apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2023-50943 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2023-50943 Source advisory:...

com.lambkit:lambkit (>=1.0.2, <=1.0.3), io.jboot:jboot (>=2.2.5, <=2.3.0) +1 more potentially affected by CVE-2024-22497 via com.jfinal:jfinal (4.7)

com.jfinal:jfinal MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.lambkit:lambkit =1.0.2, =2.2.5, =3.5.6.v20191101-release, =3.5.7.v20191115-release Source cves: CVE-2024-22497 Source...

dev.bomu:motan (0.1), io.jboot:jboot (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2024-22497 via com.jfinal:jfinal (4.5)

com.jfinal:jfinal MAVEN version 4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - dev.bomu:motan 0.1 - io.jboot:jboot =2.2.0, =3.5.2.v20190910-release, =3.5.5.v20191010-release Source cves: CVE-2024-22497 Sour...

dev.bomu:motan (0.1), io.jboot:jboot (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.5)

com.jfinal:jfinal MAVEN version 4.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - dev.bomu:motan 0.1 - io.jboot:jboot =2.2.0, =3.5.2.v20190910-release, =3.5.5.v20191010-release Source cves: CVE-2024-22496 Sour...

com.lambkit:lambkit (>=1.0.2, <=1.0.3), io.jboot:jboot (>=2.2.5, <=2.3.0) +1 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.7)

com.jfinal:jfinal MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.lambkit:lambkit =1.0.2, =2.2.5, =3.5.6.v20191101-release, =3.5.7.v20191115-release Source cves: CVE-2024-22496 Source...

[SECURITY] Fedora 39 Update: coreutils-9.3-5.fc39

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...

CVE-2024-0601

A vulnerability was found in ZhongFuCheng3y Austin 1.0. It has been rated as critical. Affected by this issue is the function getRemoteUrl2File of the file src\main\java\com\java3y\austin\support\utils\AustinFileUtils.java of the component Email Message Template Handler. The manipulation leads to...

indy-credx (>=0.2.0, <=0.3.1), indy-data-types (>=0.5.0, <=0.5.1) +3 more potentially affected by CVE-2024-21670 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.2.2 Source cves: CVE-2024-21670 Source advisory: OSV:GHSA-R78F-4Q2Q-HVV4...

indy-credx (>=0.2.0, <=0.3.1), indy-data-types (>=0.5.0, <=0.5.1) +3 more potentially affected by CVE-2022-31021 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.2.2 Source cves: CVE-2022-31021 Source advisory: GHSA-2Q6J-GQC4-4GW3...

EulerOS 2.0 SP11 : shadow (EulerOS-SA-2023-3020)

According to the versions of the shadow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second...

EulerOS Virtualization 2.9.0 : shadow (EulerOS-SA-2024-1022)

According to the versions of the shadow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on t...

EulerOS Virtualization 3.0.6.6 : iscsi-initiator-utils (EulerOS-SA-2023-3399)

According to the versions of the iscsi-initiator-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or...

EulerOS 2.0 SP10 : shadow (EulerOS-SA-2023-3231)

According to the versions of the shadow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second...

Malicious code in colors-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e4dcb786398ff89ed93f94d9221eaa6d94a42a7fe12838b8f5d743fcca7943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-106 Malicious code in colors-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e4dcb786398ff89ed93f94d9221eaa6d94a42a7fe12838b8f5d743fcca7943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in colors-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in chalk-color-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in chalk-color-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f6bb2420bb3dd90627f3e58d133384bba145d7e9d866765cafc6c126aca6485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.lambkit:lambkit (>=1.0.2, <=1.0.3), io.jboot:jboot (>=2.2.5, <=2.3.0) +1 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.7)

com.jfinal:jfinal MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.lambkit:lambkit =1.0.2, =2.2.5, =3.5.6.v20191101-release, =3.5.7.v20191115-release Source cves: CVE-2024-22492 Source...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2024-22493 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...