com.softwaremill.akka-http-session:jwt_2.13 (>=0.5.7 <=0.6.0) potentially affected by CVE-2020-28452 via com.softwaremill.akka-http-session:core_2.13 (>=0.5.10 <=0.6.0)

com.softwaremill.akka-http-session:core2.13 MAVEN version =0.5.10, =0.5.7, =0.6.0 Source cves: CVE-2020-28452 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1058933...

com.codacy:codacy-seed-client-akka-http_2.11 (>=1.1.0-featurehelm3.62.2328366_akka24Circe08 <=1.2.0_akka25Circe08), com.softwaremill.akka-http-session:jwt_2.11 (>=0.2.0 <=0.5.11) potentially affected by CVE-2020-28452 via com.softwaremill.akka-http-session:core_2.11 (>=0.2.0 <=0.5.9)

com.softwaremill.akka-http-session:core2.11 MAVEN version =0.2.0, =1.1.0-featurehelm3.62.2328366akka24Circe08, =0.2.0, =0.5.11 Source cves: CVE-2020-28452 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1046675...

com.boxframework:box-server_2.12 (>=1.2.22 <=1.2.23), com.codacy:codacy-seed-client-akka-http_2.12 (>=1.1.0-master.51.7b7549c_akka25Circe08 <=1.2.0_akka25Circe08) +1 more potentially affected by CVE-2020-28452 via com.softwaremill.akka-http-session:core_2.12 (>=0.3.0 <=0.6.0)

com.softwaremill.akka-http-session:core2.12 MAVEN version =0.3.0, =1.2.22, =1.1.0-master.51.7b7549cakka25Circe08, =0.3.0, =0.6.0 Source cves: CVE-2020-28452 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1046674...

fabric8-analytics-lsp-server (=0.3.0), graphql-validated-types (>=2.7.0 <=2.11.0) +1 more potentially affected by unknown CVE via semver-regex (>=3.0.0 <=3.1.1)

semver-regex NPM version =3.0.0, =2.7.0, =1.2.0, =1.2.3 Source cves: unknown CVE Source advisory: SNYK:JS-SEMVERREGEX-1047770...

3deecelltracker (=1.0.0), abracadabra (>=0.0.0 <=0.0.1) +59 more potentially affected by CVE-2020-26215 via notebook (>=4.2.3 <=6.1.4)

notebook PYPI version =4.2.3, =0.0.0, =1.0.0, =1.0.0, =0.1.1, =1.0.0, =0.3.4, =0.1.0rc1, =0.0.1, =0.1.3, =1.0.0rc0, =1.0.0, =1.0.0b1, =1.0.0b5 and more Source cves: CVE-2020-26215 Source advisory: OSV:PYSEC-2020-215...

Potential segfault in the time crate

Impact The affected functions set environment variables without synchronization. On Unix-like operating systems, this can crash in multithreaded programs. Programs may segfault due to dereferencing a dangling pointer if an environment variable is read in a different thread than the affected...

10by10-react-app (=1.2.1), 1k-utils (>=1.0.0 <=1.4.0) +15141 more potentially affected by CVE-2021-23337 via lodash (>=4.0.0 <=4.17.20)

lodash NPM version =4.0.0, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.0.2, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =0.0.1, =0.2.1, =0.3.44 and more Source cves: CVE-2021-23337 Source advisory: SNYK:JS-LODASH-1040724...

actyx_sdk (=0.3.0), actyxos_sdk (>=0.5.1 <=0.6.0) +40 more potentially affected by CVE-2020-36471 via generator (=0.6.25)

generator CARGO version =0.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on generator and may be impacted: - actyxsdk =0.3.0 - actyxossdk =0.5.1, =0.1.0, =0.2.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =0.0.1, =0.2.11, =0.7.0, =0.5.0, =0.9.2, =0.8.2, =0.1....

term-handler (=0.1.0) potentially affected by CVE-2020-36446 via signal-simple (=0.1.1)

signal-simple CARGO version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on signal-simple and may be impacted: - term-handler =0.1.0 Source cves: CVE-2020-36446 Source advisory: OSV:RUSTSEC-2020-0126...

canonical (>=0.4.1 <=0.5.3), canonical_collections (=0.4.0) +11 more potentially affected by CVE-2020-36469 via appendix (=0.2.2)

appendix CARGO version =0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on appendix and may be impacted: - canonical =0.4.1, =0.4.0, =0.4.3, =0.4.0, =0.6.0, =0.1.0, =0.18.0, =0.11.0, =0.4.0, =0.6.0, =0.7.0 - rusk-abi =0.7.0 - rusk-vm =0.12.0-rc.0...

rustracts (=0.2.0) potentially affected by CVE-2020-36454 via parc (=1.0.1)

parc CARGO version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on parc and may be impacted: - rustracts =0.2.0 Source cves: CVE-2020-36454 Source advisory: OSV:RUSTSEC-2020-0134...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4779 more potentially affected by CVE-2020-15266 via tensorflow (>=1.0.1 <=2.3.4)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2020-15266 Source advisory: OSV:GHSA-XWHF-G6J5-J5GC...

abstract-ns (=0.1.0), accumulator (=0.3.0) +112 more potentially affected by CVE-2020-35921 via miow (=0.1.5)

miow CARGO version =0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on miow and may be impacted: - abstract-ns =0.1.0 - accumulator =0.3.0 - asio =0.1.0 - bipdht =0.1.0, =0.1.1, =0.1.0, =0.2.0, =0.1.0, =0.15.0, =0.1.1, =0.1.0, =0.6.0, =0.6.2 and mor...

accession (>=1.9.0 <=3.11.0), agutil (>=2.0.0 <=4.1.1) +178 more potentially affected by CVE-2020-25658 via rsa (>=3.1.4 <=4.6.0)

rsa PYPI version =3.1.4, =1.9.0, =2.0.0, =0.1.2, =2.0.1, =0.1.0, =0.1.0, =0.4.1, =0.2.2, =0.0.22, =2.0.0, =0.10.0, =1.0.0, =1.7.35, =1.19.40 - awsegy =0.1.4 and more Source cves: CVE-2020-25658 Source advisory: OSV:PYSEC-2020-100...

garbo (>=0.1.0 <=0.2.0) potentially affected by CVE-2020-36450 via bunch (=0.1.0)

bunch CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on bunch and may be impacted: - garbo =0.1.0, =0.2.0 Source cves: CVE-2020-36450 Source advisory: OSV:RUSTSEC-2020-0130...

zdd (=0.2.0) potentially affected by CVE-2020-36215 via hashconsing (=0.10.3)

hashconsing CARGO version =0.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on hashconsing and may be impacted: - zdd =0.2.0 Source cves: CVE-2020-36215 Source advisory: OSV:RUSTSEC-2020-0107...

efw (=0.1.0) potentially affected by CVE-2020-36209 via late-static (=0.3.0)

late-static CARGO version =0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on late-static and may be impacted: - efw =0.1.0 Source cves: CVE-2020-36209 Source advisory: OSV:RUSTSEC-2020-0102...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2020-16846 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2020-16846 Source advisory: OSV:PYSEC-2020-104...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2020-17490 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2020-17490 Source advisory: OSV:PYSEC-2020-105...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2020-25592 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2020-25592 Source advisory: OSV:PYSEC-2020-106...