com.sshtools:maverick-bc-fips (>=3.0.0-RC1 <=3.0.0-RC5), net.snowflake:snowflake-jdbc-fips (>=3.12.3 <=3.13.13) potentially affected by CVE-2020-26939 via org.bouncycastle:bc-fips (=1.0.1)

org.bouncycastle:bc-fips MAVEN version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bc-fips and may be impacted: - com.sshtools:maverick-bc-fips =3.0.0-RC1, =3.12.3, =3.13.13 Source cves: CVE-2020-26939 Source advisory:...

cn.regionsoft:ONE (=2.1.1), co.baiku.boot:ajavaer-cache (=0.3.0-RELEASES) +49 more potentially affected by CVE-2020-26939 via org.bouncycastle:bcprov-ext-jdk16 (>=1.45 <=1.46)

org.bouncycastle:bcprov-ext-jdk16 MAVEN version =1.45, =0.0.1-RELEASE, =0.0.1.RELEASE, =0.0.3.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.3.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.1.RELEASE, =0.0.9.RELEASE and more Source cves: CVE-2020-26939 Source advisor...

com.chaochaogege:hotelapi (>=0.0.1 <=0.0.2), com.chaochaogege:ujnbsapi (>=0.0.3 <=0.0.5) +14 more potentially affected by CVE-2020-35217 via io.vertx:vertx-web (>=4.0.0-milestone1 <=4.0.0-milestone4)

io.vertx:vertx-web MAVEN version =4.0.0-milestone1, =0.0.1, =0.0.3, =0.2.0, =0.2.0, =0.2.0, =4.0.0-milestone1, =4.0.0-milestone1, =4.0.0-milestone1, =4.0.0-milestone1, =4.0.0-milestone1, =4.0.0-milestone1, =4.0.0-milestone1, =4.0.0-milestone1, =4.0.0-milestone1, =4.0.0-milestone4 and more Source...

com.kumuluz.ee:kumuluzee-jax-ws-cxf (>=2.6.0 <=3.12.2), net.kieker-monitoring:analysis (>=2.0.0 <=2.0.3) +1 more potentially affected by CVE-2020-13954 via org.apache.cxf:cxf (>=2.7.18 <=3.2.6)

org.apache.cxf:cxf MAVEN version =2.7.18, =2.6.0, =2.0.0, =2.0.3 - org.apache.nutch:nutch =1.10 Source cves: CVE-2020-13954 Source advisory: OSV:GHSA-64X2-GQ24-75PV...

com.treelogic-swe:aws-mock (=1.0), com.treelogic-swe:cxf-stub (=ec2-2013-02-01) potentially affected by CVE-2020-13954 via org.apache.cxf:apache-cxf (=2.7.5)

org.apache.cxf:apache-cxf MAVEN version =2.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:apache-cxf and may be impacted: - com.treelogic-swe:aws-mock =1.0 - com.treelogic-swe:cxf-stub =ec2-2013-02-01 Source cves: CVE-2020-13954...

cn.eppdev.mlib:eppdev-mlib-sdk-hive-udf31 (=1.0.0), com.alibaba.blink:flink-sql-parser (=blink-3.6.8) +310 more potentially affected by CVE-2020-13955 via org.apache.calcite:calcite-core (>=1.0.0-incubating <=1.25.0)

org.apache.calcite:calcite-core MAVEN version =1.0.0-incubating, =1.0.0, =1.1.10, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =1.3.2, =0.8.0, =7.2.1, =7.2.1, =8.1.18 and more Source cves: CVE-2020-13955 Source advisory: OSV:GHSA-HXP5-8PGQ-MGV9...

cc.eamon.open:auth (=0.0.2), cn.easyproject:easyshiro-redis-cache (=2.6.0-RELEASE) +770 more potentially affected by CVE-2020-17510 via org.apache.shiro:shiro-spring (>=1.0.0-incubating <=1.6.0)

org.apache.shiro:shiro-spring MAVEN version =1.0.0-incubating, =1.0, =1.0, =1.0.0, =1.0.4 - cn.org.awcp:awcp-formdesigner-applicationImpl =1.0-RELEASE - cn.org.awcp:awcp-metadesigner-applicationImpl =1.0-RELEASE - cn.org.awcp:awcp-unit-application =1.0-RELEASE and more Source cves: CVE-2020-17510...

com.alibaba.rsocket:alibaba-broker-server (=1.0.1), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=18.0.0 <=19.0.0) +74 more potentially affected by CVE-2021-31408 via com.vaadin:flow-client (>=5.0.0 <=6.0.4)

com.vaadin:flow-client MAVEN version =5.0.0, =18.0.0, =18.0.0, =5.0.0, =5.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.7 and more Source cves: CVE-2021-31408 Source advisory: OSV:GHSA-6HGR-2G6Q-3RMC...

airflow-clickhouse-plugin (=0.6.0), dataverk-airflow (>=0.3.18 <=0.3.23) +2 more potentially affected by CVE-2020-17515 via apache-airflow (>=2.0.0rc3 <=2.0.2)

apache-airflow PYPI version =2.0.0rc3, =0.3.18, =11.8.0, =13.7.0 - neuro-airflow-plugin =0.0.1 Source cves: CVE-2020-17515 Source advisory: OSV:GHSA-86VP-X3PR-79RX...

coop (>=0.3.1 <=2.10.2), django-oscar-wagtail (=0.0.5) +36 more potentially affected by CVE-2021-29434 via wagtail (>=1.0.0 <=2.10.2)

wagtail PYPI version =1.0.0, =0.3.1, =0.1.1, =5.22.3, =6.3.0, =0.0.1, =0.1.0, =2.0.7, =0.3.1, =0.5.4, =0.4.1, =1.1.1 and more Source cves: CVE-2021-29434 Source advisory: OSV:GHSA-WQ5H-F9P5-Q7FX...

wagtail-resume (=1.3.0), wagtail-social-share (>=0.0.6 <=0.1.1) potentially affected by CVE-2021-29434 via wagtail (>=2.12.0 <=2.12.2)

wagtail PYPI version =2.12.0, =0.0.6, =0.1.1 Source cves: CVE-2021-29434 Source advisory: OSV:GHSA-WQ5H-F9P5-Q7FX...

2vyper (=0.3.0), black-mamba (>=0.1.0 <=0.4.2) +4 more potentially affected by unknown CVE via vyper (>=0.1.0b12 <=0.2.11)

vyper PYPI version =0.1.0b12, =0.1.0, =1.4.0, =0.1.3, =0.1.2b2, =0.1.2b4 Source cves: unknown CVE Source advisory: OSV:GHSA-22WC-C9WJ-6Q2V...

com.vaadin:flow (>=1.0.0 <=1.0.10), com.vaadin:flow-client (>=1.0.0 <=1.0.10) +29 more potentially affected by CVE-2019-25027 via com.vaadin:flow-server (>=1.0.0 <=1.0.10)

com.vaadin:flow-server MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.10 - com.vaadin:vaadin =10.0.13 - com.vaadin:vaadin-board-flow =2.0.1 - com.vaadin:vaadin-button-flow =1.0.0 - com.vaadin:vaadin-charts-flow =6.0.1 -...

biz.grundner.vaadin-in-spring:spring-vaadin (=1.0), cn.jhc:umeditor-vaadin-js (=0.0.1) +128 more potentially affected by CVE-2021-31403 via com.vaadin:vaadin-server (>=7.0.0 <=7.7.23)

com.vaadin:vaadin-server MAVEN version =7.0.0, =0.5, =1.1, =1.0, =1.3, =5.0.0, =5.0.0, =5.0.0, =5.2.4 and more Source cves: CVE-2021-31403 Source advisory: OSV:GHSA-75XC-QVXH-27F8...

com.beirtipol:jfixtools-reporting (=1.0-BETA), com.beirtipol:jfixtools-ui-vaadin (=1.0-BETA) +107 more potentially affected by CVE-2021-31406 via com.vaadin:flow-server (>=3.0.0 <=5.0.3)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.0.0, =5.0.3 and more Source cves: CVE-2021-31406 Source advisory: OSV:GHSA-P7JQ-V8JP-J424...

@nextcloud/vue (>=2.1.0 <=2.7.0) potentially affected by CVE-2021-29438 via @nextcloud/dialogs (>=1.4.0 <=2.0.1)

@nextcloud/dialogs NPM version =1.4.0, =2.1.0, =2.7.0 Source cves: CVE-2021-29438 Source advisory: OSV:GHSA-G3FQ-3V3G-MH32...

@mongodb-js/compass-aggregations (>=0.0.20 <=4.1.0), @mongodb-js/compass-export-to-language (>=2.2.22 <=2.2.24) +4 more potentially affected by CVE-2020-24391 via mongodb-query-parser (>=0.0.1 <=1.5.0)

mongodb-query-parser NPM version =0.0.1, =0.0.20, =2.2.22, =0.0.3, =3.0.0, =1.0.3, =0.0.1, =0.4.2 Source cves: CVE-2020-24391 Source advisory: OSV:GHSA-HXMG-HM46-CF62...

@scullyio/init (>=1.0.0-beta.4 <=1.1.0), @scullyio/scully-plugin-base-href-rewrite (=0.0.1) +3 more potentially affected by CVE-2020-28470 via @scullyio/scully (>=0.0.72 <=1.0.11)

@scullyio/scully NPM version =0.0.72, =1.0.0-beta.4, =1.0.0, =0.0.1, =1.0.0-beta.4 Source cves: CVE-2020-28470 Source advisory: OSV:GHSA-R96P-V3CR-GFV8...

0726react (=0.1.1), 0x0.icu.anima (=0.1.0) +12717 more potentially affected by CVE-2020-7693 via sockjs (>=0.0.4 <=0.3.19)

sockjs NPM version =0.0.4, =1.0.4, =0.1.0, =0.0.1, =0.1.0, =1.4.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-7693 Source advisory: OSV:GHSA-C9G6-9335-X697...

diversion (>=0.2.0 <=0.4.6), push-it (>=0.1.0 <=0.1.4) +1 more potentially affected by CVE-2020-8823 via sockjs (>=0.0.4 <=0.2.1)

sockjs NPM version =0.0.4, =0.2.0, =0.1.0, =0.0.0pre3, =0.0.0pre31 Source cves: CVE-2020-8823 Source advisory: OSV:GHSA-HH8V-JMH3-9437...