-23561 Source advisory: OSV:GHSA-VXR4-RXW7-G7V6...

africa.absa:inception-application (>=1.0.0 <=1.2.0), africa.absa:inception-test (>=1.0.0 <=1.2.0) +2467 more potentially affected by CVE-2021-23463 via com.h2database:h2 (>=1.4.198 <=1.4.200)

com.h2database:h2 MAVEN version =1.4.198, =1.0.0, =1.0.0, =0.5.2, =0.5.2, =0.1.0, =0.2.0, =0.2.0, =0.9.6, =1.0, =1.0.0, =0.0.1-alpha, =0.0.2-alpha, =0.0.6-alpha and more Source cves: CVE-2021-23463 Source advisory: OSV:GHSA-7RPJ-HG47-CX62...

org.apache.sling:org.apache.sling.cms.reference (>=0.16.0 <=1.1.0) potentially affected by CVE-2021-44549 via org.apache.sling:org.apache.sling.commons.messaging.mail (=1.0.0)

org.apache.sling:org.apache.sling.commons.messaging.mail MAVEN version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sling:org.apache.sling.commons.messaging.mail and may be impacted: - org.apache.sling:org.apache.sling.cms.referenc...

aero.m-click:mcpdf (>=0.2.0 <=0.2.6), at.iem:sysson_2.11 (>=1.13.0 <=1.17.0) +712 more potentially affected by CVE-2021-43113 via com.itextpdf:itextpdf (>=5.0.6 <=5.5.13.2)

com.itextpdf:itextpdf MAVEN version =5.0.6, =0.2.0, =1.13.0, =1.13.0, =2.0.0, =1.2.1, =3.0.0, =2.0.0, =0.7, =0.7, =1.1.5, =1.5.1.beta and more Source cves: CVE-2021-43113 Source advisory: OSV:GHSA-GV87-Q66H-4277...

cradle-app (>=0.1.0 <=0.1.1), torchflare (=0.2.4) potentially affected by CVE-2021-43831 via gradio (>=1.7.7 <=2.2.13)

gradio PYPI version =1.7.7, =0.1.0, =0.1.1 - torchflare =0.2.4 Source cves: CVE-2021-43831 Source advisory: OSV:PYSEC-2021-873...

aero.m-click:mcpdf (>=0.2.0 <=0.2.6), at.iem:sysson_2.11 (>=1.13.0 <=1.17.0) +712 more potentially affected by CVE-2021-43113 via com.itextpdf:itextpdf (>=5.0.6 <=5.5.13.2)

com.itextpdf:itextpdf MAVEN version =5.0.6, =0.2.0, =1.13.0, =1.13.0, =2.0.0, =1.2.1, =3.0.0, =2.0.0, =0.7, =0.7, =1.1.5, =1.5.1.beta and more Source cves: CVE-2021-43113 Source advisory: SNYK:JAVA-COMITEXTPDF-15674470...

roaring-landmask (=0.4.0) potentially affected by CVE-2021-4044 via openssl-src (=300.0.0+3.0.0)

openssl-src CARGO version =300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask =0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:GHSA-MMJF-F5JW-W72Q...

@0xwen/core (>=0.0.1 <=0.0.3), @0xwen/core-v5 (>=0.0.1 <=0.0.3) +128 more potentially affected by CVE-2021-46320 +1 more via @openzeppelin/contracts-upgradeable (>=3.4.0 <=4.3.3)

@openzeppelin/contracts-upgradeable NPM version =3.4.0, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =2.0.0, =3.0.0-alpha0, =2.0.0, =3.0.1-alpha, =1.0.0, =1.0.0-beta.0, =1.0.0, =1.0.4 and more Source cves: CVE-2021-46320, CVE-2022-39384 Source advisory: OSV:GHSA-9C22-PWXW-P6HX...

org.zenframework.z8.dependencies:z8-dependencies-commons (=2.0) potentially affected by CVE-2021-4104 +1 more via org.zenframework.z8.dependencies.commons:log4j-1.2.17 (=2.0)

org.zenframework.z8.dependencies.commons:log4j-1.2.17 MAVEN version =2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.zenframework.z8.dependencies.commons:log4j-1.2.17 and may be impacted: - org.zenframework.z8.dependencies:z8-dependencies-commo...

org.ops4j.pax.logging:pax-logging-log4j2-extra (=1.11.10), org.ops4j.pax.logging:pax-logging-sample-fragment-log4j2 (=1.11.10) +1 more potentially affected by CVE-2021-44228 +1 more via org.ops4j.pax.logging:pax-logging-log4j2 (=1.11.10)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.11.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.ops4j.pax.logging:pax-logging-log4j2 and may be impacted: - org.ops4j.pax.logging:pax-logging-log4j2-extra =1.11.10 -...

hu.blackbelt.osgi.filestore:features (>=1.2.1 <=1.3.0), hu.blackbelt.osgi.filestore:kar (>=1.2.1 <=1.3.0) +40 more potentially affected by CVE-2021-44228 +1 more via org.ops4j.pax.logging:pax-logging-log4j2 (>=2.0.0 <=2.0.11)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =2.0.0, =1.2.1, =1.2.1, =1.0.12, =1.0.12, =2.14.2, =2.19.0, =3.12.0, =3.12.0, =3.14.0 - org.apache.cxf.karaf:apache-cxf =3.5.0 - org.apache.karaf.examples:karaf-docker-example-dynamic-dist =4.3.3 - org.apache.karaf.features:enterprise =4.3.3 ...

roaring-landmask (=0.4.0) potentially affected by CVE-2021-4044 via openssl-src (=300.0.0+3.0.0)

openssl-src CARGO version =300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask =0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:RUSTSEC-2021-0129...

a3m (=0.1.0), acdh-collatex-utils (>=0.2.0 <=1.3.0) +701 more potentially affected by CVE-2021-43818 via lxml (>=3.2.3 <=4.6.4)

lxml PYPI version =3.2.3, =0.2.0, =1.0.0, =3.0.0, =0.1.0, =1.0.3, =1.0.0a1.post0, =1.10.0, =0.0.4, =0.0.14 and more Source cves: CVE-2021-43818 Source advisory: OSV:PYSEC-2021-852...

jsgui-node-file-metadata (=0.3.8), jsgui-node-fs2-core (>=0.1.0 <=0.1.5) +7 more potentially affected by CVE-2022-25301 via jsgui-lang-essentials (>=0.3.8 <=0.4.3)

jsgui-lang-essentials NPM version =0.3.8, =0.1.0, =0.1.0, =0.1.0, =0.3.8, =0.3.8, =0.3.35 Source cves: CVE-2022-25301 Source advisory: SNYK:JS-JSGUILANGESSENTIALS-2316897...

dpd-paypal-ap (>=0.0.1 <=0.0.9), paypal-pay (=0.1.1) potentially affected by CVE-2020-7643 via paypal-adaptive (>=0.1.1 <=0.4.2)

paypal-adaptive NPM version =0.1.1, =0.0.1, =0.0.9 - paypal-pay =0.1.1 Source cves: CVE-2020-7643 Source advisory: OSV:GHSA-V3R2-3FP4-RP46...

192.168.0.172 (=4.6.1), @attivio/suit (>=0.0.47 <=1.0.7) +76 more potentially affected by CVE-2021-23398 via react-bootstrap-table (>=1.6.2 <=4.3.1)

react-bootstrap-table NPM version =1.6.2, =0.0.47, =1.0.0, =0.3.1, =0.1.1, =1.21.0, =0.15.0-beta-1, =0.0.1, =1.14.3, =1.0.1, =1.0.70 and more Source cves: CVE-2021-23398 Source advisory: OSV:GHSA-2589-W6XF-983R...

fusion-plugin-jwt (>=0.1.0 <=0.1.8), toystore (>=1.1.1 <=1.5.3) potentially affected by CVE-2021-25952 via just-safe-set (=1.1.0)

just-safe-set NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-safe-set and may be impacted: - fusion-plugin-jwt =0.1.0, =1.1.1, =1.5.3 Source cves: CVE-2021-25952 Source advisory: OSV:GHSA-V26W-GCXH-V4R7...

@cscharpf/minio-client-versioned (>=1.0.0 <=1.0.8), @iliad.dev/strapi-adapter (>=0.0.43 <=0.2.2) +46 more potentially affected by CVE-2021-25953 via putil-merge (>=1.2.0 <=3.13.0)

putil-merge NPM version =1.2.0, =1.0.0, =0.0.43, =0.6.0, =0.12.0, =0.6.0, =0.6.0, =0.6.0, =1.0.0-beta.3, =0.6.0, =0.10.0, =0.6.0, =0.93.1, =4.0.1, =4.0.1, =5.0.4 and more Source cves: CVE-2021-25953 Source advisory: OSV:GHSA-9X7M-9HPG-XXMW...

com.adobe.cq:core.wcm.components.testing.aem-mock-plugin (>=2.22.0 <=2.31.0), com.cognifide.aem.bundle:com.cognifide.aem.bundle.gradle.plugin (=12.0.0-beta) +58 more potentially affected by CVE-2020-1940 via org.apache.jackrabbit:oak-core (>=1.12.0 <=1.22.9)

org.apache.jackrabbit:oak-core MAVEN version =1.12.0, =2.22.0, =5.0.0, =5.0.0, =5.0.0, =1.5.0, =1.0.0, =1.1.0 and more Source cves: CVE-2020-1940 Source advisory: OSV:GHSA-3H68-WVV6-8R5Hhttps://vulners.com/osv/OSV:GHSA-3H6...

com.github.marcelop3251:queues-manager (=1.2.0), net.oneandone.ioc-unit:ioc-unit-jms-rabbitmq (>=2.0.28 <=2.0.40) potentially affected by CVE-2020-36282 via com.rabbitmq.jms:rabbitmq-jms (=1.14.0)

com.rabbitmq.jms:rabbitmq-jms MAVEN version =1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq.jms:rabbitmq-jms and may be impacted: - com.github.marcelop3251:queues-manager =1.2.0 - net.oneandone.ioc-unit:ioc-unit-jms-rabbitmq =2.0.2...