aglvq (=1.0.0), beacon-trellis (=0.1.0) +64 more potentially affected by CVE-2020-26267 via tensorflow (>=2.1.0 <=2.1.2)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.0.2, =0.1.0, =1.1.0, =0.2.0rc1, =0.2.0rc3 and more Source cves: CVE-2020-26267 Source advisory: OSV:GHSA-C9F3-9WFR-WGH7...

accuinsight (>=1.0.47 <=1.0.61), alphad3m (>=0.10.0 <=0.10.0.dev1) +82 more potentially affected by CVE-2020-15204 via tensorflow (=2.2.0)

tensorflow PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - accuinsight =1.0.47, =0.10.0, =0.5.0, =0.2.0, =0.0.6, =1.2.0, =1.0.0, =0.0.15, =0.0.16 and more Source cves: CVE-2020-15204 Source advisory...

accuinsight (>=1.0.47 <=1.0.61), alphad3m (>=0.10.0 <=0.10.0.dev1) +82 more potentially affected by CVE-2020-15195 via tensorflow (=2.2.0)

tensorflow PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - accuinsight =1.0.47, =0.10.0, =0.5.0, =0.2.0, =0.0.6, =1.2.0, =1.0.0, =0.0.15, =0.0.16 and more Source cves: CVE-2020-15195 Source advisory...

@dotgov/bpmn (>=0.0.1 <=0.0.29), @dotgov/z_bpmn (>=0.0.1 <=2.0.0) +14 more potentially affected by unknown CVE via diagram-js-direct-editing (>=0.17.1 <=0.9.0)

diagram-js-direct-editing NPM version =0.17.1, =0.0.1, =0.0.1, =1.0.0, =0.5.0, =1.20.7, =0.7.2, =1.0.0, =1.0.0, =0.2.2, =0.0.7, =2.0.0, =2.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J8R2-2X94-2Q67...

@fanswoo/core (>=1.0.0 <=1.3.8), brws-upload (>=1.0.2 <=1.0.3) +4 more potentially affected by unknown CVE via jquery-mobile (>=1.4.1 <=1.5.0-alpha.1)

jquery-mobile NPM version =1.4.1, =1.0.0, =1.0.2, =1.0.0, =1.0.2, =2.0.0, =0.0.1, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-FJ93-7WM4-8X2G...

jupyterhubutils (>=0.11.0 <=0.12.0), wfdispatcher (=0.2.2) potentially affected by CVE-2020-15110 via jupyterhub-kubespawner (=0.11.1)

jupyterhub-kubespawner PYPI version =0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub-kubespawner and may be impacted: - jupyterhubutils =0.11.0, =0.12.0 - wfdispatcher =0.2.2 Source cves: CVE-2020-15110 Source advisory: OSV:PYSEC-2020...

0.app1 (=1.0.52), 0.edsql (>=1.0.49 <=1.0.50) +3036 more potentially affected by CVE-2020-4077 via electron (>=0.1.2 <=7.2.3)

electron NPM version =0.1.2, =1.0.49, =1.0.49, =1.0.49, =1.0.1, =0.0.10, =1.0.2, =1.1.11, =0.1.0, =0.1.0, =0.11.5 and more Source cves: CVE-2020-4077 Source advisory: OSV:GHSA-H9JC-284H-533G...

com.credibledoc:log-labelizer (>=1.0.40 <=1.0.44), com.novocode:ornate_2.11 (>=0.3 <=0.5) +102 more potentially affected by CVE-2020-11022 via org.webjars.npm:jquery (>=1.12.1 <=3.4.1)

org.webjars.npm:jquery MAVEN version =1.12.1, =1.0.40, =0.3, =1.3.0, =1.3.0, =1.3.0, =3.2.0, =2.4.0, =3.0.0, =3.1.0, =4.1.3 - de.digitalcollections:streaming-server-euphoria =3.0.0 and more Source cves: CVE-2020-11022 Source advisory: OSV:GHSA-GXR4-XJJ5-5PX2...

@jamesbliss/react-flickity (>=1.0.0 <=1.4.0), @jamesbliss/react-spy (=0.0.1) +21 more potentially affected by CVE-2019-10773 via yarn (>=1.0.2 <=1.21.0)

yarn NPM version =1.0.2, =1.0.0, =1.9.9, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.1, =0.0.0-semantic-release, =1.5.9, =1.1.2, =1.13.1 and more Source cves: CVE-2019-10773 Source advisory: SNYK:JS-YARN-537806...

@aabenoja/karma-phantomjs-launcher (=0.2.1), @aabenoja/phantomjs (=2.0.0) +460 more potentially affected by unknown CVE via npmconf (>=0.0.19 <=2.1.2)

npmconf NPM version =0.0.19, =0.1.28, =1.2.6, =2.7.2, =4.5.201902251314, =1.5.0, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =1.0.3, =2.19.0, =2.19.3 - @jrossi/phantomjs2 =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-57CF-349J-352G...

cloud.altemista.fwk.integration:cloud-altemistafwk-core-integration-ws-conf (>=3.0.0.RELEASE <=3.0.1.RELEASE), com.antheminc.oss:nimbus-starter (>=1.3.0 <=1.3.2.M1) +520 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (>=3.0.0.RELEASE <=3.0.5.RELEASE)

org.springframework.ws:spring-xml MAVEN version =3.0.0.RELEASE, =3.0.0.RELEASE, =1.3.0, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.3.3 - com.coherentlogic.cmr.api:cmr-api-core =2.0.3-RELEASE - com.coherentlogic.cmr.api:cmr-api-core-boot =2.0.3-RELEASE -...

br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=1.2.2), com.alanpoi:alanpoi-all (>=1.3.5 <=3.0.0) +61 more potentially affected by CVE-2015-7940 via org.bouncycastle:bcprov-jdk14 (>=1.38 <=1.50)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.38, =1.2.1, =1.3.5, =1.3.5, =2.0, =1.0, =1.6.1.P24, =1.7, =0.0.1, =1.0, =1.1 - com.github.lkkushan101.RestAssuredPDFReport:com.github.lkkushan101.RestAssuredPDFReport =1.00 - com.github.lkkushan101.appiumlocator:com.github.lkkushan101.appiumlocator...

cloudxns-ddns-service (=1.0.0), coderedcms (>=0.10.0 <=0.14.1) +97 more potentially affected by CVE-2018-16984 via django (>=2.1.0 <=2.1.15)

django PYPI version =2.1.0, =0.10.0, =2.4.0, =0.3.1, =0.1.6, =0.2.0, =1.3.2, =0.1.0, =0.1.0a3 - django-basicauth =0.5.1 - django-brunch =1.0.3 and more Source cves: CVE-2018-16984 Source advisory: OSV:PYSEC-2018-3...

BeerHolderBot (>=0.3.5 <=0.3.8), BiliupApi (>=0.1.0 <=0.1.7) +2447 more potentially affected by unknown CVE via serde_yaml (>=0.6.2 <=0.8.26)

serdeyaml CARGO version =0.6.2, =0.3.5, =0.1.0, =0.1.0, =0.0.9, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.1.1, =0.1.1, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0005...

00ld8nuivn (=2.1.0), 00rqiw31nd (=2.1.0) +8557 more potentially affected by CVE-2017-15010 via tough-cookie (>=0.12.0 <=2.3.2)

tough-cookie NPM version =0.12.0, =2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tough-cookie and may be impacted: - 00ld8nuivn =2.1.0 - 00rqiw31nd =2.1.0 - 01dk01majk =2.1.0 - 02rjq8i863 =1.1.0 - 02vx8qsp01 =2.1.0 - 05y6tjgmws =1.1.0 -...

airavata-custos-portal (>=0.0.1 <=0.0.6), airavata-custos-portal-sdk (=0.0.1) +27 more potentially affected by CVE-2017-11424 via pyjwt (>=0.2.1 <=1.5.0)

pyjwt PYPI version =0.2.1, =0.0.1, =1.0.9, =1.0.2, =0.10.0, =0.0.1, =0.5.0, =0.1.1, =1.0.0a2, =0.4.15, =2.1.0, =0.1.1, =1.0.2, =1.3.2 - dv-pyclient =0.1.15 and more Source cves: CVE-2017-11424 Source advisory: OSV:PYSEC-2017-24...

AskAI (=0.1.0), BeerHolderBot (>=0.1.0 <=0.3.8) +15013 more potentially affected by CVE-2016-10932 via hyper (>=0.0.1 <=0.9.18)

hyper CARGO version =0.0.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1, =0.0.2, =0.1.0, =0.1.2 and more Source cves: CVE-2016-10932 Source advisory: OSV:RUSTSEC-2016-0002...

many-versioned-wheel (>=0.1.0 <=0.2.0) potentially affected by CVE-2011-1158 via feedparser (=5.0.0)

feedparser PYPI version =5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1158 Source advisory: OSV:PYSEC-2011-21...