08cms (=1.0.0), 0ad-tools (=0.0.1) +34225 more potentially affected by CVE-2022-21681 via marked (>=0.0.1 <=4.0.0)

marked NPM version =0.0.1, =5.0.3, =0.0.1, =1.1.5, =0.3.96, =1.0.0, =0.1.0, =2.1.0, =1.0.0, =1.0.5 and more Source cves: CVE-2022-21681 Source advisory: OSV:GHSA-5V2H-R2CX-5XGJ...

10chars-test (>=1.0.0 <=1.0.34), 10er10 (=0.23.0) +4040 more potentially affected by CVE-2022-0155 via follow-redirects (>=0.0.3 <=1.14.6)

follow-redirects NPM version =0.0.3, =1.0.0, =4.11.0, =0.3.11, =0.3.3, =0.3.0, =0.1.0, =1.6.1, =1.0.0, =2.0.0, =2.0.0-rc5, =2.0.0-rc7.0.6, =2.0.0-rc2, =2.0.0-rc3, =2.0.0-rc2, =2.0.0-rc.8.0.4 and more Source cves: CVE-2022-0155 Source advisory: OSV:GHSA-74FJ-2J2H-C42Q...

aimmo (>=0.61.9 <=1.3.3b690), ambition-edc (>=0.3.68 <=0.3.72) +71 more potentially affected by CVE-2021-45116 via django (>=2.2.0 <=2.2.25)

django PYPI version =2.2.0, =0.61.9, =0.3.68, =0.14.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =2.0.0, =2.2.0 - django-country-filter =0.0.1 and more Source cves: CVE-2021-45116 Source advisory: OSV:GHSA-8C5J-9R9F-C6W8...

CVE-2021-42771

creationtimestamp| type| source ---|---|--- 2021-10-21 00:35:41+00:00| seen| https://t.me/cibsecurity/30924 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

article-extract (>=0.1.2 <=0.1.3), bookscrape (>=0.0.1.dev1 <=0.0.2b7) +19 more potentially affected by CVE-2021-41125 via scrapy (>=1.3.3 <=1.8.0)

scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3, =0.0.1, =1.0.0, =1.0.0, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2021-41125 Source advisory: OSV:GHSA-JWQP-28GF-P498...

ABC-ECS (>=0.1.0 <=0.1.2), VigilantLamp (>=0.0.1 <=0.0.3) +284 more potentially affected by CVE-2021-38187 via anymap (>=0.10.3 <=0.12.1)

anymap CARGO version =0.10.3, =0.1.0, =0.0.1, =0.1.6, =0.1.0-alpha.2, =0.8.0, =0.1.0, =5.0.0, =5.2.2, =0.0.1-alpha+3, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.2 and more Source cves: CVE-2021-38187 Source advisory: OSV:GHSA-HC92-9H3M-C39J...

CVE-2021-21867

creationtimestamp| type| source ---|---|--- 2021-08-18 18:17:07+00:00| seen| https://t.me/cibsecurity/27530 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

accuinsight (>=1.0.62 <=3.0.0rc2), adapt-diagnostics (>=1.2.0 <=1.6.0) +110 more potentially affected by CVE-2021-37682 via tensorflow (>=2.3.0 <=2.3.2)

tensorflow PYPI version =2.3.0, =1.0.62, =1.2.0, =0.1.0, =0.0.1a0, =0.0.1, =1.0.0rc1, =20210206.0.0, =0.1.0.dev1, =0.2.4, =1.0.1.0, =1.0.3 - cardec-cite =1.1.0 and more Source cves: CVE-2021-37682 Source advisory: OSV:PYSEC-2021-304...

accuinsight (>=1.0.62 <=3.0.0rc2), adapt-diagnostics (>=1.2.0 <=1.6.0) +110 more potentially affected by CVE-2021-29603 via tensorflow (>=2.3.0 <=2.3.2)

tensorflow PYPI version =2.3.0, =1.0.62, =1.2.0, =0.1.0, =0.0.1a0, =0.0.1, =1.0.0rc1, =20210206.0.0, =0.1.0.dev1, =0.2.4, =1.0.1.0, =1.0.3 - cardec-cite =1.1.0 and more Source cves: CVE-2021-29603 Source advisory: OSV:GHSA-CRCH-J389-5F84...

accuinsight (>=1.0.62 <=3.0.0rc2), adapt-diagnostics (>=1.2.0 <=1.6.0) +110 more potentially affected by CVE-2021-29583 via tensorflow (>=2.3.0 <=2.3.2)

tensorflow PYPI version =2.3.0, =1.0.62, =1.2.0, =0.1.0, =0.0.1a0, =0.0.1, =1.0.0rc1, =20210206.0.0, =0.1.0.dev1, =0.2.4, =1.0.1.0, =1.0.3 - cardec-cite =1.1.0 and more Source cves: CVE-2021-29583 Source advisory: OSV:GHSA-9XH4-23Q4-V6WR...

c4v-py (>=0.1.0.dev1 <=0.1.0.dev202107081840) potentially affected by CVE-2021-29531 via tensorflow-cpu (=2.3.1)

tensorflow-cpu PYPI version =2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - c4v-py =0.1.0.dev1, =0.1.0.dev202107081840 Source cves: CVE-2021-29531 Source advisory: OSV:GHSA-3QXP-QJQ7-W4HF...

accuinsight (>=1.0.62 <=3.0.0rc2), adapt-diagnostics (>=1.2.0 <=1.6.0) +110 more potentially affected by CVE-2021-29541 via tensorflow (>=2.3.0 <=2.3.2)

tensorflow PYPI version =2.3.0, =1.0.62, =1.2.0, =0.1.0, =0.0.1a0, =0.0.1, =1.0.0rc1, =20210206.0.0, =0.1.0.dev1, =0.2.4, =1.0.1.0, =1.0.3 - cardec-cite =1.1.0 and more Source cves: CVE-2021-29541 Source advisory: OSV:PYSEC-2021-178...

ai.blip:deckard (>=0.0.23 <=0.0.26), ai.djl.tablesaw:tablesaw (>=0.18.0 <=0.32.0) +39064 more potentially affected by CVE-2020-8908 via com.google.guava:guava (>=r03 <=31.1-jre)

com.google.guava:guava MAVEN version =r03, =0.0.23, =0.18.0, =0.19.0, =3.32.1.6, =3.32.1.6-1-2.1, =3.32.1.6-1-3.0, =3.34.0.3-1-3.1, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =0.0.3, =2.6.0-looktech.1, =2.6.0-looktech.2 and more Source cves: CVE-2020-8908 Source advisory:...

SEOPanel 4.6.0 Cross Site Scripting

Hello, We are informing you about Cross-Site Scripting Vulnerabilities in SEOPanel 4.6.0. Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerabilities in SEOPanel Affected Software: SEOPanel Affected Versions: 4.6.0 Vendor Homepage: https://www.seopanel.org/...

Malicious Package

Overview The package db-json.js contained malicious code. The package had jdb.js as a dependency and would execute the same malware as described in https://www.npmjs.com/advisories/1584. Recommendation Any computer that has this package installed or running should be considered fully compromised...

ai4bharat-transliteration (>=1.1.0 <=1.1.3), aipack (>=0.0.1 <=0.0.5) +52 more potentially affected by CVE-2020-15202 via tensorflow (>=2.0.0 <=2.0.1)

tensorflow PYPI version =2.0.0, =1.1.0, =0.0.1, =0.1.3.2, =0.2.6, =0.2.0, =0.0.2, =1.0.0.1, =0.0.1, =1.0.4, =0.6.0.post3, =0.1.3, =1.0.0, =1.0.1 and more Source cves: CVE-2020-15202 Source advisory: OSV:GHSA-H6FG-MJXG-HQQ4...

abba-python (>=0.1.6 <=0.3.0), adpred (>=1.1.2 <=1.2.7) +233 more potentially affected by CVE-2020-15190 via tensorflow (>=1.0.1 <=1.15.3)

tensorflow PYPI version =1.0.1, =0.1.6, =1.1.2, =0.0.1, =0.3.26, =0.2.0, =0.4.2, =0.1.1, =0.1.5 - autobazaar =0.1.0 - autogan =0.0.5 - automationobjectdetection-sandeepjena7 =0.0.1 - automl-lib =0.0.1 and more Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...

adaptive-fs (>=1.1.0 <=1.3.2), ajato (=0.0.1-wip) +1 more potentially affected by unknown CVE via mogoose (=0.0.1-security)

mogoose NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mogoose and may be impacted: - adaptive-fs =1.1.0, =1.0.48, =1.1.26 Source cves: unknown CVE Source advisory: OSV:GHSA-5MM9-55C9-P5R7...

0.app1 (=1.0.52), 0.edsql (>=1.0.49 <=1.0.50) +2985 more potentially affected by CVE-2020-15096 via electron (>=0.1.2 <=6.1.10)

electron NPM version =0.1.2, =1.0.49, =1.0.49, =1.0.49, =1.0.1, =0.0.10, =1.0.2, =1.1.11, =0.1.0, =0.1.0, =0.11.5 and more Source cves: CVE-2020-15096 Source advisory: OSV:GHSA-6VRV-94JV-CRRG...

@amcorvi/loadout (>=0.0.0 <=0.1.2), @amory/clean (>=2018.8.13-0 <=2018.8.13-2) +151 more potentially affected by unknown CVE via esm (>=3.0.14 <=3.0.84)

esm NPM version =3.0.14, =0.0.0, =2018.8.13-0, =2018.8.13-0, =2018.8.9-0, =2018.10.14-0, =2018.10.16-0, =2018.8.13-0, =2018.10.14-0, =2018.10.12-0, =2018.8.8-0, =2018.8.13-0, =0.4.1, =2.1.0, =2.2.0, =2.1.0, =2.3.0-beta.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QX4V-6GC5-F2VV...