com.github.greengerong:webdriver-accessibility-check (1.0), de.eonas.portal.demo:content (0.1) +140 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (0.9)

org.apache.tika:tika-core MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - com.github.greengerong:webdriver-accessibility-check 1.0 - de.eonas.portal.demo:content 0.1 -...

org.apache.jackrabbit:jackrabbit-core (>=2.0-beta1, <=2.0-beta3), org.apache.jackrabbit:jackrabbit-jca (>=2.0-beta1, <=2.0-beta3) +9 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (0.4)

org.apache.tika:tika-core MAVEN version 0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - org.apache.jackrabbit:jackrabbit-core =2.0-beta1, =2.0-beta1, =2.0-beta1, =2.0-beta1, =2.0-beta1, =1.4.0,...

com.day.cq:cq-compat-codeupgrade (>=1.0.4, <=1.2.10), org.apache.jackrabbit:jackrabbit-core (>=2.0-beta4, <=2.0.5) +6 more potentially affected by CVE-2018-1338 via org.apache.tika:tika-core (0.5)

org.apache.tika:tika-core MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - com.day.cq:cq-compat-codeupgrade =1.0.4, =2.0-beta4, =2.0-beta4, =2.0-beta4, =2.0-beta4, =2.0-beta4, =2.0.5 -...

at.yawk.dropwizard-nagios:dropwizard-nagios (1.0), br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=1.0.0) +1235 more potentially affected by CVE-2018-12538 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.10.v20180503)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.1.0, =0.0.1, =1.1, =1.1, =1.1, =0.9.1, =0.0.5, =0.0.5, =0.0.5, =0.0.7 - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 and more Source cves: CVE-2018-12538 Source advisory: GHSA-MWCX-532G-8PQ3...

@hpcc-js/dgrid-shim (>=0.1.10, <=0.1.12), bryaktestgrid (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2018-15494 via dojox (>=1.11.2, <=1.13.0)

dojox NPM version =1.11.2, =0.1.10, =0.0.1, =0.1.0, =0.0.1, =0.5.24 Source cves: CVE-2018-15494 Source advisory: OSV:GHSA-84CM-X2Q5-8225...

@nteract/commuter (5.6.9), @nteract/play (1.6.8) +4 more potentially affected by CVE-2018-18282 via next (>=7.0.0, <=7.0.1)

next NPM version =7.0.0, =7.0.0, =0.30.0, =2.0.0, =0.1.1, =0.1.4 Source cves: CVE-2018-18282 Source advisory: OSV:GHSA-QW96-MM2G-C8M7...

192.168.0.172 (4.6.1), 3loc (>=0.2.0, <=0.4.0) +3449 more potentially affected by CVE-2016-1000232 via tough-cookie (>=2.0.0, <=2.2.2)

tough-cookie NPM version =2.0.0, =0.2.0, =0.0.1, =0.0.1, =2.1.0, =0.0.0, =0.1.0-alpha.1, =1.0.1, =0.11.0-atomist-update-branch-master-1541106195325.20181102202646, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =0.2.2-20180615211533, =0.2.4-20180621213746, =0.1.0-20180815155955,...

cucumber-html-reporter-common-functions (>=1.0.24, <=1.0.32), cucumber-report-generator (1.0.3) +10 more potentially affected by CVE-2017-16077 via mongose (0.0.2-security)

mongose NPM version 0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on mongose and may be impacted: - cucumber-html-reporter-common-functions =1.0.24, =1.0.0, =1.0.7, =1.0.58, =1.0.12, =1.0.17, =1.1.11 - owltech 1.0.0 - reports-server 1.0.0...

actix (>=0.5.0, <=0.5.8), actix-ogn (0.1.0) +12 more potentially affected by CVE-2018-20994 via trust-dns-proto (>=0.2.0, <=0.3.3)

trust-dns-proto CARGO version =0.2.0, =0.5.0, =1.4.0, =0.2.0, =0.1.0, =0.11.0, =0.7.0, =0.2.2, =0.7.0, =0.8.2 - zicsv-tool 0.1.0 Source cves: CVE-2018-20994 Source advisory: OSV:RUSTSEC-2018-0007...

@antodip/tech-utils (>=0.1.0, <=0.1.9), @applicaster/zapp-pipes-dev-kit (>=1.2.2, <=1.2.6) +122 more potentially affected by CVE-2017-16013 via hapi (>=15.0.2, <=16.1.0)

hapi NPM version =15.0.2, =0.1.0, =1.2.2, =1.0.8-rc.1, =1.0.0-alpha.1, =1.1.0, =4.0.0, =1.2.3, =0.1.0, =0.1.0, =0.1.0, =0.9.28, =0.17.44, =1.0.0-quotes.26, =1.0.27, =1.0.29 and more Source cves: CVE-2017-16013 Source advisory: OSV:GHSA-CQJG-WHMM-8GV6...

@applicaster/zapp-pipes-dev-kit (1.2.2), @concordant/c-service (>=1.1.2, <=1.1.4) +78 more potentially affected by CVE-2018-3745 via atob (>=2.0.0, <=2.0.3)

atob NPM version =2.0.0, =1.1.2, =6.3.4, =6.5.2, =1.1.1, =6.4.2, =6.4.2, =2.3.2, =8.8.7, =8.9.6 and more Source cves: CVE-2018-3745 Source advisory: OSV:GHSA-8W4H-3CM3-2PM2...

08cms (1.0.0), 3dshex (>=0.1.0, <=0.5.3) +9436 more potentially affected by CVE-2018-3750 via deep-extend (>=0.2.2, <=0.5.0)

deep-extend NPM version =0.2.2, =0.1.0, =1.0.0, =1.1.0, =4.0.0, =1.0.0, =0.3.12-20180525105709, =1.0.0, =0.0.1, =0.0.1, =0.2.2, =0.2.3 and more Source cves: CVE-2018-3750 Source advisory: OSV:GHSA-HR2V-3952-633Q...

@startdt/textlint-rule-preset-writing (>=1.0.0, <=1.4.0), amdpack (0.0.1) +81 more potentially affected by CVE-2016-10540 via minimatch (3.0.0)

minimatch NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on minimatch and may be impacted: - @startdt/textlint-rule-preset-writing =1.0.0, =1.5.1, =3.1.0, =1.11.0, =0.0.1, =2.0.10, =1.0.10, =1.0.0, =1.0.0, =1.0.3 and more Source cves:...

express-jwt (>=2.0.0, <=2.0.1), maglev (>=3.0.1, <=3.1.1) potentially affected by CVE-2015-9235 via jsonwebtoken (4.0.0)

jsonwebtoken NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jsonwebtoken and may be impacted: - express-jwt =2.0.0, =3.0.1, =3.1.1 Source cves: CVE-2015-9235 Source advisory: OSV:GHSA-C7HR-J4MJ-J2W6...

10er10 (0.23.0), 1405-authtokens (>=1.0.1, <=1.0.5) +8055 more potentially affected by CVE-2016-10539 via negotiator (>=0.2.3, <=0.6.0)

negotiator NPM version =0.2.3, =1.0.1, =1.0.3, =1.0.2, =1.0.0, =0.0.1-alpha, =0.2.0, =0.0.1, =0.0.1, =1.0.0, =1.2.9 and more Source cves: CVE-2016-10539 Source advisory: OSV:GHSA-7MC5-CHHP-FMC3...

@angular/bazel (>=5.0.0-beta.5, <=7.0.0), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +123 more potentially affected by CVE-2018-3738 via protobufjs (>=5.0.0, <=5.0.2)

protobufjs NPM version =5.0.0, =5.0.0-beta.5, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =0.2.2-20180615211533, =0.2.4-20180621213746, =0.1.0-20180815155955, =0.0.6, =1.2.1, =1.0.2, =5.0.1, =1.3.1, =0.0.7, =1.3.0, =0.0.1, =0.0.1, =0.0.12 and more Source cves: CVE-2018-3738 Source...

box-node-sdk (>=1.16.0, <=1.16.1), homebridge-netatmo-schaloms (>=0.2.3, <=0.2.4) +6 more potentially affected by CVE-2018-3752 via merge-options (1.0.0)

merge-options NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on merge-options and may be impacted: - box-node-sdk =1.16.0, =0.2.3, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.13.1, =2.0.0, =2.0.1 Source cves: CVE-2018-3752 Source advisory:...

dave-sitegen (>=2.3.0, <=2.16.1), localdiff (0.1.1) +3 more potentially affected by CVE-2018-3755 via sexstatic (0.6.2)

sexstatic NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on sexstatic and may be impacted: - dave-sitegen =2.3.0, =2.2.5, =0.7.4, =0.8.1, =0.9.0 Source cves: CVE-2018-3755 Source advisory: OSV:GHSA-QFH2-6F7Q-GR86...

acto-rs (>=0.2.9, <=0.3.7), alumina (>=0.1.0, <=0.1.1) +337 more potentially affected by CVE-2018-25023 via smallvec (>=0.1.8, <=0.5.1)

smallvec CARGO version =0.1.8, =0.2.9, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.55 and more Source cves: CVE-2018-25023 Source advisory: OSV:RUSTSEC-2018-0018...

1.11week (1.0.0), 4.23zhoukao (1.0.0) +144 more potentially affected by CVE-2018-3751 via merge-recursive (>=0.0.0, <=0.0.3)

merge-recursive NPM version =0.0.0, =1.1.0-beta.28, =0.0.6, =1.0.9, =1.0.4, =1.0.5, =1.2.0, =0.3.4, =0.2.5, =0.1.0, =0.2.3 and more Source cves: CVE-2018-3751 Source advisory: OSV:GHSA-CVXM-F295-X957...