9231 matches found
@0soft/zero-material-ui (>=0.0.1, <=0.0.25), @abegalinov/backoffice-skeleton (>=0.1.0, <=0.4.9) +302 more potentially affected by CVE-2021-23353 via jspdf (>=2.0.0, <=2.3.0)
jspdf NPM version =2.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.0-nightly-202010102951, =0.0.0-nightly-202151822534, =0.0.0-nightly-202151023138, =0.0.0-nightly-2020112923923, =0.0.0-nightly-202141023010, =0.0.0-nightly-202010102951, =0.0.0-nightly-202122521518, =0.0.0-nightly-202121722854,...
@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2021-21310 via next-auth (3.1.0)
next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2021-21310 Source advisory: OSV:GHSA-PG53-56CG-4M8Q...
@byhuz/huz-ui-sigma (>=1.0.19, <=1.0.27), @deliverybot/client (>=0.7.0, <=0.7.2) +30 more potentially affected by CVE-2021-23327 via apexcharts (>=3.2.0, <=3.23.1)
apexcharts NPM version =3.2.0, =1.0.19, =0.7.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =7.20.0-snapshot-1617172219791, =2.3.0, =1.0.3, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.15.0 and more Source cves: CVE-2021-23327 Source advisory: OSV:GHSA-W46J-8HM6-H8MM...
1ib (>=1.0.9, <=1.0.11), 4front-cli (>=0.0.1, <=0.0.20) +375 more potentially affected by CVE-2021-23354 via printf (>=0.0.4, <=0.6.0)
printf NPM version =0.0.4, =1.0.9, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.5, =1.3.0-beta.0, =1.2.26, =1.2.31, =7.54.0 and more Source cves: CVE-2021-23354 Source advisory: SNYK:JS-PRINTF-1072096...
ai.grakn:grakn-dist (>=0.7.0, <=0.16.0), ai.grakn:grakn-test (0.10.0) +1941 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (>=0.6.0, <=6.8.13)
org.elasticsearch:elasticsearch MAVEN version =0.6.0, =0.7.0, =0.6.1, =0.11.0, =0.3.0-alpha-1, =1.0.1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.2.1 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-starter 5.2.0 and more Source cves: CVE-2020-7021 Source advisory: MEND:CVE-2020-7021...
ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.4.0), br.com.simpli:simpli-ws (>=1.2.1, <=2.2.0) +631 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (>=7.0.0, <=7.9.3)
org.elasticsearch:elasticsearch MAVEN version =7.0.0, =j8.2.2.0, =1.2.1, =0.0.1-alpha, =6.1.0, =6.1.7, =6.1.0, =6.1.0, =6.1.7, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.12c, =6.1.0, =6.1.12e and more Source cves: CVE-2020-7021 Source advisory: MEND:CVE-2020-7021...
@zpmc/zwd-server (>=0.0.14, <=0.0.21) potentially affected by CVE-2020-26299 via ftp-srv (4.1.0)
ftp-srv NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ftp-srv and may be impacted: - @zpmc/zwd-server =0.0.14, =0.0.21 Source cves: CVE-2020-26299 Source advisory: OSV:GHSA-PMW4-JGXX-PCQ9...
activedirectoryenum (>=0.4.7, <=0.5.0), airflow-run (0.4.9) +188 more potentially affected by CVE-2020-36242 via cryptography (>=3.1.0, <=3.3.1)
cryptography PYPI version =3.1.0, =0.4.7, =0.117.0b0, =2.0.1.dev14, =8.0.1, =0.0.3, =0.9.1, =0.11.0 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 - azureml-contrib-fairness 1.23.0 - azureml-contrib-functions 1.23.0 - azureml-contrib-gbdt 1.23.0 - azureml-contrib-interpret 1.23.0 -...
aalam-common (0.1.78), adamalib (0.1.0) +82 more potentially affected by CVE-2020-14343 via pyyaml (3.11.0)
pyyaml PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyyaml and may be impacted: - aalam-common 0.1.78 - adamalib 0.1.0 - aoikbookmarkstofiles =0.1.0, =1.14.1, =0.5.0, =1.1.3.dev34, =0.0.4, =0.1.0, =1.0.0, =0.0.4, =2016.3.17,...
argo-workflow-tools (0.9.6), assume (>=0.2.3, <=0.4.0) +56 more potentially affected by CVE-2020-14343 via pyyaml (4.2.0b4)
pyyaml PYPI version 4.2.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on pyyaml and may be impacted: - argo-workflow-tools 0.9.6 - assume =0.2.3, =0.2.10, =2.1.3, =0.2.1, =2.0.41, =0.3.25, =0.10.9, =1.11.1, =2.0.3, =2.1.2 - cloudless 0.0.8 -...
ansible-taskrunner (>=0.0.18, <=1.4.0), api-buddy (>=0.1.0, <=0.4.0) +23 more potentially affected by CVE-2020-14343 via pyyaml (4.2.0b1)
pyyaml PYPI version 4.2.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on pyyaml and may be impacted: - ansible-taskrunner =0.0.18, =0.1.0, =1.1.1, =0.3.4, =0.3.4, =0.5.4rc0, =0.5.1rc0, =2020.10.19, =1.2.3, =1.3.0, =0.1.1, =0.3.6 - md2k-cerebral-cort...
amiwo (>=0.0.1, <=0.2.3), geoshaper (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-29935 via rocket (>=0.1.6, <=0.2.11)
rocket CARGO version =0.1.6, =0.0.1, =0.1.0, =0.8.0, =0.15.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2021-29935 Source advisory: OSV:RUSTSEC-2021-0044...
2pg-oauth (>=1.0.0, <=1.0.1), 30s (>=1.5.0, <=1.5.23) +1872 more potentially affected by CVE-2021-21306 via marked (>=1.1.1, <=1.2.9)
marked NPM version =1.1.1, =1.0.0, =1.5.0, =4.11.16, =1.0.1, =0.0.1, =2.4.0, =0.12.4, =4.0.0, =0.1.1, =0.1.10, =0.0.1, =1.0.0, =2.0.0, =3.1.1 - @adonisjs/cli 4.0.13 and more Source cves: CVE-2021-21306 Source advisory: OSV:GHSA-4R62-V4VQ-HR96...
fintalk-pkg (>=2.3.20, <=2.3.22) potentially affected by CVE-2021-21304 via dynamoose (2.3.0)
dynamoose NPM version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on dynamoose and may be impacted: - fintalk-pkg =2.3.20, =2.3.22 Source cves: CVE-2021-21304 Source advisory: OSV:GHSA-RRQM-P222-8PH2...
activedirectoryenum (>=0.4.7, <=0.5.0), airflow-run (0.4.9) +188 more potentially affected by CVE-2020-36242 via cryptography (>=3.1.0, <=3.3.1)
cryptography PYPI version =3.1.0, =0.4.7, =0.117.0b0, =2.0.1.dev14, =8.0.1, =0.0.3, =0.9.1, =0.11.0 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 - azureml-contrib-fairness 1.23.0 - azureml-contrib-functions 1.23.0 - azureml-contrib-gbdt 1.23.0 - azureml-contrib-interpret 1.23.0 -...
3m5-coco (>=0.0.2, <=0.0.981), @24hr/sentry-logger-node (>=0.4.0, <=1.2.2) +278 more potentially affected by CVE-2021-25912 via dotty (>=0.0.1, <=0.1.0)
dotty NPM version =0.0.1, =0.0.2, =0.4.0, =1.1.4, =0.0.2, =1.15.3, =0.1.0, =0.1.6, =1.0.4, =0.1.6, =0.1.0, =1.0.0, =1.0.0, =1.0.7 - @kikiemz/komzpol 1.1.2 and more Source cves: CVE-2021-25912 Source advisory: OSV:GHSA-F5C9-X9J6-87QP...
@glossgenius/eslint-config (>=1.0.2, <=1.0.7), @halonext/nestjs-express-cassandra (>=7.0.0, <=7.1.0) +7 more potentially affected by CVE-2021-26707 via merge-deep (>=3.0.0, <=3.0.2)
merge-deep NPM version =3.0.0, =1.0.2, =7.0.0, =5.2.0, =6.0.1, =0.0.1, =0.1.0-rc0, =0.0.11, =1.0.0, =1.2.4 Source cves: CVE-2021-26707 Source advisory: SNYK:JS-MERGEDEEP-1070277...
easy-http-request (>=0.0.5, <=0.1.0), epic-wallet-rust-python (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-21299 via hyper (>=0.12.12, <=0.12.19)
hyper CARGO version =0.12.12, =0.0.5, =0.1.0, =0.1.0, =3.3.2, =3.3.2, =3.3.2, =3.0.0, =3.0.0, =3.0.0, =3.0.5 Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...
a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), anitable (0.1.0) +66 more potentially affected by CVE-2021-21299 via hyper (>=0.13.0-alpha.1, <=0.13.7)
hyper CARGO version =0.13.0-alpha.1, =0.5.0-alpha.6, =0.1.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.31.1 and more Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...
ai.grakn:grakn (>=0.13.0, <=0.14.0), ai.grakn:grakn-client (>=0.13.0, <=0.14.0) +186 more potentially affected by CVE-2020-17516 via org.apache.cassandra:cassandra-all (>=2.1.0, <=3.0.23)
org.apache.cassandra:cassandra-all MAVEN version =2.1.0, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.13.0, =0.13.0, =0.13.0, =0.13.0, =0.10.0, =0.13.0,...