de.the-library-code.dspace:addon-duplication-detection-service-jspui (>=6.2.0 <=6.3.1), de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (>=5.8.0 <=6.3.0) +1 more potentially affected by CVE-2022-31189 via org.dspace:dspace-jspui (>=4.0 <=6.3)

org.dspace:dspace-jspui MAVEN version =4.0, =6.2.0, =5.8.0, =4.0, =6.3 Source cves: CVE-2022-31189 Source advisory: OSV:GHSA-C2J7-66M3-R4FF...

com.canoo:webtest (>=586 <=1393), com.flexiblewebsolutions.xdriveunit:xdriveunit (=0.3) +79 more potentially affected by CVE-2017-12621 via commons-jelly:commons-jelly (>=1.0 <=1.0-beta-4)

commons-jelly:commons-jelly MAVEN version =1.0, =586, =0.1, =1.0, =20050708.205531, =1.2, =1.0-M5, =1.0.1, =1.3, =1.9 - jepi:jepi =1.0 - marmalade:marmalade-compat-jelly =1.0-alpha-3 - maven-plugins:maven-sourceforge-plugin =1.3 and more Source cves: CVE-2017-12621 Source advisory:...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta <=2.5.9), com.logmein:pipeline-bamboo (>=0.0.1 <=0.0.2) +93 more potentially affected by CVE-2019-1003030 via org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-1 <=2.6)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version =0.1-beta-1, =1.9.2-beta, =0.0.1, =8.0.12, =0.8, =1.0.14, =1.3.0, =1.0, =0.9.0, =1.0, =1.22, =0.0.8, =y - io.fabric8.pipeline:kubernetes-pipeline-aggregator =1.3 and more Source cves: CVE-2019-1003030 Source advisory: OSV:GHSA-R6MC-MRVR-2...

au.com.skytix:mesos-scheduler-client (>=1.0.11 <=1.0.15), au.com.skytix:velocity-scheduler (>=1.0.34 <=1.0.40) +44 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (>=0.9.0-incubating <=1.4.2)

org.apache.mesos:mesos MAVEN version =0.9.0-incubating, =1.0.11, =1.0.34, =2.1.7, =2.1.7, =2.2.0, =2.2.0, =0.0.3, =2.1.2, =2.1.2, =0.18.0, =0.1.3, =0.1.3, =0.18.0, =0.18.0, =1.5.0 and more Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +5434 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (>=1.2.1 <=3.2.4.RELEASE)

org.springframework:spring-web MAVEN version =1.2.1, =1.1, =0.0.1, =1.0, =0.0.20, =1.0.0-alpha-1, =1.0, =2.0, =1.1.1, =1.0.2, =1.1.2, =1.2, =1.3 and more Source cves: CVE-2013-6429 Source advisory: OSV:GHSA-G6HF-F9CQ-Q7W7...

be.objectify:objectify-struts2-tags (=1.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1 <=1.2.2) +80 more potentially affected by CVE-2012-0391 via org.apache.struts:struts2-core (>=2.0.5 <=2.2.3)

org.apache.struts:struts2-core MAVEN version =2.0.5, =1.2.1, =0.6, =3.0, =2.4.0, =2.1.0, =3.1.1 and more Source cves: CVE-2012-0391 Source advisory: OSV:GHSA-4WRR-9H5R-M92W...

ghost-as-middleware (=1.0.0), ghost-blade (=0.1.0) +3 more potentially affected by CVE-2022-27139 via ghost (>=0.11.14 <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - persistent-ghost =0.8.2 - sign-alex =1.0.1 Source cves: CVE-2022-27139 Source advisory: OSV:GHSA-FVC6-QJP7-M4G4...

cn.linham:beecloud-service-core (=5.8.07), cn.linham:beecloud-service-openfeign (=5.8.07) +49 more potentially affected by CVE-2022-23708 via org.elasticsearch:elasticsearch (>=7.16.0 <=7.17.0)

org.elasticsearch:elasticsearch MAVEN version =7.16.0, =0.8.0, =0.8.0, =1.6.1, =1.1.14, =2.6.2, =5.1, =5.1, =7.16.0.0, =3.0.1, =0.11.2, =0.11.2, =0.11.4 and more Source cves: CVE-2022-23708 Source advisory: OSV:GHSA-PGQ6-CCQJ-HPQR...

GHSA-GFH2-7JG5-653P Denial of Service in docker2aci

docker2aci = 0.12.3 has an infinite loop when handling local images with cyclic dependency chain...

rpnet (>=0.0.1 <=0.1.0), rpnet-dev (>=0.0.5 <=0.0.12) +4 more potentially affected by CVE-2022-21727 via tensorflow-gpu (=2.7.0)

tensorflow-gpu PYPI version =2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - rpnet =0.0.1, =0.0.5, =1.0.5, =1.1.1 - tpu-tf2 =1.0.0 - troj =1.0.0 Source cves: CVE-2022-21727 Source advisory:...

10chars-test (>=1.0.0 <=1.0.34), 10er10 (=0.23.0) +4040 more potentially affected by CVE-2022-0155 via follow-redirects (>=0.0.3 <=1.14.6)

follow-redirects NPM version =0.0.3, =1.0.0, =4.11.0, =0.3.11, =0.3.3, =0.3.0, =0.1.0, =1.6.1, =1.0.0, =2.0.0, =2.0.0-rc5, =2.0.0-rc7.0.6, =2.0.0-rc2, =2.0.0-rc3, =2.0.0-rc2, =2.0.0-rc.8.0.4 and more Source cves: CVE-2022-0155 Source advisory: OSV:GHSA-74FJ-2J2H-C42Q...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0 <=2.2.2.RELEASE), com.gccloud:gc-starter-plugins-report-server (>=1.0.0 <=1.2.4.2024062001.RELEASE) +11 more potentially affected by CVE-2020-21122 via com.bstek.ureport:ureport2-console (>=2.0.0 <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-RELEASE, =2.0, =2.8.0, =4.2.0, =4.10.0 Source cves: CVE-2020-21122 Source advisory: OSV:GHSA-6Q3P-36F4-CWXV...

aglow (>=0.1.0rc3 <=0.1.0rc4), ai-flow (>=0.1.0 <=0.3.1) +113 more potentially affected by CVE-2021-32805 via flask-appbuilder (>=1.10.0 <=3.3.0)

flask-appbuilder PYPI version =1.10.0, =0.1.0rc3, =0.1.0, =2022.9.19, =1.0.7, =0.5.1, =0.1.0, =1.0.0, =0.0.7, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =1.10.0, =1.10.3, =2.0.1rc2 and more Source cves: CVE-2021-32805 Source advisory: OSV:GHSA-624F-CQVR-3QW4...

artillery-core (>=0.1.2 <=0.1.2-alpha.3), bastion (>=0.3.5 <=0.4.5) +502 more potentially affected by CVE-2021-38195 via libsecp256k1 (>=0.1.3 <=0.3.5)

libsecp256k1 CARGO version =0.1.3, =0.1.2, =0.3.5, =0.1.0, =0.1.1, =0.7.0, =0.1.0, =0.2.0, =1.0.0, =0.7.0, =0.8.2 and more Source cves: CVE-2021-38195 Source advisory: OSV:RUSTSEC-2021-0076...

1ib (>=1.0.9 <=1.0.11), 4front-cli (>=0.0.1 <=0.0.20) +375 more potentially affected by CVE-2021-23354 via printf (>=0.0.4 <=0.6.0)

printf NPM version =0.0.4, =1.0.9, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.5, =1.3.0, =1.2.26, =1.2.31, =7.54.0 and more Source cves: CVE-2021-23354 Source advisory: OSV:GHSA-XFHP-GMH8-R8V2...

2keys (=0.5.1), 3di-cmd-client (>=0.0.1a0 <=0.0.3) +2029 more potentially affected by CVE-2020-14343 via pyyaml (>=3.10.0 <=5.3.1)

pyyaml PYPI version =3.10.0, =0.0.1a0, =0.1.0, =1.0.0, =1.5.0, =3.0.0, =0.0.0, =0.1.0, =0.5.6, =1.9.0, =1.0.0, =1.2.8 and more Source cves: CVE-2020-14343 Source advisory: OSV:PYSEC-2021-142...

ae.teletronics.nlp:entityextraction (>=1.3 <=1.4), at.iem:sysson_2.10 (=1.12.0) +2533 more potentially affected by CVE-2017-12626 via org.apache.poi:poi (>=3.0-FINAL <=3.16-beta2)

org.apache.poi:poi MAVEN version =3.0-FINAL, =1.3, =1.10.2, =1.13.0, =1.0.1, =0.0.1, =1.1.8, =2.23.5, =2.23.5, =19.1.0, =2.23.5, =18.12.0 and more Source cves: CVE-2017-12626 Source advisory: OSV:GHSA-523C-XH4G-MH5M...

d3m-simon (=1.2.5), easyquake (>=1.3.0 <=1.4.0) potentially affected by CVE-2020-26266 via tensorflow-gpu (=2.2.0)

tensorflow-gpu PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - d3m-simon =1.2.5 - easyquake =1.3.0, =1.4.0 Source cves: CVE-2020-26266 Source advisory: OSV:PYSEC-2020-332...

Denial Of Service (DoS) Through Infinite Loop

github.com/appc/docker2aci is vulnerable to denial of service DoS attacks. A local attacker could cause an infinite loop with a crafted image due to lack of essential checks in the cyclic dependency chain in getAncestry function resulting in an application crash...

013-carrousel-multipe (=1.0.0), 0303-lb3-paket (=1.0.1) +18345 more potentially affected by CVE-2019-5413 via morgan (>=1.0.0 <=1.9.0)

morgan NPM version =1.0.0, =1.1.0, =1.0.2, =1.0.1, =1.0.2 and more Source cves: CVE-2019-5413 Source advisory: OSV:GHSA-GWG9-RGVJ-4H5J...