ids-enterprise-ng (>=4.7.0 <=9.5.2), sohoreact (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via ids-enterprise (>=4.10.0-beta.0 <=4.18.1)

ids-enterprise NPM version =4.10.0-beta.0, =4.7.0, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-HPFQ-8WX8-CGQW...

@abhishekdeb/ezmailer (>=0.0.1 <=0.0.2), @aca-1/a2-composer (>=0.1.0 <=0.3.3) +916 more potentially affected by unknown CVE via http-proxy-agent (>=0.2.7 <=2.0.0)

http-proxy-agent NPM version =0.2.7, =0.0.1, =0.1.0, =0.1.0, =0.1.5, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =0.15.0-alpha1, =0.2.0, =0.2.1 - @cdevine49/react-numeric-input =2.2.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8W57-JFPM-945M...

7ghost (>=4.11.0 <=4.11.46), @agneta/platform (>=0.16.9 <=0.17.0) +75 more potentially affected by unknown CVE via express-brute (>=0.4.2 <=1.0.1)

express-brute NPM version =0.4.2, =4.11.0, =0.16.9, =0.0.2, =3.1.0, =0.0.1, =0.0.2, =1.0.0-0, =1.3.3, =1.0.0, =1.1.0, =3.41.6, =1.0.1, =3.0.16-soul - @nadyashakhat/ghost =4.17.1 - @patrick91/ghost =5.2.3-patrick.1 - @phacce/ms-app =0.1.0 and more Source cves: unknown CVE Source advisory:...

@gooddollar/gun-appendonly (>=1.0.1 <=1.0.3), @notabug/gun-suppressor-sear (>=0.1.0 <=0.1.1) +16 more potentially affected by unknown CVE via gun (>=0.1.0 <=0.2019.413)

gun NPM version =0.1.0, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =1.0.2, =0.0.1, =1.0.0, =0.0.100, =1.0.0, =0.3.700, =0.1.0-beta.1, =0.1.0-beta.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-886V-MM6P-4M66...

Design/Logic Flaw

In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused deputy scenario. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2018-9582

In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused deputy scenario. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...