tensorflowjs (>=1.5.2 <=1.7.4) potentially affected by CVE-2020-15190 via tensorflow-cpu (=2.1.0)

tensorflow-cpu PYPI version =2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - tensorflowjs =1.5.2, =1.7.4 Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...

abba-python (>=0.1.6 <=0.3.0), adpred (>=1.1.2 <=1.2.7) +233 more potentially affected by CVE-2020-15190 via tensorflow (>=1.0.1 <=1.15.3)

tensorflow PYPI version =1.0.1, =0.1.6, =1.1.2, =0.0.1, =0.3.26, =0.2.0, =0.4.2, =0.1.1, =0.1.5 - autobazaar =0.1.0 - autogan =0.0.5 - automationobjectdetection-sandeepjena7 =0.0.1 - automl-lib =0.0.1 and more Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15190 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...

pycnet-audio (>=0.5.1 <=0.5.8) potentially affected by CVE-2020-15190 via tensorflow-cpu (=2.2.0)

tensorflow-cpu PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - pycnet-audio =0.5.1, =0.5.8 Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...

easyquake (>=1.1.0 <=1.2.2), epyseg (>=0.1.0 <=0.1.7) +3 more potentially affected by CVE-2020-15190 via tensorflow-gpu (>=2.1.0 <=2.1.1)

tensorflow-gpu PYPI version =2.1.0, =1.1.0, =0.1.0, =1.7.0, =1.9.5 Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...

@adeunis/codecs (>=1.3.0 <=1.4.0), @koalarx/utils (>=3.0.7 <=3.0.8) +5 more potentially affected by CVE-2020-7772 via doc-path (>=2.0.0 <=2.2.0)

doc-path NPM version =2.0.0, =1.3.0, =3.0.7, =1.0.5, =3.2.0, =1.1.4, =1.2.3 Source cves: CVE-2020-7772 Source advisory: SNYK:JS-DOCPATH-1011952...

at.molindo.social:spring-social-security (=1.1.0.RELEASE), cn.jhc:spring-social-qq (>=0.0.2 <=0.0.5) +496 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (>=3.2.0.RELEASE <=3.2.4.RELEASE)

org.springframework.security:spring-security-core MAVEN version =3.2.0.RELEASE, =0.0.2, =1.0-RELEASE, =1.0.1, =1.1.2, =1.2.0, =1.2.5 and more Source cves: CVE-2014-3527 Source advisory: OSV:GHSA-WMV4-5W76-VP9G...

@cenk1cenk2/renovate-config (>=1.0.9 <=1.4.15) potentially affected by unknown CVE via renovate (>=21.33.15 <=22.25.6)

renovate NPM version =21.33.15, =1.0.9, =1.4.15 Source cves: unknown CVE Source advisory: OSV:GHSA-36RH-GGPR-J3GJ...

untitled-js (>=1.0.0 <=1.0.9) potentially affected by unknown CVE via untitled-model (=1.0.5)

untitled-model NPM version =1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on untitled-model and may be impacted: - untitled-js =1.0.0, =1.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-HQ8G-QQ57-5275...

@cqingwang/react-native-update (>=14.0.5 <=15.0.3), @mervinzhu/react-native-update-pod (>=5.0.1 <=5.0.3) +23 more potentially affected by unknown CVE via entitlements (>=1.0.0 <=1.2.0)

entitlements NPM version =1.0.0, =14.0.5, =5.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.2, =1.0.0, =1.0.0, =1.4.1, =1.0.2, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G8VP-6HV4-M67C...

@csltech/strong-nginx-controller (>=1.0.2 <=1.0.3), @csltech/strong-pm (>=7.0.0 <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.17 <=2.1.8-M1)

swagger-ui NPM version =2.0.17, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VP93-GCX5-4W52...

@5minds/node-red-dashboard-2-processcube-dynamic-form (>=1.0.25-poc-for-using-dynamic-ui-from-app-sdk-4a73f4-m2ok3vom <=1.0.25-poc-for-using-dynamic-ui-from-app-sdk-d41e60-m2oo8xvq), @5minds/processcube_app_sdk (>=5.1.0-feature-1c1233-lsdsso3l <=8.6.2) +352 more potentially affected by unknown CVE via diagram-js (>=0.18.4 <=1.4.0)

diagram-js NPM version =0.18.4, =1.0.25-poc-for-using-dynamic-ui-from-app-sdk-4a73f4-m2ok3vom, =5.1.0-feature-1c1233-lsdsso3l, =1.2.0, =0.1.0-package-6ccc4e-lyitv9ph, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =1.0.98, =0.0.25, =0.3.0, =1.0.0, =0.0.1-alpha.0, =0.3.0 - @bptlab/openbpt-modeler-bpmn =1.0.0 and...

@ieremeev/app (>=3.0.1 <=3.2.4), xtal-test (>=0.0.1 <=0.0.10) potentially affected by unknown CVE via serve (=10.0.0)

serve NPM version =10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on serve and may be impacted: - @ieremeev/app =3.0.1, =0.0.1, =0.0.10 Source cves: unknown CVE Source advisory: OSV:GHSA-XW79-HHV6-578C...

react-endless (>=1.0.4 <=1.0.6), react-templet (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via epress (=0.0.1-security)

epress NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-VF8Q-PW7H-R2X2...

@ctx-core/auth0 (>=25.0.2 <=28.0.23), @ctx-core/auth0-lock (>=12.0.2 <=13.0.9) +55 more potentially affected by CVE-2020-15168 via node-fetch (>=3.0.0-beta.10 <=3.0.0-beta.8)

node-fetch NPM version =3.0.0-beta.10, =25.0.2, =12.0.2, =6.0.2, =1.0.1, =10.0.2, =11.0.2, =9.0.2, =1.0.0, =11.0.16, =0.0.1, =7.0.0, =5.0.0, =6.0.0, =8.0.2, =0.0.1, =0.0.6 and more Source cves: CVE-2020-15168 Source advisory: OSV:GHSA-W7RC-RWVF-8Q5R...

20190403-utils (=1.0.0), 3nit-utils (>=0.24.0 <=1.0.2) +4758 more potentially affected by CVE-2020-15168 via node-fetch (>=2.0.0 <=2.6.0)

node-fetch NPM version =2.0.0, =0.24.0, =0.0.0-alpha.1, =1.0.43, =0.0.80, =1.0.0-beta.1, =0.0.0-canary.0, =0.0.1, =2.0.0, =1.0.0, =0.1.0, =2.0.0, =2.0.3 and more Source cves: CVE-2020-15168 Source advisory: OSV:GHSA-W7RC-RWVF-8Q5R...

node-lemonldap-ng-handler (=0.4.0) potentially affected by CVE-2020-24660 via lemonldap-ng-handler (=0.4.0)

lemonldap-ng-handler NPM version =0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on lemonldap-ng-handler and may be impacted: - node-lemonldap-ng-handler =0.4.0 Source cves: CVE-2020-24660 Source advisory: OSV:GHSA-X44X-R84W-8V67...

@ist-group/skolid-client-components (>=0.7.0 <=0.10.2) potentially affected by unknown CVE via personnummer (=2.1.1)

personnummer NPM version =2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on personnummer and may be impacted: - @ist-group/skolid-client-components =0.7.0, =0.10.2 Source cves: unknown CVE Source advisory: OSV:GHSA-VPGC-7H78-GX8F...

@brettparkhurst/kinetic (>=2.0.0 <=2.0.17), appworks-js (>=16.0.0 <=16.0.1) +8 more potentially affected by CVE-2019-0219 via cordova-plugin-inappbrowser (>=1.7.2 <=3.0.0)

cordova-plugin-inappbrowser NPM version =1.7.2, =2.0.0, =16.0.0, =1.2.0, =0.0.1, =1.0.13, =0.3.2, =1.0.0, =1.2.4 Source cves: CVE-2019-0219 Source advisory: OSV:GHSA-C6PW-Q7F2-97HV...

meta (>=1.0.0 <=1.0.3), ownmeta (=0.0.4) potentially affected by unknown CVE via meta-git (>=0.0.0 <=1.1.3)

meta-git NPM version =0.0.0, =1.0.0, =1.0.3 - ownmeta =0.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-QCFF-FFX3-M25C...