8828 matches found
com.github.fanzezhen.common:common-security (>=0.0.1, <=2.0.3), com.github.fanzezhen:security (>=1.3.3, <=1.3.4.4) +6 more potentially affected by CVE-2021-25329 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.1, =1.3.3, =5.22, =10.0.0-m1, =10.0.0-m1, =3.15.0, =3.16.8 - su.boleyn.oj:oj-server 1.1.2 Source cves: CVE-2021-25329 Source advisory: OSV:GHSA-JGWR-3QM3-26F3...
4talent-questions-shortlist (1.3.3), @42.nl/ui (>=1.0.7, <=1.0.9) +624 more potentially affected by CVE-2021-23346 via html-parse-stringify2 (2.0.1)
html-parse-stringify2 NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on html-parse-stringify2 and may be impacted: - 4talent-questions-shortlist 1.3.3 - @42.nl/ui =1.0.7, =5.0.1, =0.1.0, =1.0.0, =0.2.0-alpha.1, =0.1.2, =0.9.9, =0.9.9,...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +11789 more potentially affected by CVE-2021-28092 +1 more via is-svg (>=2.1.0, <=4.2.2)
is-svg NPM version =2.1.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =1.1.8, =1.0.0, =1.0.4 - 4design 0.0.1 and more Source cves: CVE-2021-28092, CVE-2021-29059 Source advisory: SNYK:JS-ISSVG-1243891...
@anandsuresh/smart-stream (>=1.0.1, <=1.1.0), @anandsuresh/smart_stream (1.0.0) +10 more potentially affected by CVE-2021-21368 via msgpack5 (>=4.0.2, <=4.4.0)
msgpack5 NPM version =4.0.2, =1.0.1, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =1.0.2, =1.2.9, =2.0.0-rc1, =0.5.6, =0.1.0, =0.1.3 Source cves: CVE-2021-21368 Source advisory: OSV:GHSA-GMJW-49P4-PCFM...
imapapi (>=1.4.6, <=1.4.9) potentially affected by CVE-2021-21368 via msgpack5 (>=5.0.0, <=5.2.0)
msgpack5 NPM version =5.0.0, =1.4.6, =1.4.9 Source cves: CVE-2021-21368 Source advisory: OSV:GHSA-GMJW-49P4-PCFM...
@solid/community-server (0.4.1) potentially affected by unknown CVE via @solid/identity-token-verifier (0.4.3)
@solid/identity-token-verifier NPM version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solid/identity-token-verifier and may be impacted: - @solid/community-server 0.4.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XMH9-RG6F-J3MR...
@0soft/zero-material-ui (>=0.0.1, <=0.0.25), @abegalinov/backoffice-skeleton (>=0.1.0, <=0.4.9) +302 more potentially affected by CVE-2021-23353 via jspdf (>=2.0.0, <=2.3.0)
jspdf NPM version =2.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.0-nightly-202010102951, =0.0.0-nightly-202151822534, =0.0.0-nightly-202151023138, =0.0.0-nightly-2020112923923, =0.0.0-nightly-202141023010, =0.0.0-nightly-202010102951, =0.0.0-nightly-202122521518, =0.0.0-nightly-202121722854,...
sn-cicd (>=4.6.12, <=4.6.17) potentially affected by CVE-2021-23372 via mongo-express (1.0.0-alpha.1)
mongo-express NPM version 1.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongo-express and may be impacted: - sn-cicd =4.6.12, =4.6.17 Source cves: CVE-2021-23372 Source advisory: SNYK:JS-MONGOEXPRESS-1085403...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0726react (0.1.1) +15394 more potentially affected by CVE-2021-24033 via react-dev-utils (>=0.4.0, <=11.0.3)
react-dev-utils NPM version =0.4.0, =1.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2, =1.0.3, =1.0.11 and more Source cves: CVE-2021-24033 Source advisory: OSV:GHSA-5Q6M-3H65-W53X...
08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +10864 more potentially affected by CVE-2021-21366 via xmldom (>=0.1.2, <=0.4.0)
xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.11.3-alpha.1660, =0.0.3, =0.0.9 and more Source cves: CVE-2021-21366 Source advisory: SNYK:JS-XMLDOM-1084960...
ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +4694 more potentially affected by CVE-2020-27223 via org.eclipse.jetty:jetty-server (>=9.4.6.v20170531, <=9.4.36.v20210114)
org.eclipse.jetty:jetty-server MAVEN version =9.4.6.v20170531, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.0.2, =0.1.0, =0.1.3-20210127.1838-76ab4fc -...
ch.uzh.ifi.ddis.ifp:cassandra-esper (>=0.1.0, <=0.3.0), ch.uzh.ifi.ddis.ifp:cassandra-esper-integration-tests (>=0.2.2, <=0.3.0) +101 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.5.9.final)
io.netty:netty MAVEN version 3.5.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ch.uzh.ifi.ddis.ifp:cassandra-esper =0.1.0, =0.2.2, =2.0.0, =2.0.0, =0.6.0-2, =1.0.1-dse, =1.0.1-dse, =2.2.1, =2.2.1, =2.3.0,...
ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12), ai.clarity.codeartifact:ai.clarity.codeartifact.gradle.plugin (>=0.0.1, <=0.0.10) +10651 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.59.final)
io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.0.1, =0.0.14, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...
org.hornetq.examples.jms:hornetq-jms-examples-common (>=2.3.13.final, <=2.3.19.final), org.hornetq:hornetq-commons (>=2.3.13.final, <=2.3.19.final) +5 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.7.final)
io.netty:netty MAVEN version 3.6.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - org.hornetq.examples.jms:hornetq-jms-examples-common =2.3.13.final, =2.3.13.final, =2.3.13.final, =2.3.13.final, =2.3.13.fina...
org.apache.nifi:nifi-hbase_1_1_2-client-service (>=1.9.0, <=1.14.0), org.apache.nifi:nifi-hbase_1_1_2-client-service-nar (>=1.9.0, <=1.14.0) +11 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.9.final)
io.netty:netty MAVEN version 3.6.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - org.apache.nifi:nifi-hbase112-client-service =1.9.0, =1.9.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =2.3.22.final, =2.3.22.final,...
com.textrecruit.ustack:textrecruit-ustack-server (>=1.0.1, <=1.0.31), com.typesafe.akka:akka-file-mailbox_2.10.0-m7 (2.1-m2) +7 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.5.4.final)
io.netty:netty MAVEN version 3.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.textrecruit.ustack:textrecruit-ustack-server =1.0.1, =1.0.39, =2.1.96, =2.1.115 - com.zipwhip:zipwhip-api 1.28.3-final...
io.backchat.hookup:hookup_2.10 (0.4.0), net.wicp.tams:common-es-assit (7.6.7) +30 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.10.final)
io.netty:netty MAVEN version 3.6.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - io.backchat.hookup:hookup2.10 0.4.0 - net.wicp.tams:common-es-assit 7.6.7 - net.wicp.tams:common-es-client =5.6.11, =5.6.11,...
cc.twittertools:twitter-tools-core (>=1.4.1, <=1.4.3), com.cloudbees.jenkins.plugins:cloudbees-registration (>=3.14, <=3.15) +210 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.4.4.final)
io.netty:netty MAVEN version 3.4.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - cc.twittertools:twitter-tools-core =1.4.1, =3.14, =1.20, =0.6.0, =0.7.1, =0.7.1, =2-release, =0-release, =0.1.2, =1.7.5,...
com.foursquare:foursquare-fhttp_2.10 (>=0.1.12, <=0.1.14), com.foursquare:foursquare-fhttp_2.9.2 (0.1.12) +86 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.9.1.final)
io.netty:netty MAVEN version 3.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.foursquare:foursquare-fhttp2.10 =0.1.12, =2.0.0-m11-followup, =2.0.0-m11-followup, =2.0.0-m11-followup, =1.4.1, =0.1.0,...
ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +1700 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.2.final)
io.netty:netty MAVEN version 3.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark2.11 =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.14.0.1, =3.14.0.1, =3.20.0.2, =3.20.0.2,...