keeshond_editor (>=0.1.0 <=0.9.0) potentially affected by CVE-2021-28028 +1 more via toodee (=0.2.4)

toodee CARGO version =0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on toodee and may be impacted: - keeshondeditor =0.1.0, =0.9.0 Source cves: CVE-2021-28028, CVE-2021-28029 Source advisory: OSV:GHSA-WCVP-R8J8-47PC...

be.fluid-it.tools.rundeck.plugins:rundeck-httppost-plugin (=0.1-1), com.criteo.rundeck.plugin:rundeck-tag-orchestrator-plugin (=1.3.3) +4 more potentially affected by CVE-2021-39132 via org.rundeck:rundeck-core (>=1.5 <=2.5.2)

org.rundeck:rundeck-core MAVEN version =1.5, =1.0.0, =1, =1.1, =1.3.3 - org.rundeck:rundeckapp =1.5 Source cves: CVE-2021-39132 Source advisory: OSV:GHSA-Q4RF-3FHX-88PF...

be.fluid-it.tools.rundeck.plugins:rundeck-httppost-plugin (=0.1-1), com.criteo.rundeck.plugin:rundeck-tag-orchestrator-plugin (=1.3.3) +4 more potentially affected by CVE-2021-39133 via org.rundeck:rundeck-core (>=1.5 <=2.5.2)

org.rundeck:rundeck-core MAVEN version =1.5, =1.0.0, =1, =1.1, =1.3.3 - org.rundeck:rundeckapp =1.5 Source cves: CVE-2021-39133 Source advisory: OSV:GHSA-3JMW-C69H-426C...

csv-extractor (=1.0.0), mi-lib (>=0.0.10 <=0.0.16) +1 more potentially affected by CVE-2021-39176 via detect-character-encoding (=0.2.1)

detect-character-encoding NPM version =0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on detect-character-encoding and may be impacted: - csv-extractor =1.0.0 - mi-lib =0.0.10, =0.3.0, =0.3.1 Source cves: CVE-2021-39176 Source advisory:...

@pl-test/c (>=1.1.0 <=1.1.1), @pl-test/e (=1.1.0) +10 more potentially affected by CVE-2021-32831 via total.js (>=1.2.3 <=3.4.13)

total.js NPM version =1.2.3, =1.1.0, =0.1.5, =0.1.0, =4.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2021-32831 Source advisory: OSV:GHSA-VWHC-PWW7-72X6...

1405-authtokens (>=1.0.1 <=1.0.5), 1405_logging (=1.0.0) +4380 more potentially affected by CVE-2018-16490 +1 more via mpath (>=0.1.1 <=0.8.3)

mpath NPM version =0.1.1, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.0.1, =0.3.5, =1.2.3, =0.2.0, =0.0.1, =0.1.3 and more Source cves: CVE-2018-16490, CVE-2021-23438 Source advisory: SNYK:JS-MPATH-1577289...

-fides-amor-et-lux (=1.0.0), 20_nogo (>=1.0.0 <=1.1.4) +2024 more potentially affected by CVE-2021-37712 via tar (>=6.0.0 <=6.1.8)

tar NPM version =6.0.0, =1.0.0, =1.4.0-beta, =0.0.9, =0.0.1, =1.6.0, =4.14.0, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.28 and more Source cves: CVE-2021-37712 Source advisory: OSV:GHSA-QQ89-HQ3F-393P...

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0.8.18-p11 (=0.8.18-p12) +26707 more potentially affected by CVE-2021-37713 via tar (>=0.1.12 <=4.4.15)

tar NPM version =0.1.12, =1.0.1, =1.0.4, =1.0.3, =0.8.4, =0.2.0, =0.0.1, =0.0.2 - 23g-base-css =1.0.0 - 2chhk-to-telegram-images-bot =1.0.0 and more Source cves: CVE-2021-37713 Source advisory: OSV:GHSA-5955-9WPR-37JH...

433bf (=0.0.1), @achinet/nestjs-async (=0.0.1) +147 more potentially affected by CVE-2021-39134 via @npmcli/arborist (>=0.0.0-pre.10 <=2.10.0)

@npmcli/arborist NPM version =0.0.0-pre.10, =1.2.0, =8.1.0, =1.1.0-next.4, =0.2.7, =0.13.0, =0.0.1, =0.0.1, =0.0.29, =1.1.0-rc.283, =1.1.0-rc.282, =1.1.0-rc.292 and more Source cves: CVE-2021-39134 Source advisory: OSV:GHSA-2H3H-Q99F-3FHC...

433bf (=0.0.1), @achinet/nestjs-async (=0.0.1) +147 more potentially affected by CVE-2021-39135 via @npmcli/arborist (>=0.0.0-pre.10 <=2.10.0)

@npmcli/arborist NPM version =0.0.0-pre.10, =1.2.0, =8.1.0, =1.1.0-next.4, =0.2.7, =0.13.0, =0.0.1, =0.0.1, =0.0.29, =1.1.0-rc.283, =1.1.0-rc.282, =1.1.0-rc.292 and more Source cves: CVE-2021-39135 Source advisory: OSV:GHSA-GMW6-94GG-2RC2...

acceldata-o2a (=1.0.0), acryl-datahub-airflow-plugin (>=0.9.5.1rc1 <=1.3.1.post1) +119 more potentially affected by CVE-2021-35936 via apache-airflow (>=1.8.2 <=2.1.1)

apache-airflow PYPI version =1.8.2, =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.4.0, =0.1.0a1, =0.6.0, =0.1.1, =0.1.1, =0.10.2, =0.11.0 - airflow-ditto =0.0.1.2 and more Source cves: CVE-2021-35936 Source advisory: OSV:GHSA-M6H2-JX9V-58W6...

@avalabs/avalanche-wallet-sdk (>=0.3.0 <=0.9.4), @b0dhidharma/contract-utils (=0.1.1) +48 more potentially affected by CVE-2021-39167 via @openzeppelin/contracts (>=4.0.0 <=4.3.0)

@openzeppelin/contracts NPM version =4.0.0, =0.3.0, =0.0.2, =1.0.0, =1.1.0, =2.0.0, =0.1.1, =0.0.1, =3.0.0-alpha.2, =3.0.0-alpha.1, =3.0.0-alpha.1, =3.0.0-alpha.1, =0.0.0-863d96e4, =0.0.23-canary and more Source cves: CVE-2021-39167 Source advisory: OSV:GHSA-FG47-3C2X-M2WR...

cartridge (>=1.0.0b1 <=1.3.1) potentially affected by CVE-2020-19002 via mezzanine (=5.1.4)

mezzanine PYPI version =5.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - cartridge =1.0.0b1, =1.3.1 Source cves: CVE-2020-19002 Source advisory: OSV:PYSEC-2021-343...

open-helpdesk (>=0.4.1 <=0.4.4) potentially affected by CVE-2020-19002 via mezzanine (=3.1.10)

mezzanine PYPI version =3.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - open-helpdesk =0.4.1, =0.4.4 Source cves: CVE-2020-19002 Source advisory: OSV:PYSEC-2021-343...

ckb-analyzer (>=0.37.0 <=0.39.2), ckb-app-config (>=0.37.0 <=0.100.0-rc2) +60 more potentially affected by CVE-2021-45697 via molecule (>=0.2.5 <=0.7.1)

molecule CARGO version =0.2.5, =0.37.0, =0.37.0, =0.4.0, =0.37.0, =0.37.0, =0.37.0, =0.40.0, =0.40.0, =0.37.0, =0.37.0, =0.37.0, =0.37.0, =0.1.0, =0.37.0, =0.39.1 and more Source cves: CVE-2021-45697 Source advisory: OSV:GHSA-82HM-VH7G-HRH9...

timeout_io (>=0.2.0 <=0.2.7) potentially affected by CVE-2020-36438 via tiny_future (=0.3.2)

tinyfuture CARGO version =0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tinyfuture and may be impacted: - timeoutio =0.2.0, =0.2.7 Source cves: CVE-2020-36438 Source advisory: OSV:GHSA-M296-J53X-XV95...

acto-rs (>=0.2.9 <=0.3.7), alumina (>=0.1.0 <=0.1.1) +378 more potentially affected by CVE-2018-25023 via smallvec (>=0.1.8 <=0.5.1)

smallvec CARGO version =0.1.8, =0.2.9, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =1.0.0, =1.1.0 - approveapi =0.1.0 and more Source cves: CVE-2018-25023 Source advisory: OSV:GHSA-66P5-J55P-32R9...

term-handler (=0.1.0) potentially affected by CVE-2020-36446 via signal-simple (=0.1.1)

signal-simple CARGO version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on signal-simple and may be impacted: - term-handler =0.1.0 Source cves: CVE-2020-36446 Source advisory: OSV:GHSA-8892-84WF-CG8F...

rustracts (=0.2.0) potentially affected by CVE-2020-36454 via parc (=1.0.1)

parc CARGO version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on parc and may be impacted: - rustracts =0.2.0 Source cves: CVE-2020-36454 Source advisory: OSV:GHSA-XWXC-J97J-84GF...

toolbox (>=0.2.7 <=0.2.8) potentially affected by CVE-2020-36432 via alg_ds (=0.2.7)

algds CARGO version =0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on algds and may be impacted: - toolbox =0.2.7, =0.2.8 Source cves: CVE-2020-36432 Source advisory: OSV:GHSA-3VV3-FRRQ-6486...