com.arpnetworking.kairosdb:kairosdb-histograms (>=1.0.0, <=2.1.4), com.cisco.oss.foundation:http-server-jetty-8 (>=1.0.3-1, <=1.0.6-2) +129 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (8.1.16.v20140903)

org.eclipse.jetty:jetty-server MAVEN version 8.1.16.v20140903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.arpnetworking.kairosdb:kairosdb-histograms =1.0.0, =1.0.3-1, =1.2.1, =1.2.1, =5.0.1,...

com.xpatterns.spark.parquet:spark-parquet-utility (1.0.0-spark1.3.1), org.akhikhl.gretty:gretty-runner-jetty7 (>=1.1.0, <=1.1.8) +62 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (7.6.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 7.6.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.xpatterns.spark.parquet:spark-parquet-utility 1.0.0-spark1.3.1 -...

net.peachjean.modularwebapp:modularwebapp (1.0.0), org.apache.jena:jena-fuseki (0.2.5) +53 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (7.6.5.v20120716)

org.eclipse.jetty:jetty-server MAVEN version 7.6.5.v20120716 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - net.peachjean.modularwebapp:modularwebapp 1.0.0 - org.apache.jena:jena-fuseki 0.2.5 -...

ai.konduit.serving:konduit-serving-common-tests (0.3.0), app.cash.backfila:client-misk (>=0.1.4-20221221.1702-8b7db03, <=2023.06.07.175826-9233876) +356 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (>=10.0.0, <=10.0.13)

org.eclipse.jetty:jetty-server MAVEN version =10.0.0, =0.1.4-20221221.1702-8b7db03, =0.1.4-20221221.1702-8b7db03, =2023.06.07.114626-93b9d6f, =0.1.4-20221128.2102-bdd85b6, =0.1.4-20221128.2102-bdd85b6, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.7 -...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-oort (1.0.beta10) +29 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (7.0.0.m4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-oort 1.0.beta10 -...

com.proofpoint.discovery:discovery-server (1.1), com.proofpoint.discovery:elb (1.0) +62 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (8.0.1.v20110908)

org.eclipse.jetty:jetty-server MAVEN version 8.0.1.v20110908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.proofpoint.discovery:discovery-server 1.1 - com.proofpoint.discovery:elb 1.0 -...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +9843 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (>=9.0.0.m0, <=9.4.50.v20221201)

org.eclipse.jetty:jetty-server MAVEN version =9.0.0.m0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

aware (>=0.0.9, <=0.0.13), aws-config (>=0.4.0, <=0.4.1) +304 more potentially affected by CVE-2023-30610 via aws-sigv4 (0.4.2)

aws-sigv4 CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sigv4 and may be impacted: - aware =0.0.9, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1 and more...

aware (>=0.0.1, <=0.0.6), aws-config (>=0.0.22-alpha, <=0.0.26-alpha) +288 more potentially affected by CVE-2023-30610 via aws-sigv4 (>=0.0.22-alpha, <=0.0.26-alpha)

aws-sigv4 CARGO version =0.0.22-alpha, =0.0.1, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.26-alpha and more Source cves:...

@aprilsacil/wallet (>=0.1.36, <=0.1.51), @axelraag/frigg-uniswap-widgets (>=0.0.11, <=0.12.0) +35 more potentially affected by CVE-2023-30543 via @web3-react/eip1193 (>=8.0.9-beta.0, <=8.0.26-beta.0)

@web3-react/eip1193 NPM version =8.0.9-beta.0, =0.1.36, =0.0.11, =0.0.1-alpha.0, =0.0.46, =0.0.70, =1.0.0, =0.0.1, =1.1.0, =0.0.3, =0.12.0, =0.0.6-alpha.0, =0.0.12 - @huma-finance/widgets 0.0.6-alpha.0 - @huma-shan/shared 0.0.1 - @huma-shan/superfluid-widget 0.0.1 and more Source cves:...

@aprilsacil/wallet (>=0.1.36, <=0.1.51), @bosonprotocol/react-kit (>=0.1.0-alpha.0, <=0.1.0-alpha.2) +44 more potentially affected by CVE-2023-30543 via @web3-react/metamask (>=8.0.6-beta.0, <=8.0.28-beta.0)

@web3-react/metamask NPM version =8.0.6-beta.0, =0.1.36, =0.1.0-alpha.0, =0.0.46, =0.0.70, =1.0.0, =1.0.0, =0.0.1, =1.1.0, =1.0.2, =0.0.3, =1.0.0, =1.0.0, =0.0.6-alpha.0, =0.0.12 and more Source cves: CVE-2023-30543 Source advisory: OSV:GHSA-8PF3-6FGR-3G3G...

@chargeover/strapi (0.0.1-rc1.1), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3) +7 more potentially affected by unknown CVE via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.5.1)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-XV3Q-JRMM-4FXV...

com.geishatokyo.jetty:jetty-nosql-kvs (0.2.1), com.github.mg0324:mgfinal (1.0) +91 more potentially affected by CVE-2023-26049 via org.eclipse.jetty:jetty-server (8.1.1.v20120215)

org.eclipse.jetty:jetty-server MAVEN version 8.1.1.v20120215 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.geishatokyo.jetty:jetty-nosql-kvs 0.2.1 - com.github.mg0324:mgfinal 1.0 -...

com.jolira:testing-tools (1.2.5), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2.1) +155 more potentially affected by CVE-2023-26049 via org.eclipse.jetty:jetty-server (7.2.1.v20101111)

org.eclipse.jetty:jetty-server MAVEN version 7.2.1.v20101111 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira:testing-tools 1.2.5 - org.apache.geronimo.assemblies:geronimo-jetty7-javaee5...

com.confluex:qpid-in-a-can (0.2.0), com.propensive:rapture-extras_2.10 (>=2.0.0-m4, <=2.0.0-m9) +89 more potentially affected by CVE-2023-26049 via org.eclipse.jetty:jetty-server (7.6.10.v20130312)

org.eclipse.jetty:jetty-server MAVEN version 7.6.10.v20130312 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.confluex:qpid-in-a-can 0.2.0 - com.propensive:rapture-extras2.10 =2.0.0-m4, =2.0.0-m...

be.tomcools:dropwizard-websocket-jsr356-bundle (4.0.0-beta.1), ch.exense.rtm:rtm (3.0.0) +628 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (>=11.0.0, <=11.0.13)

org.eclipse.jetty:jetty-server MAVEN version =11.0.0, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.23.0, =3.20.0, =3.20.0, =3.20.0, =3.22.0, =3.25.5 and more Source cves: CVE-2023-26048 Source advisory: MEND:CVE-2023-26048...

0x-hunter-core (>=1.0.0-33, <=1.0.0-38), 1155-to-20 (>=1.0.0, <=1.0.2) +3188 more potentially affected by CVE-2023-30541 via @openzeppelin/contracts (>=3.2.0, <=4.8.2)

@openzeppelin/contracts NPM version =3.2.0, =1.0.0-33, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.9.1, =3.24.7, =1.7.2, =3.10.3, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-30541 Source advisory: OSV:GHSA-MX2Q-35M2-X2RH...

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +468 more potentially affected by CVE-2023-30541 via @openzeppelin/contracts-upgradeable (>=3.4.0, <=4.8.2)

@openzeppelin/contracts-upgradeable NPM version =3.4.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =0.0.1, =0.0.1, =4.0.0-prerelease-17, =4.3.4 and more Source cves: CVE-2023-30541 Source advisory: OSV:GHSA-MX2Q-35M2-X2RH...

com.arangodb:arangodb-spark-connector_2.12 (>=1.0.9, <=1.0.12), com.audienceproject:spark-dynamodb_2.12 (>=0.3.3, <=0.4.4) +117 more potentially affected by CVE-2023-22946 via org.apache.spark:spark-core_2.12 (2.4.0)

org.apache.spark:spark-core2.12 MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.12 and may be impacted: - com.arangodb:arangodb-spark-connector2.12 =1.0.9, =0.3.3, =4.0.1, =4.0.1, =0.4.0, =2.4.2, =2.4.2,...

awsglue-local (>=0.9.1, <=1.0.2), ceja (0.1.0) +13 more potentially affected by CVE-2023-22946 via pyspark (2.4.8)

pyspark PYPI version 2.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - awsglue-local =0.9.1, =0.2.1, =0.0.12, =0.1.0, =0.1.0, =1.3.1, =2.0.0b0, =1.0.2rc1, =2.4.0rc1, =0.0.2, =0.2.0, =0.5.1 Source cves: CVE-2023-22946...