com.knewton.mapreduce:kassandramrhelper (>=0.2.1, <=0.3.2), info.archinnov:achilles (>=2.0.4, <=2.0.7) +4 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.2.8)

org.apache.cassandra:cassandra-all MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.knewton.mapreduce:kassandramrhelper =0.2.1, =2.0.4, =2.0.4, =2.0.4, =2.0.4, =2.0.9 Sour...

com.n3twork.druid:druid-cassandra-storage (0.6.105-hadoop2.4.0), com.netflix.astyanax:astyanax (>=0.8.11, <=1.0.3) +3 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.0.8)

org.apache.cassandra:cassandra-all MAVEN version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.n3twork.druid:druid-cassandra-storage 0.6.105-hadoop2.4.0 - com.netflix.astyanax:astyan...

com.datastax.spark:kafka-streaming_2.10 (>=1.1.0-beta2, <=1.1.0-rc3), com.datastax.spark:simple-demos_2.10 (>=1.1.0-beta2, <=1.1.0-rc3) +5 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.1.1)

org.apache.cassandra:cassandra-all MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.datastax.spark:kafka-streaming2.10 =1.1.0-beta2, =1.1.0-beta2, =1.1.0-beta2, =0.3.1,...

com.bazaarvoice.astyanax:astyanax-cassandra (3.8.0-bv10), com.bazaarvoice.astyanax:astyanax-contrib (3.8.0-bv10) +26 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.2.19)

org.apache.cassandra:cassandra-all MAVEN version 2.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.bazaarvoice.astyanax:astyanax-cassandra 3.8.0-bv10 -...

com.impetus.kundera.client:kundera-cassandra (>=3.2, <=3.4), com.impetus.kundera.client:kundera-cassandra-ds-driver (>=3.2, <=3.4) +13 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.2.2)

org.apache.cassandra:cassandra-all MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.impetus.kundera.client:kundera-cassandra =3.2, =3.2, =3.2, =1.0, =2.0.3.final,...

com.netflix.astyanax:astyanax (>=3.2.0-rc.1, <=3.9.0), com.netflix.astyanax:astyanax-cassandra (>=3.2.0-rc.1, <=3.9.0) +23 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.12)

org.apache.cassandra:cassandra-all MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.netflix.astyanax:astyanax =3.2.0-rc.1, =3.2.0-rc.1, =3.2.0-rc.1, =3.2.0-rc.1,...

@accordproject/cicero-cli (>=0.3.4, <=0.23.0-alpha.1), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.0-alpha.1) +151 more potentially affected by CVE-2021-23555 via vm2 (>=3.0.0, <=3.9.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2018.7.11-0, =2018.8.5-0, =2018.8.14-0 - @appium/execute-driver-plugin...

@wmfs/tymly-fastify-plugin (>=1.57.0, <=1.59.0), homebridge-config-ui-x (>=4.41.4-test.3, <=4.43.0-test.2) potentially affected by CVE-2021-23597 via fastify-multipart (>=5.2.1, <=5.3.0)

fastify-multipart NPM version =5.2.1, =1.57.0, =4.41.4-test.3, =4.43.0-test.2 Source cves: CVE-2021-23597 Source advisory: OSV:GHSA-QH73-QC3P-RJV2...

@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by CVE-2021-28860 +1 more via mixme (>=0.0.1, <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: CVE-2021-28860, CVE-2021-29491 Source advisory: OSV:GHSA-R5CQ-9537-9RPF...

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +2021 more potentially affected by CVE-2021-23383 via handlebars (>=4.0.0, <=4.7.6)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.2-alpha.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-23383 Source advisory: OSV:GHSA-765H-QJXV-5F44...

@foxnfork/auth-node (>=0.0.8, <=0.0.50), @foxnfork/node-utils (>=0.0.1, <=0.0.9) +11 more potentially affected by CVE-2021-26543 via git-parse (>=1.0.3, <=1.0.4)

git-parse NPM version =1.0.3, =0.0.8, =0.0.1, =0.0.1, =2.11.0-beta, =1.4.3, =2.6.0, =2.18.1, =0.2.11, =1.2.7, =1.0.0, =2.33.10, =0.2.1, =2.6.2, =2.6.3 Source cves: CVE-2021-26543 Source advisory: OSV:GHSA-M744-2JJ8-VPFV...

compare-eslint-config (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-7629 via install-package (0.1.0)

install-package NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on install-package and may be impacted: - compare-eslint-config =0.1.0, =0.1.1 Source cves: CVE-2020-7629 Source advisory: OSV:GHSA-6M4R-M3GC-H4R5...

@bionicmetrics/bionic (>=1.2.0, <=1.3.6), @emonxdefine/oindot (>=1.0.3, <=1.0.7) +9 more potentially affected by CVE-2020-7627 via node-key-sender (>=1.0.9, <=1.0.11)

node-key-sender NPM version =1.0.9, =1.2.0, =1.0.3, =1.0.9, =1.5.0, =0.0.1, =1.0.0, =1.0.5, =0.9.0, =1.2.1, =1.1.0, =2.2.0 Source cves: CVE-2020-7627 Source advisory: OSV:GHSA-4XRW-WVMQ-8JMH...

hiproxy (>=1.1.3, <=2.0.0-next.3) potentially affected by CVE-2020-7625 via op-browser (>=1.0.6, <=1.0.9)

op-browser NPM version =1.0.6, =1.1.3, =2.0.0-next.3 Source cves: CVE-2020-7625 Source advisory: OSV:GHSA-3HQ6-RMV7-39VH...

@dolittle/node-red (>=2.0.0, <=2.2.5), @dolittle/node-red-infor-m3 (>=2.0.1, <=2.1.5) +50 more potentially affected by CVE-2019-10062 via aurelia-framework (>=1.0.0, <=1.3.1)

aurelia-framework NPM version =1.0.0, =2.0.0, =2.0.1, =1.2.1, =1.0.0, =0.1.9, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11 and more Source cves: CVE-2019-10062 Source advisory: OSV:GHSA-M6J2-V3GQ-45R5...

specberus (>=4.4.4, <=5.6.2) potentially affected by CVE-2021-32820 via express-handlebars (>=5.1.0, <=5.3.0)

express-handlebars NPM version =5.1.0, =4.4.4, =5.6.2 Source cves: CVE-2021-32820 Source advisory: OSV:GHSA-FR76-2WP8-FP92...

421752593pro (5.6.0), @zkochan/pnpm (>=1.16.0, <=1.16.22) +7 more potentially affected by CVE-2017-18869 via chownr (1.0.1)

chownr NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on chownr and may be impacted: - 421752593pro 5.6.0 - @zkochan/pnpm =1.16.0, =5.4.2, =1.16.2, =1.23.2, =2.0.3, =2.15.0 - wedmaster 4.1.2 Source cves: CVE-2017-18869 Source advisory:...

3d-crystal-model (0.1.0), 5ug-cli (>=1.0.23, <=1.0.70) +3151 more potentially affected by CVE-2020-15366 via ajv (>=6.0.0, <=6.12.2)

ajv NPM version =6.0.0, =1.0.23, =0.0.1, =1.0.0, =1.0.0, =6.0.0, =1.0.6, =0.0.1-bate.30, =0.0.1, =0.0.1, =1.0.4, =3.0.0-beta.3, =0.0.1, =0.33.12 and more Source cves: CVE-2020-15366 Source advisory: OSV:GHSA-V88G-CGMW-V5XW...

02-sms-async (1.0.0), 1405-authtokens (>=1.0.1, <=1.0.5) +5956 more potentially affected by CVE-2019-2391 via bson (>=1.0.1, <=1.1.1)

bson NPM version =1.0.1, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.1.4, =0.1.0, =0.1.0, =0.0.1, =0.1.3 and more Source cves: CVE-2019-2391 Source advisory: OSV:GHSA-4JWP-VFVF-657P...

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +1559 more potentially affected by CVE-2019-20922 via handlebars (>=4.0.0, <=4.4.3)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2-alpha.0, =1.0.0, =0.0.2-next.4, =5.0.0-alpha.1, =6.0.10 and more Source cves: CVE-2019-20922 Source advisory: OSV:GHSA-62GR-4QP9-H98F...