1193 matches found
@solid/community-server (=0.4.1) potentially affected by unknown CVE via @solid/identity-token-verifier (=0.4.3)
@solid/identity-token-verifier NPM version =0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solid/identity-token-verifier and may be impacted: - @solid/community-server =0.4.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XMH9-RG6F-J3MR...
125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4982 more potentially affected by unknown CVE via tensorflow (>=1.0.1 <=2.9.3)
tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.5.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: unknown CVE Source advisory: OSV:OSV-2021-449...
com.nannoq:auth (>=1.0.0 <=1.1.7), com.nannoq:fcm (>=1.0.0 <=1.1.7) +6 more potentially affected by unknown CVE via com.amazonaws:aws-dynamodb-encryption-java (>=1.11.0 <=1.14.1)
com.amazonaws:aws-dynamodb-encryption-java MAVEN version =1.11.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.1.4, =1.0.28, =1.1.7 Source cves: unknown CVE Source advisory: OSV:GHSA-W736-HF9P-QQH3...
df-excel (>=0.1.0 <=0.1.8) potentially affected by unknown CVE via office (=0.8.1)
office CARGO version =0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on office and may be impacted: - df-excel =0.1.0, =0.1.8 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0034...
myelin-engine (>=0.1.0 <=0.14.2), nphysics_testbed2d (>=0.1.0 <=0.10.0) +6 more potentially affected by unknown CVE via nphysics2d (>=0.10.3 <=0.9.4)
nphysics2d CARGO version =0.10.3, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.5.0, =0.4.0, =0.0.2, =0.2.2, =0.11.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0149...
amethyst_nphysics (>=0.0.1 <=0.2.0), arci-urdf-viz (>=0.0.1 <=0.1.0) +52 more potentially affected by unknown CVE via ncollide3d (>=0.15.4 <=0.33.0)
ncollide3d CARGO version =0.15.4, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =0.3.0, =0.11.0, =0.2.0, =0.2.0, =0.3.0, =0.2.0, =0.2.2 - f3lsurface =0.2.0 - fere =0.0.0 - fere-common =0.0.0 - fere-resources =0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0150...
ifinfo (=0.1.0), prosafe_exporter (>=0.1.1 <=0.2.7) potentially affected by unknown CVE via interfaces2 (=0.0.5)
interfaces2 CARGO version =0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on interfaces2 and may be impacted: - ifinfo =0.1.0 - prosafeexporter =0.1.1, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0002...
app (>=0.2.0 <=0.6.5), bench_timer (>=0.1.0 <=0.1.1) +2 more potentially affected by unknown CVE via stderr (>=0.2.2 <=0.8.0)
stderr CARGO version =0.2.2, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.3.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0109...
@patrick91/ghost (=5.2.3-patrick.1), @tryghost/settings-path-manager (>=0.1.0 <=0.1.9) +11 more potentially affected by unknown CVE via props (>=0.1.0 <=0.3.0)
props NPM version =0.1.0, =0.1.0, =0.0.0, =0.0.1-alpha1, =0.0.0, =4.24.0, =0.0.1, =0.0.4, =0.1.1, =0.1.0, =0.1.0, =0.1.11 Source cves: unknown CVE Source advisory: SNYK:JS-PROPS-1015750...
Google Android Pixel Security Flaw
Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has a security vulnerability, there is currently no information about this vulnerability, please stay tuned to CNNVD or the manufacturer's announcement...
safe-transfers (=0.1.0), sn_transfers (=0.2.0) potentially affected by unknown CVE via safe-nd (>=0.11.7 <=0.9.0)
safe-nd CARGO version =0.11.7, =0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on safe-nd and may be impacted: - safe-transfers =0.1.0 - sntransfers =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0063...
com.alejandrohdezma:http4s-munit-testcontainers_2.12 (>=0.2.0 <=0.6.3), com.alejandrohdezma:http4s-munit_2.12 (>=0.1.0 <=0.6.3) +3 more potentially affected by unknown CVE via org.http4s:http4s-async-http-client_2.12 (>=0.21.0-M6 <=0.21.25)
org.http4s:http4s-async-http-client2.12 MAVEN version =0.21.0-M6, =0.2.0, =0.1.0, =0.1.3, =0.1.3, =0.1.7 - org.scala-steward:scala-steward-core2.12 =0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8HXH-R6F7-JF45...
IMAPServer (=0.1.0), acme-dns-rust (>=1.0.0 <=1.0.6) +92 more potentially affected by unknown CVE via block-cipher (>=0.7.1 <=0.8.0)
block-cipher CARGO version =0.7.1, =1.0.0, =0.4.0, =0.4.0, =0.7.0, =0.1.0, =0.1.1, =0.1.1, =0.8.1, =0.2.0, =0.5.0, =0.2.0, =0.7.0, =0.8.0 - chacha20 =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0057...
@homenet/core (>=4.0.0-beta.15 <=4.0.0-beta.42), @jatahworx/bhive-core (>=1.0.76 <=3.3.1) +29 more potentially affected by unknown CVE via node-red (>=0.10.10 <=0.18.3)
node-red NPM version =0.10.10, =4.0.0-beta.15, =1.0.76, =2.5.0, =0.0.1, =0.0.4, =0.0.0, =0.0.1, =0.1.2, =0.1.5, =1.0.0, =0.9.0, =1.1.0, =1.0.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5G6J-8HV4-VFGJ...
@ieremeev/app (>=3.0.1 <=3.2.4), xtal-test (>=0.0.1 <=0.0.10) potentially affected by unknown CVE via serve (=10.0.0)
serve NPM version =10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on serve and may be impacted: - @ieremeev/app =3.0.1, =0.0.1, =0.0.10 Source cves: unknown CVE Source advisory: OSV:GHSA-CPGR-WMR9-QXV4...
@activeledger/activecore (>=2.0.0-rc5 <=2.0.0-rc.8.0.6), @aktr/node-module-a (=1.0.1) +192 more potentially affected by unknown CVE via swagger-ui (>=2.0.17 <=2.2.8)
swagger-ui NPM version =2.0.17, =2.0.0-rc5, =1.4.0, =0.0.4, =1.0.2, =7.0.0, =1.3.0, =3.0.0-alpha.0, =0.7.2, =3.0.1, =2.0.0, =0.0.1, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-388G-JWPG-X6J4...
react-endless (>=1.0.4 <=1.0.6), react-templet (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via epress (=0.0.1-security)
epress NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-VF8Q-PW7H-R2X2...
helper_project (=1.3.0), twitter-buddy (>=1.0.0 <=1.0.4) potentially affected by unknown CVE via requst (=0.0.1-security)
requst NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject =1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-8QX4-R7FX-XC4V...
@acanto/october-scripts (=3.2.2), @acanto/workflow (=5.1.0) +1213 more potentially affected by unknown CVE via http-proxy (>=0.10.0 <=1.18.0)
http-proxy NPM version =0.10.0, =2018.7.11-0, =0.0.1, =0.156.0, =2.6.6, =4.0.0, =3.0.1, =0.0.1, =1.12.2-next.3, =1.0.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6X33-PW7P-HMPQ...
@rebelware/fibonacci-generator (=0.0.3), @tgwf/greentrace-cli (>=0.0.1 <=0.2.0) +4 more potentially affected by unknown CVE via traceroute (>=0.0.3 <=1.0.0)
traceroute NPM version =0.0.3, =0.0.1, =0.0.1, =1.0.1, =1.0.2 - securiwiser-web-check =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RJVJ-673Q-4HFW...