@cobalt-engine/co-validator (>=1.0.0 <=1.1.2), @cobalt-engine/ctl (=1.0.0) +23 more potentially affected by CVE-2021-23337 via lodash-template (=1.0.0)

lodash-template NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on lodash-template and may be impacted: - @cobalt-engine/co-validator =1.0.0, =4.5.3, =3.0.0, =1.0.0, =0.1.10, =1.0.0, =0.1.3, =0.0.0, =0.1.0, =1.10.0, =1.13.4 and more...

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 02-infrastructure (=1.0.0) +53822 more potentially affected by CVE-2021-23337 via lodash.template (>=2.2.1 <=4.5.0)

lodash.template NPM version =2.2.1, =1.0.1, =0.0.2, =0.0.10 - 0x0.icu.anima =0.1.0 - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory =1.0.0 - 0xgank-tea-central-compound =1.0.0 - 0xgank-tea-characteristic =1.0.0 -...

org.webjars.npm:directory-encoder (=0.7.2), org.webjars.npm:okta__okta-signin-widget (=2.21.0) potentially affected by CVE-2021-23369 via org.webjars.npm:handlebars (>=1.3.0 <=4.0.14)

org.webjars.npm:handlebars MAVEN version =1.3.0, =4.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:handlebars and may be impacted: - org.webjars.npm:directory-encoder =0.7.2 - org.webjars.npm:oktaokta-signin-widget =2.21.0 Source...

08cms (=1.0.0), 101 (>=0.3.0 <=0.7.1) +6018 more potentially affected by CVE-2021-23369 via handlebars (>=1.0.10 <=4.7.6)

handlebars NPM version =1.0.10, =0.3.0, =0.0.1, =0.0.2, =0.0.16, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0, =1.0.0, =2.0.2 and more Source cves: CVE-2021-23369 Source advisory: OSV:GHSA-F2JV-R9RF-7988...

cn.home1:oss-configserver (>=1.0.6.OSS <=1.0.7.OSS), com.findwise.hydra:hydra-admin-service (>=0.4.1 <=0.5.0) +56 more potentially affected by CVE-2021-23369 via org.webjars:handlebars (>=1.0.0-rc.3 <=4.0.5)

org.webjars:handlebars MAVEN version =1.0.0-rc.3, =1.0.6.OSS, =0.4.1, =3.0.0.RELEASE, =0.0.1.RELEASE, =2.2.2.RELEASE, =6.3.0, =6.0.0.RELEASE, =1.8.6, =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0.9, =0.0.16 - com.github.jknack:mwa-wro4j =0.4.2 and more Source cves: CVE-2021-23369 Source advisory:...

roar-sdk (>=0.1.97 <=0.2.24) potentially affected by CVE-2021-23380 via roar-pidusage (=1.1.7)

roar-pidusage NPM version =1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on roar-pidusage and may be impacted: - roar-sdk =0.1.97, =0.2.24 Source cves: CVE-2021-23380 Source advisory: OSV:GHSA-XFXF-QW26-HR33...

reliable-macaca-slave (>=1.0.0 <=2.1.0), reliable-slave (>=1.0.0 <=1.0.3) potentially affected by CVE-2021-23381 via killing (=1.0.6)

killing NPM version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on killing and may be impacted: - reliable-macaca-slave =1.0.0, =1.0.0, =1.0.3 Source cves: CVE-2021-23381 Source advisory: OSV:GHSA-CQ77-8JPX-892G...

@asephermann/capacitor-filechooser (=0.0.1), @jewel998/mock-location (>=0.0.9 <=0.0.10) +53 more potentially affected by CVE-2021-28860 +1 more via mixme (>=0.0.1 <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3, =0.0.1-alpha.1, =0.9.7, =0.8.1, =0.0.1, =0.2.1, =0.0.2, =0.0.2-alpha.1 and more Source cves: CVE-2021-28860, CVE-2021-29491 Source advisory: OSV:GHSA-79JW-6WG7-R9G4...

1tp (>=0.0.1 <=0.11.2), 2d-json-schema-editor-visual (>=1.0.2 <=1.0.7) +2788 more potentially affected by CVE-2020-28502 via xmlhttprequest-ssl (>=1.5.1 <=1.5.5)

xmlhttprequest-ssl NPM version =1.5.1, =0.0.1, =1.0.2, =1.0.1, =4.11.25, =0.1.3, =0.0.15, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =1.0.15 and more Source cves: CVE-2020-28502 Source advisory: OSV:GHSA-H4J5-C7CJ-74XG...

aglow (>=0.1.0rc3 <=0.1.0rc4), ai-flow (>=0.1.0 <=0.3.1) +3 more potentially affected by CVE-2021-28359 via apache-airflow (>=2.0.0 <=2.0.0rc3)

apache-airflow PYPI version =2.0.0, =0.1.0rc3, =0.1.0, =0.3.1 - dataverk-airflow =0.3.12 - gps-building-blocks =1.2.2 - neuro-airflow-plugin =0.0.1 Source cves: CVE-2021-28359 Source advisory: OSV:PYSEC-2021-4...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2021-23840 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2021-23840 Source advisory: OSV:RUSTSEC-2021-0057...

cn.felord:payment-spring-boot-starter (>=1.0.0.RELEASE <=1.0.10.RELEASE), cn.hermesdi:api-crypto-spring-boot-starter (>=1.0.0 <=1.0.0.RELEASE) +150 more potentially affected by CVE-2020-28052 via org.bouncycastle:bcprov-jdk15to18 (>=1.65 <=1.66)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.65, =1.0.0.RELEASE, =1.0.0, =1.5.1, =2.0.0, =0.7.7, =0.7.7, =0.7.7, =0.7.7, =0.0.1, =0.0.1, =1.0.0, =5.23.1, =5.24.6 and more Source cves: CVE-2020-28052 Source advisory: OSV:GHSA-73XV-W5GP-FRXH...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0 <=4.6.0.0), androidx.car.app:app-testing (>=1.1.0-alpha01 <=1.1.0-alpha02) +3767 more potentially affected by CVE-2020-28052 via org.bouncycastle:bcprov-jdk15on (>=1.65 <=1.66)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.65, =4.4.0.0, =1.1.0-alpha01, =1.0.0-alpha02, =0.1.3-20200811-2e41939, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.3-20200811-2e41939, =0.1.3-20200811-2e41939, =3.2,...

app.keyconnect.api:keyconnect-api (=1.0.0), app.keyconnect:keyconnect-rippled-api (=1.0.0) +7 more potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (>=3.0.2 <=5.0.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version =3.0.2, =4.1, =4.1, =1.1, =1.0.0, =3.0, =0.1.4, =0.1.8 Source cves: CVE-2021-21429 Source advisory: OSV:GHSA-867Q-77CC-98MV...

actinium226-librespot (=0.4.3), actinium226-librespot-connect (=0.4.3) +939 more potentially affected by unknown CVE via aes-soft (=0.6.4)

aes-soft CARGO version =0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aes-soft and may be impacted: - actinium226-librespot =0.4.3 - actinium226-librespot-connect =0.4.3 - actinium226-librespot-playback =0.4.3, =0.1.3, =0.1.0, =0.3.0, =0.3.0,...

cc.cc4414:cc-spring-cloud-starter (>=0.3.0 <=0.8.0), cc.cc4414:cc-spring-cloud-starter-gateway (>=0.5.0 <=0.8.0) +436 more potentially affected by CVE-2021-29442 via com.alibaba.nacos:nacos-common (>=0.1.0 <=1.4.0)

com.alibaba.nacos:nacos-common MAVEN version =0.1.0, =0.3.0, =0.5.0, =1.0.0, =1.1, =1.1, =0.0.2, =0.0.2, =1.0.8, =1.4.0, =2021.6.0 - cn.iisme.cloud:iisme-demos-nacos-core =1.0.1 - cn.iisme.cloud:iisme-demos-nacos-web =1.0.1 - cn.iisme.cloud:iisme-gateway-nacos =1.0.1 -...

com.virjar.sekiro.business:sekiro-ratel (=1.1) potentially affected by CVE-2021-29425 via com.virjar:ratel-api (=1.3.6)

com.virjar:ratel-api MAVEN version =1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.virjar:ratel-api and may be impacted: - com.virjar.sekiro.business:sekiro-ratel =1.1 Source cves: CVE-2021-29425 Source advisory: OSV:GHSA-GWRP-PVRQ-JMWV...

ai.grakn:grakn-test (>=0.13.0 <=0.14.0), ai.grakn:grakn-test-tools (=0.15.0) +2081 more potentially affected by CVE-2021-29425 via org.apache.commons:commons-io (=1.3.2)

org.apache.commons:commons-io MAVEN version =1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-io and may be impacted: - ai.grakn:grakn-test =0.13.0, =0.0.2, =2.3.0, =1.5.6, =1.0.0, =1.0, =4.7.0-beta.1, =4.7.0-beta.1,...

slskit (>=2020.1.1 <=2020.9.0) potentially affected by CVE-2021-31607 via salt (>=2019.2.8 <=3001.8.0)

salt PYPI version =2019.2.8, =2020.1.1, =2020.9.0 Source cves: CVE-2021-31607 Source advisory: OSV:PYSEC-2021-56...

br.com.swconsultoria:java-cte (>=3.00.4 <=3.00.8), br.com.swconsultoria:java-mdfe (>=3.00.3 <=3.00.4) +1215 more potentially affected by CVE-2020-26939 via org.bouncycastle:bcprov-jdk16 (>=1.38 <=1.46)

org.bouncycastle:bcprov-jdk16 MAVEN version =1.38, =3.00.4, =3.00.3, =4.00.10, =1.0, =2.0, =1.2.4, =2.0.0, =2.1, =2.1, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2020-26939 Source advisory: OSV:GHSA-72M5-FVVV-55M6...