08cms (1.0.0), @27works/posto (2.0.2) +1008 more potentially affected by CVE-2023-25345 via swig (>=1.0.0, <=1.4.2)

swig NPM version =1.0.0, =1.0.0, =1.4.41, =0.0.11, =0.1.0, =0.1.0, =0.1.16-master.20181116180810, =0.0.6, =1.0.0, =1.0.0, =1.0.0, =1.2.1 and more Source cves: CVE-2023-25345 Source advisory: OSV:GHSA-2RQ5-699J-X7P6...

SUSE CVE-2017-1000396

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. This library is widely used as a transitive dependency in Jenkins...

1095h-cli (1.0.1), 5coder-pages (0.2.0) +547 more potentially affected by CVE-2023-25345 via swig-templates (>=2.0.2, <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0-beta.1, =0.0.1-alpha.0, =0.0.1 and more Source cves: CVE-2023-25345 Source advisory: SNYK:JS-SWIGTEMPLATES-3266805...

@2109-t5/server (>=1.0.0, <=1.0.9), @accounter/green-invoice-graphql (>=0.7.2-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, <=0.7.3-alpha-20250224164805-3a96c9f8d619656e3b6a8c0d26319b937adbafe6) +207 more potentially affected by CVE-2022-25881 via http-cache-semantics (>=4.0.3, <=4.1.0)

http-cache-semantics NPM version =4.0.3, =1.0.0, =0.7.2-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =0.2.3-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =0.2.3-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =1.1.3, =3.0.0, =1.9.19, =1.18.0,...

@51jbs/incremental-coverage-plugin (1.0.5), @51jbs/spec-plugin (2.0.0) +202 more potentially affected by CVE-2022-25860 via simple-git (>=3.0.3, <=3.15.1)

simple-git NPM version =3.0.3, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =1.4.0, =5.15.0, =10.0.0-version-usage.0, =1.0.1, =2.0.0, =1.1.0, =1.1.0, =0.0.0-semantic-release, =0.0.1-semantic-release - @colliercz/gatsby-transformer-gitinfo 1.3.0 and more Source cves: CVE-2022-25860 Source advisory:...

@2109-t5/server (>=1.0.0, <=1.0.9), @accounter/green-invoice-graphql (>=0.7.2-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, <=0.7.3-alpha-20250224164805-3a96c9f8d619656e3b6a8c0d26319b937adbafe6) +207 more potentially affected by CVE-2022-25881 via http-cache-semantics (>=4.0.3, <=4.1.0)

http-cache-semantics NPM version =4.0.3, =1.0.0, =0.7.2-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =0.2.3-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =0.2.3-alpha-20241120214048-10c1c799e5b6e6f25a0ba6b04c8e435c733deff8, =1.1.3, =3.0.0, =1.9.19, =1.18.0,...

Bump jackson-databind dependency to 2.13.4.2

Embedded Crowd library has transitive dependency to vulnerable library code:java com.fasterxml.jackson.core:jackson-databind:jar:2.12.1 - CVE-2020-36518code It is being included through Crowd dependency to com.microsoft.azure:msal4j:jar:1.11.0 The affected versions are before version 5.0.4...

GHSA-Q2FJ-6H62-59M2 Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue

Impact If you are using the Apiman Vert.x Gateway prior to Apiman 3.0.0.Final, a connection caching issue in Hazelcast could allow an unauthenticated, remote attacker to access and manipulate data in the cluster with another authenticated connection's identity. Hazelcast is a transitive dependenc...

46c-sector (>=1.0.0, <=1.2.1), @abtasty-innovation/cb-tag (>=0.0.1, <=0.1.3) +176 more potentially affected by CVE-2022-46175 via json5 (1.0.1)

json5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on json5 and may be impacted: - 46c-sector =1.0.0, =0.0.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.1, =2.2.0, =0.0.1, =2.1.0, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - @brocan/inp...

6ix (0.0.0-canary.0), 9ight (>=0.0.0-canary.0, <=0.0.0-canary.6) +800 more potentially affected by CVE-2022-46175 via json5 (>=2.0.0, <=2.2.1)

json5 NPM version =2.0.0, =0.0.0-canary.0, =0.4.0, =0.0.1, =0.0.1, =0.0.1, =1.2.0, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.0.2, =0.0.2, =1.1.0, =1.2.1 and more Source cves: CVE-2022-46175 Source advisory: OSV:GHSA-9C47-M6QQ-7P4H...

@51jbs/incremental-coverage-plugin (1.0.5), @51jbs/spec-plugin (2.0.0) +202 more potentially affected by CVE-2022-25860 +1 more via simple-git (>=3.0.3, <=3.15.1)

simple-git NPM version =3.0.3, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =1.4.0, =5.15.0, =10.0.0-version-usage.0, =1.0.1, =2.0.0, =1.1.0, =1.1.0, =0.0.0-semantic-release, =0.0.1-semantic-release - @colliercz/gatsby-transformer-gitinfo 1.3.0 and more Source cves: CVE-2022-25860, CVE-2022-25912 Source...

artillery-core (>=0.1.2-alpha.3, <=0.1.2), bastion (>=0.3.5, <=0.4.5) +75 more potentially affected by CVE-2022-23486 via libp2p (>=0.18.1, <=0.42.2)

libp2p CARGO version =0.18.1, =0.1.2-alpha.3, =0.3.5, =0.1.0, =0.7.0, =0.0.7, =0.1.5, =2.0.0-alpha.3, =0.4.0, =0.20.0, =0.8.0, =0.10.0 and more Source cves: CVE-2022-23486 Source advisory: OSV:GHSA-JVGW-GCCV-Q5P8...

artillery-core (>=0.1.2-alpha.3, <=0.1.2), bastion (>=0.3.5, <=0.4.5) +75 more potentially affected by CVE-2022-23486 via libp2p (>=0.18.1, <=0.42.2)

libp2p CARGO version =0.18.1, =0.1.2-alpha.3, =0.3.5, =0.1.0, =0.7.0, =0.0.7, =0.1.5, =2.0.0-alpha.3, =0.4.0, =0.20.0, =0.8.0, =0.10.0 and more Source cves: CVE-2022-23486 Source advisory: OSV:RUSTSEC-2022-0084...

roaring-landmask (0.4.0) potentially affected by CVE-2022-2097 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-2097 Source advisory: OSV:GHSA-3WX7-46CH-7RQ2...

roaring-landmask (0.4.0) potentially affected by CVE-2022-2097 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-2097 Source advisory: OSV:RUSTSEC-2022-0032...

@manniwatch/client-desktop (>=0.28.0, <=0.28.2), @yeti-dev/electroshot (>=1.4.3, <=1.4.6) +5 more potentially affected by CVE-2022-29247 via electron (>=15.0.0, <=15.3.7)

electron NPM version =15.0.0, =0.28.0, =1.4.3, =1.0.0, =2.0.53, =6.0.15, =6.1.2 - simple-git-gui 3.8.2 - xyz-ttooc-log-electron-windows 0.1.5 Source cves: CVE-2022-29247 Source advisory: OSV:GHSA-MQ8J-3H7H-P8G7...

@finsemble/finsemble-electron-adapter (>=7.0.0-beta.2, <=7.0.1), @manniwatch/client-desktop (>=0.28.3, <=0.29.1) +9 more potentially affected by CVE-2022-29247 via electron (>=16.0.2, <=16.2.3)

electron NPM version =16.0.2, =7.0.0-beta.2, =0.28.3, =0.0.1, =0.0.14, =0.0.15, =2.0.56, =1.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.3 Source cves: CVE-2022-29247 Source advisory: OSV:GHSA-MQ8J-3H7H-P8G7...

@ascua/electron (0.0.227), @finsemble/finsemble-electron-adapter (>=1.0.0-beta-1, <=7.3.11) +5 more potentially affected by CVE-2022-29247 via electron (>=17.0.0, <=17.1.2)

electron NPM version =17.0.0, =1.0.0-beta-1, =0.29.10, =0.18.16, =2.0.69, =3.14.5, =6.2.5 Source cves: CVE-2022-29247 Source advisory: OSV:GHSA-MQ8J-3H7H-P8G7...

admin-gp (>=1.0.0-beta, <=1.0.4-beta), aspiesolutions_core (>=0.0.1-alpha+3, <=0.0.1-alpha.11) +40 more potentially affected by CVE-2021-20332 via mongodb (1.2.5)

mongodb CARGO version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on mongodb and may be impacted: - admin-gp =1.0.0-beta, =0.0.1-alpha+3, =1.0.0, =1.1.0, =1.6.2, =0.12.8, =0.3.0, =0.4.2, =0.1.0-pre-alpha.1, =0.1.0, =1.0.0-beta, =0.1.0, =0.3.1 an...

taskcluster-client-web (>=39.1.1, <=39.1.2) potentially affected by CVE-2022-29167 via hawk (9.0.0)

hawk NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on hawk and may be impacted: - taskcluster-client-web =39.1.1, =39.1.2 Source cves: CVE-2022-29167 Source advisory: OSV:GHSA-44PW-H2CW-W3VQ...