Vulnersosv - Page 188 of Vulnersosv Vulnerabilities List

VulnersosvRecent

11219 matches found

vulnersOsv•added 2021/12/16 2:33 p.m.•5 views

react-here-map-interactive (>=0.0.1, <=0.9.2) potentially affected by CVE-2021-23700 via merge-deep2 (3.0.6)

merge-deep2 NPM version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on merge-deep2 and may be impacted: - react-here-map-interactive =0.0.1, =0.9.2 Source cves: CVE-2021-23700 Source advisory: OSV:GHSA-J28Q-P8WW-CP87...

9.8CVSS8.6AI score0.01171EPSS

SaveExploits1

vulnersOsv•added 2021/12/15 2:48 p.m.•4 views

20190403-utils (1.0.0), @alex_xu/xdb (0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (1.0.0)

extend2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils 1.0.0 - @alexxu/xdb 0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0...

9.8CVSS8.6AI score0.0145EPSS

SaveExploits1

vulnersOsv•added 2021/12/15 12:00 a.m.•6 views

roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:GHSA-MMJF-F5JW-W72Q...

7.5CVSS7.6AI score0.50099EPSS

SaveExploits0

vulnersOsv•added 2021/12/14 9:47 p.m.•3 views

@0xwen/core (>=0.0.1, <=0.0.3), @0xwen/core-v5 (>=0.0.1, <=0.0.3) +128 more potentially affected by CVE-2021-46320 +1 more via @openzeppelin/contracts-upgradeable (>=3.4.0, <=4.3.3)

@openzeppelin/contracts-upgradeable NPM version =3.4.0, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =2.0.0-alpha.1, =3.0.0-alpha0, =2.0.0-alpha.0, =3.0.1-alpha, =1.0.0-beta.0, =1.0.0-beta.0, =1.0.0, =1.0.4 and more Source cves: CVE-2021-46320, CVE-2022-39384 Source advisory: OSV:GHSA-9C22-PWXW-P6HX...

7.5CVSS6.3AI score0.01217EPSS

SaveExploits0

vulnersOsv•added 2021/12/14 9:47 p.m.•3 views

0x-hunter-core (>=1.0.0-33, <=1.0.0-38), 1155-to-20 (>=1.0.0, <=1.0.2) +2818 more potentially affected by CVE-2021-46320 +1 more via @openzeppelin/contracts (>=3.2.0, <=4.4.0)

@openzeppelin/contracts NPM version =3.2.0, =1.0.0-33, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.9.1, =3.24.7, =1.7.2, =3.10.3, =0.0.2, =1.4.1, =1.0.0, =1.0.0-alpha.0, =1.1.0-alpha.0 and more Source cves: CVE-2021-46320, CVE-2022-39384 Source advisory: OSV:GHSA-9C22-PWXW-P6HX...

7.5CVSS6.7AI score0.01217EPSS

SaveExploits0

vulnersOsv•added 2021/12/14 12:00 p.m.•4 views

roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

7.5CVSS7.6AI score0.50099EPSS

SaveExploits0

vulnersOsv•added 2021/12/13 2:32 p.m.•4 views

jsgui-node-file-metadata (0.3.8), jsgui-node-fs2-core (>=0.1.0, <=0.1.5) +7 more potentially affected by CVE-2022-25301 via jsgui-lang-essentials (>=0.3.8, <=0.4.3)

jsgui-lang-essentials NPM version =0.3.8, =0.1.0, =0.1.0, =0.1.0, =0.3.8, =0.3.8, =0.3.35 Source cves: CVE-2022-25301 Source advisory: SNYK:JS-JSGUILANGESSENTIALS-2316897...

9.8CVSS8.6AI score0.01236EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 8:06 p.m.•6 views

norska (>=0.7.0, <=0.8.4), norska-frontend (>=0.7.4, <=0.9.11) +5 more potentially affected by CVE-2020-7642 via lazysizes (>=5.1.1, <=5.2.0)

lazysizes NPM version =5.1.1, =0.7.0, =0.7.4, =0.7.4, =2.1.4, =0.5.2, =0.5.2, =0.7.2 - sov 0.2.4 Source cves: CVE-2020-7642 Source advisory: OSV:GHSA-HG2P-2CVQ-4PPV...

5.4CVSS5.7AI score0.00889EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 8:05 p.m.•4 views

dpd-paypal-ap (>=0.0.1, <=0.0.9), paypal-pay (0.1.1) potentially affected by CVE-2020-7643 via paypal-adaptive (>=0.1.1, <=0.4.2)

paypal-adaptive NPM version =0.1.1, =0.0.1, =0.0.9 - paypal-pay 0.1.1 Source cves: CVE-2020-7643 Source advisory: OSV:GHSA-V3R2-3FP4-RP46...

5.3CVSS5.7AI score0.0101EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 8:05 p.m.•2 views

@fanatic/oracle (>=1.0.0, <=1.3.0), @ghg/amplifier (>=0.0.2, <=0.5.7) +8 more potentially affected by CVE-2020-7609 via node-rules (>=3.2.0, <=4.0.2)

node-rules NPM version =3.2.0, =1.0.0, =0.0.2, =0.0.2, =0.0.13, =0.0.1, =0.0.1, =0.2.7, =0.2.2, =0.2.3 Source cves: CVE-2020-7609 Source advisory: OSV:GHSA-F78F-353M-CF4J...

9.8CVSS5.3AI score0.01596EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 8:05 p.m.•7 views

gossip-object (>=1.0.6, <=2.3.4), gossipdb (>=0.1.1, <=0.1.5) +2 more potentially affected by CVE-2020-7644 via fun-map (3.3.1)

fun-map NPM version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on fun-map and may be impacted: - gossip-object =1.0.6, =0.1.1, =0.0.0, =0.2.0, =1.0.0 Source cves: CVE-2020-7644 Source advisory: OSV:GHSA-P33M-7W7F-GMJ8...

8.1CVSS7.9AI score0.01216EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 7:02 p.m.•5 views

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +11769 more potentially affected by CVE-2021-29059 via is-svg (>=2.1.0, <=4.2.2)

is-svg NPM version =2.1.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =1.1.8, =1.0.0, =1.0.4 - 4design 0.0.1 and more Source cves: CVE-2021-29059 Source advisory: OSV:GHSA-R8J5-H5CX-65GG...

7.5CVSS6.7AI score0.02813EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 6:58 p.m.•4 views

@attivio/suit (>=0.0.47, <=1.0.7), @botxo_team/fe-shared (>=1.0.0, <=1.15.29) +44 more potentially affected by CVE-2021-23398 via react-bootstrap-table (>=4.0.6, <=4.3.1)

react-bootstrap-table NPM version =4.0.6, =0.0.47, =1.0.0, =0.3.1, =0.1.1, =1.21.0, =0.15.0-beta-1, =1.14.3, =1.0.1, =0.1.0, =2.0.0 - bs-table-fg2 1.0.0 - censadesignsystem 2.38.0 - chainofdemand 0.1.0 and more Source cves: CVE-2021-23398 Source advisory: OSV:GHSA-2589-W6XF-983R...

6.1CVSS6.2AI score0.01341EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 6:57 p.m.•6 views

@balena/jellyfish-chat-widget (>=0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, <=2.0.0-rendition-notifications-1f10048b0b56657415485386d8bdc09fa8b8ffb0), @balena/jellyfish-ui-components (>=0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, <=2.0.25-add-react-virtualised-to-infinite-list-4e291b52a55f3950254be3ce329926ed26ecc421) +17 more potentially affected by CVE-2021-35513 via mermaid (>=8.4.0, <=8.10.1)

mermaid NPM version =8.4.0, =0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, =0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, =0.0.3, =0.0.2, =0.0.5, =0.0.5, =0.8.0, =0.8.0, =6.7.0-use-source-sans-pro-6543bbfbb6b2c9ae92a4909d99bb182d9406ef01, =0.0.9,...

6.1CVSS6.1AI score0.01018EPSS

SaveExploits0

vulnersOsv•added 2021/12/10 6:56 p.m.•6 views

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +398 more potentially affected by CVE-2021-23400 via nodemailer (>=6.0.0, <=6.6.0)

nodemailer NPM version =6.0.0, =1.0.49, =0.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =2.4.4 and more Source cves: CVE-2021-23400 Source advisory: OSV:GHSA-HWQF-GCQM-7353...

8.8CVSS8AI score0.01392EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 6:50 p.m.•6 views

fusion-plugin-jwt (>=0.1.0, <=0.1.8), toystore (>=1.1.1, <=1.5.3) potentially affected by CVE-2021-25952 via just-safe-set (1.1.0)

just-safe-set NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-safe-set and may be impacted: - fusion-plugin-jwt =0.1.0, =1.1.1, =1.5.3 Source cves: CVE-2021-25952 Source advisory: OSV:GHSA-V26W-GCXH-V4R7...

9.8CVSS8.6AI score0.03337EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 5:26 p.m.•5 views

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2021-23389 via total.js (3.2.4)

total.js NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on total.js and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2021-23389 Source advisory: OSV:GHSA-7FM6-GXQG-2PWR...

9.8CVSS8.5AI score0.03603EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 5:24 p.m.•4 views

hixtory (1.0.0), ncfg (>=0.0.1, <=0.12.1) +2 more potentially affected by CVE-2021-25953 via putil-merge (>=1.2.0, <=2.2.0)

putil-merge NPM version =1.2.0, =0.0.1, =0.9.1, =1.5.2, =2.10.5 Source cves: CVE-2021-25953 Source advisory: OSV:GHSA-9X7M-9HPG-XXMW...

9.8CVSS8.6AI score0.02961EPSS

SaveExploits1

vulnersOsv•added 2021/12/10 5:22 p.m.•4 views

fnoc (>=0.3.0, <=0.3.2), jsoncfg (>=0.0.1, <=0.1.2) +2 more potentially affected by CVE-2020-28269 via field (0.0.1)

field NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on field and may be impacted: - fnoc =0.3.0, =0.0.1, =0.4.1, =0.4.0, =0.5.0 Source cves: CVE-2020-28269 Source advisory: OSV:GHSA-HM82-QR45-H7MW...

9.8CVSS8.7AI score0.04162EPSS

SaveExploits1

vulnersOsv•added 2021/12/09 7:56 p.m.•5 views

@4players/odin-bot-sdk (>=0.1.0, <=0.4.4), @bhznjns/node-mp3-player (>=1.0.0, <=1.3.3) +39 more potentially affected by CVE-2020-7615 via fsa (>=0.3.1, <=0.5.1)

fsa NPM version =0.3.1, =0.1.0, =1.0.0, =1.0.0, =0.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.2-3, =1.2.2, =0.1.0, =1.0.4, =0.1.0, =0.1.0, =1.0.0, =2.0.0 - chiasenhac-music-bot 1.0.0 and more Source cves: CVE-2020-7615 Source advisory: OSV:GHSA-3P94-VJ97-FM4Q...

7.8CVSS7.4AI score0.01139EPSS

SaveExploits1

vulnersOsv•added 2021/12/09 7:54 p.m.•9 views

@10yun/cv-mobile-ui (0.3.20), @aiot-toolkit/aiotpack (>=2.0.5-beta.11, <=2.0.5-widget-provider-beta.2) +184 more potentially affected by CVE-2020-7636 via adb-driver (>=0.0.1, <=0.1.8)

adb-driver NPM version =0.0.1, =2.0.5-beta.11, =1.0.0-beta.0, =1.0.0-beta.0, =2.0.0-26820200330001, =2.0.0-27520200518001, =2.0.0-26920200420001, =0.1.0, =1.0.0, =1.9.3, =1.9.3, =0.4.0-beta.0, =2.1.2-beta.1 and more Source cves: CVE-2020-7636 Source advisory: OSV:GHSA-4M6Q-RXHM-675W...

9.8CVSS8.5AI score0.04358EPSS

SaveExploits1

vulnersOsv•added 2021/12/09 7:30 p.m.•2 views

@sobotics/caching (1.1.1) potentially affected by CVE-2015-9545 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2015-9545 Source advisory: OSV:GHSA-76QM-4F93-FG6F...

7.1CVSS7.1AI score0.01327EPSS

SaveExploits1

vulnersOsv•added 2021/12/09 7:30 p.m.•6 views

@sobotics/caching (1.1.1) potentially affected by CVE-2020-11611 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2020-11611 Source advisory: OSV:GHSA-C6C4-JMQX-3R33...

6.1CVSS6.2AI score0.00936EPSS

SaveExploits1

vulnersOsv•added 2021/12/09 7:29 p.m.•2 views

@sobotics/caching (1.1.1) potentially affected by CVE-2015-9544 via xdlocalstorage (2.0.5)

7.1CVSS7.1AI score0.01327EPSS

SaveExploits1

vulnersOsv•added 2021/12/09 7:27 p.m.•6 views

@love-open-source/ember-slider (>=0.0.2, <=1.1.10), broccoli-compass-compiler (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2020-7635 via compass-compile (0.0.1)

compass-compile NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on compass-compile and may be impacted: - @love-open-source/ember-slider =0.0.2, =0.0.1, =0.1.0, =0.5.0 Source cves: CVE-2020-7635 Source advisory: OSV:GHSA-7Q9F-X6RM-QMXR...

9.8CVSS8.6AI score0.04358EPSS

SaveExploits1

vulnersOsv•added 2021/12/09 7:08 p.m.•5 views

@egomobile/http-server (>=0.18.0, <=0.23.0), @lyra-network/openapi-dev-tool (>=9.0.0, <=9.5.0) +1 more potentially affected by unknown CVE via swagger-ui-dist (>=4.0.0-beta.2, <=4.1.2)

swagger-ui-dist NPM version =4.0.0-beta.2, =0.18.0, =9.0.0, =1.3.0-moderate-vulnerability, =24.7.0-moderate-vulnerability Source cves: unknown CVE Source advisory: OSV:GHSA-QRMM-W75W-3WPX...

5.4AI score

SaveExploits0

vulnersOsv•added 2021/12/09 7:08 p.m.•8 views

@goodrequest/express-joi-to-swagger (0.2.0), swagger-editor (>=4.0.0-beta.0, <=4.0.0-beta.2) potentially affected by unknown CVE via swagger-ui (>=4.0.0-beta.2, <=4.1.0)

swagger-ui NPM version =4.0.0-beta.2, =4.0.0-beta.0, =4.0.0-beta.2 Source cves: unknown CVE Source advisory: OSV:GHSA-QRMM-W75W-3WPX...

5.4AI score

SaveExploits0

vulnersOsv•added 2021/12/08 8:32 a.m.•6 views

@superdev-official/buffet-angular (1.0.11), apps-b-builder (>=0.1.0, <=0.4.3) +9 more potentially affected by CVE-2022-25760 via accesslog (0.0.2)

accesslog NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on accesslog and may be impacted: - @superdev-official/buffet-angular 1.0.11 - apps-b-builder =0.1.0, =0.6.0, =3.1.0, =0.1.0, =2.0.0, =0.4.0, =0.1.0, =0.4.1, =0.5.0 Source cves:...

10CVSS8.6AI score0.01639EPSS

SaveExploits1

vulnersOsv•added 2021/12/07 9:12 p.m.•6 views

123-x-ed-eied (>=1.0.5, <=1.0.6), @builderx-framework/bx-app-service-web (0.0.1) +48 more potentially affected by CVE-2021-43803 via next (>=12.0.0, <=12.0.4)

next NPM version =12.0.0, =1.0.5, =0.0.41, =2.0.2, =2.0.1, =0.0.5, =1.9.6, =0.0.0-34, =1.0.2, =1.0.0, =0.0.2, =0.0.62, =0.7.4-alpha.0, =0.7.4-alpha.0, =0.7.7-alpha.0 and more Source cves: CVE-2021-43803 Source advisory: OSV:GHSA-25MP-G6FV-MQXX...

7.5CVSS7.6AI score0.44824EPSS

SaveExploits0

vulnersOsv•added 2021/12/07 9:12 p.m.•7 views

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=1.0.2) +1329 more potentially affected by CVE-2021-43803 via next (>=1.2.3, <=11.1.2)

next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2021-43803 Source advisory: OSV:GHSA-25MP-G6FV-MQXX...

7.5CVSS7.6AI score0.44824EPSS

SaveExploits0

vulnersOsv•added 2021/12/07 2:51 p.m.•4 views

02url-querystring-http (>=1.0.1, <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6) +12538 more potentially affected by CVE-2022-24434 via dicer (>=0.1.2, <=0.3.1)

dicer NPM version =0.1.2, =1.0.1, =1.0.5, =1.0.0, =1.0.0, =1.0.0, =4.11.0, =1.0.0, =3.10.1, =3.11.0 and more Source cves: CVE-2022-24434 Source advisory: SNYK:JS-DICER-2311764...

7.5CVSS6.7AI score0.03425EPSS

SaveExploits2

vulnersOsv•added 2021/12/06 11:55 a.m.•8 views

@agoric/cosmic-swingset (>=0.10.8-dev.0, <=0.18.0), @agoric/ertp (>=0.1.4, <=0.4.1) +18 more potentially affected by CVE-2021-23543 via realms-shim (1.2.2)

realms-shim NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on realms-shim and may be impacted: - @agoric/cosmic-swingset =0.10.8-dev.0, =0.1.4, =0.0.1, =0.1.1, =0.0.1, =0.0.20, =0.1.0, =2.0.1, =1.0.0, =0.0.1, =0.4.1, =0.0.6,...

9.8CVSS8.6AI score0.01762EPSS

SaveExploits1

vulnersOsv•added 2021/12/06 11:47 a.m.•10 views

@agoric/cosmic-swingset (>=0.10.8-dev.0, <=0.18.0), @agoric/ertp (>=0.1.4, <=0.4.1) +18 more potentially affected by CVE-2021-23594 via realms-shim (1.2.2)

10CVSS8.6AI score0.01762EPSS

SaveExploits1

vulnersOsv•added 2021/12/06 11:32 a.m.•6 views

@accordproject/cicero-cli (>=0.3.4, <=0.23.0-alpha.1), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.23.0-alpha.1) +151 more potentially affected by CVE-2021-23555 via vm2 (>=3.0.0, <=3.9.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =2018.7.11-0, =2018.8.5-0, =2018.8.14-0 - @appium/execute-driver-plugin...

10CVSS8.5AI score0.02876EPSS

SaveExploits1

vulnersOsv•added 2021/12/05 12:00 p.m.•3 views

a-gpt (>=0.1.0, <=0.4.0), a2lfile (0.8.0) +812 more potentially affected by unknown CVE via encoding (0.2.33)

encoding CARGO version 0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on encoding and may be impacted: - a-gpt =0.1.0, =0.1.7, =0.5.0, =0.1.1, =0.8.0-alpha.2, =0.3.0-alpha.1, =0.1.3, =0.1.0, =0.3.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1,...

5.4AI score

SaveExploits0

vulnersOsv•added 2021/12/01 6:29 p.m.•2 views

@backstage/plugin-auth-backend (>=0.0.0-nightly-20240122021809, <=0.0.0-nightly-20240928023157), @backstage/plugin-auth-backend-module-aws-alb-provider (>=0.0.0-nightly-20240126021148, <=0.0.0-nightly-20260904022803) +4 more potentially affected by CVE-2021-43776 via @backstage/plugin-auth-backend (>=0.0.0-nightly-20240929023448, <=0.0.0-nightly-20260904022803)

@backstage/plugin-auth-backend NPM version =0.0.0-nightly-20240929023448, =0.0.0-nightly-20240122021809, =0.0.0-nightly-20240126021148, =0.0.0-nightly-20240122021809, =0.0.0-nightly-202111222339, =0.0.0-nightly-2021102522541, =0.0.0-nightly-20220203021748, =0.0.0-nightly-2022122206 Source cves:...

7.4CVSS0.00678EPSS

SaveExploits0

vulnersOsv•added 2021/12/01 6:29 p.m.•21 views

@backstage/plugin-scaffolder-backend-module-confluence-to-markdown (>=0.0.0-nightly-20230325022054, <=0.0.0-nightly-20230801022410), @backstage/plugin-scaffolder-backend-module-cookiecutter (>=0.0.0-nightly-2021101022158, <=0.1.0) +3 more potentially affected by unknown CVE via @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20220708025041, <=0.14.2)

@backstage/plugin-scaffolder-backend NPM version =0.0.0-nightly-20220708025041, =0.0.0-nightly-20230325022054, =0.0.0-nightly-2021101022158, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20230112022659, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20230123022600 Source cves: unknown CVE Source...

5.4AI score

SaveExploits0

vulnersOsv•added 2021/12/01 6:28 p.m.•5 views

@backstage/plugin-scaffolder-backend-module-confluence-to-markdown (>=0.0.0-nightly-20230325022054, <=0.0.0-nightly-20230801022410), @backstage/plugin-scaffolder-backend-module-cookiecutter (>=0.0.0-nightly-2021101022158, <=0.1.0) +3 more potentially affected by CVE-2021-43783 via @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20220708025041, <=0.14.2)

8.5CVSS8AI score0.01206EPSS

SaveExploits0

vulnersOsv•added 2021/12/01 6:27 p.m.•5 views

@dpu/hexo-github-include (>=0.0.1, <=0.0.2), @git-story/hexo-meta-data (>=1.0.0, <=1.1.1) +81 more potentially affected by CVE-2021-25987 via hexo (>=2.4.5, <=5.4.2)

hexo NPM version =2.4.5, =0.0.1, =1.0.0, =1.4.0, =1.0.2, =22.8.141, =2.0.0, =1.0.0, =1.0.11, =1.0.16, =1.0.0, =0.0.1, =0.0.3 and more Source cves: CVE-2021-25987 Source advisory: OSV:GHSA-Q54R-R9PR-W7QV...

5CVSS5.1AI score0.00328EPSS

SaveExploits0

vulnersOsv•added 2021/11/30 10:20 p.m.•3 views

embly-wrapper (0.0.2), wasi-common-lucet (>=0.4.0, <=0.4.2) potentially affected by CVE-2021-43790 via lucet-runtime (>=0.4.3, <=0.6.1)

lucet-runtime CARGO version =0.4.3, =0.4.0, =0.4.2 Source cves: CVE-2021-43790 Source advisory: OSV:GHSA-HF79-8HJP-RRVQ...

8.5CVSS7.8AI score0.01566EPSS

SaveExploits1

vulnersOsv•added 2021/11/30 12:00 p.m.•4 views

embly-wrapper (0.0.2), wasi-common-lucet (>=0.4.0, <=0.4.2) potentially affected by CVE-2021-43790 via lucet-runtime (>=0.4.3, <=0.6.1)

lucet-runtime CARGO version =0.4.3, =0.4.0, =0.4.2 Source cves: CVE-2021-43790 Source advisory: OSV:RUSTSEC-2021-0155...

8.5CVSS7.8AI score0.01566EPSS

SaveExploits1

vulnersOsv•added 2021/11/24 8:35 p.m.•5 views

@nordicsemiconductor/asset-tracker-cloud-aws (31.2.0-aws-iot-device-sdk-v2.1) potentially affected by CVE-2021-40831 via aws-iot-device-sdk-v2 (1.5.4)

aws-iot-device-sdk-v2 NPM version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on aws-iot-device-sdk-v2 and may be impacted: - @nordicsemiconductor/asset-tracker-cloud-aws 31.2.0-aws-iot-device-sdk-v2.1 Source cves: CVE-2021-40831 Source advisory...

7.2CVSS7.1AI score0.00636EPSS

SaveExploits0

vulnersOsv•added 2021/11/19 8:42 p.m.•6 views

@likenttt/waline-with-feishu (>=1.24.1, <=1.24.2), @waline/vercel (>=1.18.6, <=1.28.2) potentially affected by CVE-2020-21176 via thinkjs (3.2.14)

thinkjs NPM version 3.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on thinkjs and may be impacted: - @likenttt/waline-with-feishu =1.24.1, =1.18.6, =1.28.2 Source cves: CVE-2020-21176 Source advisory: OSV:GHSA-Q5MQ-6FJG-4MW8...

9.8CVSS8.6AI score0.01489EPSS

SaveExploits1

vulnersOsv•added 2021/11/19 8:16 p.m.•6 views

@1pedro/eslint-config (0.1.16), @2109-t5/server (>=1.0.0, <=1.0.9) +2534 more potentially affected by CVE-2021-3918 via json-schema (>=0.2.0, <=0.3.0)

json-schema NPM version =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.0.0-semantic-release, =14.0.0, =0.1.9, =0.1.9, =0.0.1, =0.0.1, =3.0.0-beta.3 and more Source cves: CVE-2021-3918 Source advisory: OSV:GHSA-896R-F27R-55MW...

9.8CVSS7.1AI score0.0383EPSS

SaveExploits1

vulnersOsv•added 2021/11/19 8:14 p.m.•3 views

01homework (>=1.0.0, <=1.0.1), 6ix (0.0.0-canary.0) +2335 more potentially affected by unknown CVE via validator (>=11.1.0, <=13.6.0)

validator NPM version =11.1.0, =1.0.0, =4.11.0, =0.0.0-canary.0, =0.0.1, =0.0.62-test, =0.0.1, =0.4.0, =11.1.0, =2.0.0-beta.43, =2.7.0, =0.1.1-alpha.51, =0.0.16-development, =1.1.0, =1.1.0, =1.2.390 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XX4C-JJ58-R7X6...

5.4AI score

SaveExploits0

vulnersOsv•added 2021/11/17 9:58 p.m.•4 views

ferris-rich-input (0.0.1) potentially affected by CVE-2021-41165 via ckeditor4 (4.14.0)

ckeditor4 NPM version 4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input 0.0.1 Source cves: CVE-2021-41165 Source advisory: OSV:GHSA-7H26-63M7-QHF2...

8.2CVSS6.7AI score0.01573EPSS

SaveExploits0

vulnersOsv•added 2021/11/17 9:55 p.m.•4 views

ferris-rich-input (0.0.1) potentially affected by CVE-2021-41164 via ckeditor4 (4.14.0)

8.2CVSS7.1AI score0.01346EPSS

SaveExploits0

vulnersOsv•added 2021/11/16 9:26 p.m.•4 views

6xs (>=0.1.0, <=0.1.3), 7ghost (>=4.11.0, <=4.11.46) +2398 more potentially affected by CVE-2020-28472 via aws-sdk (>=2.0.0-rc1, <=2.813.0)

aws-sdk NPM version =2.0.0-rc1, =0.1.0, =4.11.0, =3.10.1, =2.0.0, =1.0.0, =0.1.0, =1.16.0, =2.0.0, =3.7.0 and more Source cves: CVE-2020-28472 Source advisory: OSV:GHSA-RRC9-GQF8-8RWG...

9.8CVSS7.2AI score0.02142EPSS

SaveExploits1

vulnersOsv•added 2021/11/16 12:00 p.m.•7 views

a2 (>=0.2.0, <=0.5.3), aahc (0.1.0) +6615 more potentially affected by CVE-2021-45710 via tokio (>=0.1.16, <=1.8.1)

tokio CARGO version =0.1.16, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.3, =0.2.0, =0.5.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.2.0 and more Source cves: CVE-2021-45710 Source advisory: OSV:RUSTSEC-2021-0124...

8.1CVSS7.2AI score0.01162EPSS

SaveExploits0

vulnersOsv•added 2021/11/16 12:00 p.m.•6 views

async-http-proxy (>=1.2.1, <=1.2.3), barc-cli (>=2.2.0, <=2.2.1) +9 more potentially affected by CVE-2021-45710 via tokio (>=1.9.0, <=1.12.0)

tokio CARGO version =1.9.0, =1.2.1, =2.2.0, =0.73.0, =2.2.0, =0.2.8, =0.0.1, =0.12.0, =0.13.0 Source cves: CVE-2021-45710 Source advisory: OSV:RUSTSEC-2021-0124...

8.1CVSS7.7AI score0.01162EPSS

SaveExploits0

Total number of security vulnerabilities11219