elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2018-15751 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2018-15751 Source advisory: OSV:PYSEC-2018-30...

elita (>=0.60.0 <=0.64.1) potentially affected by CVE-2018-15750 via salt (=2014.1.10)

salt PYPI version =2014.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - elita =0.60.0, =0.64.1 Source cves: CVE-2018-15750 Source advisory: OSV:PYSEC-2018-29...

cc.kebei:onion-easy-orm (=3.0.0), cc.kebei:onion-easy-orm-core (=3.0.0) +1362 more potentially affected by CVE-2017-18349 via com.alibaba:fastjson (>=1.1.15 <=1.2.30)

com.alibaba:fastjson MAVEN version =1.1.15, =1.1.6, =1.0.0, =1.0, =1.0.0, =1.0.0, =6.1.7, =6.2.08, =6.1.0, =6.1.7, =6.1.0, =6.2.09 and more Source cves: CVE-2017-18349 Source advisory: OSV:GHSA-XJRR-XV9M-4PW5...

08cms (=1.0.0), 101 (>=0.3.0 <=0.7.1) +4159 more potentially affected by CVE-2015-8861 via handlebars (>=1.0.10 <=3.0.8)

handlebars NPM version =1.0.10, =0.3.0, =0.0.1, =0.0.2, =0.0.16, =0.0.1, =1.2.1, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =2.0.4, =1.0.13, =1.0.0, =1.0.1 and more Source cves: CVE-2015-8861 Source advisory: OSV:GHSA-9PRH-257W-9277...

ba.sake:hepek-play_2.12 (>=0.4.0 <=0.4.1), by.exonit:swagger-play2-play26_2.12 (=1.0.0) +365 more potentially affected by CVE-2017-1000118 via com.typesafe.akka:akka-http-core_2.12 (>=10.0.0-RC2 <=10.0.5)

com.typesafe.akka:akka-http-core2.12 MAVEN version =10.0.0-RC2, =0.4.0, =0.3.0, =0.1.0, =0.1.9, =0.0.10, =1.4-P26, =1.4-P26-B3, =2.0.0, =0.1.4, =0.2.0, =0.2.0, =0.3.0-RC6 and more Source cves: CVE-2017-1000118 Source advisory: OSV:GHSA-GFX6-PH4Q-Q54Q...

be.venneborg:play26-refined_2.11 (>=0.2.0 <=0.3.0), be.venneborg:play27-refined_2.11 (=0.3.0) +573 more potentially affected by CVE-2018-16115 via com.typesafe.akka:akka-actor_2.11 (>=2.5.0 <=2.5.15)

com.typesafe.akka:akka-actor2.11 MAVEN version =2.5.0, =0.2.0, =0.1.1, =1.4-P26-B3, =1.4-P26-B4 - com.andrewgapic:spark-streaming-twitch =1.0.0 and more Source cves: CVE-2018-16115 Source advisory: OSV:GHSA-MR95-9RR4-668F...

ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), ai.snips:play-mongo-bson_2.12 (>=0.5 <=0.5.1) +1141 more potentially affected by CVE-2018-16115 via com.typesafe.akka:akka-actor_2.12 (>=2.5.0 <=2.5.15)

com.typesafe.akka:akka-actor2.12 MAVEN version =2.5.0, =0.3.0, =0.5, =0.2.0, =0.1.0, =0.1.0, =0.14.0, =0.17.0 and more Source cves: CVE-2018-16115 Source advisory: OSV:GHSA-MR95-9RR4-668F...

ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), ai.lum:odinson-rest-api_2.12 (>=0.3.1 <=0.5.0) +647 more potentially affected by CVE-2018-16131 via com.typesafe.akka:akka-http-core_2.12 (>=10.1.0 <=10.1.3)

com.typesafe.akka:akka-http-core2.12 MAVEN version =10.1.0, =0.3.0, =0.3.1, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.1-rc1 and more Source cves: CVE-2018-16131 Source advisory: OSV:GHSA-9QGC-P27W-3HJG...

au.org.consumerdatastandards:client-cli (>=1.1.1 <=2.4.1), fm.pattern:tokamak-authorization (=1.0.1) +17 more potentially affected by CVE-2018-15758 via org.springframework.security.oauth:spring-security-oauth2 (>=2.1.0.RELEASE <=2.1.1.RELEASE)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version =2.1.0.RELEASE, =1.1.1, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.9.0, =1.9.0, =1.3.0, =1.3.0, =1.3.4 and more Source cves: CVE-2018-15758 Source advisory: OSV:GHSA-H8W4-QV99-F7VJhttps://vulners...

am.ik.home:uaa-client (>=1.0.0 <=1.9.0), am.ik.home:uaa-integration-test (>=1.0.0 <=1.9.0) +525 more potentially affected by CVE-2018-15758 via org.springframework.security.oauth:spring-security-oauth2 (>=2.0.0.RELEASE <=2.0.15.RELEASE)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version =2.0.0.RELEASE, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =A.1.1.0, =A.1.1.0, =A.1.1.0, =A.1.1.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.1.11 - com.17jee:e-security-token =3.0.1.11 and more Source cves: CVE-2018-15758 Source...

br.eti.clairton:ds-test (=0.4.0), br.jus.stf.digital:core (>=2.0.0 <=2.3.1) +420 more potentially affected by CVE-2017-2666 via io.undertow:undertow-core (>=1.4.0.Beta1 <=1.4.16.Final)

io.undertow:undertow-core MAVEN version =1.4.0.Beta1, =2.0.0, =0.2.7, =1.2.0, =1, =1, =1.0, =1.1 - com.fizzed:ninja-undertow =5.7.0.undertow2 - com.gitblit.fathom:fathom-core =0.9.0 - com.gitblit.fathom:fathom-eventbus =0.9.0 - com.gitblit.fathom:fathom-integration-test =0.9.0 -...

ch.digitalfondue.stampo:ch.digitalfondue.stampo.gradle.plugin (=0.0.3), ch.digitalfondue.stampo:stampo (>=1.0 <=1.2.1) +837 more potentially affected by CVE-2017-2670 via io.undertow:undertow-core (>=1.0.0.Alpha1 <=1.3.27.Final)

io.undertow:undertow-core MAVEN version =1.0.0.Alpha1, =1.0, =1.0, =0.1.0, =0.2.0, =1.1.11, =1.1.11, =1.1.16, =1.1.0, =0.0.8, =0.0.8, =0.1.0, =0.0.6, =0.1.3 and more Source cves: CVE-2017-2670 Source advisory: OSV:GHSA-3X7H-5HFR-HVJM...

ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), com.franz:agraph-java-client (>=2.0.0 <=2.2.1) +61 more potentially affected by CVE-2018-1000644 via org.eclipse.rdf4j:rdf4j-runtime (>=1.0 <=2.4.0-M3)

org.eclipse.rdf4j:rdf4j-runtime MAVEN version =1.0, =0.3.0, =2.0.0, =8.0.0, =2.2.0, =1.2.0, =2.2.0, =4.6.0, =4.6.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.5.0 and more Source cves: CVE-2018-1000644 Source advisory: OSV:GHSA-6XQ8-PVG4-3MF3...

au.com.govlawtech:dvasopapi-client (=1.3.1), by.exonit.redmine.client:client-play-ws_2.11 (=4.0.0-RC2) +342 more potentially affected by CVE-2017-14063 via org.asynchttpclient:async-http-client (>=2.0.0-RC1 <=2.0.34)

org.asynchttpclient:async-http-client MAVEN version =2.0.0-RC1, =1.0, =1.23.0, =1.23.0, =1.2.2, =0.5.4, =0.9.1, =0.0.1, =0.1.13, =1.0, =2.7.0 and more Source cves: CVE-2017-14063 Source advisory: OSV:GHSA-93JQ-624G-4P9P...

be.fluid-it.tools.swagger:swagger-ng-module-codegen (>=0.1-1 <=0.1-5), ch.docksnet.codegen:decoupledspringmvc-swagger-codegen (=0.0.2) +163 more potentially affected by CVE-2017-1000207 +1 more via io.swagger:swagger-parser (>=1.0.0 <=1.0.30)

io.swagger:swagger-parser MAVEN version =1.0.0, =0.1-1, =1.0.2, =1.0.2, =1.1.0, =1.0.2, =1.0.2, =1.2.0, =1.0.2, =0.0.1, =0.0.1, =1.1, =1.0.0, =2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2017-1000207, CVE-2017-1000208 Source advisory: OSV:GHSA-Q7PF-QR96-2VQ5https://vulners...

be.fluid-it.tools.swagger:swagger-ng-module-codegen (>=0.1-1 <=0.1-5), ch.docksnet.codegen:decoupledspringmvc-swagger-codegen (=0.0.2) +15 more potentially affected by CVE-2017-1000207 +1 more via io.swagger:swagger-codegen (>=2.1.1 <=2.2.1)

io.swagger:swagger-codegen MAVEN version =2.1.1, =0.1-1, =1.1, =2.1.3, =2.1.1, =1.0, =1.6.0, =0.4.2, =0.4.2, =0.4.2, =0.5.0-beta-1 and more Source cves: CVE-2017-1000207, CVE-2017-1000208 Source advisory: OSV:GHSA-VGVF-9JH3-FG75...

com.confluex:qpid-in-a-can (=0.2.0), com.dell.cpsd.common.messaging:common-testing (=1.5.0) +22 more potentially affected by CVE-2017-15702 via org.apache.qpid:qpid-broker (>=0.18 <=10.0.1)

org.apache.qpid:qpid-broker MAVEN version =0.18, =2.0.0, =1.0.0, =0.1, =0.1, =10.0.0, =0.18, =0.18, =0.18, =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol =0....

com.treelogic-swe:aws-mock (=1.0), com.treelogic-swe:cxf-stub (=ec2-2013-02-01) potentially affected by CVE-2018-8039 via org.apache.cxf:apache-cxf (=2.7.5)

org.apache.cxf:apache-cxf MAVEN version =2.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:apache-cxf and may be impacted: - com.treelogic-swe:aws-mock =1.0 - com.treelogic-swe:cxf-stub =ec2-2013-02-01 Source cves: CVE-2018-8039 Sour...

au.com.turingg:turingg-files (=0.0.1), au.com.turingg:turingg-mimak (=1.0.0) +635 more potentially affected by CVE-2016-4216 via com.adobe.xmp:xmpcore (>=5.1.0 <=5.1.2)

com.adobe.xmp:xmpcore MAVEN version =5.1.0, =1.0.1, =2.2.2, =2.2.2, =2.2.2, =3.6.1, =3.11.0, =2.0.8, =1.1, =0.3, =0.2, =0.6, =0.8 - com.blazemeter:jmeter-plugins-rotating-listener =0.2 - com.blazemeter:jmeter-plugins-senseuploader =3.5 and more Source cves: CVE-2016-4216 Source advisory:...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (=2.5.1), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (=2.5.1) +34 more potentially affected by CVE-2017-5638 via org.apache.struts:struts2-core (>=2.5.1 <=2.5.10)

org.apache.struts:struts2-core MAVEN version =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.10 and more Source cves: CVE-2017-5638 Source advisory: OSV:GHSA-J77Q-2QQG-6989...