app.myoss.wechat:wechat-starter-core (=1.1.0.RELEASE), app.myoss.wechat:wechat-starter-mini-app (=1.1.0.RELEASE) +87 more potentially affected by CVE-2018-1000632 via org.dom4j:dom4j (>=2.0.0-RC1 <=2.0.2)

org.dom4j:dom4j MAVEN version =2.0.0-RC1, =3.0.0, =0.0.5, =0.0.5, =0.0.5, =1.0.RELEASE, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.4, =2.2.8 and more Source cves: CVE-2018-1000632 Source advisory: OSV:GHSA-6PCC-3RFX-4GPM...

00ld8nuivn (=2.1.0), 00rqiw31nd (=2.1.0) +8519 more potentially affected by CVE-2016-1000232 via tough-cookie (>=0.12.0 <=2.2.2)

tough-cookie NPM version =0.12.0, =2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on tough-cookie and may be impacted: - 00ld8nuivn =2.1.0 - 00rqiw31nd =2.1.0 - 01dk01majk =2.1.0 - 02rjq8i863 =1.1.0 - 02vx8qsp01 =2.1.0 - 05y6tjgmws =1.1.0 -...

django-sftp (=0.1.0), hugo-jupyter (>=0.2.1 <=0.3.0) potentially affected by CVE-2018-1000805 via paramiko (=2.2.1)

paramiko PYPI version =2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - django-sftp =0.1.0 - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2018-1000805 Source advisory: OSV:GHSA-F2J6-WRHH-V25M...

2d6io-cryptobot (=0.0.1), aat-downloader (>=0.0.1 <=0.0.3) +889 more potentially affected by CVE-2018-18074 via requests (>=0.13.7 <=2.1.0)

requests PYPI version =0.13.7, =0.0.1, =0.2.0rc1, =1.0.2, =0.4.5, =1.0.0, =0.18.0.3, =0.70.0, =0.0.1, =0.3.3, =1.1.0rc6, =2.0.1 and more Source cves: CVE-2018-18074 Source advisory: OSV:PYSEC-2018-28...

08cms (=1.0.0), 3dshex (>=0.1.0 <=0.5.3) +9447 more potentially affected by CVE-2018-3750 via deep-extend (>=0.2.10 <=0.5.0)

deep-extend NPM version =0.2.10, =0.1.0, =1.0.0, =1.1.0, =4.0.0, =1.0.0, =0.3.12-20180525105709, =1.0.0, =0.0.1, =0.0.1, =0.2.2, =0.2.3 and more Source cves: CVE-2018-3750 Source advisory: OSV:GHSA-HR2V-3952-633Q...

beanstalk-dispatch (>=0.0.3 <=0.0.5), cklauth (>=0.1.0 <=0.3.0) +132 more potentially affected by CVE-2018-14574 via django (>=2.0.0 <=2.0.7)

django PYPI version =2.0.0, =0.0.3, =0.1.0, =0.5.0, =3.0.0, =2.1.0, =0.0.1, =1.1.0, =0.0.7, =0.1.0, =0.0.2, =1.3.0, =2.0.0, =2.0.2 and more Source cves: CVE-2018-14574 Source advisory: OSV:GHSA-5HG3-6C2F-F3WR...

RPD:bmc-rpd (=1.1), aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1 <=0.0.6) +2512 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (>=1.2.1 <=3.2.17.RELEASE)

org.springframework:spring-webmvc MAVEN version =1.2.1, =0.0.1, =1.0, =0.0.20, =1.0, =0.0.1, =0.1.0, =1.0.0, =0.2, =3.0.1, =4.0.0 - cn.fastoo:fastoo-java-api =20171130 - cn.opencodes:alpha-common-utils =1.0.0 and more Source cves: CVE-2016-9878 Source advisory: OSV:GHSA-2M8H-FGR8-2Q9W...

ai.grakn:grakn-bootup (>=1.1.0 <=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744), ai.grakn:grakn-dist (>=0.7.0 <=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744) +98 more potentially affected by CVE-2016-9177 via com.sparkjava:spark-core (>=1.0 <=2.5.1)

com.sparkjava:spark-core MAVEN version =1.0, =1.1.0, =0.7.0, =0.6.1, =0.6.1, =0.7.0, =0.15.0, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.16.0, =1.0, =1.2.0 - br.com.logiquesistemas:easy-spark =1.0.0 and more Source cves: CVE-2016-9177 Source advisory: OSV:GHSA-89GC-6CW6-4VCH...

acto-rs (>=0.2.9 <=0.3.7), alumina (>=0.1.0 <=0.1.1) +378 more potentially affected by CVE-2018-25023 via smallvec (>=0.1.8 <=0.5.1)

smallvec CARGO version =0.1.8, =0.2.9, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =1.0.0, =1.1.0 - approveapi =0.1.0 and more Source cves: CVE-2018-25023 Source advisory: OSV:RUSTSEC-2018-0018...

argschema (>=1.16.1 <=1.16.5), aries-cloudagent (>=0.3.3 <=0.5.1) +25 more potentially affected by CVE-2018-17175 via marshmallow (>=3.0.0 <=3.0.0b8)

marshmallow PYPI version =3.0.0, =1.16.1, =0.3.3, =0.0.22, =0.1.1, =0.1.0, =0.0.18, =0.19.0, =0.1.0, =0.3.0, =1.0.0, =0.0.4, =0.1.0, =0.0.1, =0.0.4 and more Source cves: CVE-2018-17175 Source advisory: OSV:PYSEC-2018-67...

app-bundle-info (>=0.0.4 <=0.2.2), chromeos-apk (>=1.0.0 <=2.0.0) +1 more potentially affected by CVE-2016-10632 via apk-parser2 (=0.1.1)

apk-parser2 NPM version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on apk-parser2 and may be impacted: - app-bundle-info =0.0.4, =1.0.0, =1.0.0, =1.1.0 Source cves: CVE-2016-10632 Source advisory: OSV:GHSA-HXHM-3VJ9-6CQH...

cyclejs-group (>=0.3.0 <=1.0.0), fetch-rancher-metadata (>=1.0.9 <=1.0.10) +1 more potentially affected by CVE-2018-3753 via merge-object (=1.0.0)

merge-object NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on merge-object and may be impacted: - cyclejs-group =0.3.0, =1.0.9, =1.0.0, =1.0.4 Source cves: CVE-2018-3753 Source advisory: OSV:GHSA-FP82-2H99-3FPP...

1.11week (=1.0.0), 4.23zhoukao (=1.0.0) +144 more potentially affected by CVE-2018-3751 via merge-recursive (>=0.0.0 <=0.0.3)

merge-recursive NPM version =0.0.0, =1.1.0-beta.28, =0.0.6, =1.0.9, =1.0.4, =1.0.5, =1.2.0, =0.3.4, =0.2.5, =0.1.0, =0.2.3 and more Source cves: CVE-2018-3751 Source advisory: OSV:GHSA-CVXM-F295-X957...

@abtnode/mongoose-nedb (=1.0.16), @alma/widgets (>=4.0.0 <=4.3.8) +271 more potentially affected by CVE-2018-13863 via bson (>=0.5.2 <=1.0.4)

bson NPM version =0.5.2, =4.0.0, =0.2.4, =0.2.4, =0.0.0, =0.4.1, =0.3.0, =0.2.0, =0.3.0, =0.3.0, =0.2.0, =0.0.1, =1.6.3-ml, =0.3.0, =0.0.1, =0.0.3 and more Source cves: CVE-2018-13863 Source advisory: OSV:GHSA-8462-Q7X7-G2X4...

OpenDataSH_twitter_notifier (>=0.1.0 <=0.1.2), aa2 (>=0.9.0 <=0.9.1) +436 more potentially affected by CVE-2018-20993 via yaml-rust (>=0.2.2 <=0.3.5)

yaml-rust CARGO version =0.2.2, =0.1.0, =0.9.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.3.2, =0.0.0, =0.1.0, =1.0.0, =0.0.2, =0.0.1, =0.0.2 and more Source cves: CVE-2018-20993 Source advisory: OSV:RUSTSEC-2018-0006...

com.slyak:slyak-web-bootstrap (>=1.0.3.RELEASE <=1.0.4.RELEASE), de.smartsquare.squit:de.smartsquare.squit.gradle.plugin (>=2.0.0 <=2.2.0) +23 more potentially affected by CVE-2018-14042 via org.webjars:bootstrap (>=4.0.0 <=4.1.1)

org.webjars:bootstrap MAVEN version =4.0.0, =1.0.3.RELEASE, =2.0.0, =2.1.0, =2.0.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.3 - org.orienteer:orienteer-architect =1.4 - org.orienteer:orienteer-birt =1.4 - org.orienteer:orienteer-bpm =1.4 - org.orienteer:orienteer-camel =1.4 -...

au.com.intelix:rs-core-js_2.11 (=0.1.3.1), au.com.mountain-pass:hyperstate (>=1 <=9) +493 more potentially affected by CVE-2018-14042 via org.webjars:bootstrap (>=2.3.0 <=3.3.7)

org.webjars:bootstrap MAVEN version =2.3.0, =1, =1, =20.3.0, =24.2.0, =20.3.0, =2.23.5, =2.23.5, =23.1.0, =2.23.0, =2.23.5, =2.23.5, =2.23.5, =20.2.0 - ca.denisab85:telegram-restapi =0.0.1 and more Source cves: CVE-2018-14042 Source advisory: OSV:GHSA-7MVR-5X2G-WFC8...

iobroker.yahka (>=0.5.4 <=0.7.1) potentially affected by CVE-2018-13797 via macaddress (=0.2.8)

macaddress NPM version =0.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on macaddress and may be impacted: - iobroker.yahka =0.5.4, =0.7.1 Source cves: CVE-2018-13797 Source advisory: OSV:GHSA-PP57-MQMH-44H7...

@ekyc_qoobiss/qbs-ect-cmp (>=4.7.16 <=4.7.140), @ekycsolutions/ml-js-sdk (>=0.0.9-alpha <=0.0.10-alpha.13) +13 more potentially affected by CVE-2017-16066 via opencv.js (=1.2.1)

opencv.js NPM version =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on opencv.js and may be impacted: - @ekycqoobiss/qbs-ect-cmp =4.7.16, =0.0.9-alpha, =1.1.2, =0.3.1, =1.0.0, =0.7.1, =4.0.0, =2.0.1, =2.0.0, =1.11.0, =0.0.112, =0.1.7 Source cves:...

@spectrellc/specscript-complier (>=0.0.1 <=0.1.2), maltodextrin (=1.0.0) +1 more potentially affected by CVE-2017-16074 via crossenv (=0.0.2-security)

crossenv NPM version =0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on crossenv and may be impacted: - @spectrellc/specscript-complier =0.0.1, =2.0.0, =2.2.0 Source cves: CVE-2017-16074 Source advisory: OSV:GHSA-C2M4-W5HM-VQJW...