6658 matches found
com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21640 via org.jenkins-ci.main:jenkins-core (1.642.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...
com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21615 via org.jenkins-ci.main:jenkins-core (1.642.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...
com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21610 via org.jenkins-ci.main:jenkins-core (1.642.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...
com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.642.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...
com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21607 via org.jenkins-ci.main:jenkins-core (1.642.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...
com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21608 via org.jenkins-ci.main:jenkins-core (1.642.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...
com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21606 via org.jenkins-ci.main:jenkins-core (1.642.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...
com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2021-21608 via org.jenkins-ci.main:jenkins-core (1.651.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...
com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21609 via org.jenkins-ci.main:jenkins-core (1.642.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...
MutexGuard::map can cause a data race in safe code
Affected versions of the crate had a Send/Sync implementation for MappedMutexGuard that only considered variance on T, while MappedMutexGuard dereferenced to U. This could of led to data races in safe Rust code when a closure used in MutexGuard::map returns U that is unrelated to T. The issue was...
GHSA-RH4W-94HH-9943 MutexGuard::map can cause a data race in safe code
Affected versions of the crate had a Send/Sync implementation for MappedMutexGuard that only considered variance on T, while MappedMutexGuard dereferenced to U. This could of led to data races in safe Rust code when a closure used in MutexGuard::map returns U that is unrelated to T. The issue was...
GHSA-5R9G-J7JJ-HW6C Improper `Sync` implementation on `FuturesUnordered` in futures-utils can cause data corruption
An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption because Sync is mishandled...
Improper `Sync` implementation on `FuturesUnordered` in futures-utils can cause data corruption
An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption because Sync is mishandled...
appian-locust (>=0.0.2, <=1.7.0), exact-sync (>=0.0.39, <=0.0.40) +2 more potentially affected by CVE-2020-28364 via locust (>=1.0.0, <=1.1.0)
locust PYPI version =1.0.0, =0.0.2, =0.0.39, =0.0.29, =0.4.0, =0.5.0 Source cves: CVE-2020-28364 Source advisory: OSV:GHSA-VQXW-9PG7-V7V9...
io.fabric8.jenkins.plugins:openshift-sync (>=1.0.43, <=1.0.45) potentially affected by CVE-2020-2309 via org.csanchez.jenkins.plugins:kubernetes (1.18.2)
org.csanchez.jenkins.plugins:kubernetes MAVEN version 1.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =1.0.43, =1.0.45 Source cves:...
io.fabric8.jenkins.plugins:openshift-sync (>=1.0.43, <=1.0.45) potentially affected by CVE-2020-2308 via org.csanchez.jenkins.plugins:kubernetes (1.18.2)
org.csanchez.jenkins.plugins:kubernetes MAVEN version 1.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =1.0.43, =1.0.45 Source cves:...
io.fabric8.jenkins.plugins:openshift-sync (>=1.0.43, <=1.0.45) potentially affected by CVE-2020-2309 via org.csanchez.jenkins.plugins:kubernetes (1.18.2)
org.csanchez.jenkins.plugins:kubernetes MAVEN version 1.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =1.0.43, =1.0.45 Source cves:...
io.fabric8.jenkins.plugins:openshift-sync (>=0.1.18, <=1.0.42) potentially affected by CVE-2020-2309 via org.csanchez.jenkins.plugins:kubernetes (0.10)
org.csanchez.jenkins.plugins:kubernetes MAVEN version 0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.1.18, =1.0.42 Source cves:...
com.openshift.jenkins:openshift-pipeline (>=1.0.22, <=1.0.57), io.fabric8.jenkins.plugins:openshift-sync (>=0.0.8, <=0.0.14) potentially affected by CVE-2020-2309 via org.csanchez.jenkins.plugins:kubernetes (0.6)
org.csanchez.jenkins.plugins:kubernetes MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.22, =0.0.8, =0.0.14 Source cves:...
io.fabric8.jenkins.plugins:openshift-sync (>=0.1.18, <=1.0.42) potentially affected by CVE-2020-2308 via org.csanchez.jenkins.plugins:kubernetes (0.10)
org.csanchez.jenkins.plugins:kubernetes MAVEN version 0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.1.18, =1.0.42 Source cves:...