at.researchstudio.sat:won-core (>=0.2 <=0.9), at.researchstudio.sat:won-cryptography (>=0.3 <=0.6) +673 more potentially affected by CVE-2015-0263 via org.apache.camel:camel-core (>=1.0.0 <=2.13.3)

org.apache.camel:camel-core MAVEN version =1.0.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.4, =0.9 and more Source cves: CVE-2015-0263 Source advisory: OSV:GHSA-3HRC-F439-727G...

org.apache.camel:camel-mail-starter (>=2.21.0 <=2.21.1), org.wildfly.camel.example:example-camel-mail (=6.0.0) potentially affected by CVE-2018-8041 via org.apache.camel:camel-mail (>=2.21.0 <=2.21.1)

org.apache.camel:camel-mail MAVEN version =2.21.0, =2.21.0, =2.21.1 - org.wildfly.camel.example:example-camel-mail =6.0.0 Source cves: CVE-2018-8041 Source advisory: OSV:GHSA-JV74-F9PJ-XP3F...

org.apache.camel:camel-mail-starter (>=2.20.0 <=2.20.3), org.wildfly.camel.example:example-camel-mail (>=5.0.0 <=5.1.0) potentially affected by CVE-2018-8041 via org.apache.camel:camel-mail (>=2.20.0 <=2.20.3)

org.apache.camel:camel-mail MAVEN version =2.20.0, =2.20.0, =5.0.0, =5.1.0 Source cves: CVE-2018-8041 Source advisory: OSV:GHSA-JV74-F9PJ-XP3F...

org.apache.camel:camel-castor-starter (>=2.18.0 <=2.19.3) potentially affected by CVE-2017-12634 via org.apache.camel:camel-castor (>=2.18.0 <=2.19.3)

org.apache.camel:camel-castor MAVEN version =2.18.0, =2.18.0, =2.19.3 Source cves: CVE-2017-12634 Source advisory: OSV:GHSA-VF4Q-8MR7-5C5C...

org.apache.camel:camel-castor-starter (=2.20.0) potentially affected by CVE-2017-12634 via org.apache.camel:camel-castor (=2.20.0)

org.apache.camel:camel-castor MAVEN version =2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-castor and may be impacted: - org.apache.camel:camel-castor-starter =2.20.0 Source cves: CVE-2017-12634 Source advisory:...

cn.youweisoft:sparrow-permission (>=1.4.0 <=1.6.0), com.bucket4j:bucket4j-ignite (>=7.6.1 <=8.10.1) +267 more potentially affected by CVE-2018-8018 via org.apache.ignite:ignite-core (>=1.0.0-RC1 <=2.5.0)

org.apache.ignite:ignite-core MAVEN version =1.0.0-RC1, =1.4.0, =7.6.1, =8.11.0, =8.11.0, =8.0.0, =1.0.0, =3.0.0-beta1, =0.1.2, =1.5.1, =2.0, =0.0.1, =1.1.0 - com.github.itzmedinesh:micro-cache-grid =1.0.0 and more Source cves: CVE-2018-8018 Source advisory: OSV:GHSA-QCJV-WFCG-MMPR...

cn.net.vidyo:dylink-vidyo-ws-sdk (>=2.1.0.16.RELEASE <=3.0.0.3.RELEASE), com.aftia.plugin:aem-build-maven-plugin.core (>=1.2.1 <=1.2.2) +286 more potentially affected by CVE-2018-8032 via org.apache.axis:axis (=1.4)

org.apache.axis:axis MAVEN version =1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.axis:axis and may be impacted: - cn.net.vidyo:dylink-vidyo-ws-sdk =2.1.0.16.RELEASE, =1.2.1, =1.0.0, =1.4-build003, =0.9.1, =0.0.3.M1, =0.0.3.M1,...

activemq:activemq (=1.1), activemq:activemq-optional (=3.2) +325 more potentially affected by CVE-2018-8032 via axis:axis (>=1.2 <=1.4)

axis:axis MAVEN version =1.2, =1.2.5, =1.1.0, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.6.4 and more Source cves: CVE-2018-8032 Source advisory: OSV:GHSA-96JQ-75WH-2658...

activemq:activemq (=1.1), activemq:activemq-optional (=3.2) +325 more potentially affected by CVE-2014-3596 via axis:axis (>=1.2 <=1.4)

axis:axis MAVEN version =1.2, =1.2.5, =1.1.0, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.6.4 and more Source cves: CVE-2014-3596 Source advisory: OSV:GHSA-R53V-VM87-F72C...

com.confluex:qpid-in-a-can (=0.2.0), com.dell.cpsd.common.messaging:common-testing (=1.5.0) +22 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (>=0.14 <=10.0.1)

org.apache.qpid:qpid-broker MAVEN version =0.14, =2.0.0, =1.0.0, =0.1, =0.1, =10.0.0, =0.14, =0.18, =0.18, =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol =0....

com.confluex:qpid-in-a-can (=0.2.0), com.dell.cpsd.common.messaging:common-testing (=1.5.0) +23 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24 <=6.0.2)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =1.0.0, =0.1, =0.1, =10.0.0, =0.24, =10.0.0, =10.0.1 and more Source cves: CVE-2016-4432 Source advisory: OSV:GHSA-Q66C-H853-GQW2...

org.apache.juddi.example:create-partition (=3.1.5), org.apache.juddi.example:hello-world (=3.1.5) +14 more potentially affected by CVE-2015-5241 via org.apache.juddi:juddi-client (>=3.1.2 <=3.1.5)

org.apache.juddi:juddi-client MAVEN version =3.1.2, =1.2.4, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.5 and more Source cves: CVE-2015-5241 Source advisory: OSV:GHSA-49H4-G8P5-JGQ6...

org.apache.struts:struts2-assembly (>=2.5.1 <=2.5.12), org.apache.struts:struts2-rest-showcase (>=2.5.1 <=2.5.12) potentially affected by CVE-2017-9793 +1 more via org.apache.struts:struts2-rest-plugin (>=2.5.1 <=2.5.12)

org.apache.struts:struts2-rest-plugin MAVEN version =2.5.1, =2.5.1, =2.5.1, =2.5.12 Source cves: CVE-2017-9793, CVE-2017-9805 Source advisory: OSV:GHSA-VWXJ-6M5M-RRVH...

org.apache.struts:struts2-assembly (>=2.2.1 <=2.5.14.1), org.apache.struts:struts2-rest-showcase (>=2.1.2 <=2.5.14.1) +5 more potentially affected by CVE-2018-1327 via org.apache.struts:struts2-rest-plugin (>=2.1.2 <=2.5.14.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-RC2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core =1.0.1 Source cves: CVE-2018-1327 Source advisory: OSV:GHSA-38CR-2PH5-FRR9...

ae.teletronics.nlp:entityextraction (>=1.3 <=1.4), ai.h2o:h2o-app (>=0.1.22 <=0.1.25) +1040 more potentially affected by CVE-2018-1000180 via org.bouncycastle:bcprov-jdk15 (>=1.38 <=1.46)

org.bouncycastle:bcprov-jdk15 MAVEN version =1.38, =1.3, =0.1.22, =0.1.22, =1.0.0, =2.1.0, =1.0.1, =4.2.0, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.0.3, =1.3.3 and more Source cves: CVE-2018-1000180 Source advisory: OSV:GHSA-XQJ7-J8J5-F2XR...

ai.ylyue:yue-library-base (>=Finchley.SR2.SR1 <=Finchley.SR4.1), ai.ylyue:yue-library-base-crypto (>=Finchley.SR4 <=Finchley.SR4.1) +2320 more potentially affected by CVE-2018-11039 via org.springframework:spring-web (>=5.0.0.RELEASE <=5.0.6.RELEASE)

org.springframework:spring-web MAVEN version =5.0.0.RELEASE, =Finchley.SR2.SR1, =Finchley.SR4, =Finchley.SR2.SR1, =Finchley.SR2.SR1, =Finchley.SR4, =0.0.1, =0.0.2, =2.0.3.RELEASE, =2.0.3.RELEASE, =2.0.2.RELEASE, =1.0.3.RELEASE, =1.3.0.RELEASE, =0.0.1, =0.0.2 - ca.uhn.hapi.fhir:hapi-fhir-cli-api...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6 <=0.2.0), at.porscheinformatik.zanata:zanata-spring (>=1.0.0.RELEASE <=1.1.0.RELEASE) +2978 more potentially affected by CVE-2018-11039 via org.springframework:spring-web (>=4.3.0.RELEASE <=4.3.17.RELEASE)

org.springframework:spring-web MAVEN version =4.3.0.RELEASE, =0.1.6, =1.0.0.RELEASE, =1.6, =1.6, =1.0.10, =0.2.13, =0.2.13, =0.2.13, =0.7, =1.7.2, =1.1.3, =1.1.7 - ch.rasc:wampspring =1.1.2 - ch.rasc:wampspring-security =1.1.2 - ch.rasc:wampspring-session =1.1.2 and more Source cves: CVE-2018-110...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8 <=0.1.12), ai.grakn:grakn (>=0.17.0 <=0.18.0) +13217 more potentially affected by CVE-2017-7525 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0 <=2.8.8.1)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.18.0 and more Source cves: CVE-2017-7525 Source advisory: OSV:GHSA-QXXX-2PP7-5HMX...

cn.fossc.polaris.framework:polaris-framework-builder (>=3.0.1 <=3.0.33), cn.fossc.polaris.toolkit:polaris-builder-assembly (>=3.2.0 <=3.8.16) +164 more potentially affected by CVE-2018-1000632 via org.dom4j:dom4j (=2.1.0)

org.dom4j:dom4j MAVEN version =2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.dom4j:dom4j and may be impacted: - cn.fossc.polaris.framework:polaris-framework-builder =3.0.1, =3.2.0, =3.2.0, =0.1, =2.0.1, =3.0.1, =3.0.1, =1.1.9, =1.1.9, =1.1....

acegisecurity:acegi-security-domain (=0.9.0), ai.databand.azkaban:azkaban-web-server (=3.18.0) +16311 more potentially affected by CVE-2018-1000632 via dom4j:dom4j (>=1.1 <=1.6.1)

dom4j:dom4j MAVEN version =1.1, =1.4.1, =1.4.1, =1.4.1, =1.2.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =0.6.1, =1.0.0, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2018-1000632 Source advisory: OSV:GHSA-6PCC-3RFX-4GPM...