08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +10864 more potentially affected by CVE-2021-21366 via xmldom (>=0.1.2, <=0.4.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.11.3-alpha.1660, =0.0.3, =0.0.9 and more Source cves: CVE-2021-21366 Source advisory: SNYK:JS-XMLDOM-1084960...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +4694 more potentially affected by CVE-2020-27223 via org.eclipse.jetty:jetty-server (>=9.4.6.v20170531, <=9.4.36.v20210114)

org.eclipse.jetty:jetty-server MAVEN version =9.4.6.v20170531, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.0.2, =0.1.0, =0.1.3-20210127.1838-76ab4fc -...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +1700 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.2.final)

io.netty:netty MAVEN version 3.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark2.11 =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.14.0.1, =3.14.0.1, =3.20.0.2, =3.20.0.2,...

ch.uzh.ifi.ddis.ifp:cassandra-esper (>=0.1.0, <=0.3.0), ch.uzh.ifi.ddis.ifp:cassandra-esper-integration-tests (>=0.2.2, <=0.3.0) +101 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.5.9.final)

io.netty:netty MAVEN version 3.5.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ch.uzh.ifi.ddis.ifp:cassandra-esper =0.1.0, =0.2.2, =2.0.0, =2.0.0, =0.6.0-2, =1.0.1-dse, =1.0.1-dse, =2.2.1, =2.2.1, =2.3.0,...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2021-21295 +1 more via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12), ai.clarity.codeartifact:ai.clarity.codeartifact.gradle.plugin (>=0.0.1, <=0.0.10) +10651 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.59.final)

io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =1.4.6, =0.0.1, =0.0.1, =0.5.0, =0.0.1, =0.0.14, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

org.hornetq.examples.jms:hornetq-jms-examples-common (>=2.3.13.final, <=2.3.19.final), org.hornetq:hornetq-commons (>=2.3.13.final, <=2.3.19.final) +5 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.7.final)

io.netty:netty MAVEN version 3.6.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - org.hornetq.examples.jms:hornetq-jms-examples-common =2.3.13.final, =2.3.13.final, =2.3.13.final, =2.3.13.final, =2.3.13.fina...

org.apache.nifi:nifi-hbase_1_1_2-client-service (>=1.9.0, <=1.14.0), org.apache.nifi:nifi-hbase_1_1_2-client-service-nar (>=1.9.0, <=1.14.0) +11 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.9.final)

io.netty:netty MAVEN version 3.6.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - org.apache.nifi:nifi-hbase112-client-service =1.9.0, =1.9.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =2.3.22.final, =2.3.22.final,...

com.foursquare:foursquare-fhttp_2.10 (>=0.1.12, <=0.1.14), com.foursquare:foursquare-fhttp_2.9.2 (0.1.12) +86 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.9.1.final)

io.netty:netty MAVEN version 3.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.foursquare:foursquare-fhttp2.10 =0.1.12, =2.0.0-m11-followup, =2.0.0-m11-followup, =2.0.0-m11-followup, =1.4.1, =0.1.0,...

com.textrecruit.ustack:textrecruit-ustack-server (>=1.0.1, <=1.0.31), com.typesafe.akka:akka-file-mailbox_2.10.0-m7 (2.1-m2) +7 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.5.4.final)

io.netty:netty MAVEN version 3.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.textrecruit.ustack:textrecruit-ustack-server =1.0.1, =1.0.39, =2.1.96, =2.1.115 - com.zipwhip:zipwhip-api 1.28.3-final...

io.backchat.hookup:hookup_2.10 (0.4.0), net.wicp.tams:common-es-assit (7.6.7) +30 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.10.final)

io.netty:netty MAVEN version 3.6.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - io.backchat.hookup:hookup2.10 0.4.0 - net.wicp.tams:common-es-assit 7.6.7 - net.wicp.tams:common-es-client =5.6.11, =5.6.11,...

cc.twittertools:twitter-tools-core (>=1.4.1, <=1.4.3), com.cloudbees.jenkins.plugins:cloudbees-registration (>=3.14, <=3.15) +210 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.4.4.final)

io.netty:netty MAVEN version 3.4.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - cc.twittertools:twitter-tools-core =1.4.1, =3.14, =1.20, =0.6.0, =0.7.1, =0.7.1, =2-release, =0-release, =0.1.2, =1.7.5,...

3dcore-lib (0.17.9), @0xcert/client (>=1.0.0-beta, <=1.0.2) +1808 more potentially affected by CVE-2020-28498 via elliptic (>=6.0.2, <=6.5.3)

elliptic NPM version =6.0.2, =1.0.0-beta, =0.1.0, =0.0.0-alpha10, =2.0.0-alpha10, =2.0.0-alpha10, =1.0.0, =1.5.1, =2.0.0-alpha0, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =0.0.0-alpha10, =2.1.1 and more Source cves: CVE-2020-28498 Source advisory:...

botbuilder (>=4.10.0, <=4.10.2-rc0), botbuilder-azure (>=4.10.0, <=4.10.2-rc0) +2 more potentially affected by CVE-2021-1725 via botframework-connector (>=4.10.0, <=4.10.2-rc0)

botframework-connector NPM version =4.10.0, =4.10.0, =4.10.0, =4.10.0-preview, =4.10.2-rc0-preview - botkit-mock 4.10.0 Source cves: CVE-2021-1725 Source advisory: OSV:GHSA-FVCJ-HVFW-7F2V...

@conversationlearner/sdk (>=0.502.2, <=0.505.2), botbuilder (>=4.7.0, <=4.7.2) +4 more potentially affected by CVE-2021-1725 via botframework-connector (>=4.7.0, <=4.7.2)

botframework-connector NPM version =4.7.0, =0.502.2, =4.7.0, =4.7.0, =1.4.1, =0.505.1, =1.6.0, =1.6.2 Source cves: CVE-2021-1725 Source advisory: OSV:GHSA-FVCJ-HVFW-7F2V...

botbuilder (>=4.9.0, <=4.9.3), botbuilder-azure (>=4.9.0, <=4.9.3) +3 more potentially affected by CVE-2021-1725 via botframework-connector (>=4.9.0, <=4.9.3)

botframework-connector NPM version =4.9.0, =4.9.0, =4.9.0, =4.9.0-preview, =4.9.0-preview, =4.9.3-preview - botkit-mock 4.9.0 Source cves: CVE-2021-1725 Source advisory: OSV:GHSA-FVCJ-HVFW-7F2V...

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: SNYK:JS-CHRONONODE-1083228...

booklibrs (>=0.1.0, <=1.0.4), fl2rust (0.3.1) +5 more potentially affected by CVE-2021-28306 +2 more via fltk (>=0.9.7, <=0.14.13)

fltk CARGO version =0.9.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.15 Source cves: CVE-2021-28306, CVE-2021-28307, CVE-2021-28308 Source advisory: OSV:RUSTSEC-2021-0038...

317-project (0.0.0), 4pm-cli (>=0.0.1, <=0.0.5) +1884 more potentially affected by CVE-2020-28502 via xmlhttprequest (>=1.2.2, <=1.6.0)

xmlhttprequest NPM version =1.2.2, =0.0.1, =0.1.16-master.20181116180810, =0.1.0, =1.1.1, =0.0.4, =1.0.399-main, =0.1.0, =0.1.2, =0.1.3 - @flexcodelabs/input 0.1.1 and more Source cves: CVE-2020-28502 Source advisory: SNYK:JS-XMLHTTPREQUEST-1082935...

1tp (>=0.0.1, <=0.11.2), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +2800 more potentially affected by CVE-2020-28502 via xmlhttprequest-ssl (>=1.5.1, <=1.5.5)

xmlhttprequest-ssl NPM version =1.5.1, =0.0.1, =1.0.2, =4.11.25, =0.1.3, =0.0.15, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =0.2.9-dev-10, =0.13.0-alkemio, =0.17.0-alkemio-1 and more Source cves: CVE-2020-28502 Source advisory: SNYK:JS-XMLHTTPREQUESTSSL-1082936...