9060 matches found
sails-hook-api-version-accept (0.1.0), sails-hook-route (>=0.0.1, <=0.0.4) potentially affected by CVE-2021-44908 via sails (>=1.0.1, <=1.0.3-2)
sails NPM version =1.0.1, =0.0.1, =0.0.4 Source cves: CVE-2021-44908 Source advisory: OSV:GHSA-8V3J-JFG3-V3FV...
10-24-dars (1.0.0), @alephdata/react-ftm (>=1.9.1, <=2.4.0-alpha.2) +206 more potentially affected by CVE-2021-23632 via git (0.1.5)
git NPM version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on git and may be impacted: - 10-24-dars 1.0.0 - @alephdata/react-ftm =1.9.1, =1.5.2, =0.4.120, =1.0.0-alpha.0, =7.7.1, =1.1.7, =1.0.1, =0.13.1, =1.12.2, =1.0.0, =2.1.1 and more Source...
@superdev-official/buffet-angular (1.0.11), apps-b-builder (>=0.1.0, <=0.4.3) +9 more potentially affected by CVE-2022-25760 via accesslog (0.0.2)
accesslog NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on accesslog and may be impacted: - @superdev-official/buffet-angular 1.0.11 - apps-b-builder =0.1.0, =0.6.0, =3.1.0, =0.1.0, =2.0.0, =0.4.0, =0.1.0, =0.4.1, =0.5.0 Source cves:...
0.8.18-p11 (0.8.18-p12), 0.extends.wechat (>=1.0.51, <=1.0.65) +10285 more potentially affected by CVE-2021-44906 via minimist (>=1.0.0, <=1.2.5)
minimist NPM version =1.0.0, =1.0.51, =2.3.0, =0.0.1, =1.0.0, =1.0.0, =0.0.2, =0.3.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.14 and more Source cves: CVE-2021-44906 Source advisory: OSV:GHSA-XVCH-5GV4-984H...
01-numacert (>=1.0.0, <=3.0.0), 06-tekbooks (0.1.0) +46655 more potentially affected by CVE-2021-44906 via minimist (>=0.0.2, <=0.2.1)
minimist NPM version =0.0.2, =1.0.0, =0.3.0, =0.0.15, =1.0.4, =1.0.0, =1.0.0, =1.0.1 - 20190403-utils 1.0.0 - 20231122-npm 1.0.0 and more Source cves: CVE-2021-44906 Source advisory: OSV:GHSA-XVCH-5GV4-984H...
@agoric/cosmic-swingset (>=0.15.0, <=0.20.1), @agoric/swing-store-lmdb (>=0.2.0, <=0.3.6-dev.2) +42 more potentially affected by CVE-2022-21164 via node-lmdb (>=0.3.0, <=0.9.6)
node-lmdb NPM version =0.3.0, =0.15.0, =0.2.0, =0.0.7, =0.0.1, =0.2.0, =1.3.0, =0.1.1, =0.1.4, =0.6.2, =0.0.1, =0.1.0, =0.82.0, =0.0.7, =0.0.2, =0.4.2 and more Source cves: CVE-2022-21164 Source advisory: OSV:GHSA-32J9-6QQM-MQ9G...
ferris-rich-input (0.0.1) potentially affected by CVE-2022-24728 +1 more via ckeditor4 (4.14.0)
ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2022-24728, CVE-2022-24729 Source advisory: OSV:GHSA-4FC4-4P5G-6W89...
roaring-landmask (0.4.0) potentially affected by CVE-2022-0778 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-0778 Source advisory: OSV:GHSA-X3MH-JVJW-3XWX...
ai.h2o:h2o-clustering (>=3.32.1.1, <=3.44.0.2), ai.h2o:h2o-k8s (>=3.30.0.2, <=3.44.0.2) +216 more potentially affected by CVE-2022-21230 via org.nanohttpd:nanohttpd (>=2.2.0, <=2.3.1)
org.nanohttpd:nanohttpd MAVEN version =2.2.0, =3.32.1.1, =3.30.0.2, =3.34.0.3, =1.0.0, =1.0.0, =1.0.0, =3.8, =1.0, =1.1, =0.2.22, =0.2.22, =0.4.15 and more Source cves: CVE-2022-21230 Source advisory: SNYK:JAVA-ORGNANOHTTPD-2422798...
roaring-landmask (0.4.0) potentially affected by CVE-2022-0778 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-0778 Source advisory: OSV:RUSTSEC-2022-0014...
@yeepay/lowcode-engine (>=1.0.0-beta.1, <=2.3.12), @yeepay/lowcode-markdown (>=2.2.0-beta.0, <=2.6.4) potentially affected by CVE-2022-0341 via vditor (3.3.9)
vditor NPM version 3.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on vditor and may be impacted: - @yeepay/lowcode-engine =1.0.0-beta.1, =2.2.0-beta.0, =2.6.4 Source cves: CVE-2022-0341 Source advisory: OSV:GHSA-PQ37-4C4G-V38C...
@hifi/amm (>=1.1.2, <=1.4.0), @hifi/flash-swap (>=1.0.1, <=1.3.1) +6 more potentially affected by unknown CVE via @openzeppelin/contracts-upgradeable (4.2.0)
@openzeppelin/contracts-upgradeable NPM version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/contracts-upgradeable and may be impacted: - @hifi/amm =1.1.2, =1.0.1, =1.1.2, =1.0.0, =0.8.1-pr-brioux-1333.92b26c3a.36, =1.0.5, =2.3.0...
com.kyleu:projectile-lib-admin_2.12 (>=1.13.2, <=1.27.2), com.kyleu:projectile-lib-admin_2.13 (>=1.14.0, <=1.20.0) +8 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.23.5)
org.webjars:swagger-ui MAVEN version 3.23.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.kyleu:projectile-lib-admin2.12 =1.13.2, =1.14.0, =0.9.2, =0.9.2, =0.9.2, =0.9.2, =0.9.2, =0.9.2, =1.1.29,...
com.softwaremill.sttp.tapir:tapir-swagger-ui-akka-http_2.12 (>=0.18.0-m9, <=0.18.0-m11), com.softwaremill.sttp.tapir:tapir-swagger-ui-akka-http_2.13 (>=0.18.0-m9, <=0.18.0-m11) +10 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.48.0)
org.webjars:swagger-ui MAVEN version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.softwaremill.sttp.tapir:tapir-swagger-ui-akka-http2.12 =0.18.0-m9, =0.18.0-m9, =0.18.0-m9, =0.18.0-m9,...
tv.cntt:xitrum-hazelcast2_2.10 (>=1.8, <=1.9), tv.cntt:xitrum-hazelcast2_2.11 (>=1.7, <=1.9) +8 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (2.0.17)
org.webjars:swagger-ui MAVEN version 2.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - tv.cntt:xitrum-hazelcast22.10 =1.8, =1.7, =1.8, =1.7, =1.4, =2.0, =2.0, =3.14, =3.13, =3.16 Source cves:...
com.github.a14e:mycommons_2.12 (>=0.1, <=0.3.08), com.github.a14e:mycommons_2.13 (>=0.3.09, <=0.3.12) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.0.10)
org.webjars:swagger-ui MAVEN version 3.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.github.a14e:mycommons2.12 =0.1, =0.3.09, =0.3.12 - com.jakehschwartz:finatra-swagger2.12 2.10.0 Source cves:...
io.quarkus:quarkus-smallrye-openapi-deployment (>=1.6.0.cr1, <=1.6.1.final), io.quarkus:quarkus-swagger-ui-deployment (>=1.6.0.cr1, <=1.6.1.final) +2 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.27.0)
org.webjars:swagger-ui MAVEN version 3.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - io.quarkus:quarkus-smallrye-openapi-deployment =1.6.0.cr1, =1.6.0.cr1, =1.6.1.final -...
com.jakehschwartz:finatra-swagger_2.11 (>=19.4.1, <=19.4.3), com.jakehschwartz:finatra-swagger_2.12 (>=19.4.0, <=19.4.3) +8 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.22.0)
org.webjars:swagger-ui MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.jakehschwartz:finatra-swagger2.11 =19.4.1, =19.4.0, =1.7.5, =1.7.5, =1.7.5, =1.7.5, =1.7.5, =1.7.5, =2.0.13,...
ca.uhn.hapi.fhir:hapi-fhir-docs (>=5.4.0, <=5.6.5), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-uhnfhirtest (5.6.5) +42 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.46.0)
org.webjars:swagger-ui MAVEN version 3.46.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-docs =5.4.0, =5.4.0, =3.0.71, =3.0.71, =3.0.71, =3.0.71, =3.0.7, =3.0.7, =3.0.7, =3.0.7...
com.softwaremill.sttp.tapir:tapir-swagger-ui-akka-http_2.12 (>=0.17.11, <=0.17.13), com.softwaremill.sttp.tapir:tapir-swagger-ui-akka-http_2.13 (>=0.17.11, <=0.17.13) +14 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.43.0)
org.webjars:swagger-ui MAVEN version 3.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.softwaremill.sttp.tapir:tapir-swagger-ui-akka-http2.12 =0.17.11, =0.17.11, =0.17.11, =0.17.11, =0.17.11,...