org.apache.nifi:nifi-server-nar (=2.0.0-M3), org.apache.nifi:nifi-system-test-suite (>=2.0.0-M1 <=2.0.0-M3) potentially affected by CVE-2024-37389 via org.apache.nifi:nifi-web-ui (>=2.0.0-M1 <=2.0.0-M3)

org.apache.nifi:nifi-web-ui MAVEN version =2.0.0-M1, =2.0.0-M1, =2.0.0-M3 Source cves: CVE-2024-37389 Source advisory: OSV:GHSA-H658-QQV9-QWV8...

africanwhisper (>=0.2.8 <=0.9.0), agentx-tools (>=0.2.0 <=0.7.1) +118 more potentially affected by CVE-2024-38519 via yt-dlp (>=2021.9.2 <=2024.5.27)

yt-dlp PYPI version =2021.9.2, =0.2.8, =0.2.0, =2023.3.3, =0.1.0, =0.3.0, =0.1.0, =0.0.4, =0.9.0, =0.1.0, =1.4.0, =2024.3.25, =1.1.1, =0.1.0, =0.3.2 and more Source cves: CVE-2024-38519 Source advisory: OSV:GHSA-79W7-VH3H-8G4J...

africa.absa:inception-application (>=1.0.0 <=1.2.0), app.fmgp:scala-did-docs_3 (>=0.1.0-M16 <=0.1.0-M33) +3382 more potentially affected by CVE-2024-6162 via io.undertow:undertow-core (>=1.0.0.Alpha1 <=2.2.32.Final)

io.undertow:undertow-core MAVEN version =1.0.0.Alpha1, =1.0.0, =0.1.0-M16, =1.0.0, =0.4.0, =2.0.0, =1.0.2, =1.0.0, =1.2.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-6162 Source advisory: OSV:GHSA-9442-GM4V-R222...

abracadabra (>=0.0.0 <=0.0.7), aegis-tools (>=0.0.3 <=2.3.6) +721 more potentially affected by unknown CVE via tornado (>=3.0.0 <=6.4.0)

tornado PYPI version =3.0.0, =0.0.0, =0.0.3, =0.0.5, =1.0.0, =1.0.0, =0.31.0, =1.0.0, =1.3.0, =3.3.3, =0.0.9.1, =0.20.0, =0.9.5, =6.0.2, =1.1.8, =3.9.0, =3.9.0.post1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-753J-MPMX-QQ6G...

a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +144 more potentially affected by CVE-2024-37053 via mlflow (>=1.20.0 <=2.14.1)

mlflow PYPI version =1.20.0, =0.1.0, =0.0.5, =0.1.2, =1.0.72, =0.0.1, =1.0.72.1, =0.2.5, =0.1.3, =0.1.0, =0.3.5, =0.8.0, =1.2.0, =1.9.30 and more Source cves: CVE-2024-37053 Source advisory: OSV:GHSA-43C4-9QGJ-X742...

academic-chatgpt (>=0.3.0 <=0.4.1), agentverse (>=0.1.5 <=0.1.8.1) +123 more potentially affected by CVE-2024-34510 via gradio (>=1.7.7 <=4.19.2)

gradio PYPI version =1.7.7, =0.3.0, =0.1.5, =0.0.17, =0.0.2, =0.8.11, =0.7.0.dev134, =0.1.0rc1, =0.0.0, =0.0.23 - askdoc =0.1.1 and more Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

0.extends.wechat (>=1.0.51 <=1.0.65), 10secondsofcode-custom (=1.0.0) +5081 more potentially affected by unknown CVE via phin (>=1.0.8 <=3.7.0)

phin NPM version =1.0.8, =1.0.51, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =1.8.6, =0.5.0, =0.0.2, =1.0.1, =1.0.0, =0.1.13, =0.4.20 and more Source cves: unknown CVE Source advisory: OSV:GHSA-X565-32QP-M3VF...

acme-client (>=0.1.0 <=0.2.0), aerial (=0.1.0) +691 more potentially affected by unknown CVE via hpack (>=0.2.0 <=0.3.0)

hpack CARGO version =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.5.0, =0.1.3, =0.1.13 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W7HM-HMXV-PVHF...

@akrc/vidocs (>=0.0.0 <=0.0.2), @alexzzz/npms (>=0.0.5 <=0.2.0) +92 more potentially affected by CVE-2024-31207 via vite (>=3.0.0 <=3.2.1)

vite NPM version =3.0.0, =0.0.0, =0.0.5, =1.0.1, =1.0.1, =3.2.0, =0.0.37, =0.0.35, =0.2.3, =0.0.0-canary-20220718083044, =0.0.6, =0.1.0, =0.0.3, =6.24.0, =5.1.0, =5.1.2 and more Source cves: CVE-2024-31207 Source advisory: OSV:GHSA-8JHW-289H-JH2G...

org.apache.pulsar:pulsar-broker (=3.2.0), org.apache.pulsar:pulsar-broker-auth-athenz (=3.2.0) +3 more potentially affected by CVE-2024-27894 via org.apache.pulsar:pulsar-functions-worker (=3.2.0)

org.apache.pulsar:pulsar-functions-worker MAVEN version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-functions-worker and may be impacted: - org.apache.pulsar:pulsar-broker =3.2.0 -...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4 <=0.0.5), org.apache.pulsar:pulsar-broker-auth-athenz (>=2.11.0 <=2.11.3) +3 more potentially affected by CVE-2024-28098 via org.apache.pulsar:pulsar-broker (>=2.11.0 <=2.11.3)

org.apache.pulsar:pulsar-broker MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 Source cves: CVE-2024-28098 Source advisory: OSV:GHSA-G627-R579-RW35...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2024-0815 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves: CVE-2024-08...

a-data-processing (=0.0.1), ab-data-processing (=0.0.1) +151 more potentially affected by CVE-2024-28088 via langchain-core (>=0.0.1 <=0.1.3)

langchain-core PYPI version =0.0.1, =0.0.1, =0.8.0, =0.1.0, =0.2.0, =0.1.0, =0.1.5, =0.0.13, =0.3.5, =0.0.1, =0.0.4 and more Source cves: CVE-2024-28088 Source advisory: OSV:GHSA-H59X-P739-982C...

cartridge (>=1.0.0b1 <=1.3.1), cartridge-braintree (>=1.2.1 <=1.2.2) +4 more potentially affected by CVE-2024-25169 via mezzanine (>=3.1.10 <=6.0.0)

mezzanine PYPI version =3.1.10, =1.0.0b1, =1.2.1, =0.0.1, =0.1.0a1, =0.1.0b1, =0.4.1, =0.4.4 Source cves: CVE-2024-25169 Source advisory: OSV:GHSA-QP56-82VP-XQGV...

drc-cmis (>=1.3.0 <=1.6.0) potentially affected by unknown CVE via vng-api-common (=2.0.5)

vng-api-common PYPI version =2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on vng-api-common and may be impacted: - drc-cmis =1.3.0, =1.6.0 Source cves: unknown CVE Source advisory: OSV:GHSA-C4CM-R9FH-JGJ9...

01os (>=0.0.1 <=0.0.14), 0b1-protocol (>=0.1.0 <=0.1.3) +43060 more potentially affected by CVE-2024-23829 via aiohttp (>=0.13.1 <=3.9.1)

aiohttp PYPI version =0.13.1, =0.0.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1, =0.1.2, =0.1.3 - 1942pyc =7.0.1 and more Source cves: CVE-2024-23829 Source advisory: OSV:GHSA-8QPW-XQXJ-H4R2...

@1auth/authn-webauthn (>=0.0.0-alpha.0 <=0.0.0-alpha.3), @agentic/stdlib (>=7.4.0 <=7.6.9) +740 more potentially affected by CVE-2024-21484 via jsrsasign (>=0.0.3 <=10.9.0)

jsrsasign NPM version =0.0.3, =0.0.0-alpha.0, =7.4.0, =7.4.0, =6.0.0, =1.0.0-1.0.1.0, =1.0.0-1.0.1.0, =0.0.3-alpha.0, =2.0.0, =2.7.1, =6.0.0, =6.0.0, =0.1.0, =1.0.0, =5.0.0-3998.0 and more Source cves: CVE-2024-21484 Source advisory: OSV:GHSA-RH63-9QCF-83GF...

agixt (>=1.2.3 <=1.3.155), aicrowd-cli (>=0.1.8 <=0.1.15) +593 more potentially affected by CVE-2024-22190 via gitpython (>=0.3.4 <=3.1.40)

gitpython PYPI version =0.3.4, =1.2.3, =0.1.8, =0.5.0, =1.0.0, =1.0.1, =0.0.1, =2.0.1, =0.10.0, =0.0.1a0, =0.0.1b0, =0.0.3, =6.1.3, =0.0.3, =0.0.5rc2 - apache-liminal-test-spark =0.0.0 and more Source cves: CVE-2024-22190 Source advisory: OSV:GHSA-2MQJ-M65W-JGHX...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2023-52311 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves:...

org.jupiter-rpc:jupiter-example (>=1.2.0 <=1.2.7), org.jupiter-rpc:jupiter-extension-tracing (>=1.2.12 <=1.3.1-beta-2) +3 more potentially affected by CVE-2023-48887 via org.jupiter-rpc:jupiter-rpc (>=1.2.0 <=1.3.1)

org.jupiter-rpc:jupiter-rpc MAVEN version =1.2.0, =1.2.0, =1.2.12, =1.2.0, =1.2.0, =1.2.0, =1.3.1-beta-2 Source cves: CVE-2023-48887 Source advisory: OSV:GHSA-6PQX-V9G4-5HC8...