@jango/terminal-extension (>=0.1.0, <=0.1.1), @jiayihu/bdi-ui (>=3.0.1, <=3.0.11) +45 more potentially affected by CVE-2019-0542 via xterm (>=3.0.1, <=3.8.0)

xterm NPM version =3.0.1, =0.1.0, =3.0.1, =0.1.0, =0.17.1, =0.17.0-0, =0.17.0-0, =1.0.105, =1.0.44, =1.0.31, =1.0.116, =0.0.1, =0.0.2, =1.0.3, =1.0.11 - @renku/renku-jupyterlab-ts 0.2.0 and more Source cves: CVE-2019-0542 Source advisory: OSV:GHSA-MC23-976P-J42X...

@eclipse-che/theia-terminal (>=0.0.1-1552991237, <=0.0.1-1566494904), @theia/cpp (>=0.4.0-next.01667bab, <=0.4.0-next.fc6e8217) +7 more potentially affected by CVE-2019-0542 via xterm (3.9.1)

xterm NPM version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on xterm and may be impacted: - @eclipse-che/theia-terminal =0.0.1-1552991237, =0.4.0-next.01667bab, =0.4.0-next.01667bab, =0.4.0-next.01667bab, =0.4.0-next.01667bab,...

@akiolabs/analytics (>=0.0.3, <=0.0.4), @akiolabs/app (>=0.0.2, <=0.0.4) +221 more potentially affected by CVE-2018-6341 via react-dom (>=16.4.0, <=16.4.1)

react-dom NPM version =16.4.0, =0.0.3, =0.0.2, =0.0.1, =2018.5.24-0, =2018.6.17-2, =2018.7.11-0, =0.4.1, =0.1.0-latest.1a450bb3, =1.0.0-beta.0, =0.0.2, =0.0.22-alpha.1, =1.1.0, =1.0.0, =1.6.1 and more Source cves: CVE-2018-6341 Source advisory: OSV:GHSA-MVJJ-GQQ2-P4HW...

@anujboddu/searchbar (>=2.0.0, <=2.1.1), @dlghq/dialog-components (>=0.146.0, <=0.149.7) +42 more potentially affected by CVE-2018-6341 via react-dom (>=16.1.0, <=16.1.1)

react-dom NPM version =16.1.0, =2.0.0, =0.146.0, =4.0.1, =0.0.7, =1.0.0, =1.0.0, =1.1.0, =1.3.9, =1.1.10, =1.0.6, =0.0.12, =0.1.0, =3.6.3, =3.7.4 and more Source cves: CVE-2018-6341 Source advisory: OSV:GHSA-MVJJ-GQQ2-P4HW...

@5minutes2start/react-scripts (>=1.1.2, <=1.1.4), @biko/react-scripts (>=0.1.0, <=0.4.0) +132 more potentially affected by CVE-2018-6342 via react-dev-utils (>=4.0.0, <=4.2.1)

react-dev-utils NPM version =4.0.0, =1.1.2, =0.1.0, =0.8.12, =0.1.0, =0.0.1, =2.13.0, =2.14.0, =0.2.0, =0.3.0, =0.2.2, =0.2.10-SNAPSHOT.481, =0.2.10-SNAPSHOT.673 - @leizeng/react-scripts-ts 2.13.0 and more Source cves: CVE-2018-6342 Source advisory: OSV:GHSA-29GP-92WP-94Q8...

@1337lawyers/design (>=0.1.0, <=0.1.38), @9188/w-cli (>=1.0.0, <=1.0.4) +50 more potentially affected by CVE-2018-6342 via react-dev-utils (>=5.0.0, <=5.0.1)

react-dev-utils NPM version =5.0.0, =0.1.0, =1.0.0, =0.4.1, =0.1.0-latest.1a450bb3, =1.0.5, =1.0.0-beta.28, =1.0.1, =1.0.0, =1.0.0, =0.26.4, =0.0.0-legacy, =3.10.0-beta.0, =0.1.0-alpha.0, =2.1.16, =2.3.5 - aqxy-common-ui 0.0.1 and more Source cves: CVE-2018-6342 Source advisory:...

@enact/cli (>=0.9.6, <=0.9.8), abt.api.web (0.0.3) +26 more potentially affected by CVE-2018-6342 via react-dev-utils (>=3.0.0, <=3.1.1)

react-dev-utils NPM version =3.0.0, =0.9.6, =4.2.0, =1.5.1, =0.15.0, =0.7.0, =0.7.0, =0.1.0, =0.1.4, =1.9.2, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2018-6342 Source advisory: OSV:GHSA-29GP-92WP-94Q8...

2muchcoffee-react-scripts (0.1.0), 2muchcoffee-react-scripts2 (>=0.1.0, <=0.1.2) +993 more potentially affected by CVE-2018-14732 via webpack-dev-server (>=3.0.0, <=3.1.10)

webpack-dev-server NPM version =3.0.0, =0.1.0, =0.6.2, =2.1.1, =0.1.0, =1.0.0, =2.1.0-beta.0, =2.1.0-beta.0, =2.1.2-4, =2.2.0-beta.1, =1.0.0, =0.8.8, =0.12.0 and more Source cves: CVE-2018-14732 Source advisory: OSV:GHSA-CF66-XWFP-GVC4...

h-include (1.0.0), hinclude (>=1.0.1, <=1.1.0) +4 more potentially affected by CVE-2018-16478 via simplehttpserver (>=0.0.6, <=0.2.1)

simplehttpserver NPM version =0.0.6, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2018-16478 Source advisory: OSV:GHSA-VWR2-WJ63-86GR...

@adobe/adobe-photoshop-api-sdk (>=1.1.0, <=1.1.1), @adobe/aio-lib-analytics (2.0.0) +23 more potentially affected by unknown CVE via fast-json-patch (>=2.0.4, <=2.1.0)

fast-json-patch NPM version =2.0.4, =1.1.0, =2.0.3, =1.0.3, =1.0.3, =0.0.4-beta.1, =2.0.2, =1.2.2, =0.3.0-next.1, =0.1.0, =2.1.32, =1.0.0, =1.2.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-FASTJSONPATCH-595663...

nifti (>=0.3.1, <=0.6.0), trk-io (>=0.3.0, <=0.11.0) potentially affected by CVE-2018-21000 via safe-transmute (>=0.5.0, <=0.8.0)

safe-transmute CARGO version =0.5.0, =0.3.1, =0.3.0, =0.11.0 Source cves: CVE-2018-21000 Source advisory: OSV:RUSTSEC-2018-0013...

@aikiwangdake/nsg-editor-library (>=2.0.0, <=2.0.4), @becomes/cms-ui (>=2.0.0, <=2.0.51) +290 more potentially affected by CVE-2018-19057 via simplemde (1.11.2)

simplemde NPM version 1.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on simplemde and may be impacted: - @aikiwangdake/nsg-editor-library =2.0.0, =2.0.0, =0.1.0, =0.1.27, =0.2.6, =1.0.0-alpha.1, =1.10.0, =1.0.5, =1.0.26, =1.4.0, =1.4.4 and more...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @deja-js/component (>=3.0.0-beta.25, <=4.0.5) +18 more potentially affected by CVE-2018-17960 via ckeditor (>=4.5.11, <=4.10.1)

ckeditor NPM version =4.5.11, =1.0.0, =3.0.0-beta.25, =0.5.0, =0.5.0, =0.0.0-beta.1, =1.0.0, =1.15.5, =0.0.0, =1.0.1, =1.2.1 and more Source cves: CVE-2018-17960 Source advisory: OSV:GHSA-G68X-VVQQ-PVW3...

org.atmosphere.plugins:atmosphere-grizzly-adapter (>=0.6, <=0.6.5), org.atmosphere.samples:atmosphere-appengine-chat (>=0.6, <=0.6.5) +63 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.1.1.v20100517)

org.eclipse.jetty:jetty-server MAVEN version 7.1.1.v20100517 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.atmosphere.plugins:atmosphere-grizzly-adapter =0.6, =0.6, =0.6, =0.6, =0.6, =0.6, =0....

com.github.stefanbirkner:serverrule (0.1.0), com.ning.billing:killbill-server (>=0.1.12, <=0.1.13) +72 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (8.1.2.v20120308)

org.eclipse.jetty:jetty-server MAVEN version 8.1.2.v20120308 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.stefanbirkner:serverrule 0.1.0 - com.ning.billing:killbill-server =0.1.12,...

com.ocpsoft.rewrite:rewrite-test-harness (>=1.0.0.alpha1, <=1.0.0.alpha6), de.ipk-gatersleben:edal-metadataapi (>=2.2.28, <=2.3.1) +42 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (8.0.0.m3)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.ocpsoft.rewrite:rewrite-test-harness =1.0.0.alpha1, =2.2.28, =2.2.2, =2.3.1 -...

com.googlecode.playn:playn-server (>=1.0, <=1.8), com.tacitknowledge:simulator-core (1.1) +148 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.2.2.v20101205)

org.eclipse.jetty:jetty-server MAVEN version 7.2.2.v20101205 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.googlecode.playn:playn-server =1.0, =0.1.0, =0.2.2, =0.2.3, =0.1.0, =0.1.0, =0.1.0,...

br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2) +93 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.0.0.v20091005)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.v20091005 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.arsmachina:tapestry-url-rewriter =1.0.1, =2.0.0 -...

org.apache.vysper.extensions:xep0124-xep0206-bosh (0.6), org.apache.vysper:vysper (0.6) +39 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.1.3.v20100526)

org.eclipse.jetty:jetty-server MAVEN version 7.1.3.v20100526 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.vysper.extensions:xep0124-xep0206-bosh 0.6 - org.apache.vysper:vysper 0.6 -...

com.confluex:qpid-in-a-can (0.2.0), com.propensive:rapture-extras_2.10 (>=2.0.0-m4, <=2.0.0-m9) +89 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.6.10.v20130312)

org.eclipse.jetty:jetty-server MAVEN version 7.6.10.v20130312 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.confluex:qpid-in-a-can 0.2.0 - com.propensive:rapture-extras2.10 =2.0.0-m4, =2.0.0-m...