8729 matches found
bellperson (>=0.3.4, <=0.15.0), ff-cl-gen (>=0.1.0, <=0.3.0) +10 more potentially affected by CVE-2021-25908 via fil-ocl (0.19.6)
fil-ocl CARGO version 0.19.6 is affected by a known vulnerability. The following packages have a transitive dependency on fil-ocl and may be impacted: - bellperson =0.3.4, =0.1.0, =5.0.0, =5.0.0, =2.3.0, =0.1.0, =0.1.0, =5.0.0, =5.4.0, =5.0.0, =5.0.0, =0.1.1, =0.1.2 Source cves: CVE-2021-25908...
mdbook-cat-prep (>=1.0.0, <=1.0.8), mdbook-curly-quotes (0.3.0) +24 more potentially affected by CVE-2020-26297 via mdbook (>=0.2.3, <=0.3.7)
mdbook CARGO version =0.2.3, =1.0.0, =0.4.0, =0.0.1, =0.1.0, =0.1.0, =0.2.3, =0.2.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-26297 Source advisory: OSV:RUSTSEC-2021-0001...
ifinfo (0.1.0), prosafe_exporter (>=0.1.1, <=0.2.7) potentially affected by unknown CVE via interfaces2 (0.0.5)
interfaces2 CARGO version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on interfaces2 and may be impacted: - ifinfo 0.1.0 - prosafeexporter =0.1.1, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0002...
binjs_es6 (0.2.1) potentially affected by CVE-2021-45683 via binjs_io (0.2.1)
binjsio CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on binjsio and may be impacted: - binjses6 0.2.1 Source cves: CVE-2021-45683 Source advisory: OSV:RUSTSEC-2021-0085...
bronzedb (0.1.0), bronzedb-client (>=0.1.0, <=0.1.1) +3 more potentially affected by CVE-2021-45682 via bronzedb-protocol (0.1.0)
bronzedb-protocol CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on bronzedb-protocol and may be impacted: - bronzedb 0.1.0 - bronzedb-client =0.1.0, =0.1.1 - bronzedb-memory-db-server 0.1.0 - bronzedb-server 0.1.0 -...
hina (>=0.0.1, <=0.1.3) potentially affected by CVE-2020-36511 via bite (0.0.5)
bite CARGO version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on bite and may be impacted: - hina =0.0.1, =0.1.3 Source cves: CVE-2020-36511 Source advisory: OSV:RUSTSEC-2020-0153...
@accordproject/cicero-cli (>=0.3.4, <=0.21.27-20210409091004), @accordproject/cicero-common (>=0.3.4, <=0.3.12) +455 more potentially affected by CVE-2020-26291 via urijs (>=1.16.1, <=1.19.3)
urijs NPM version =1.16.1, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.4.5-20180705184508, =0.11.2-20190326183124, =0.10.2-20190213145246, =0.0.5-20190507210024, =0.71.8-20190915045234, =0.80.2-20190926121100, =0.80.4-20191003231621, =0.61.2-20190916200303, =0.90.1-20200514190616, =0.6.0-alpha.0,...
@bartificer/human-join (>=1.0.0, <=1.0.1), @frdl/custom-require (>=0.0.0, <=0.0.12) +43 more potentially affected by unknown CVE via node-ini (1.0.0)
node-ini NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-ini and may be impacted: - @bartificer/human-join =1.0.0, =0.0.0, =5.0.5, =0.0.3, =1.0.1, =1.1.0, =0.0.0, =0.1.0, =0.0.0, =1.1.1, =0.0.1, =0.0.2, =0.0.3 - chowder 0.0.1 and...
@aeonlabs/vue-model-viewer (>=0.0.1, <=0.0.67), @artefacts.tech/vue-model-viewer (>=0.0.1, <=0.0.2) +21 more potentially affected by CVE-2020-28478 via gsap (>=3.0.4, <=3.5.1)
gsap NPM version =3.0.4, =0.0.1, =0.0.1, =1.1.3-alpha1, =0.0.100, =0.0.4, =0.2.10, =0.0.1-alpha.2, =1.0.0, =0.0.0, =1.1.51, =1.1.55, =0.0.12, =0.0.22, =0.0.23 and more Source cves: CVE-2020-28478 Source advisory: SNYK:JS-GSAP-1054614...
kari (0.1.0), soos-sample-project (1.0.1) potentially affected by CVE-2020-36513 +1 more via acc_reader (2.0.0)
accreader CARGO version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accreader and may be impacted: - kari 0.1.0 - soos-sample-project 1.0.1 Source cves: CVE-2020-36513, CVE-2020-36514 Source advisory: OSV:RUSTSEC-2020-0155...
bigbang (>=0.0.6, <=0.0.9), bruteforus (0.1.0) +8 more potentially affected by CVE-2020-36463 via multiqueue (0.3.2)
multiqueue CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on multiqueue and may be impacted: - bigbang =0.0.6, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.6, =0.2.0, =0.5.0 Source cves: CVE-2020-36463 Source advisory:...
@csnext/cs-timeline (>=0.0.101-beta.22, <=0.0.132-beta.446), @net7/components (>=3.0.2-rc.2, <=4.3.2) +4 more potentially affected by CVE-2020-28487 via vis-timeline (>=7.1.3, <=7.4.2)
vis-timeline NPM version =7.1.3, =0.0.101-beta.22, =3.0.2-rc.2, =2.0.0-alpha2, =1.3.0, =3.1.1-build1667201258, =3.1.2 Source cves: CVE-2020-28487 Source advisory: SNYK:JS-VISTIMELINE-1063500...
@3wks/gae-node-nestjs (>=2.1.1, <=6.0.0-rc.0), @8sistemas/design-system (>=0.6.0-alpha.1, <=1.0.5) +892 more potentially affected by CVE-2020-26289 via date-and-time (>=0.3.0, <=0.14.1)
date-and-time NPM version =0.3.0, =2.1.1, =0.6.0-alpha.1, =0.0.38, =1.1.8, =4.2.0, =0.0.6, =3.6.0, =1.0.0, =0.0.0, =1.1.68, =1.4.3, =0.1.3, =0.1.0-master.20191004191703, =1.4.1-atomist.a260p86nh.typescript-version.master.20190915212851, =2.0.0-master.20200715122321 and more Source cves:...
app (>=0.2.0, <=0.6.5), bench_timer (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via stderr (>=0.2.2, <=0.8.0)
stderr CARGO version =0.2.2, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.3.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0109...
a_r_c_h_e_r_y (>=0.4.1, <=0.4.3), abci-storage (0.0.3) +1674 more potentially affected by unknown CVE via difference (>=0.4.1, <=2.0.0)
difference CARGO version =0.4.1, =0.4.1, =0.1.1, =0.1.0, =0.1.0, =4.1.0, =0.6.0, =0.1.0, =0.1.25, =2.0.0, =2.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0095...
aoa (0.1.0), blinkrs (1.0.1) +32 more potentially affected by CVE-2020-36206 via rusb (>=0.4.0, <=0.6.5)
rusb CARGO version =0.4.0, =0.2.0, =0.6.0, =0.2.0, =0.1.0, =1.0.0-alpha.2, =0.1.0, =0.1.0, =1.0.0, =0.4.0, =0.5.0, =0.1.0, =0.1.5 and more Source cves: CVE-2020-36206 Source advisory: OSV:RUSTSEC-2020-0098...
@mdslab/iotronic-lightning-rod (>=2.3.1, <=2.3.6), connection-test-table (>=0.1.0, <=0.1.3) +9 more potentially affected by CVE-2020-7781 via connection-tester (>=0.0.7, <=0.2.0)
connection-tester NPM version =0.0.7, =2.3.1, =0.1.0, =0.0.1, =0.0.1, =0.0.10, =1.1.3, =0.0.1, =0.0.1, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2020-7781 Source advisory: OSV:GHSA-W5MP-8P8W-MHH8...
@coreui/coreui-datatables (1.0.0), @daai/sb-decloud (>=1.0.0, <=1.0.11) +38 more potentially affected by CVE-2020-28458 via datatables.net (>=1.10.12, <=1.10.21)
datatables.net NPM version =1.10.12, =1.0.0, =1.0.0, =3.0.0, =1.1.1, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =0.0.0, =0.1.56, =0.2.151 and more Source cves: CVE-2020-28458 Source advisory: OSV:GHSA-M7J4-FHG6-XF5V...
@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +27 more potentially affected by CVE-2020-26274 via systeminformation (>=4.0.9, <=4.31.0)
systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =5.2.0, =5.2.1 and more Source cves: CVE-2020-26274 Source...
netlify-plugin-cypress (>=1.0.2, <=1.3.3) potentially affected by CVE-2019-10775 via ecstatic (4.1.2)
ecstatic NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on ecstatic and may be impacted: - netlify-plugin-cypress =1.0.2, =1.3.3 Source cves: CVE-2019-10775 Source advisory: OSV:GHSA-JC84-3G44-WF2Q...