@alexlit/config-markdownlint (2.8.0), @cluenar/tools (>=1.0.0, <=2.0.1) +59 more potentially affected by unknown CVE via smol-toml (>=1.1.2, <=1.3.0)

smol-toml NPM version =1.1.2, =1.0.0, =3.0.0, =4.2.1-alpha.1, =0.0.0, =1.1.0, =0.2.7, =0.0.1, =1.0.10, =7.6.4-next.39, =7.6.4-next.39, =7.6.4-next.39, =7.6.4-next.39, =9.0.0-canary.257 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PQHP-25J4-6HQ9...

airframe_recovery_bundle (>=1.0.0, <=1.0.2), cryptoballot (>=0.2.0, <=0.3.1) +9 more potentially affected by unknown CVE via sharks (>=0.3.3, <=0.5.0)

sharks CARGO version =0.3.3, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.7.1, =0.1.0, =0.1.0, =0.1.2 - tsafe-collab 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0398...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys-cdylib (>=0.3.0, <=0.3.1) potentially affected by unknown CVE via libz-rs-sys (>=0.1.1, <=0.3.1)

libz-rs-sys CARGO version =0.1.1, =1.0.29, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0401...

gpiocdev (>=0.4.3, <=0.7.0), gpiocdev-embedded-hal (0.1.0) +1 more potentially affected by CVE-2024-51756 via cap-std (3.0.0)

cap-std CARGO version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cap-std and may be impacted: - gpiocdev =0.4.3, =0.16.0, =0.16.3 Source cves: CVE-2024-51756 Source advisory: OSV:GHSA-HXF5-99XG-86HW...

crypt_guard (>=1.2.7, <=1.3.6), crypt_guard_lite (>=0.1.0, <=0.2.2) +11 more potentially affected by unknown CVE via pqcrypto-dilithium (>=0.1.1, <=0.5.0)

pqcrypto-dilithium CARGO version =0.1.1, =1.2.7, =0.1.0, =0.0.1, =0.6.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 - zkswasm 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0380...

@0xcleon/dain-bridge-sdk (>=1.0.0, <=1.0.17), @0xcleon/wormhole-sdk (>=0.1.0, <=0.10.19) +999 more potentially affected by CVE-2024-48930 via secp256k1 (>=3.0.1, <=3.8.0)

secp256k1 NPM version =3.0.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2, =0.1.0, =0.0.1, =0.0.3, =1.0.2, =1.1.0, =0.0.1, =1.35.0, =0.13.3, =0.13.2, =6.0.0-beta.1, =7.16.1 and more Source cves: CVE-2024-48930 Source advisory: OSV:GHSA-584Q-6J8J-R5PM...

@ohos-ports/udecode-plate-serializer-md (37.0.0-beta.2), @teable/sdk (>=1.5.0, <=1.8.0) +4 more potentially affected by CVE-2024-47061 via @udecode/plate-core (>=37.0.0, <=38.0.4)

@udecode/plate-core NPM version =37.0.0, =1.5.0, =37.0.0, =37.0.0, =37.0.0, =0.2.62, =0.2.83 Source cves: CVE-2024-47061 Source advisory: OSV:GHSA-73RG-F94J-XVHX...

afarray (>=0.1.0, <=0.1.1), get-size (>=0.1.0, <=0.1.4) +13 more potentially affected by unknown CVE via get-size-derive (>=0.1.2, <=0.1.3)

get-size-derive CARGO version =0.1.2, =0.1.0, =0.1.0, =0.0.0, =0.0.0, =0.0.1, =0.21.0, =0.21.0, =0.1.0, =0.7.0, =0.30.0, =0.30.0, =0.7.0, =0.7.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0427...

bitcoin (>=0.4.2, <=0.18.2), bitcoin-amount (>=0.1.3, <=0.1.4) +21 more potentially affected by unknown CVE via strason (>=0.3.4, <=0.4.0)

strason CARGO version =0.3.4, =0.4.2, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 - hal-elements 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0386...

aquatic_common (0.2.0), core-allocator (>=0.1.0, <=0.1.6) +14 more potentially affected by unknown CVE via hwloc (>=0.3.0, <=0.5.0)

hwloc CARGO version =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6, =6.0.0, =6.0.0, =0.1.1, =0.11.0, =5.0.0, =5.2.2, =18.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0382...

gitoxide (>=0.1.0, <=0.15.0) potentially affected by CVE-2024-43785 via gitoxide-core (>=0.1.0, <=0.17.0)

gitoxide-core CARGO version =0.1.0, =0.1.0, =0.15.0 Source cves: CVE-2024-43785 Source advisory: OSV:GHSA-88G2-R9RW-G55H...

OSV-2024-1031 Use-of-uninitialized-value in Http3FrameFactory::create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537939 Crash type: Use-of-uninitialized-value Crash state: Http3FrameFactory::create Http3FrameFactory::fastcreate fuzzhttp3frame.cc...

OSV-2024-925 Index-out-of-bounds in derive_collocated_motion_vectors

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537038 Crash type: Index-out-of-bounds Crash state: derivecollocatedmotionvectors derivetemporallumavectorprediction getmergecandidatelistwithoutstep9...

OSV-2024-868 Use-of-uninitialized-value in evutil_inet_pton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69173 Crash type: Use-of-uninitialized-value Crash state: evutilinetpton bracketaddrok parseauthority...

@directus/api (>=15.0.0, <=19.3.1), @meta-factory/cms (0.1.1) +6 more potentially affected by CVE-2024-39896 via directus (>=9.21.2, <=10.12.1)

directus NPM version =9.21.2, =15.0.0, =0.1.0, =1.2.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2024-39896 Source advisory: OSV:GHSA-JGF4-VWC3-R46V...

ayaka-model (0.2.0), baked (1.0.0) +15 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0, <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob 1.0.0-beta1 - icusegmenter 1.0.0-alpha1 - icusegmenterlstm 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0346...

a2d (>=0.1.0, <=0.1.11), abstract-adapter-utils (>=0.16.0, <=0.19.2) +2456 more potentially affected by unknown CVE via derivative (>=1.0.4, <=2.2.0)

derivative CARGO version =1.0.4, =0.1.0, =0.16.0, =0.1.0-rc.2, =0.0.1, =0.1.0-rc.2, =0.2.0-beta.4, =0.2.0-beta.4, =0.0.1, =0.0.1, =0.0.1, =0.1.0-rc.1, =0.0.1, =0.14.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0388...

-temp-electron-manager-somiibo (0.0.200), 0xpass (>=0.0.2, <=0.0.8) +4308 more potentially affected by CVE-2024-37168 via @grpc/grpc-js (>=1.0.0, <=1.8.21)

@grpc/grpc-js NPM version =1.0.0, =0.0.2, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =2.0.0, =0.3.30, =0.3.30, =0.4.16 and more Source cves: CVE-2024-37168 Source advisory: OSV:GHSA-7V5V-9H63-CJ86...

PT-2024-40366

Name of the Vulnerable Software and Affected Versions OSV affected versions not specified Description A security issue has been found where login failures are logged on the default stream with log level "warning", including plain-text user credentials. Recommendations At the moment, there is no...