@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +54 more potentially affected by CVE-2022-21190 via convict (>=6.0.0, <=6.2.2)

convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2022-21190 Source advisory: OSV:GHSA-JJF5-WX3J-3FV7...

@aleen42/gitbook-cli (1.0.0), @amalto/checkboxes-input (1.0.16) +117 more potentially affected by CVE-2018-7408 via npm (>=5.0.2, <=5.6.0)

npm NPM version =5.0.2, =5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on npm and may be impacted: - @aleen42/gitbook-cli 1.0.0 - @amalto/checkboxes-input 1.0.16 - @amalto/code-editor 1.1.48 - @amalto/cron-input 1.0.8 - @amalto/file-importer 1.0.1...

be.yildiz-games:engine-client (1.0.0), be.yildiz-games:module-scripting (>=1.0.2, <=1.0.4) +105 more potentially affected by CVE-2018-1000075 via org.jruby:jruby-stdlib (>=9.0.0.0.rc1, <=9.1.15.0)

org.jruby:jruby-stdlib MAVEN version =9.0.0.0.rc1, =1.0.2, =1.2.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.2.0-rc1, =1.2.0-rc1, =1.2.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.2-rc1, =1.3 and more Source cves: CVE-2018-1000075 Source advisory: GHSA-74PV-V9GH-H25P...

be.yildiz-games:engine-client (1.0.0), be.yildiz-games:module-scripting (>=1.0.2, <=1.0.4) +105 more potentially affected by CVE-2018-1000075 via org.jruby:jruby-stdlib (>=9.0.0.0.rc1, <=9.1.15.0)

org.jruby:jruby-stdlib MAVEN version =9.0.0.0.rc1, =1.0.2, =1.2.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.2.0-rc1, =1.2.0-rc1, =1.2.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.2-rc1, =1.3 and more Source cves: CVE-2018-1000075 Source advisory: OSV:GHSA-74PV-V9GH-H25P...

com.buschmais.jqassistant.core:jqassistant.core.analysis (>=1.0.0-rc1, <=1.0.0), com.buschmais.jqassistant.core:jqassistant.core.plugin (>=1.0.0-rc1, <=1.0.0) +35 more potentially affected by CVE-2018-1000075 via org.jruby:jruby-stdlib (1.7.18)

org.jruby:jruby-stdlib MAVEN version 1.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.buschmais.jqassistant.core:jqassistant.core.analysis =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +6 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.11)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 Source cves: CVE-2017-5664 Source advisory: OSV:GHSA-JMVV-524F-HJ5J...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2017-5664 Source advisory: GHSA-JMVV-524F-HJ5J...

css-semdiff (>=1.0.2, <=1.1.0), dtsm (>=1.0.0, <=1.1.0) +2 more potentially affected by CVE-2017-1000451 via fs-git (1.0.1)

fs-git NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on fs-git and may be impacted: - css-semdiff =1.0.2, =1.0.0, =1.1.0 - grunt-dtsm 1.0.0 - packagemanager-backend 1.0.0 Source cves: CVE-2017-1000451 Source advisory:...

@cicctencent/tars-deploy (>=1.0.1, <=1.0.10), @conga/framework-profiler (>=2.0.0, <=2.0.5) +12 more potentially affected by CVE-2017-1000220 via pidusage (>=1.0.1, <=1.1.4)

pidusage NPM version =1.0.1, =1.0.1, =2.0.0, =0.0.1, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =0.1.4-rc.1, =0.1.4 - shady-background 0.0.1 - shady-worker 0.0.4 - trek-status-monitor 0.3.3 - wf-pm2 1.1.3 Source cves: CVE-2017-1000220 Source advisory: OSV:GHSA-H2P3-H48H-9JJ7...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.13), ca.vanzyl.concord:concord-k8s-server (>=0.0.1, <=0.0.10) +16 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.1.0.final, <=3.6.0.cr1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.1.0.final, =0.0.2, =0.0.1, =0.0.8, =1.18.0, =1.38.0, =1.44.0, =1.37.0, =1.44.0, =1.0.0, =1.18.0, =1.0.0, =1.0.0, =0.0.27, =0.0.11, =0.0.27, =0.0.31 and more Source cves: CVE-2018-1051 Source advisory: GHSA-M2FV-3RQM-G7P5...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.7.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.7.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.7.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.7.final -...

org.jenkins-ci.plugins:pipeline-dependency-walker (1.0.0) potentially affected by CVE-2019-1003014 via org.jenkins-ci.plugins:config-file-provider (2.9.3)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-dependency-walker 1.0.0 Source cves:...

org.jenkins-ci.plugins:nodejs (>=1.0, <=1.2.1) potentially affected by CVE-2019-1003014 via org.jenkins-ci.plugins:config-file-provider (2.15.5)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.0, =1.2.1 Source cves: CVE-2019-1003014...

org.jenkins-ci.plugins:pipeline-maven (>=0.1-beta, <=0.4), org.jenkins-ci.plugins:pipeline-multibranch-defaults (1.0) potentially affected by CVE-2019-1003014 via org.jenkins-ci.plugins:config-file-provider (2.11)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =0.1-beta, =0.4 -...

org.jenkins-ci.plugins:pipeline-maven (>=2.3.0-beta-1, <=2.5.2) potentially affected by CVE-2019-1003014 via org.jenkins-ci.plugins:config-file-provider (2.15.7)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =2.3.0-beta-1, =2.5.2 Source cves:...

dltsign-mobile (0.1.0), jumper-form (>=1.0.91, <=1.2.95) +6 more potentially affected by CVE-2018-6464 via simditor (>=2.1.14, <=2.3.6)

simditor NPM version =2.1.14, =1.0.91, =0.0.1, =2.0.2, =1.0.1, =2.0.4, =2.0.7 - simditor-prettyemoji 1.0.0 Source cves: CVE-2018-6464 Source advisory: OSV:GHSA-P9WJ-WRRM-84M5...

com.addc:addc-svr-struts12 (>=2.5, <=2.6.1), com.addc:addc-web-struts12 (>=2.5, <=2.6.1) +75 more potentially affected by CVE-2016-1181 via struts:struts (>=1.1, <=1.2.9)

struts:struts MAVEN version =1.1, =2.5, =2.5, =0.8-m1, =0.9.0, =5.0, =5.0, =4.0.3, =4.0.4 - nanocontainer:nanocontainer-nanowar-sample 1.0-rc-1 and more Source cves: CVE-2016-1181 Source advisory: OSV:GHSA-7JW3-5Q4W-89QG...

ai.databand.azkaban:azkaban-web-server (3.18.0), at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1, <=9.1.3.2) +1105 more potentially affected by CVE-2016-1182 via org.apache.struts:struts-core (>=1.3.5, <=1.3.10)

org.apache.struts:struts-core MAVEN version =1.3.5, =9.1.1, =2.0.0, =1.2.1, =0.1, =2.1-beta1, =1.2.1, =1.0.0, =0.0.1.alpha, =0.0.1.alpha, =1.2.28, =1.0.0, =1.0.0, =1.1.0 - cn.zhucongqi:e7du-jfinal 1.0.0 and more Source cves: CVE-2016-1182 Source advisory: GHSA-5GGR-MPGW-3MGX...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +197 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

com.aol.microservices:micro-tomcat (>=0.83, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.91.11) +9 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.0.m17)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =0.83, =0.83, =0.1.0, =1.0.0, =1.0.0, =1.6-beta.2, =0.9.4, =9.0.0.m1, =9.0.0.m1, =9.0.0.m17 Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...