org.apache.mina:mina-example (1.0.8), org.apache.mina:mina-filter-codec-netty (1.0.8) +5 more potentially affected by CVE-2019-0231 via org.apache.mina:mina-core (1.0.8)

org.apache.mina:mina-core MAVEN version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.8 - org.apache.mina:mina-filter-codec-netty 1.0.8 -...

org.apache.mina:mina-example (1.0.10), org.apache.mina:mina-filter-codec-netty (1.0.10) +5 more potentially affected by CVE-2019-0231 via org.apache.mina:mina-core (1.0.10)

org.apache.mina:mina-core MAVEN version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.10 - org.apache.mina:mina-filter-codec-netty 1.0.10 -...

org.apache.mina:mina-example (1.1.3), org.apache.mina:mina-filter-codec-netty (1.1.3) +5 more potentially affected by CVE-2019-0231 via org.apache.mina:mina-core (1.1.3)

org.apache.mina:mina-core MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.1.3 - org.apache.mina:mina-filter-codec-netty 1.1.3 -...

org.apache.mina:mina-example (1.1.1), org.apache.mina:mina-filter-compression (1.1.1) +3 more potentially affected by CVE-2019-0231 via org.apache.mina:mina-core (1.1.1)

org.apache.mina:mina-core MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.1.1 - org.apache.mina:mina-filter-compression 1.1.1 -...

org.apache.mina:mina-example (1.0.3), org.apache.mina:mina-filter-compression (1.0.3) +4 more potentially affected by CVE-2019-0231 via org.apache.mina:mina-core (1.0.3)

org.apache.mina:mina-core MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.3 - org.apache.mina:mina-filter-compression 1.0.3 -...

com.taobao.tair:tair-client (>=2.3.4, <=2.3.5), com.taobao.tair:tair3-client (3.0.1.14) +12 more potentially affected by CVE-2019-0231 via org.apache.mina:mina-core (1.1.5)

org.apache.mina:mina-core MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - com.taobao.tair:tair-client =2.3.4, =2.3.4.4, =2.1.2, =2.1.8 - org.apache.mina:mina-example 1.1.5 -...

CVE-2021-32642

radsecproxy is a generic RADIUS proxy that supports both UDP and TLS RadSec RADIUS transports. Missing input validation in radsecproxy's naptr-eduroam.sh and radsec-dynsrv.sh scripts can lead to configuration injection via crafted radsec peer discovery DNS records. Users are subject to Informatio...

@mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.1), @strapi/admin (>=0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, <=0.0.0-next.ff946d2c25a3e577b47132a357cac2932eb8e635) +3 more potentially affected by CVE-2022-30617 via @strapi/strapi (>=0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, <=4.0.0-beta.0)

@strapi/strapi NPM version =0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, =1.0.0-alpha.0, =0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, =0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, =0.0.0-a9fe3a0191870500b7f56ff7dd30fdda494e666a, =0.0.0-next.f45143c5e2a8a9d85691d0abf79a3f42024a0c71 Sourc...

Spring for GraphQL 1.0 Release

On behalf of the Spring for GraphQL team and every contributor, it is my pleasure to announce the 1.0 GA release. Its been 10 months since the project was announced and under 2 years since the first commit, unremarkably called "first commit". The project began with the modest goal to replace the...

br.com.caelum.stella:myfaces-example (1.1), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +34 more potentially affected by CVE-2010-2057 via org.apache.myfaces.core:myfaces-impl (>=1.2.0, <=1.2.8)

org.apache.myfaces.core:myfaces-impl MAVEN version =1.2.0, =1.2.1, =2.2, =2.2, =2.1, =2.1, =2.0.1, =2.0.1, =2.2, =2.2, =1.2.1, =1.2.1, =1.0.0-alpha-2, =1.0.0-alpha-2, =2.0.0-alpha-2 and more Source cves: CVE-2010-2057 Source advisory: GHSA-4FV4-CQ5V-X45M...

net.liftweb:lift-core (0.8), net.liftweb:lift-example (0.8) +6 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (0.8)

net.liftweb:lift-webkit MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit and may be impacted: - net.liftweb:lift-core 0.8 - net.liftweb:lift-example 0.8 - net.liftweb:lift-examples-parent 0.8 -...

net.liftweb:lift-core (0.7), net.liftweb:lift-example (0.7) +5 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (0.7)

net.liftweb:lift-webkit MAVEN version 0.7 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit and may be impacted: - net.liftweb:lift-core 0.7 - net.liftweb:lift-example 0.7 - net.liftweb:lift-examples-parent 0.7 -...

net.liftweb:lift-core (0.9), net.liftweb:lift-example (0.9) +7 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (0.9)

net.liftweb:lift-webkit MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit and may be impacted: - net.liftweb:lift-core 0.9 - net.liftweb:lift-example 0.9 - net.liftweb:lift-examples-parent 0.9 -...

org.apache.activemq:apache-activemq (4.1.1), org.apache.camel:camel-example-cxf (1.2.0) +2 more potentially affected by CVE-2012-6551 via org.apache.activemq:activemq-web-demo (4.1.1)

org.apache.activemq:activemq-web-demo MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-web-demo and may be impacted: - org.apache.activemq:apache-activemq 4.1.1 - org.apache.camel:camel-example-cxf 1.2.0 ...

org.apache.activemq:apache-activemq (>=5.0.0, <=5.7.0), org.apache.axis2:axis2-integration (1.4) +3 more potentially affected by CVE-2012-6551 via org.apache.activemq:activemq-web-demo (>=5.0.0, <=5.7.0)

org.apache.activemq:activemq-web-demo MAVEN version =5.0.0, =5.0.0, =5.7.0 - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 - org.apache.camel:camel-example-jms-file 1.3.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2012-6551 Source...

org.apache.camel:camel-example-cxf (1.2.0), org.apache.camel:camel-example-jms-file (>=1.1.0, <=1.2.0) +1 more potentially affected by CVE-2012-6551 via org.apache.activemq:apache-activemq (4.1.1)

org.apache.activemq:apache-activemq MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.camel:camel-example-cxf 1.2.0 - org.apache.camel:camel-example-jms-file =1.1.0...

com.itv:bucky-example_2.11 (>=0.10, <=1.4.5), com.itv:bucky-example_2.12 (>=0.10, <=1.4.5) +4 more potentially affected by CVE-2016-8741 via org.apache.qpid:qpid-broker (6.0.4)

org.apache.qpid:qpid-broker MAVEN version 6.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - com.itv:bucky-example2.11 =0.10, =0.10, =0.10, =0.10, =1.4.5 - com.itv:bucky-wiring2.11 1.4.5 -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

Securimage HTML Injection

HTML Injection in Securimage prior to 3.6.6 allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...

io.brooklyn.example:brooklyn-example-hello-world-hadoop-webapp (>=0.4.0, <=0.7.0-m1) potentially affected by CVE-2017-3162 via org.apache.hadoop:hadoop-client (1.0.2)

org.apache.hadoop:hadoop-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-client and may be impacted: - io.brooklyn.example:brooklyn-example-hello-world-hadoop-webapp =0.4.0, =0.7.0-m1 Source cves:...