CVE:CVE-2016-1000273
JavaMelody is a monitoring tool for JavaEE applications. Versions prior to 1.61.0 are vulnerable to a cross-site scripting (XSS) attack. This issue was patched in version 1.61.0, and users are recommended to upgrade to the latest version. There are no known workarounds.
solution:Upgrade netty to versions 3.9.6 or higher.
solution:Upgrade com.fasterxml.jackson.core:jackson-core to version 2.7.7 or higher.
solution:Upgrade netty to versions 4.0.45, 4.1.9 or higher.
solution:Avoid using bunto-test_plugin altogether.
solution:Upgrade tinymce to version 4.2.4 or higher.
solution:Upgrade org.json4s:json4s-native to version 4.1.0-M2 or higher.
solution:There is no fixed version for org.webjars.bowergithub.buefy:buefy.
solution:Upgrade org.webjars.bower:angular to version 1.4.0 or higher.
solution:Upgrade org.webjars:qunit to version 2.9.0 or higher.
solution:Upgrade to plotly.js version 1.16.0 or newer.
solution:Upgrade org.webjars.npm:angular to version 1.4.0 or higher.
solution:Upgrade org.webjars.npm:angular to version 1.5.0-beta.0 or higher.
solution:Upgrade org.webjars.npm:rrule to version 2.6.8 or higher.
solution:Upgrade vega to version 2.4.0 or higher.
solution:Upgrade org.webjars.npm:angular to version 1.4.10 or higher.
solution:Upgrade org.webjars.bower:angular to version 1.5.9 or higher.
solution:Upgrade org.webjars.npm:angular to version 1.5.0-rc.0 or higher.
solution:Upgrade org.webjars.npm:angular to version 1.5.0-beta.2 or higher.
solution:Upgrade org.webjars.bower:angular to version 1.5.0-rc.2 or higher.
solution:Upgrade org.webjars.npm:angular to version 1.5.0-rc.2 or higher.
solution:Upgrade org.webjars.bower:angular to version 1.4.10 or higher.
solution:Upgrade com.itextpdf:sign to version 7.1.5 or higher.
solution:Upgrade to plotly.js version 1.16.0 or newer.
solution:Upgrade org.webjars.npm:angular to version 1.2.30 or higher.
solution:Upgrade ag-grid to version 5.0.0 or higher.
solution:There is no fixed version for org.webjars:marked.
solution:There is no fixed version for org.webjars.bowergithub.chjj:marked.
solution:Upgrade org.webjars.npm:marked to version 0.6.2 or higher.
solution:Upgrade tinymce to version 4.2.4 or higher.
solution:Upgrade org.webjars.bowergithub.nodeca:js-yaml to version 3.13.1 or higher.
solution:Upgrade org.apache.httpcomponents:httpclient to version 4.5.3 or higher.
solution:Upgrade Amazon-Linux:2018.03 aws-cfn-bootstrap to version 0:1.4-20.12.amzn1 or higher.This issue was patched in ALAS-2017-866.
solution:Upgrade Amazon-Linux:2018.03 aws-cfn-bootstrap to version 0:1.4-22.14.amzn1 or higher.This issue was patched in ALAS-2017-895.
solution:Upgrade Amazon-Linux:2018.03 aws-cfn-bootstrap to version 0:1.4-21.13.amzn1 or higher.This issue was patched in ALAS-2017-886.
solution:Upgrade org.webjars.bower:angular to version 1.2.30 or higher.
solution:Upgrade org.webjars.npm:marked to version 0.3.9 or higher.
solution:Upgrade org.webjars:handlebars to version 3.0.7, 4.1.2, 4.0.14 or higher.
solution:Upgrade org.webjars.npm:static-eval to version 2.0.2 or higher.
solution:Upgrade org.webjars.bower:summernote to version 0.8.12 or higher.
solution:Upgrade org.webjars.npm:webpack-bundle-analyzer to version 3.3.2 or higher.
solution:Upgrade org.webjars.bower:angular to version 1.5.0-rc.0 or higher.
solution:Upgrade org.apache.hadoop:hadoop-ozone-s3gateway to version 0.4.1-alpha or higher.
solution:Upgrade org.webjars.npm:handlebars to version 3.0.7, 4.1.2, 4.0.14 or higher.
solution:There is no fixed version for org.webjars:reveal.js.
solution:Upgrade org.webjars.bowergithub.hakimel:reveal.js to version 4.0.2 or higher.
solution:There is no fixed version for org.webjars.bower:reveal.js.
solution:There is no fixed version for org.webjars.bower:marked.
solution:There is no fixed version for org.webjars.npm:useragent.
solution:Upgrade org.apache.felix:org.apache.felix.webconsole to version 4.3.12 or higher.
solution:There is no fixed version for org.apache.felix.karaf:karaf.
solution:Upgrade org.webjars.npm:bootstrap-select to version 1.13.6 or higher.
solution:There is no fixed version for org.webjars.bower:jasmine-core.
solution:Upgrade org.webjars.npm:diagram-js to version 6.4.0 or higher.
solution:Upgrade org.webjars.bower:swagger-ui to version 2.2.1 or higher.
solution:There is no fixed version for org.webjars:jquery-colorbox.
solution:Upgrade ractive to version 0.8.0 or higher.
solution:Upgrade crypto-browserify to version 2.1.11 or higher.
solution:Upgrade org.webjars.npm:swagger-ui to version 2.2.8 or higher.
solution:Upgrade vue to version 2.4.3 or higher.
solution:Upgrade org.webjars.npm:angular to version 1.6.7 or higher.
solution:Upgrade org.jenkins-ci.plugins:ontrack to version 3.4.1 or higher.
solution:There is no fixed version for org.webjars.bower:nwmatcher.
solution:Upgrade ua-parser-js to version 0.7.16 or higher.
solution:Upgrade org.primefaces:primefaces to version 6.2 or higher.
solution:There is no fixed version for org.webjars:diff.
solution:Upgrade org.github.evenjn:diff to version 3.5.0 or higher.
solution:Upgrade org.jenkins-ci.plugins:ease-plugin to version 2.2 or higher.
solution:There is no fixed version for org.webjars.bowergithub.jakubpawlowicz:clean-css.
solution:Upgrade mathjs to version 3.11.5 or higher.
solution:There is no fix version for bootstrap-markdown.
solution:Upgrade vue to version 2.4.3 or higher.
solution:Upgrade org.jenkins-ci.plugins:codebeamer-result-trend-updater to version 1.1.4 or higher.
solution:Upgrade com.sksamuel.diff:diff to version 3.5.0 or higher.
solution:Upgrade useragent to version 2.1.13 or higher.
solution:Upgrade org.webjars.npm:clean-css to version 4.1.11 or higher.
solution:Upgrade org.apache.geode:geode-core to version 1.4.0 or higher.
solution:Upgrade js-quantities to version 1.6.4 or higher.
solution:Upgrade tunnel-agent to version 0.6.0 or higher.
Note This is vulnerable only for Node &lt;=4
solution:There is no fix version for utile.
solution:There is no fixed version for org.webjars.bowergithub.chjj:marked.
solution:Upgrade org.webjars.bowergithub.markedjs:marked to version 0.4.0 or higher.
solution:Upgrade com.fasterxml.jackson.core:jackson-core to version 2.8.6 or higher.
solution:Upgrade org.webjars:swagger-ui to version 3.18.1 or higher.
solution:There is no fixed version for org.webjars.npm:angucomplete-alt.
solution:There is no fixed version for org.webjars.bower:js-quantities.
solution:Upgrade mysql to version 2.14.0 or higher.
Note This is vulnerable only for Node &lt;=4
solution:Upgrade org.webjars.bower:angular to version 1.5.0-beta.2 or higher.
solution:Upgrade vue to version 2.3.0-beta.1 or higher.
solution:There is no fixed version for org.webjars.bower:angucomplete-alt.
solution:Upgrade org.webjars.npm:angular to version 1.5.9 or higher.
solution:There is no fixed version for org.webjars.bower:js-yaml.
solution:Update vue to version 2.5.14 or higher.
solution:Upgrade xlsx to verson 0.12.2 or higher
solution:Upgrade org.webjars.bower:swagger-ui to version 3.18.0 or higher.
solution:Update node-forge to version 0.7.4 or higher.
solution:Upgrade org.webjars.npm:eslint to version 4.18.2 or higher.
solution:There is no fixed version for org.webjars.npm:ngx-bootstrap.
solution:Update vue to version 2.5.14 or higher.
solution:Update vue to version 2.5.14 or higher.
solution:Update vue to version 2.5.14 or higher.
solution:Upgrade org.webjars.npm:swagger-ui to version 3.0.14 or higher.
solution:There is no fixed version for com.cloudcoreo.plugins:cloudcoreo-deploytime.
solution:Upgrade org.webjars.npm:swagger-ui to version 3.18.1 or higher.
solution:Upgrade encryptor to version 3.0.0 or higher.
solution:Upgrade activeadmin to version 0.1.0 or higher.
solution:Avoid using active-explorer altogether.
solution:Avoid using ar-lightning altogether.
solution:Avoid using arproxy-plugin-mysql-casual_log altogether.
solution:Avoid using ardm_sqlite-adapter altogether.
solution:Avoid using active-merchant_mollie altogether.
solution:Avoid using ardm_serializer altogether.
solution:Avoid using telegram-bot_api altogether.
solution:Avoid using royal-mail_scraper altogether.
solution:Avoid using seeing-is_believing altogether.
solution:Avoid using ruby-playing_cards altogether.
solution:Avoid using telegram-bot_ruby altogether.
solution:Avoid using 99designs_tasks altogether.
solution:Avoid using 1-as-identity_function altogether.
solution:Avoid using addy-caddy_client altogether.
solution:Avoid using omniauth_amazon altogether.
solution:Avoid using apress_validators altogether.
solution:Upgrade redis-namespace to version 1.0.4, 1.1.1, 1.2.2, 1.3.1 or higher.
solution:Avoid using blockchain_wallet altogether.
solution:Upgrade jquery_mobile_rails to version 1.2.0 or higher.
solution:Upgrade puma to version 2.9.2 or higher.
solution:Avoid using alipay-dualfun altogether.
solution:Upgrade shipit-engine to version 0.12.0 or later
solution:Avoid using alphabetical-paginate altogether.
solution:Avoid using aliyun_push altogether.
solution:Avoid using alerty_plugin-mail altogether.
solution:Avoid using aligned-table altogether.
solution:There is no fixed version for ecdsa.
solution:Avoid using coin_base altogether.
solution:Upgrade rails_autolink to version 1.1.6 or higher.
solution:Upgrade jekyll to version 1.0.0 or higher.
solution:Avoid using alipay-global altogether.
solution:Avoid using api-deploy altogether.
solution:Avoid using abstract-api_wrapper altogether.
solution:Avoid using asset-symlink altogether.
solution:Avoid using application-insights altogether.
solution:Avoid using at_validations altogether.
solution:Avoid using alephant_publisher-request altogether.
solution:Avoid using bosh-cli_plugin_redis altogether.
solution:Avoid using attr-searchable altogether.
solution:Avoid using capistrano3_drupal altogether.
solution:Avoid using assembly_client altogether.
solution:Avoid using activerecord_postgresql-expression altogether.
solution:Avoid using claide_plugins altogether.
solution:Avoid using acts-as_journalized altogether.
solution:Avoid using activerecord_jdbcsplice-adapter altogether.
solution:Avoid using cinch_logsearch altogether.
solution:Avoid using lita_onewheel-beer-btu altogether.
solution:Avoid using commission-junction_stats altogether.
solution:Avoid using cinch_weatherman altogether.
solution:Avoid using assemblyline_ruby altogether.
solution:Avoid using contributors-stats altogether.
solution:Avoid using ceedling_autorake altogether.
solution:Avoid using lita_onewheel-beer-wayfinder altogether.
solution:Avoid using moving-images altogether.
solution:Avoid using lita_onewheel-beer-wework altogether.
solution:Avoid using cocoapods_fixbugs-plugin altogether.
solution:Avoid using moving-average altogether.
solution:Avoid using cap_drupal-multisite altogether.
solution:Avoid using chef_cloudsearch altogether.
solution:Avoid using apple-dep_client altogether.
solution:Avoid using get-stats altogether.
solution:Avoid using ali-mns altogether.
solution:Avoid using assets_publisher-for-hanami altogether.
solution:Avoid using lita_onewheel-beer-craftpourhouse altogether.
solution:Avoid using ae-validates-timeliness altogether.
solution:Avoid using acts-as_keywordable altogether.
solution:Avoid using ackintosh-net-empty-port altogether.
solution:Upgrade json-jwt to version 0.6.1 or higher.
solution:Avoid using http-statsd altogether.
solution:Avoid using asterisk_ari-client altogether.
北京北信源软件股份有限公司是一家致力成为5G时代智慧安全的全面解决方案提供商。北信源网络违规监测告警平台存在未授权访问漏洞，攻击者可利用该漏洞获取敏感信息。
浙江大华技术股份有限公司是以视频为核心的智慧物联解决方案供应商和运营服务商。浙江大华技术股份有限公司智慧园区综合管理平台存在文件上传漏洞，攻击者可利用该漏洞获取服务器权限。
solution:Avoid using capistrano_scm-gitsubmodules altogether.
solution:Upgrade guard-livereload to version 2.5.2 or higher.
solution:Avoid using lines-mixer altogether.
solution:Avoid using attribute-normalizer-extras altogether.
深圳市蓝凌软件股份有限公司是国内知名的大平台OA服务商和国内领先的知识管理解决方案提供商，是专业从事组织的知识化咨询、软件研发、实施、技术服务的国家级高新技术企业。深圳市蓝凌软件股份有限公司蓝凌智慧协同平台存在SQL注入漏洞，攻击者可利用该漏洞获取数据库敏感信息。
solution:Avoid using rate-beer altogether.
solution:Avoid using edmunds-vin altogether.
solution:Avoid using alphabet_rocker altogether.
solution:Avoid using batch-actions altogether.
solution:Avoid using brakeman-translate_checkstyle_format altogether.
solution:Avoid using batch_rails altogether.
solution:The fix is merged to the master branch but not yet published settingslogic.
solution:Avoid using batch-insert altogether.
solution:Avoid using bedrock_capistrano-uploads altogether.
solution:Avoid using ace_client-ext altogether.
solution:Avoid using batch_rails2 altogether.
solution:Avoid using capistrano_airbrake altogether.
solution:Upgrade solidus_backend to version 1.2.1 or higher.
solution:Upgrade refinerycms-core to version 3.0.2 or higher.
solution:Upgrade activeadmin to version 1.0.0.pre3 or higher.
solution:Avoid using lita_telegram-plus altogether.
solution:Avoid using font-assets altogether.
solution:Avoid using apns-polite altogether.
solution:Avoid using battle_on altogether.
solution:There is no fix version for upmin-admin.
solution:Avoid using bosh_plugin-pipeline altogether.
solution:Avoid using apiotics-aws_iot_client altogether.
solution:Avoid using first-gem_rakesh altogether.
solution:Avoid using lita_onewheel-beer-base altogether.
solution:Upgrade spree_frontend to version 3.0.7 or higher.
solution:Avoid using fluent_plugin-dogstatsd altogether.
solution:Avoid using activemodel_validators altogether.
solution:Avoid using belong_plugin-rds-pgsql-log altogether.
solution:Avoid using autoexec-bat altogether.
solution:Upgrade sorcery to version 0.9.1 or higher.
solution:There currently is no fix in libxml2 as of January 11th, 2017.
Nokogiri will be waiting for a fix upstream to update.
solution:Avoid using fluent_plugin-airbrake-logger altogether.
solution:Avoid using auth_transis-client altogether.
solution:Avoid using catarse-paypal_express altogether.
solution:Avoid using education-stats altogether.
solution:Avoid using arethusa-plugin_generator altogether.
solution:Upgrade sinatra to version 1.2.1 or higher.
solution:As of Jan. 18th there is still no fixed version, but a PR was created.
solution:Avoid using beta_pod altogether.
solution:Avoid using aws-cloud_search altogether.
solution:Avoid using ba-upload altogether.
solution:Avoid using aws_s3-deploy altogether.
solution:Avoid using auto_deploy-test altogether.
solution:Upgrade puppet to version 2.6.11, 2.7.5 or higher.
solution:There is no fixed version for this vulnerability, but a fix was merged to the api_v2 branch.
solution:Upgrade sinatra to version 1.4.6 or higher.
solution:Upgrade middleman-core to version 4.1.2 or higher.
solution:Avoid using em_statsd-ruby altogether.
solution:Upgrade haml-rails to version 0.5 or higher.
solution:Avoid using activerecord-pluck-in_batches altogether.
solution:Avoid using font_fabulous altogether.
solution:Avoid using referral-candy altogether.
solution:Avoid using biblesearch_api altogether.
solution:Avoid using batman_rails altogether.
solution:Upgrade solidus_core to version 1.1.0.pre2 or higher.
solution:Avoid using danger_apkstats altogether.
solution:Avoid using cordova_rake altogether.
solution:Avoid using doge-woof altogether.
solution:Avoid using a1535yt-gem altogether.
solution:Upgrade bourne to version 1.4.0 or higher.
solution:Avoid using auto-localize altogether.
solution:Avoid using font_awesome-sass-c altogether.
solution:Avoid using access-policy_rails altogether.
solution:Avoid using barely-searchable altogether.
solution:Avoid using android_command-line-tools altogether.
solution:Upgrade org.webjars.npm:marked to version 0.4.0 or higher.
solution:Upgrade org.webjars:handlebars to version 4.0.14, 4.1.2 or higher.
solution:There is no fixed version for org.webjars.npm:decompress-zip.
solution:Upgrade zeppelin-server to version 0.7.3, 0.8.0 or higher.
solution:Upgrade com.nimbusds:nimbus-jose-jwt to version 4.34.2 or higher.
solution:Upgrade knockout to version 3.0.0 or higher.
solution:Upgrade ag-grid to version 5.0.0 or higher.
solution:Upgrade knockout to version 3.0.0 or higher.
solution:Upgrade org.apache.myfaces.core:myfaces-core-project to version 2.3.0 or higher.
solution:There is no fixed version for org.webjars.npm:react-tooltip.
solution:Upgrade org.jenkins-ci.plugins:skytap to version 2.07 or higher.
solution:Upgrade org.webjars.npm:node-sass to version 4.14.1 or higher.
solution:Upgrade org.webjars:redoc to version 2.0.0-rc.28 or higher.
solution:Upgrade org.apache.poi:poi to version 3.16-beta1 or higher.
solution:Upgrade org.glassfish.grizzly:grizzly-project to version 2.3.29 or higher.
solution:Upgrade org.webjars.npm:jstree to version 3.3.7 or higher.
solution:Upgrade org.webjars.npm:ws to version 1.1.5, 3.3.1 or higher.
solution:Avoid using acts-as_multilingual altogether.
solution:Upgrade org.webjars.bower:jstree to version 3.3.7 or higher.
solution:Upgrade org.webjars:jstree to version 3.3.7 or higher.
solution:Upgrade org.springframework:spring-webmvc to version 3.0.6 or higher.
solution:Upgrade org.bitbucket.b_c:jose4j to version 0.5.5 or higher.
solution:Upgrade org.webjars.npm:buefy to version 0.7.2 or higher.
solution:Upgrade org.webjars.npm:primeng to version 11.4.3 or higher.
solution:Upgrade org.webjars.npm:esm to version 3.1.0 or higher.
solution:Upgrade org.webjars.bowergithub.markedjs:marked to version 0.6.2 or higher.
solution:Upgrade ws to version 1.1.2 or higher.
solution:There is no fixed version for org.webjars.npm:jquery-confirm.
solution:Upgrade org.webjars.bowergithub.summernote:summernote to version 0.8.12 or higher.
solution:Upgrade Amazon-Linux:2018.03 git-bzr to version 0:2.13.6-1.55.amzn1 or higher.This issue was patched in ALAS-2017-910.
solution:Upgrade org.webjars.bower:handlebars to version 3.0.7, 4.1.2, 4.0.14 or higher.
solution:Upgrade org.webjars.bowergithub.snapappointments:bootstrap-select to version 1.13.6 or higher.
solution:There is no fixed version for org.webjars:summernote.
solution:
Upgrade npm to &quot;&gt;= 3.8.3 || &gt;= 2.15.1&quot;
Invalidate your current npm bearer tokens
solution:Upgrade org.apache.brooklyn:brooklyn-camp to version 0.12.0 or higher.
solution:Upgrade org.webjars.npm:reveal.js to version 4.0.2 or higher.
solution:Upgrade mathjs to version 3.11.5 or higher.
solution:Upgrade electron to version 1.6.8 or higher.
solution:Upgrade mathjs to version 3.11.5 or higher.
solution:Upgrade mathjs to version 3.10.3 or higher.
solution:Upgrade mathjs to version 3.10.3 or higher.
solution:Upgrade mathjs to version 3.13.3 or higher.
solution:Upgrade org.webjars.npm:js-yaml to version 3.13.1 or higher.
solution:Upgrade mathjs to version 3.13.3 or higher.
solution:Upgrade org.webjars.npm:constantinople to version 3.1.1 or higher.
solution:Upgrade org.apache.tika:tika-parsers to version 1.13 or higher.
solution:There is no fixed version for org.webjars:js-yaml.
solution:Upgrade mathjs to version 3.13.3 or higher.
solution:Upgrade org.apache.jspwiki:jspwiki-main to version 2.11.0-M4 or higher.
solution:Upgrade org.apache.jspwiki:jspwiki-main to version 2.11.0-M4 or higher.
solution:There is no fixed version for org.apache.karaf:org.apache.karaf.client.
solution:There is no fixed version for org.apache.karaf:karaf.
solution:There is no fixed version for org.apache.felix.karaf:org.apache.felix.karaf.client.
solution:Upgrade org.apache.jspwiki:jspwiki-main to version 2.11.0-M4 or higher.
solution:There is no fixed version for org.webjars.bower:qunit.
solution:Upgrade org.webjars.npm:mem to version 4.0.0 or higher.
solution:Upgrade org.webjars.npm:diagram-js-direct-editing to version 1.6.1 or higher.
solution:Upgrade org.airsonic.player:airsonic-main to version 10.3.0 or higher.
solution:Upgrade org.apache.activemq:activemq-web to version 5.15.12 or higher.
solution:Upgrade com.acunetix:acunetix to version 1.1.0 or higher.
solution:Upgrade org.webjars.bower:swagger-ui to version 2.2.1 or higher.
solution:Upgrade org.webjars:swagger-ui to version 2.2.2 or higher.
solution:There is no fixed version for org.webjars.bower:jquery-colorbox.
solution:There is no fixed version for org.webjars:pure.
solution:Upgrade org.webjars.npm:swagger-ui to version 3.6.1 or higher.
solution:Upgrade vue to version 2.4.3 or higher.
solution:Upgrade org.webjars.bower:swagger-ui to version 3.4.2 or higher.
solution:Upgrade validator to version 5.0.0 or higher.
solution:Upgrade org.webjars:swagger-ui to version 3.4.4 or higher.
solution:Upgrade vue to version 2.4.3 or higher.
solution:Upgrade vue to version 2.3.0-beta.1 or higher.
solution:Upgrade org.webjars.npm:swagger-ui to version 2.2.8 or higher.
solution:There is no fixed version for org.webjars.bowergithub.dperini:nwmatcher.
solution:Upgrade org.primefaces:primefaces to version 6.2 or higher.
solution:Upgrade org.springframework.security:spring-security-ldap to version 4.2.9.RELEASE, 5.0.9.RELEASE, 5.1.1.RELEASE or higher.
solution:There is no fixed version for org.webjars:clean-css.
solution:Upgrade org.webjars.npm:rrule to version 2.6.8 or higher.
solution:Upgrade com.sparkjava:spark-core to version 2.7.2 or higher.
solution:Upgrade http-signature to version 1.0.0 or higher.
solution:Upgrade to semantic-ui version 2.2.8 or newer.
solution:Upgrade jstree to version 3.0.3 or higher.
solution:Upgrade org.webjars:uikit to version 3.2.7 or higher.
solution:Upgrade to plotly.js version 1.16.0 or newer.
solution:Upgrade org.webjars.bower:swagger-ui to version 3.0.13 or higher.
solution:Upgrade org.webjars.bower:swagger-ui to version 3.20.9 or higher.
solution:Upgrade org.webjars.npm:nwmatcher to version 1.4.4 or higher.
solution:Upgrade org.webjars.bower:angular to version 1.5.0-beta.0 or higher.
solution:Upgrade org.webjars.bower:angular to version 1.6.5 or higher.
solution:There is no fixed version for org.webjars.npm:summernote.
solution:Upgrade org.webjars.npm:vega-embed to version 6.21.0 or higher.
solution:Upgrade org.webjars.npm:markdown-it to version 10.0.0 or higher.
solution:There is no fixed version for org.webjars.npm:electron.
solution:There is no fixed version for org.webjars.bowergithub.markdown-it:markdown-it.
solution:Upgrade org.webjars.bowergithub.snapappointments:bootstrap-select to version 1.13.6 or higher.
solution:There is no fixed version for org.webjars.npm:electron.
If for some reason you are unable to upgrade your Electron version, you can mitigate this issue by disabling all child web contents: view.webContents.on(&#39;-add-new-contents&#39;, e =&gt; e.preventDefault());
solution:There is no fixed version for org.webjars.bower:bootstrap-select.
solution:There is no fixed version for org.apache.marmotta.webjars:codemirror.
solution:Upgrade org.webjars.npm:bootstrap-select to version 1.13.6 or higher.
solution:Upgrade org.webjars:codemirror to version 5.58.2 or higher.
solution:Upgrade org.webjars.bowergithub.components:codemirror to version 5.55.0 or higher.
solution:Upgrade org.webjars.bowergithub.codemirror:codemirror to version 5.59.4 or higher.
solution:There is no fixed version for org.webjars.bower:showdown.
solution:Upgrade org.apache.nifi:nifi-standard-processors to version 0.4.0 or higher.
solution:Upgrade com.alibaba:fastjson to version 1.2.69 or higher.
solution:There is no fixed version for org.webjars.bowergithub.basecamp:trix.
solution:There is no fixed version for org.webjars.bowergithub.basecamp:trix.
solution:There is no fixed version for org.webjars.bower:trix.
solution:There is no fixed version for org.webjars.bowergithub.ain:smartbanner.js.
solution:Upgrade org.webjars.bower:handlebars to version 4.5.3 or higher.
solution:There is no fixed version for org.webjars.bowergithub.mochajs:mocha.
solution:Upgrade org.apache.thrift:libthrift to version 0.9.3 or higher.
solution:There is no fixed version for org.webjars.bower:mocha.
solution:There is no fixed version for org.webjars.bowergithub.kjur:jsrsasign.
solution:There is no fixed version for io.jenkins.plugins:cryptomove.
solution:Upgrade org.webjars.npm:tui-editor to version 2.2.0 or higher.
solution:Upgrade org.webjars.bower:tui-editor to version 2.2.0 or higher.
solution:There is no fixed version for org.webjars.bower:autolinker.
solution:There is no fixed version for org.webjars:js-yaml.
solution:Upgrade org.webjars.npm:buefy to version 0.8.18 or higher.
solution:There is no fixed version for org.webjars.bowergithub.buefy:buefy.
solution:Upgrade org.apache.thrift:libthrift to version 0.9.0 or higher.
solution:There is no fixed version for org.webjars.bower:semantic-ui.
solution:There is no fixed version for org.webjars.npm:electron.
solution:There is no fixed version for org.webjars.npm:markdown.
solution:There is no fixed version for org.webjars.bower:jsrsasign.
solution:Upgrade org.webjars.bowergithub.nodeca:js-yaml to version 3.13.0 or higher.
solution:Upgrade org.webjars:bootstrap-select to version 1.13.6 or higher.
solution:There is no fixed version for org.webjars.npm:markdown-to-jsx.
solution:Upgrade org.json4s:json4s-jackson to version 4.1.0-M2 or higher.
solution:Upgrade io.dropwizard:dropwizard-example to version 2.0.0-rc2 or higher.
solution:Upgrade org.webjars.bower:marked to version 0.3.18 or higher.
solution:Upgrade org.webjars.npm:angular to version 1.3.2 or higher.
solution:Upgrade org.webjars.npm:handlebars to version 4.7.2 or higher.
solution:A fix was pushed into the master branch but not yet published.
solution:Upgrade org.webjars:swagger-ui to version 3.0.14 or higher.
solution:Upgrade org.webjars:swagger-ui to version 2.1.0-M1 or higher.
solution:Upgrade org.webjars.npm:uikit to version 2.26.4 or higher.
solution:Upgrade org.webjars.npm:marked to version 0.6.1 or higher.
solution:Upgrade org.webjars.npm:marked to version 0.3.18 or higher.
solution:Upgrade org.webjars:swagger-ui to version 3.20.9 or higher.
solution:There is no fixed version for org.webjars.bower:autolinker.
solution:Upgrade org.apache.activemq:activemq-web-console to version 5.15.12 or higher.
solution:Upgrade io.konig:diff to version 3.5.0 or higher.
solution:Upgrade org.webjars:swagger-ui to version 2.2.5 or higher.
solution:There is no fixed version for org.webjars.npm:verdaccio.
solution:Upgrade org.webjars.npm:mocha to version 6.0.0 or higher.
solution:There is no fixed version for org.webjars:marked.
solution:Upgrade ractive to version 0.8.0 or higher.
solution:Upgrade org.webjars.npm:summernote to version 0.8.12 or higher.
solution:Upgrade org.webjars.npm:mobius1-selectr to version 2.4.11 or higher.
solution:Upgrade org.jenkins-ci.plugins:ease-plugin to version 2.2 or higher.
solution:Upgrade org.jenkins-ci.plugins:rabbitmq-publisher to version 1.2.0 or higher.
solution:There is no fix version for bootstrap-markdown.
solution:There is no fixed version for org.webjars.bowergithub.chjj:marked.
solution:Upgrade electron to version 1.6.8 or higher.
solution:Upgrade org.webjars.bower:angular to version 1.6.1 or higher.
solution:Upgrade org.jasig.cas.client:cas-client-core to version 3.6.0 or higher.
solution:Upgrade org.webjars.npm:redoc to version 2.0.0-rc.28 or higher.
solution:Upgrade com.acunetix:acunetix to version 1.1.0 or higher.
solution:Upgrade concat-stream to version 1.5.2 or higher.
Note This is vulnerable only for Node &lt;=4
solution:A fix was pushed into the master branch but not yet published.
solution:Upgrade org.restlet.lib:org.simpleframework.simple-xml to version 2.7.3 or higher.
solution:Upgrade org.webjars.bower:handlebars to version 4.0.14, 4.1.2 or higher.
solution:Upgrade org.webjars.bower:marked to version 0.3.9 or higher.
solution:Avoid using aws_codedeploy-agent altogether.
solution:Upgrade org.webjars.bower:swagger-ui to version 2.2.3 or higher.
solution:Upgrade jspdf to version v1.1.135 or higher.
solution:Upgrade jspdf to version v1.1.135 or higher.
solution:Upgrade datatables to version 1.10.10 or higher.
solution:Upgrade ag-grid to version 14.0.0 or higher.
solution:Upgrade org.webjars.bower:uikit to version 2.26.4 or higher.
solution:Upgrade dompurify to version 0.8.6 or higher.
solution:Upgrade datatables to version 1.10.10 or higher.
solution:Upgrade org.webjars.npm:vue-moment to version 4.1.0 or higher.
solution:There is no fixed version for org.webjars:superagent.
solution:Upgrade org.webjars.bowergithub.markedjs:marked to version 0.6.1 or higher.
solution:Upgrade jspdf to version v1.1.135 or higher.
solution:There is no fixed version for org.webjars.npm:pupa.
solution:Upgrade com.fasterxml.jackson.module:jackson-module-scala to version 2.9.9 or higher.
solution:Avoid using first-giving_api altogether.
solution:Upgrade dompurify to version 0.8.0 or higher.
solution:Upgrade org.webjars:swagger-ui to version 2.2.2 or higher.
solution:There is no fix version for erubis.
solution:Upgrade org.webjars.bowergithub.markedjs:marked to version 0.3.18 or higher.
solution:Upgrade org.apache.nifi:nifi-framework-core to version 1.5.0 or higher.
solution:Upgrade clearance to version 2.2.1 or higher.
solution:Avoid using admiral-stats_parser altogether.
solution:Avoid using accepts-nested_serialized_attributes altogether.
solution:Avoid using apress_changelogger altogether.
solution:Avoid using dragonfly_activerecord altogether.
solution:Upgrade io.quarkus:quarkus-vertx-http to version 1.5.2.Final or higher.
solution:Avoid using activerecord_locking-symbolic altogether.
solution:Avoid using at-least_one_existence_validator altogether.
solution:Upgrade com.itextpdf:kernel to version 7.1.7 or higher.
solution:Avoid using moving-words altogether.
solution:Upgrade activeadmin to version 1.0.0.pre1 or higher.
solution:Avoid using auto-flick altogether.
solution:Upgrade org.webjars:swagger-ui to version 2.1.0 or higher.
solution:Upgrade org.webjars.bower:swagger-ui to version 2.1.0 or higher.
solution:Upgrade neo4j-security to version 3.0.12 or higher.
solution:Avoid using halo-stats altogether.
solution:There is no fixed version for org.webjars:viewerjs.
solution:Upgrade org.apache.drill.exec:drill-java-exec to version 0.12.0 or higher
solution:There is no fixed version for org.webjars.bower:mobile-detect.
solution:Upgrade org.webjars:dustjs-linkedin to version 2.6.0 or higher.
solution:Upgrade org.webjars.npm:mobile-detect to version 1.4.0 or higher.
solution:Upgrade axis2 to version 1.7.4 or higher.
solution:Avoid using barometer-weather-bug altogether.
solution:Upgrade org.apache.hadoop:hadoop-yarn-common to version 2.7.3 or higher.
solution:Upgrade org.nd4j:nd4j-common to version 1.0.0-beta3 or higher.
solution:Upgrade org.apache.pdfbox:pdfbox to versions 1.8.13 ,2.0.2 or higher.
solution:Upgrade org.apache.kafka:kafka-streams to version 2.1.0 or higher.
solution:There is no fixed version for org.webjars.npm:content-type-parser.
solution:Upgrade org.webjars.bower:angular to version 1.6.7 or higher.
solution:Upgrade org.apache.axis2:axis2-transport-http to version 1.7.5 or higher.
solution:Upgrade org.webjars.npm:validator to version 9.4.1 or higher.
solution:Upgrade org.webjars.npm:angular to version 1.6.9 or higher.
solution:Upgrade org.webjars.npm:jasmine-core to version 3.1.0 or higher.
solution:Upgrade org.webjars.bower:bootstrap-select to version 1.13.6 or higher.
solution:
Upgrade npm to &quot;&gt;= 3.8.3 || &gt;= 2.15.1&quot;
Invalidate your current npm bearer tokens
solution:Upgrade com.fasterxml.jackson.core:jackson-databind to version 2.9.10, 2.8.11.5, 2.6.7.3 or higher.
solution:Upgrade org.apache.axis2:axis2 to version 1.7.4 or higher.
solution:Upgrade org.apache.zeppelin:zeppelin-web to version 0.8.2 or higher.
solution:Upgrade org.webjars.bower:angular to version 1.6.9 or higher.
solution:Upgrade org.webjars.npm:macaddress to version 0.5.2 or higher.
solution:Upgrade datatables to version 1.10.10 or higher.
solution:There is no fixed version for org.webjars.bower:quill.
solution:Upgrade mathjs to version 3.10.3 or higher.
solution:Upgrade moddle-xml to version 4.1.3 or higher
solution:Upgrade org.webjars.bower:redoc to version 2.0.0-rc.28 or higher.
solution:There is no fixed version for org.webjars.npm:bunyan.
solution:Upgrade org.apache.jackrabbit:jackrabbit-jcr-commons to version 2.4.6, 2.6.6, 2.10.2, 2.8.2, 2.12.1 or higher.
solution:Upgrade org.webjars.npm:quill to version 1.3.7 or higher.
solution:Avoid using fluent_plugin-dogstatsd-mediba altogether.
solution:Avoid using bosh-lastpass_plugin altogether.
solution:Upgrade org.apache.jackrabbit:jackrabbit-jcr-server to version 2.4.5, 2.6.3, 2.7.1 or higher.
solution:There is no fixed version for org.webjars.npm:electron.
solution:Upgrade org.webjars.npm:electron to version 6.1.10, 7.2.2, 8.2.0 or higher.
solution:There is no fixed version for org.webjars.npm:electron.
solution:Upgrade org.igniterealtime.smack:smack-core to version 4.3.4 or higher.
solution:Upgrade org.webjars.npm:swagger-ui to version 3.26.1 or higher.
solution:There is no fixed version for org.webjars.npm:electron.
solution:Upgrade org.webjars.bower:swagger-ui to version 3.26.1 or higher.
solution:Upgrade org.webjars:handlebars to version 4.5.3 or higher.
solution:There is no fixed version for com.brianfromoregon:caliper-ci.
solution:Avoid using alias-scope altogether.