@biconomy/hyphen-contracts (=1.0.4), @bobanetwork/contracts (=0.0.2) +17 more potentially affected by unknown CVE via @openzeppelin/contracts-upgradeable (>=4.2.0 <=4.3.2)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.0.1, =0.5.0, =3.4.0, =1.1.2, =1.0.1, =1.1.2, =1.0.0, =0.8.1-pr-brioux-1333.92b26c3a.36, =1.0.5, =2.3.0, =2.0.0, =3.0.0-beta, =3.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WMPV-C2JP-J2XG...

Red Hat 3scale API Management Platform 输入验证错误漏洞

Red Hat 3scale API Management Platform is an API management infrastructure platform from Red Hat. It enables rapid API sharing, protection, distribution, control, and monetization. Red Hat 3scale API Management Platform has an input validation error vulnerability vulnerability, there is currently...

PT-2021-22048 · Unknown · Integria Ims

Name of the Vulnerable Software and Affected Versions: Integria IMS affected versions not specified Description: The login check in Integria IMS uses a loose comparator to compare the MD5 hash of the user-provided password and the MD5 hash stored in the database. This allows an attacker with a...

ghost-as-middleware (=1.0.0), ghost-blade (=0.1.0) +3 more potentially affected by unknown CVE via ghost (>=0.11.14 <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - persistent-ghost =0.8.2 - sign-alex =1.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-WFRJ-QQC2-83CM...

0z_export (>=1.0.0 <=1.0.102), 1cli (>=0.0.1 <=0.0.2) +1492 more potentially affected by unknown CVE via mixme (>=0.0.1 <=0.5.10)

mixme NPM version =0.0.1, =1.0.0, =0.0.1, =1.0.0, =4.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =3.1.2, =1.3.0, =0.0.0-snapshot-20260427171625, =2.26.1-next.0, =0.0.9, =0.0.30 and more Source cves: unknown CVE Source advisory: OSV:GHSA-84P7-FH9C-6G8H...

acid-store (>=0.12.0 <=0.14.2), aliyundrive-fuse (>=0.1.0 <=0.1.14) +34 more potentially affected by unknown CVE via fuser (>=0.10.0 <=0.15.1)

fuser CARGO version =0.10.0, =0.12.0, =0.1.0, =1.0.0, =0.1.0, =0.6.0, =1.6.0, =0.2.5, =0.1.2, =0.8.0, =0.8.2 - iso9660 =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0154...

evm (>=0.13.0 <=0.20.0), evm-gasometer (>=0.13.0 <=0.20.0) +2 more potentially affected by unknown CVE via evm-core (>=0.13.1 <=0.20.0)

evm-core CARGO version =0.13.1, =0.13.0, =0.13.0, =0.13.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-773Q-5334-5GF9...

@angular/cli (=9.1.0-next.3), @schematics/update (=0.901.0-next.3) +1 more potentially affected by unknown CVE via @npmcli/git (=1.0.1)

@npmcli/git NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @npmcli/git and may be impacted: - @angular/cli =9.1.0-next.3 - @schematics/update =0.901.0-next.3 - pacote =11.1.1 Source cves: unknown CVE Source advisory:...

eth-brownie (=1.15.0) potentially affected by unknown CVE via vyper (=0.2.14)

vyper PYPI version =0.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on vyper and may be impacted: - eth-brownie =1.15.0 Source cves: unknown CVE Source advisory: OSV:GHSA-7F92-RR6W-CQ64...

abdelrahman-obfuscate (>=1.0.0 <=1.0.1), abdo (=2.0.0) +61 more potentially affected by unknown CVE via ujson (>=3.0.0 <=3.2.0)

ujson PYPI version =3.0.0, =1.0.0, =2.0.0, =1.1.5, =1.0.20, =0.3.6, =0.0.3, =0.0.1, =1.5.0, =0.0.0b14, =0.1.0, =0.4.2 and more Source cves: unknown CVE Source advisory: OSV:OSV-2021-955...

@aws-crypto/example-node (>=0.2.0-preview.1 <=0.2.0-preview.5), @aws-crypto/integration-node (>=0.2.0-preview.1 <=0.2.0-preview.5) potentially affected by unknown CVE via @aws-crypto/client-node (=0.1.0-preview.5)

@aws-crypto/client-node NPM version =0.1.0-preview.5 is affected by a known vulnerability. The following packages have a transitive dependency on @aws-crypto/client-node and may be impacted: - @aws-crypto/example-node =0.2.0-preview.1, =0.2.0-preview.1, =0.2.0-preview.5 Source cves: unknown CVE...

3h1-ui (>=2.14.41 <=3.0.0-next.258), @abt-desk/apm (>=0.0.1 <=0.33.12) +1258 more potentially affected by unknown CVE via tinymce (>=4.5.1 <=5.7.0)

tinymce NPM version =4.5.1, =2.14.41, =0.0.1, =0.1.0, =0.1.2, =0.3.7, =0.1.7, =0.1.0, =0.0.1, =1.0.0, =0.2.0-0, =1.0.18-beta.8, =1.0.0, =1.2.3-beta.1, =0.1.1, =0.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5VM8-HHGR-JCJP...

@agentscript-ai/linear (>=0.1.0 <=0.9.0), @appscode/json-filter (>=0.0.1 <=0.0.6) +254 more potentially affected by unknown CVE via json-ptr (>=0.1.1 <=2.0.0)

json-ptr NPM version =0.1.1, =0.1.0, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =2.0.0-pr.1, =0.0.1-alpha.1, =1.0.1, =1.9.0, =1.6.0, =1.3.1, =2.1.1, =1.1.0, =1.4.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RRQV-VJRW-HRCR...

com.alibaba.rsocket:alibaba-broker-server (=1.0.1), com.beirtipol:jfixtools-reporting (=1.0-BETA) +110 more potentially affected by unknown CVE via com.vaadin:flow-server (>=3.0.0 <=6.0.5)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =6.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C57F-4VP2-JQHM...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.0 <=1.0.0.RC4), com.dorkbox.GradleVaadin:com.dorkbox.GradleVaadin.gradle.plugin (>=0.1 <=14.1.4) +247 more potentially affected by unknown CVE via com.vaadin:flow-server (>=2.0.9 <=2.5.2)

com.vaadin:flow-server MAVEN version =2.0.9, =1.0.0, =0.1, =1.4.0, =1.0, =0.0.1, =14.1.0, =14.1.0, =0.0.3, =1.0.2, =0.3.1, =1.0.2, =1.0.0, =0.5.1, =2.1.0, =2.2.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C57F-4VP2-JQHM...

actix-broker (>=0.1.3 <=0.1.7), actix-diesel (>=0.1.0 <=0.3.0) +894 more potentially affected by unknown CVE via cpuid-bool (>=0.1.2 <=0.2.0)

cpuid-bool CARGO version =0.1.2, =0.1.3, =0.1.0, =0.3.0, =0.3.0, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0064...

actinium226-librespot (=0.4.3), actinium226-librespot-connect (=0.4.3) +51 more potentially affected by unknown CVE via aes-ctr (>=0.6.0 <=0.99.99)

aes-ctr CARGO version =0.6.0, =0.4.3, =0.5.0, =0.1.0, =0.2.0, =0.1.0, =0.40.0, =0.40.0, =0.40.0, =0.40.0, =0.1.0, =0.1.0, =0.6.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0061...

2vyper (=0.3.0), black-mamba (>=0.1.0 <=0.4.2) +4 more potentially affected by unknown CVE via vyper (>=0.1.0b12 <=0.2.11)

vyper PYPI version =0.1.0b12, =0.1.0, =1.4.0, =0.1.3, =0.1.2b2, =0.1.2b4 Source cves: unknown CVE Source advisory: OSV:GHSA-22WC-C9WJ-6Q2V...

Vulnerabilities fixed in GitLab CE and EE

GitLab has fixed two vulnerabilities in GitLab Community Edition and Enterprise Edition. The vulnerabilities could be exploited by a malicious person with rights to upload files could be exploited to execute arbitrary code with permissions from the GitLab Service. A CVE ID is not yet known for on...

flask-authoob (>=0.0.21 <=0.0.34), pidb (=6.0.1) +1 more potentially affected by unknown CVE via flask-security-too (>=3.2.0rc1 <=3.3.3)

flask-security-too PYPI version =3.2.0rc1, =0.0.21, =6.0.0, =6.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-FXQ4-R6MR-9X64...