@averjs/core (>=1.0.22, <=2.0.0-3), @cojecom/vuex-persistedstate (2.5.4) +11 more potentially affected by CVE-2020-28278 via shvl (1.3.1)

shvl NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on shvl and may be impacted: - @averjs/core =1.0.22, =1.1.37, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =2.3.0, =1.1.1, =5.2.0 Source cves: CVE-2020-28278 Source advisory:...

com.microsoft.azure:azure-eventhubs-eph (2.3.0), com.microsoft.azure:azure-eventhubs-spark_2.11 (>=2.2.7, <=2.3.7) +2 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (2.1.0)

com.microsoft.azure:azure-eventhubs MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 2.3.0 -...

com.microsoft.azure:azure-eventhubs-eph (0.13.1), com.microsoft.azure:spark-streaming-eventhubs_2.10 (1.6.3) +7 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.13.1)

com.microsoft.azure:azure-eventhubs MAVEN version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.13.1 -...

com.microsoft.azure:azure-eventhubs-eph (2.5.1), com.microsoft.azure:azure-eventhubs-spark_2.11 (2.3.11) +2 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (2.3.1)

com.microsoft.azure:azure-eventhubs MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 2.5.1 -...

mongo-rest-api (0.1.0), pine-ql (>=0.1.0, <=0.5.4) potentially affected by CVE-2020-28272 via keyget (1.0.1)

keyget NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api 0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2020-28272 Source advisory: OSV:GHSA-8MP8-28XH-R486...

org.jenkins-ci.plugins:cron-shelve (1.3) potentially affected by CVE-2020-2321 via org.jenkins-ci.plugins:shelve-project-plugin (1.5)

org.jenkins-ci.plugins:shelve-project-plugin MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:shelve-project-plugin and may be impacted: - org.jenkins-ci.plugins:cron-shelve 1.3 Source cves: CVE-2020-2321 Source...

ferris-rich-input (0.0.1) potentially affected by CVE-2020-27193 via ckeditor4 (4.14.0)

ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2020-27193 Source advisory: OSV:GHSA-4M44-5J2G-XF64...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.0.0-beta-1) potentially affected by CVE-2020-2306 via org.jenkins-ci.plugins:mercurial (1.58-beta-1)

org.jenkins-ci.plugins:mercurial MAVEN version 1.58-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.0.0-beta-1 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (>=1.412, <=1.452), org.jenkins-ci.plugins:svnmerge (>=1.0, <=1.3) potentially affected by CVE-2020-2304 via org.jenkins-ci.plugins:subversion (1.25)

org.jenkins-ci.plugins:subversion MAVEN version 1.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - org.jenkins-ci.main:jenkins-test-harness =1.412, =1.0, =1.3 Source cves: CVE-2020-2304 Source...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.2, <=1.6.8) potentially affected by CVE-2020-2304 via org.jenkins-ci.plugins:subversion (1.42)

org.jenkins-ci.plugins:subversion MAVEN version 1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.2, =1.6.8 Source cves:...

org.jenkins-ci.plugins:bitbucket (>=1.1.4, <=1.1.13), org.jenkins-ci.plugins:bitbucket-build-status-notifier (>=1.1.0, <=1.4.2) +2 more potentially affected by CVE-2020-2306 via org.jenkins-ci.plugins:mercurial (1.54)

org.jenkins-ci.plugins:mercurial MAVEN version 1.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:bitbucket =1.1.4, =1.1.0, =1.3, =1.1.0, =1.1.2 Source cves: CVE-2020-2306...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.0.0, <=2.1.2) potentially affected by CVE-2020-2306 via org.jenkins-ci.plugins:mercurial (1.58)

org.jenkins-ci.plugins:mercurial MAVEN version 1.58 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.0.0, =2.1.2 Source cves: CVE-2020-23...

com.cloudbees.jenkins.plugins:xpdev (1.0) potentially affected by CVE-2020-2305 via org.jenkins-ci.plugins:mercurial (1.41)

org.jenkins-ci.plugins:mercurial MAVEN version 1.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mercurial and may be impacted: - com.cloudbees.jenkins.plugins:xpdev 1.0 Source cves: CVE-2020-2305 Source advisory:...

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1915 via hermes-engine (>=0.0.0, <=0.6.0)

hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1915 Source advisory: OSV:GHSA-X4CF-6JR3-3QVP...

@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1914 via hermes-engine (>=0.0.0, <=0.6.0)

hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1914 Source advisory: OSV:GHSA-327C-QX3V-H673...

br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1), cf.pgmann.plugins:url-auth-sso (1.0) +225 more potentially affected by CVE-2020-2252 via org.jenkins-ci.plugins:mailer (>=1.3, <=1.23)

org.jenkins-ci.plugins:mailer MAVEN version =1.3, =1.0.5.0, =1.0.0, =1.9.2-beta, =1.14.0-alpha-1, =4.1.1, =1.0.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.0.0, =1.0.0, =1.1.2 - com.infullmobile.jenkins.plugin:restricted-register 0.1.7 and more Source cves: CVE-2020-2252 Source advisory:...

org.jenkins-ci.plugins:whitesource (>=20.1.2, <=21.1.2) potentially affected by CVE-2020-2252 via org.jenkins-ci.plugins:mailer (1.32)

org.jenkins-ci.plugins:mailer MAVEN version 1.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:mailer and may be impacted: - org.jenkins-ci.plugins:whitesource =20.1.2, =21.1.2 Source cves: CVE-2020-2252 Source advisory:...

com.aconex.scrutineer:scrutineer (1.0.5), org.graylog2:graylog2-plugin (>=0.10.1, <=0.10.14) potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.19.10)

org.elasticsearch:elasticsearch MAVEN version 0.19.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.aconex.scrutineer:scrutineer 1.0.5 - org.graylog2:graylog2-plugin =0.10.1, =0.10.14 Source...

com.automattic:elasticsearch-statsd (5.5.2.0), com.floragunn:dlic-search-guard-authbackend-ldap (5.0-8) +78 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (5.5.2)

org.elasticsearch:elasticsearch MAVEN version 5.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 5.5.2.0 - com.floragunn:dlic-search-guard-authbackend-ldap...

org.elasticsearch:elasticsearch-analysis-icu (0.11.0), org.elasticsearch:elasticsearch-cloud-aws (0.11.0) +7 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.11.0)

org.elasticsearch:elasticsearch MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.11.0 - org.elasticsearch:elasticsearch-cloud-aws...