ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.24), ai.hyacinth.framework:core-service-discovery-server (>=0.5.0 <=0.5.24) +5662 more potentially affected by CVE-2021-21349 via com.thoughtworks.xstream:xstream (>=1.1.1 <=1.4.15)

com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =Finchley.SR4, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =0.3.3, =0.4.0, =0.4.2 and more Source cves: CVE-2021-21349 Source advisory: OSV:GHSA-F6HM-88X3-MFJV...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.24), ai.hyacinth.framework:core-service-discovery-server (>=0.5.0 <=0.5.24) +5662 more potentially affected by CVE-2021-21346 via com.thoughtworks.xstream:xstream (>=1.1.1 <=1.4.15)

com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =Finchley.SR4, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =0.3.3, =0.4.0, =0.4.2 and more Source cves: CVE-2021-21346 Source advisory: OSV:GHSA-4HRM-M67V-5CXR...

a3m (=0.1.0), acdh-collatex-utils (>=0.2.0 <=1.3.0) +589 more potentially affected by CVE-2021-28957 via lxml (>=3.2.3 <=4.6.2)

lxml PYPI version =3.2.3, =0.2.0, =1.0.0, =3.0.0, =0.1.0, =1.0.3, =1.0.0a1.post0, =1.10.0, =0.1.16, =0.7.2, =0.11.0 - apkcli =0.1.2 and more Source cves: CVE-2021-28957 Source advisory: OSV:GHSA-JQ4V-F5Q6-MJQQ...

feature-toggle-manager (>=0.0.1 <=0.0.2), hazard-feed (>=0.2.0 <=0.2.5) potentially affected by CVE-2020-35681 via channels (>=3.0.0 <=3.0.2)

channels PYPI version =3.0.0, =0.0.1, =0.2.0, =0.2.5 Source cves: CVE-2020-35681 Source advisory: OSV:GHSA-V542-8Q9X-CFFC...

@duetds/angular (>=5.0.2 <=5.0.3), @duetds/components (>=5.0.2 <=5.0.3) +2 more potentially affected by CVE-2021-23356 via kill-process-by-name (=1.0.5)

kill-process-by-name NPM version =1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on kill-process-by-name and may be impacted: - @duetds/angular =5.0.2, =5.0.2, =1.7.20, =5.0.2, =5.0.3 Source cves: CVE-2021-23356 Source advisory:...

a6s-railway (>=0.2.0 <=0.2.3), fbl (>=1.5.0 <=1.15.0) potentially affected by CVE-2021-25914 via object-collider (=1.0.3)

object-collider NPM version =1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on object-collider and may be impacted: - a6s-railway =0.2.0, =1.5.0, =1.15.0 Source cves: CVE-2021-25914 Source advisory: OSV:GHSA-85G2-29M8-QF2P...

170051277-trab-final-gces (>=0.3.0 <=0.5.0), 2022-2-gces-ifpf (=0.3.0) +10388 more potentially affected by CVE-2021-28363 via urllib3 (>=1.26.0 <=1.26.3)

urllib3 PYPI version =1.26.0, =0.3.0, =0.0.1a0, =0.1.0, =0.0.5, =0.1.0, =0.1.0, =1.0.28, =0.6.0, =0.1.10, =16.0.0, =0.0.3, =1.0.0, =1.1.6 and more Source cves: CVE-2021-28363 Source advisory: OSV:GHSA-5PHF-PP7P-VC2R...

atila-vue (>=0.1.3 <=0.1.3.5), contrail (>=0.3.0 <=1.0.2) +27 more potentially affected by CVE-2020-24583 via django (>=3.0.0 <=3.0.0rc1)

django PYPI version =3.0.0, =0.1.3, =0.3.0, =0.1.1, =0.0.1, =0.0.1, =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.4 and more Source cves: CVE-2020-24583 Source advisory: OSV:GHSA-M6GJ-H9GM-GW44...

atila-vue (>=0.1.3 <=0.1.3.5), contrail (>=0.3.0 <=1.0.2) +27 more potentially affected by CVE-2020-24584 via django (>=3.0.0 <=3.0.0rc1)

django PYPI version =3.0.0, =0.1.3, =0.3.0, =0.1.1, =0.0.1, =0.0.1, =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.4 and more Source cves: CVE-2020-24584 Source advisory: OSV:GHSA-FR28-569J-53C4...

cn.detachment:detachment-es-example (=1.0.2-RELEASE), cn.hippo4j:hippo4j-monitor-elasticsearch (>=1.4.1 <=1.5.0) +240 more potentially affected by CVE-2020-7014 via org.elasticsearch:elasticsearch (>=6.7.0 <=6.8.7)

org.elasticsearch:elasticsearch MAVEN version =6.7.0, =1.4.1, =1.4.0, =6.8.4, =6.7.2, =0.9.0.0, =0.9.0.0, =0.9.0.0, =6.7.0.0, =1.0.0-RC1, =1.0.0-RC2 - com.bowriverstudio:fscrawler-elasticsearch-client-v6 =2.6 and more Source cves: CVE-2020-7014 Source advisory: OSV:GHSA-HQQV-9X3V-MP7W...

af-core (>=0.1.0 <=0.1.8), af-lib (=0.1.1) +51 more potentially affected by CVE-2021-1000007 +1 more via parse_duration (>=1.0.3 <=2.1.1)

parseduration CARGO version =1.0.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.2, =0.6.2, =0.6.2, =0.1.0, =0.1.0, =0.3.12, =0.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2021-1000007, CVE-2021-29932 Source advisory: OSV:RUSTSEC-2021-0041...

170051277-trab-final-gces (>=0.3.0 <=0.5.0), 2022-2-gces-ifpf (=0.3.0) +10388 more potentially affected by CVE-2021-28363 via urllib3 (>=1.26.0 <=1.26.3)

urllib3 PYPI version =1.26.0, =0.3.0, =0.0.1a0, =0.1.0, =0.0.5, =0.1.0, =0.1.0, =1.0.28, =0.6.0, =0.1.10, =16.0.0, =0.0.3, =1.0.0, =1.1.6 and more Source cves: CVE-2021-28363 Source advisory: OSV:PYSEC-2021-59...

bigio (>=0.1.3 <=0.1.13), deadpool (=0.0.1) +45 more potentially affected by CVE-2021-21368 via msgpack5 (>=1.3.5 <=3.5.1)

msgpack5 NPM version =1.3.5, =0.1.3, =0.3.0, =1.0.1, =0.2.0, =0.1.6, =0.1.0, =0.0.3, =0.0.3, =0.0.3, =0.6.2, =0.7.6 and more Source cves: CVE-2021-21368 Source advisory: OSV:GHSA-GMJW-49P4-PCFM...

@solid/community-server (=0.4.1) potentially affected by unknown CVE via @solid/identity-token-verifier (=0.4.3)

@solid/identity-token-verifier NPM version =0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solid/identity-token-verifier and may be impacted: - @solid/community-server =0.4.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XMH9-RG6F-J3MR...

sn-cicd (>=4.6.12 <=4.6.17) potentially affected by CVE-2021-23372 via mongo-express (=1.0.0-alpha.1)

mongo-express NPM version =1.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongo-express and may be impacted: - sn-cicd =4.6.12, =4.6.17 Source cves: CVE-2021-23372 Source advisory: SNYK:JS-MONGOEXPRESS-1085403...

@aarnet/jupyterlab-ext-aarnet-help (=0.1.0), @aarnet/jupyterlab-ext-changeconf (>=0.1.0 <=0.1.1) +612 more potentially affected by CVE-2021-3377 via ansi_up (>=1.3.0 <=4.0.4)

ansiup NPM version =1.3.0, =0.1.0, =0.19.1-rc.2, =0.19.1-rc.3, =1.6.0, =0.1.1, =0.0.1, =0.1.0, =0.1.0, =1.0.1, =1.0.6 - @apsknight/jupyterlabxkcd =0.1.0 - @azidar/diagrammer-jupyterlab-ext =0.1.0 and more Source cves: CVE-2021-3377 Source advisory: OSV:GHSA-2V5F-23XC-V9QR...

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +26778 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.5.Final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.Beta4, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

com.bmuschko.vagrant-base:com.bmuschko.vagrant-base.gradle.plugin (>=2.0 <=2.2.1), com.bmuschko.vagrant:com.bmuschko.vagrant.gradle.plugin (>=2.0 <=2.2.1) potentially affected by CVE-2021-21361 via com.bmuschko:gradle-vagrant-plugin (>=2.0 <=2.2.1)

com.bmuschko:gradle-vagrant-plugin MAVEN version =2.0, =2.0, =2.0, =2.2.1 Source cves: CVE-2021-21361 Source advisory: OSV:GHSA-JPCM-4485-69P7...

3dcore-lib (=0.17.9), 42-cli (>=1.0.0 <=1.0.4) +2735 more potentially affected by CVE-2020-28498 via elliptic (>=0.10.2 <=6.5.3)

elliptic NPM version =0.10.2, =1.0.0, =1.0.0, =0.1.0, =0.0.0-alpha8, =2.0.0, =2.0.0, =1.0.0, =1.5.1, =2.0.0, =0.0.0-alpha8, =0.0.0-alpha8, =0.0.0-alpha8, =0.0.0-alpha8, =0.0.0-alpha8, =2.1.1 and more Source cves: CVE-2020-28498 Source advisory: OSV:GHSA-R9P9-MRJM-926W...

botbuilder-adapters-slack (=4.10.0), botbuilder-ai (=4.10.0) +7 more potentially affected by CVE-2021-1725 via botframework-connector (=4.10.0)

botframework-connector PYPI version =4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on botframework-connector and may be impacted: - botbuilder-adapters-slack =4.10.0 - botbuilder-ai =4.10.0 - botbuilder-applicationinsights =4.10.0 -...