com.antgroup.tugraph:calcite-spark (>=1.18.0-geaflow_1.0 <=1.18.0-geaflow_1.1), com.couchbase.client:spark-connector_2.10 (=2.2.0) +45 more potentially affected by CVE-2018-8024 via org.apache.spark:spark-core_2.10 (>=2.2.0 <=2.2.1)

org.apache.spark:spark-core2.10 MAVEN version =2.2.0, =1.18.0-geaflow1.0, =0.2.0, =1.0.9, =1.0.9, =0.7.3, =2.2.00.12.0, =1.21.0.138, =0.0.3, =0.2.1, =0.2.2 and more Source cves: CVE-2018-8024 Source advisory: OSV:GHSA-8CW6-5QVP-Q3WJ...

ai.grakn.kgms:client (=1.4.3), ai.grakn:client-java (>=1.4.1 <=1.4.3) +360 more potentially affected by CVE-2018-8024 via org.apache.spark:spark-core_2.11 (>=2.2.0 <=2.2.1)

org.apache.spark:spark-core2.11 MAVEN version =2.2.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2018-8024 Source advisory: OSV:GHSA-8CW6-5QVP-Q3WJ...

org.aksw.sparqlify:sparqlify-cli (=0.8.3), org.aksw.sparqlify:sparqlify-core (=0.8.3) +2 more potentially affected by CVE-2017-12625 via org.apache.hive:hive-service (=2.3.0)

org.apache.hive:hive-service MAVEN version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-service and may be impacted: - org.aksw.sparqlify:sparqlify-cli =0.8.3 - org.aksw.sparqlify:sparqlify-core =0.8.3 -...

com.mydataharbor:jdbc-hive-2.2.x-plugin (>=1.1.1 <=2.0.2) potentially affected by CVE-2017-12625 via org.apache.hive:hive-service (=2.2.0)

org.apache.hive:hive-service MAVEN version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-service and may be impacted: - com.mydataharbor:jdbc-hive-2.2.x-plugin =1.1.1, =2.0.2 Source cves: CVE-2017-12625 Source advisory:...

br.com.anteros:Anteros-Security-Spring (>=2.0.0 <=2.0.20), br.com.anteros:Anteros-Security-Spring-Mongo (>=1.0.0 <=1.0.5) +285 more potentially affected by CVE-2019-3778 via org.springframework.security.oauth:spring-security-oauth2 (>=2.3.0.RELEASE <=2.3.4.RELEASE)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version =2.3.0.RELEASE, =2.0.0, =1.0.0, =1.0.0, =1.0.6, =1.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2019-3778 Source advisory: OSV:GHSA-77RV-6VFW-X4GC...

au.org.consumerdatastandards:client-cli (>=1.1.1 <=2.4.1), fm.pattern:tokamak-authorization (=1.0.1) +17 more potentially affected by CVE-2019-3778 via org.springframework.security.oauth:spring-security-oauth2 (>=2.1.0.RELEASE <=2.1.1.RELEASE)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version =2.1.0.RELEASE, =1.1.1, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.9.0, =1.9.0, =1.3.0, =1.3.0, =1.3.4 and more Source cves: CVE-2019-3778 Source advisory: OSV:GHSA-77RV-6VFW-X4GChttps://vulners.c...

aiohttp-apispec (>=0.7.2 <=0.7.6), pygrest (>=1.0.1 <=1.3.0) +1 more potentially affected by CVE-2019-9710 via webargs (>=1.8.1 <=5.1.2)

webargs PYPI version =1.8.1, =0.7.2, =1.0.1, =0.4.0, =0.100.2rc4 Source cves: CVE-2019-9710 Source advisory: OSV:GHSA-8554-JXCW-454Q...

@pl-test/c (>=1.1.0 <=1.1.1), @pl-test/e (=1.1.0) potentially affected by CVE-2019-10760 via safer-eval (=1.2.3)

safer-eval NPM version =1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on safer-eval and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e =1.1.0 Source cves: CVE-2019-10760 Source advisory: SNYK:JS-SAFEREVAL-473029...

com.github.kulya:jmeter-gradle-plugin (>=1.3.1-2.6 <=1.3.4-2.9), com.lazerycode.jmeter:jmeter-maven-plugin (>=1.4 <=1.8.1) +6 more potentially affected by CVE-2019-0187 via org.apache.jmeter:ApacheJMeter (>=2.6 <=5.0)

org.apache.jmeter:ApacheJMeter MAVEN version =2.6, =1.3.1-2.6, =1.4, =1.0.7-3.0-BETA, =1.0.7-3.0-BETA, =6.3.0, =6.2.0, =6.6.0 Source cves: CVE-2019-0187 Source advisory: OSV:GHSA-WG37-7MRV-CFWM...

au.com.skytix:mesos-scheduler-client (>=1.0.11 <=1.0.15), au.com.skytix:velocity-scheduler (>=1.0.34 <=1.0.40) +44 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (>=0.9.0-incubating <=1.4.2)

org.apache.mesos:mesos MAVEN version =0.9.0-incubating, =1.0.11, =1.0.34, =2.1.7, =2.1.7, =2.2.0, =2.2.0, =0.0.3, =2.1.2, =2.1.2, =0.18.0, =0.1.3, =0.1.3, =0.18.0, =0.18.0, =1.5.0 and more Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

org.apache.beam:beam-runners-twister2 (>=2.23.0 <=2.74.0), org.apache.ignite:ignite-mesos (>=2.7.0 <=2.12.0) +5 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (=1.5.0)

org.apache.mesos:mesos MAVEN version =1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.beam:beam-runners-twister2 =2.23.0, =2.7.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.8.0 Source cves:...

com.hubspot.mesos.rx.java.example:mesos-rxjava-example-framework (=0.1.0), com.hubspot.mesos.rx.java:mesos-rxjava-protobuf-client (=0.1.0) +4 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (=1.6.1)

org.apache.mesos:mesos MAVEN version =1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot.mesos.rx.java.example:mesos-rxjava-example-framework =0.1.0 -...

8bit-ghost-ui (>=1.0.0-beta.1 <=1.0.0-beta.2), @7ninjas/scss-mixins (=1.0.0-alpha3) +498 more potentially affected by CVE-2019-8331 via bootstrap (>=4.0.0 <=4.3.0)

bootstrap NPM version =4.0.0, =1.0.0-beta.1, =1.0.1, =1.0.3, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.0.0, =1.0.0, =0.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2019-8331 Source advisory: OSV:GHSA-9V3M-8FP8-MJ99...

ai.idylnlp:idylnlp-models-deeplearning (>=1.0.0 <=1.1.0), ai.minxiao:ds4s-cdl4j_2.11 (>=0.1.0 <=0.1.2) +6506 more potentially affected by unknown CVE via com.beust:jcommander (>=1.10 <=1.72)

com.beust:jcommander MAVEN version =1.10, =1.0.0, =0.1.0, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =0.0.4, =0.0.4, =0.0.10 and more Sour...

ads-api (>=0.1.7.3 <=0.1.7.5), aequitas (>=0.26.0 <=0.34.0) +218 more potentially affected by CVE-2019-7164 via sqlalchemy (>=0.7.7 <=1.3.0b2)

sqlalchemy PYPI version =0.7.7, =0.1.7.3, =0.26.0, =0.1.0, =1.10.0, =0.10.0, =1.10.3, =0.1.6, =1.0.0a0, =1.0.0, =0.0.4, =1.0.1, =0.6.7.post3, =0.0.2, =0.0.9 and more Source cves: CVE-2019-7164 Source advisory: OSV:PYSEC-2019-123...

scalajs-standalone-bin (>=0.1.0 <=0.4.3), tpr (>=0.2.0 <=0.2.2) potentially affected by CVE-2016-10627 via scala-bin (>=0.2.1 <=0.3.3)

scala-bin NPM version =0.2.1, =0.1.0, =0.2.0, =0.2.2 Source cves: CVE-2016-10627 Source advisory: OSV:GHSA-3VV5-42WR-M32G...

bio (>=0.0.2 <=0.0.5), bionode (>=0.7.0 <=2.0.0) +1 more potentially affected by CVE-2016-10613 via bionode-sra (>=0.2.5 <=1.0.3)

bionode-sra NPM version =0.2.5, =0.0.2, =0.7.0, =3.3.5, =3.4.5 Source cves: CVE-2016-10613 Source advisory: OSV:GHSA-735C-R4VC-6GM9...

grunt-integration (=0.1.0) potentially affected by CVE-2016-10679 via selenium-standalone-painful (=2.39.0-2.7.0)

selenium-standalone-painful NPM version =2.39.0-2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium-standalone-painful and may be impacted: - grunt-integration =0.1.0 Source cves: CVE-2016-10679 Source advisory: OSV:GHSA-3X83-P476-VV95...

h5-test (>=0.1.1 <=0.2.0) potentially affected by CVE-2016-10560 via galenframework-cli (=1.6.4)

galenframework-cli NPM version =1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on galenframework-cli and may be impacted: - h5-test =0.1.1, =0.2.0 Source cves: CVE-2016-10560 Source advisory: OSV:GHSA-X5PH-4FR4-G7FW...

amaze-tdd (>=0.0.9 <=0.2.5) potentially affected by CVE-2016-10562 via iedriver (=2.53.1)

iedriver NPM version =2.53.1 is affected by a known vulnerability. The following packages have a transitive dependency on iedriver and may be impacted: - amaze-tdd =0.0.9, =0.2.5 Source cves: CVE-2016-10562 Source advisory: OSV:GHSA-JFGQ-G48X-JQ83...