Mageia: Security Advisory (MGASA-2014-0414)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0081)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0113)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0149)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0203)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +13 more potentially affected by CVE-2021-23631 via convert-svg-core (>=0.3.3, <=0.4.0)

convert-svg-core NPM version =0.3.3, =0.0.1, =0.0.18, =0.1.6, =0.0.1, =0.3.0, =0.3.0, =1.0.3, =0.0.1, =0.0.3, =1.0.0, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.2 - xd2svg 0.8.0 Source cves: CVE-2021-23631 Source advisory: OSV:GHSA-JV7G-9G6Q-CXVW...

4i18n-cli (>=0.0.2, <=0.0.7), @2060.io/credo-ts-didcomm-media-sharing (>=0.0.2, <=0.0.3) +1091 more potentially affected by CVE-2022-0235 via node-fetch (>=3.0.0, <=3.1.0)

node-fetch NPM version =3.0.0, =0.0.2, =0.0.2, =0.0.4, =0.0.0-alpha.117, =0.0.0-alpha.117, =0.0.0-alpha.119, =1.2.1-dev.3, =1.2.1-dev.3, =1.2.1-dev.3, =1.0.0, =2.0.0-beta.0, =2.0.0-beta.1 and more Source cves: CVE-2022-0235 Source advisory: OSV:GHSA-R683-J2X4-V87G...

10chars-test (>=1.0.4, <=1.0.34), 12g (>=0.0.16, <=1.0.1) +24238 more potentially affected by CVE-2022-0144 via shelljs (>=0.0.2, <=0.8.4)

shelljs NPM version =0.0.2, =1.0.4, =0.0.16, =1.3.0, =1.0.0, =1.0.2, =1.0.0, =0.0.3, =1.0.0, =1.0.3, =2.11.4, =2.0.0, =2.11.4, =2.13.7 and more Source cves: CVE-2022-0144 Source advisory: OSV:GHSA-4RQ4-32RV-6WP6...

Server side request forgery (ssrf)

The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js...

SUSE: Security Advisory (SUSE-SU-2022:0112-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for thefuck (FEDORA-2022-0f1653e269)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-5227-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@3kles/3kles-socketio (>=1.0.0, <=1.0.5), @livejack/broker (1.3.4) +22 more potentially affected by CVE-2022-21676 via engine.io (6.0.1)

engine.io NPM version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on engine.io and may be impacted: - @3kles/3kles-socketio =1.0.0, =0.1.0, =8.1.2, =1.4.0, =0.4.11, =0.4.0, =0.4.0, =0.4.10, =0.4.11, =0.4.5-beta4, =5.0.0, =1.0.0-alpha.1,...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9381 more potentially affected by CVE-2021-23382 via postcss (>=7.0.0, <=7.0.35)

postcss NPM version =7.0.0, =1.0.1, =1.0.1, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =3.4.2 and more Source cves: CVE-2021-23382 Source advisory: OSV:GHSA-566M-QJ78-RWW5...

Fedora: Security Advisory for libopenmpt (FEDORA-2021-0eb3ea2051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-C6H4-GC3F-HGJQ Prototype Pollution in js-data

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of CVE-2020-28442...

@0x6368656174/wp-builder (>=1.0.8, <=1.2.1), @beezyinc/dr-svg-sprites-bz (>=0.9.33, <=1.0.4) +145 more potentially affected by CVE-2020-11887 via svg2png (>=4.0.0, <=4.1.1)

svg2png NPM version =4.0.0, =1.0.8, =0.9.33, =0.9.33, =0.0.1, =0.0.1-alpha.44, =0.0.1-alpha.117, =0.0.4, =1.0.0, =2.1.0, =0.0.2, =0.0.10, =2.0.0, =0.0.0-semantically-released, =1.0.7, =1.0.8 and more Source cves: CVE-2020-11887 Source advisory: OSV:GHSA-MPP5-2X55-49XW...

SUSE: Security Advisory (SUSE-SU-2021:4154-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-23450 Prototype Pollution

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

@gdyfe/tools (>=1.0.0, <=1.0.10), icetest-test (1.0.1) +6 more potentially affected by CVE-2021-23562 via plupload (>=2.3.2, <=2.3.6)

plupload NPM version =2.3.2, =1.0.0, =1.0.1, =1.0.0, =0.0.28, =0.2.4, =1.0.5, =0.0.0, =0.0.37 Source cves: CVE-2021-23562 Source advisory: OSV:GHSA-RP2C-JRGP-CVR8...