@directus/api (>=20.0.0-rc.0, <=23.1.2) potentially affected by CVE-2024-54128 via directus (>=11.0.0, <=11.2.1)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.1.2 Source cves: CVE-2024-54128 Source advisory: OSV:GHSA-R6WX-627V-GH2F...

@directus/api (>=18.0.0, <=21.0.1) potentially affected by CVE-2024-54128 via directus (>=10.10.0, <=10.13.2)

directus NPM version =10.10.0, =18.0.0, =21.0.1 Source cves: CVE-2024-54128 Source advisory: OSV:GHSA-R6WX-627V-GH2F...

@directus/api (>=18.0.0, <=23.1.0), @linotype/directus-extension-linotype (>=1.2.2, <=1.3.5) +3 more potentially affected by CVE-2024-54128 via @directus/app (>=11.0.0, <=13.3.0)

@directus/app NPM version =11.0.0, =18.0.0, =1.2.2, =10.10.0, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2024-54128 Source advisory: OSV:GHSA-R6WX-627V-GH2F...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53857 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53857 Source advisory: OSV:GHSA-4GRW-M28R-Q285...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53856 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53856 Source advisory: OSV:GHSA-9RMP-2568-59RV...

dbs-arch (>=0.2.2, <=0.2.3), dbs-boot (>=0.3.0, <=0.4.0) +8 more potentially affected by unknown CVE via kvm-ioctls (>=0.6.1, <=0.18.0)

kvm-ioctls CARGO version =0.6.1, =0.2.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.29, =0.1.0, =2.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0428...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53856 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53856 Source advisory: OSV:RUSTSEC-2024-0447...

custom-firepad-toolbar (>=1.0.0, <=1.0.3), devshare (>=0.1.0, <=0.4.0-alpha) +5 more potentially affected by CVE-2024-51210 via firepad (>=1.3.0, <=1.5.11)

firepad NPM version =1.3.0, =1.0.0, =0.1.0, =0.0.50, =0.5.1, =0.9.9 - redux-devshare 0.3.0 Source cves: CVE-2024-51210 Source advisory: OSV:GHSA-4FH7-M2WX-6WFM...

flowlang (>=0.1.6, <=0.1.8), lavendeux-parser (>=0.3.0, <=0.8.1) +1 more potentially affected by unknown CVE via js-sandbox (0.1.6)

js-sandbox CARGO version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on js-sandbox and may be impacted: - flowlang =0.1.6, =0.3.0, =0.1.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-4MW5-2636-4535...

aide (>=0.1.0, <=0.4.3), bpxe (>=0.1.0, <=0.1.2) +66 more potentially affected by unknown CVE via linkme (>=0.1.6, <=0.2.10)

linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:GHSA-F95P-4CV5-8W8X...

acir (>=0.44.0, <=0.46.0), age (>=0.7.0, <=0.9.3) +154 more potentially affected by unknown CVE via pprof (>=0.3.23, <=0.13.0)

pprof CARGO version =0.3.23, =0.44.0, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.2, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0, =0.1005.0, =0.1010.2 - binario 0.0.2 - bmssp 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0408...

@backstage/backend-dynamic-feature-service (>=0.0.0-nightly-20240116021644, <=0.1.1-next.2), @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-2021101022158, <=0.0.0-nightly-20260904022803) +25 more potentially affected by CVE-2024-53983 via @backstage/plugin-scaffolder-node (>=0.0.0-nightly-20240929023448, <=0.4.3)

@backstage/plugin-scaffolder-node NPM version =0.0.0-nightly-20240929023448, =0.0.0-nightly-20240116021644, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20231213021616, =0.0.0-nightly-20231213021616, =0.0.0-nightly-20240207020916, =0.0.0-nightly-20240207020916, =0.0.0-nightly-20230325022054,...

@backstage/backend-dynamic-feature-service (>=0.0.0-nightly-20241120023536, <=0.0.0-nightly-20241121023535), @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20241120023536, <=0.0.0-nightly-20241121023535) +1 more potentially affected by CVE-2024-53983 via @backstage/plugin-scaffolder-node (0.6.0)

@backstage/plugin-scaffolder-node NPM version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-scaffolder-node and may be impacted: - @backstage/backend-dynamic-feature-service =0.0.0-nightly-20241120023536,...

@backstage/backend-dynamic-feature-service (>=0.4.2-next.1, <=0.4.2-next.2), @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20241017023338, <=1.26.0-next.2) +10 more potentially affected by CVE-2024-53983 via @backstage/plugin-scaffolder-node (0.5.0-next.2)

@backstage/plugin-scaffolder-node NPM version 0.5.0-next.2 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-scaffolder-node and may be impacted: - @backstage/backend-dynamic-feature-service =0.4.2-next.1, =0.0.0-nightly-20241017023338,...

1405-authtokens (>=1.0.1, <=1.0.5), 1405_logging (1.0.0) +4123 more potentially affected by CVE-2024-53900 via mongoose (>=3.6.2, <=5.13.22)

mongoose NPM version =3.6.2, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.0.1, =0.3.5, =0.2.0, =0.0.1, =1.0.16, =1.0.30, =1.0.95 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

@3kles/3kles-coremongodb (>=2.1.5, <=2.1.6), @akemona-org/strapi-connector-mongoose (>=3.13.0, <=3.16.2) +96 more potentially affected by CVE-2024-53900 via mongoose (>=8.0.0, <=8.8.2)

mongoose NPM version =8.0.0, =2.1.5, =3.13.0, =2.0.0, =0.0.34, =0.5.0, =0.4.3, =0.4.5, =0.4.12, =4.1.5, =1.3.5, =0.0.5, =0.2.1, =8.3.1, =4.8.0, =1.0.0, =1.2.2 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +111 more potentially affected by CVE-2024-53900 via mongoose (>=7.0.0, <=7.8.2)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =1.0.0, =1.0.6-beta.0, =0.2.0-alpha.1, =0.2.0-alpha.0, =0.0.0, =1.0.2, =1.0.0, =1.0.9 - @dedel.alex/adonis5-mongoose 7.6.10 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +414 more potentially affected by CVE-2024-53900 via mongoose (>=6.0.1, <=6.13.4)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.1.16 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

@alfaris/scratch-vm (1.0.0), @antv/g6 (>=5.0.0-beta.33, <=5.0.44) +83 more potentially affected by unknown CVE via hull.js (>=0.2.10, <=1.0.6)

hull.js NPM version =0.2.10, =5.0.0-beta.33, =5.1.12, =1.8.20, =1.0.2, =0.1.0, =0.0.1739797164641, =1.3.0, =0.1.0, =0.5.7, =1.0.0, =0.1.0-raspberrypifoundation.20210805151219, =1.0.0, =1.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q849-WXRC-VQRP...

@actindo/core-ui (>=0.0.17, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +138 more potentially affected by CVE-2024-52810 via @intlify/shared (>=9.7.0, <=9.14.1)

@intlify/shared NPM version =9.7.0, =0.0.17, =0.0.1, =0.0.1, =0.0.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =0.17.0, =0.17.0, =0.17.0, =0.18.1 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4X6C...