au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.4-rc.0, <=3.5.18) +195 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (4.2.0.release)

org.springframework:spring-expression MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.4.0, =3.5.4-rc.0, =1.0.0,...

be.jacobsvanroy:spring-sql-unit (>=0.7, <=0.8), br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2) +96 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.0.0.release)

org.springframework:spring-expression MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.jacobsvanroy:spring-sql-unit =0.7, =1.2.1, =1.2.10, =1.0.0, =1.0-27,...

ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14), ai.tripl:arc_2.11 (>=1.13.3, <=1.15.0) +722 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (1.3.1)

net.minidev:json-smart MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.minidev:json-smart and may be impacted: - ai.tripl:arc-jupyter2.11 =0.0.13, =1.13.3, =5.1.15-beta2, =5.1.17.50 - com.aliyun.hbase:alihbase-assembly 2.0.2 -...

dbaas (>=0.1.6, <=0.7.1) potentially affected by CVE-2023-28443 via directus (>=9.6.0, <=9.21.2)

directus NPM version =9.6.0, =0.1.6, =0.7.1 Source cves: CVE-2023-28443 Source advisory: OSV:GHSA-8VG2-WF3Q-MWV7...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +1 more potentially affected by CVE-2023-28669 via org.jenkins-ci.plugins:jacoco (>=1.0.9, <=1.0.19)

org.jenkins-ci.plugins:jacoco MAVEN version =1.0.9, =1.7.2, =1.0.0, =1.7, =1.12.3 Source cves: CVE-2023-28669 Source advisory: MEND:CVE-2023-28669...

@web-desktop-environment/development-edition-server (>=2.0.0-2, <=2.0.0-alpha.11), @web-desktop-environment/pack-dev (>=2.0.0-1, <=2.0.0-alpha.11) potentially affected by CVE-2023-26114 via code-server (>=4.4.0, <=4.5.1)

code-server NPM version =4.4.0, =2.0.0-2, =2.0.0-1, =2.0.0-alpha.11 Source cves: CVE-2023-26114 Source advisory: OSV:GHSA-FRJG-G767-7363...

@web-desktop-environment/development-edition-server (>=2.0.0-2, <=2.0.0-alpha.11), @web-desktop-environment/pack-dev (>=2.0.0-1, <=2.0.0-alpha.11) potentially affected by CVE-2023-26114 via code-server (>=4.4.0, <=4.5.1)

code-server NPM version =4.4.0, =2.0.0-2, =2.0.0-1, =2.0.0-alpha.11 Source cves: CVE-2023-26114 Source advisory: SNYK:JS-CODESERVER-3368148...

org.apache.tomcat:tomcat-catalina-ha (11.0.0-m1), org.apache.tomcat:tomcat-storeconfig (11.0.0-m1) potentially affected by CVE-2023-28708 via org.apache.tomcat:tomcat-catalina (11.0.0-m1)

org.apache.tomcat:tomcat-catalina MAVEN version 11.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 11.0.0-m1 - org.apache.tomcat:tomcat-storeconfig...

com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e), com.armanbilge:http4s-tomcat-server_2.13 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +161 more potentially affected by CVE-2023-28708 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.71)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.6.0, =3.2.1036, =1.0.1, =1.3.1, =6.35, =3.1.0, =3.0.0.rc2, =1.8.2, =3.2.0 and more Source cves: CVE-2023-28708 Source advisory: OSV:GHSA-2C9M-W27F-53RM...

0xppl-solana-portfolio (1.0.0), 0xuath-sdk-react (>=0.0.2, <=0.0.23) +6491 more potentially affected by CVE-2025-3194 via bigint-buffer (1.1.5)

bigint-buffer NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bigint-buffer and may be impacted: - 0xppl-solana-portfolio 1.0.0 - 0xuath-sdk-react =0.0.2, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1, =0.0.77, =0.2.0...

@pzlr/build-core (>=2.14.0, <=2.15.1), @v4fire/cli (>=1.3.0, <=2.1.0) +3 more potentially affected by CVE-2023-26113 via collection.js (6.7.11)

collection.js NPM version 6.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on collection.js and may be impacted: - @pzlr/build-core =2.14.0, =1.3.0, =2.0.0-beta.1, =2.0.0-beta.1, =3.75.0 Source cves: CVE-2023-26113 Source advisory:...

async-ssh2-tokio (>=0.2.0, <=0.4.0), russh-sftp (>=0.2.0, <=1.2.1) +1 more potentially affected by CVE-2023-28113 via russh (>=0.34.0, <=0.35.0-beta.9)

russh CARGO version =0.34.0, =0.2.0, =0.2.0, =0.1.0, =0.4.1 Source cves: CVE-2023-28113 Source advisory: OSV:GHSA-CQVM-J2R2-HWPG...

7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +265 more potentially affected by CVE-2022-43441 via sqlite3 (>=5.0.0, <=5.1.4)

sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =0.0.15, =0.0.15, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =6.1.4, =6.1.4, =7.0.1, =6.1.4, =0.1.3-alpha.0, =0.3.0 and more Source cves: CVE-2022-43441 Source advisory: MEND:CVE-2022-43441...

1095h-cli (1.0.1), 5coder-pages (0.2.0) +547 more potentially affected by CVE-2023-25345 via swig-templates (>=2.0.2, <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0-beta.1, =0.0.1-alpha.0, =0.0.1 and more Source cves: CVE-2023-25345 Source advisory: OSV:GHSA-2RQ5-699J-X7P6...

cargo-generate (>=0.13.1, <=0.16.0), cargo-smart-release (>=0.1.0, <=0.2.4) +43 more potentially affected by unknown CVE via git-hash (>=0.1.2, <=0.10.3)

git-hash CARGO version =0.1.2, =0.13.1, =0.1.0, =0.2.11, =11.0.0, =0.12.11, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.3 - git-lock 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...

cargo-generate (>=0.15.0, <=0.16.0), cargo-temp (>=0.2.11, <=0.2.13) +30 more potentially affected by unknown CVE via git-path (>=0.1.3, <=0.4.2)

git-path CARGO version =0.1.3, =0.15.0, =0.2.11, =11.0.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.29.0, =0.19.0, =0.16.0, =0.13.0, =0.17.0, =0.1.2, =0.7.0, =0.8.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0026...

@chirpy-dev/analytics (0.0.1), @chirpy-dev/main-app (>=0.1.0, <=0.3.0) +16 more potentially affected by CVE-2023-27490 via next-auth (>=4.0.0-beta.6, <=4.19.2)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.9, =4.0.0-alpha.11, =4.0.0-alpha.1, =4.0.0-alpha.6, =0.31.1, =1.42.1, =0.50.4, =0.1.0, =0.3.0, =1.0.0-beta.1, =1.0.0-beta.31, =2.3.0-beta.7, =2.4.0-beta.16 and more Source cves: CVE-2023-27490 Source advisory: OSV:GHSA-7R7X-4C4Q-C4QF...

7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +265 more potentially affected by CVE-2022-43441 via sqlite3 (>=5.0.0, <=5.1.4)

sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =0.0.15, =0.0.15, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =6.1.4, =6.1.4, =7.0.1, =6.1.4, =0.1.3-alpha.0, =0.3.0 and more Source cves: CVE-2022-43441 Source advisory: OSV:GHSA-JQV5-7XPX-QJ74...

@acanto/laravel-scripts (>=0.2.14, <=0.2.27), @adobe/helix-deploy (>=1.6.0, <=7.3.1) +1216 more potentially affected by CVE-2023-28154 via webpack (>=5.0.0, <=5.75.0)

webpack NPM version =5.0.0, =0.2.14, =1.6.0, =3.0.0, =1.0.44, =3.0.0-beta.6, =1.0.0-rc2, =2.0.5-beta.11, =1.0.0-beta.0, =1.0.0-beta.0, =1.0.0-beta.0, =1.0.0-beta.0, =1.0.17-beta.7, =0.2.0, =0.0.0-dev-4fb73016-20210914-1634176750976, =0.1.5 - @akphi/dev-utils1 0.0.1 and more Source cves:...

annatar (0.6.1), aoer-plotty-rs (>=0.2.1, <=0.4.1) +119 more potentially affected by unknown CVE via const-cstr (>=0.1.0, <=0.3.0)

const-cstr CARGO version =0.1.0, =0.2.1, =0.3.6, =0.5.0, =0.1.0, =0.1.0, =0.11.0+8.3.2, =0.0.1, =1.0.0, =1.3.3 - capsicum 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0020...