EUVD-2022-4840

Malicious code in bioql PyPI...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.24.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.24.0) +70 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.24.0)

org.apache.wicket:wicket-core MAVEN version 6.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.24.0 -...

com.cantaa:cantaa-commons (1.1), com.cooldatasoft:wicket-menu (>=6.16.0.0, <=6.16.0.4) +243 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.16.0)

org.apache.wicket:wicket-core MAVEN version 6.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cantaa:cantaa-commons 1.1 - com.cooldatasoft:wicket-menu =6.16.0.0, =6.16.0.0, =1.0.0, =0.9.4,...

com.cooldatasoft:wicket-menu (>=6.20.0.0, <=6.20.0.4), com.cooldatasoft:wicket-menu-demo (>=6.20.0.0, <=6.20.0.4) +324 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.20.0)

org.apache.wicket:wicket-core MAVEN version 6.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.20.0.0, =6.20.0.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0,...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.23.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.23.0) +247 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.23.0)

org.apache.wicket:wicket-core MAVEN version 6.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.23.0 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.26.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.26.0) +249 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.26.0)

org.apache.wicket:wicket-core MAVEN version 6.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.26.0 -...

com.github.wicket-acc:wicket-autowire (1.0.0), com.googlecode.wicked-charts:wicked-charts-wicket6 (>=2.0.0, <=2.0.1) +279 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.21.0)

org.apache.wicket:wicket-core MAVEN version 6.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.github.wicket-acc:wicket-autowire 1.0.0 - com.googlecode.wicked-charts:wicked-charts-wicket6...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.25.0, <=6.25.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.25.0, <=6.25.1) +287 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.25.0)

org.apache.wicket:wicket-core MAVEN version 6.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25....

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.27.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.27.0) +68 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.27.0)

org.apache.wicket:wicket-core MAVEN version 6.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.27.0 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.28.0, <=6.28.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.28.0, <=6.28.1) +241 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.28.0)

org.apache.wicket:wicket-core MAVEN version 6.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28....

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.29.0, <=6.29.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.29.0, <=6.29.1) +67 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.29.0)

org.apache.wicket:wicket-core MAVEN version 6.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29....

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (3.0.4), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (3.0.4) +285 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (>=9.0.0, <=9.2.0)

org.apache.wicket:wicket-core MAVEN version =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.2.1 and more Source cves: CVE-2021-23937 Source advis...

com.googlecode.wicket-jquery-ui:jquery-ui-core (1.2.0), com.googlecode.wicket-jquery-ui:jquery-ui-kendo (1.2.0) +18 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.6)

org.apache.wicket:wicket-core MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:jquery-ui-core 1.2.0 - com.googlecode.wicket-jquery-ui:jquery-ui-kend...

Cross-site Scripting in wicket-jquery-ui

In wicket-jquery-ui = 6.29.0, = 7.10.1, = 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display...

GHSA-PJV3-RH6V-2PJ8 Cross-site Scripting in wicket-jquery-ui

In wicket-jquery-ui = 6.29.0, = 7.10.1, = 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display...

Cross-site Scripting in wicket-jquery-ui

In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor...

GHSA-PWPC-HQQ2-HX2X Cross-site Scripting in wicket-jquery-ui

In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (3.0.4), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (3.0.4) +285 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (>=9.0.0, <=9.2.0)

org.apache.wicket:wicket-core MAVEN version =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.2.1 and more Source cves: CVE-2021-23937 Source advis...

at.molindo:molindo-wicket-utils (2.0.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui (1.5.11) +36 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.11)

org.apache.wicket:wicket-core MAVEN version 1.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - at.molindo:molindo-wicket-utils 2.0.0 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 1.5.11 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.23.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.23.0) +247 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.23.0)

org.apache.wicket:wicket-core MAVEN version 6.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.23.0 -...