a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +102 more potentially affected by unknown CVE via tensorflow-cpu (>=1.15.0 <=2.4.4)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H6GW-R52C-724R...

lsmmdma (>=0.0.4 <=0.1.7), tpu-tf2 (=1.0.0) potentially affected by unknown CVE via tensorflow-cpu (=2.7.0)

tensorflow-cpu PYPI version =2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - lsmmdma =0.0.4, =0.1.7 - tpu-tf2 =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-43Q8-3FV7-PR5X...

animl (>=1.1.2 <=1.1.4), audio-classification-models (=1.0.1) +7 more potentially affected by unknown CVE via tensorflow-gpu (>=2.6.0 <=2.6.2)

tensorflow-gpu PYPI version =2.6.0, =1.1.2, =0.1.5, =0.1.0, =0.9.0, =1.0.5, =1.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-43Q8-3FV7-PR5X...

alwakeupword (=1.0.0), armadillin (>=0.0.2 <=0.53.0) +42 more potentially affected by unknown CVE via tensorflow (>=2.6.0 <=2.6.2)

tensorflow PYPI version =2.6.0, =0.0.2, =1.0.1, =0.0.9, =0.2.0, =4.4.0, =1.1.2, =0.2.0, =0.0.1, =1.0.0, =1.1.2 - imgtovar =0.8.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-43Q8-3FV7-PR5X...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +171 more potentially affected by unknown CVE via tensorflow-gpu (>=1.10.1 <=2.5.1)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.0.9, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - brainhance =0.0.1 - cctv-analysis =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WCV5-VRVR-3RX2...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4847 more potentially affected by unknown CVE via tensorflow (>=1.0.1 <=2.5.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WCV5-VRVR-3RX2...

@abp/aspnetcore.mvc.ui.theme.basic (>=0.2.1 <=9.1.3), @abp/aspnetcore.mvc.ui.theme.leptonxlite (>=1.0.0 <=4.1.3) +424 more potentially affected by unknown CVE via toastr (>=2.0.4 <=2.1.4)

toastr NPM version =2.0.4, =0.2.1, =1.0.0, =0.2.3, =4.4.0, =0.3.0, =1.1.0, =1.1.0, =1.1.0, =1.0.1-alpha.0, =1.0.9, =0.5.0, =0.0.1, =1.0.0, =1.0.6 - @bycore/aspnetcore.mvc.ui.theme.basic =3.0.5-beta - @bycore/aspnetcore.mvc.ui.theme.shared =3.0.5-beta and more Source cves: unknown CVE Source...

com.hazelcast.jet.contrib:hazelcast-jet-spring-boot-starter (>=2.0.0 <=2.0.1), com.hazelcast.jet.contrib:http (=0.1) +57 more potentially affected by unknown CVE via com.hazelcast.jet:hazelcast-jet (>=4.1 <=4.5.2)

com.hazelcast.jet:hazelcast-jet MAVEN version =4.1, =2.0.0, =4.1, =4.3, =4.1, =4.1, =4.2, =4.1, =4.1, =4.1, =4.1, =4.4, =4.1, =4.5.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V57X-GXFJ-484Q...

ch.mobi.mobitor:mobitor-base (>=3.1.305 <=3.1.313), cloud.piranha.extension:piranha-extension-hazelcast (>=21.6.0 <=21.10.0) +87 more potentially affected by unknown CVE via com.hazelcast:hazelcast (>=4.2 <=4.2.3)

com.hazelcast:hazelcast MAVEN version =4.2, =3.1.305, =21.6.0, =1.37.0, =3.1.5, =6.3.0, =4.5, =4.5, =4.5, =2.1.1, =4.2, =4.2.3 - com.hazelcast:hazelcast-hibernate5 =2.2.1 - com.hazelcast:hazelcast-hibernate5-parent =2.2.1 - com.hazelcast:hazelcast-hibernate52 =2.2.1 and more Source cves: unknown...

10chars-test (>=1.0.4 <=1.0.34), 12g (>=0.0.16 <=1.0.1) +24903 more potentially affected by unknown CVE via shelljs (>=0.0.2 <=0.8.4)

shelljs NPM version =0.0.2, =1.0.4, =0.0.16, =1.3.0, =1.0.0, =1.0.2, =1.0.0, =0.0.3, =1.0.0, =1.0.3, =2.11.4, =2.0.0, =2.11.4, =2.13.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-64G7-MVW6-V9QJ...

afterglow (>=0.1.0 <=0.3.0), aiid_js (=0.0.1) +47 more potentially affected by unknown CVE via bumpalo (=2.6.0)

bumpalo CARGO version =2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on bumpalo and may be impacted: - afterglow =0.1.0, =0.5.4, =0.1.0, =3.0.0, =4.0.2, =0.114.0, =0.114.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.6.1 and more Source cves: unkno...

acme-dns-rust (>=1.0.0 <=1.0.6), acme2-slim (=0.2.0) +161 more potentially affected by unknown CVE via warp (>=0.1.23 <=0.3.1)

warp CARGO version =0.1.23, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =1.0.0, =0.14.0, =0.4.0, =0.1.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0082...

org.powernukkit:powernukkit-tests-junit5 (>=0.1.0 <=0.1.1) potentially affected by unknown CVE via org.powernukkit:powernukkit (=1.3.1.5-PN)

org.powernukkit:powernukkit MAVEN version =1.3.1.5-PN is affected by a known vulnerability. The following packages have a transitive dependency on org.powernukkit:powernukkit and may be impacted: - org.powernukkit:powernukkit-tests-junit5 =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory:...

CreateProcessW (>=0.1.0 <=0.1.2), UWUWUW (>=0.13.2 <=0.13.4) +186 more potentially affected by unknown CVE via windows (>=0.20.1 <=0.30.0)

windows CARGO version =0.20.1, =0.1.0, =0.13.2, =0.1.0, =1.0.0, =1.0.0, =1.8.0, =0.0.6, =0.0.4, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.4.1 - btleplug =0.9.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0008...

Route16 (=0.0.1), adblock (>=0.1.0 <=0.1.18) +146 more potentially affected by unknown CVE via rental (>=0.2.4 <=0.5.6)

rental CARGO version =0.2.4, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.2.0, =0.12.0, =0.5.0, =0.1.0, =0.7.0, =0.5.0, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0134...

hu.blackbelt.osgi.filestore:features (>=1.2.1 <=1.3.0), hu.blackbelt.osgi.filestore:kar (>=1.2.1 <=1.3.0) +40 more potentially affected by unknown CVE via org.ops4j.pax.logging:pax-logging-log4j2 (>=2.0.0 <=2.0.10)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =2.0.0, =1.2.1, =1.2.1, =1.0.12, =1.0.12, =2.14.2, =2.19.0, =3.12.0, =3.12.0, =3.14.0 - org.apache.cxf.karaf:apache-cxf =3.5.0 - org.apache.karaf.examples:karaf-docker-example-dynamic-dist =4.3.3 - org.apache.karaf.features:enterprise =4.3.3 ...

@activeledger/activecore (>=2.0.0-rc5 <=2.0.0-rc.8.0.6), @aktr/node-module-a (=1.0.1) +270 more potentially affected by unknown CVE via swagger-ui (>=2.0.17 <=4.1.0)

swagger-ui NPM version =2.0.17, =2.0.0-rc5, =0.1.2, =0.0.1, =1.4.0, =0.0.1, =0.0.4, =1.0.2, =7.0.0, =0.0.0-idm, =1.0.4, =1.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QRMM-W75W-3WPX...

PMXUtil (>=0.1.0 <=0.7.0), a-gpt (>=0.1.0 <=0.4.0) +812 more potentially affected by unknown CVE via encoding (=0.2.33)

encoding CARGO version =0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on encoding and may be impacted: - PMXUtil =0.1.0, =0.1.0, =0.1.7, =0.2.1, =0.1.1, =0.8.0, =0.3.0, =0.1.3, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves:...

@backstage/plugin-scaffolder-backend-module-confluence-to-markdown (>=0.0.0-nightly-20230325022054 <=0.0.0-nightly-20230801022410), @backstage/plugin-scaffolder-backend-module-cookiecutter (>=0.0.0-nightly-2022122206 <=0.1.0) +3 more potentially affected by unknown CVE via @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20220708025041 <=0.14.2)

@backstage/plugin-scaffolder-backend NPM version =0.0.0-nightly-20220708025041, =0.0.0-nightly-20230325022054, =0.0.0-nightly-2022122206, =0.0.0-nightly-2022122206, =0.0.0-nightly-20230112022659, =0.0.0-nightly-2022122206, =0.0.0-nightly-20230123022600 Source cves: unknown CVE Source advisory:...

PT-2021-23930 · Unknown · @Backstage/Plugin-Scaffolder-Backend

Name of the Vulnerable Software and Affected Versions: @backstage/plugin-scaffolder-backend versions prior to 0.15.14 Description: A malicious actor with write access to a registered scaffolder template can manipulate the template to write files to arbitrary paths on the scaffolder-backend host...