nope-env (1.0.0) potentially affected by CVE-2020-26309 via nope-validator (0.11.3)

nope-validator NPM version 0.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on nope-validator and may be impacted: - nope-env 1.0.0 Source cves: CVE-2020-26309 Source advisory: OSV:GHSA-3PHV-83CJ-P8P7...

1game-texas-holdem (>=1.2.0, <=1.11.1), @1studio/ui (>=1.0.0-beta.1, <=3.9.0) +1088 more potentially affected by CVE-2020-26308 via validate.js (>=0.1.3, <=0.13.1)

validate.js NPM version =0.1.3, =1.2.0, =1.0.0-beta.1, =5.0.1, =0.1.0, =1.0.6, =3.3.20, =2.0.0-alpha.1, =0.3.9, =1.3.0, =1.2.1, =0.3.12, =1.3.12, =0.1.1, =0.1.26 and more Source cves: CVE-2020-26308 Source advisory: OSV:GHSA-RV73-9C8W-JP4C...

b4ae (>=2.0.0, <=2.1.3), clatter (>=0.1.2-alpha, <=2.0.0-rc.1) +28 more potentially affected by unknown CVE via pqcrypto-kyber (>=0.1.2, <=0.8.1)

pqcrypto-kyber CARGO version =0.1.2, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - qudag-exchange 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0381...

b4ae (>=2.0.0, <=2.1.3), crypt_guard (>=0.1.4, <=1.3.6) +25 more potentially affected by unknown CVE via pqcrypto-dilithium (>=0.1.1, <=0.5.0)

pqcrypto-dilithium CARGO version =0.1.1, =2.0.0, =0.1.4, =0.1.1, =0.1.0, =0.1.1, =0.0.1, =0.6.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0380...

@2digits/eslint-config (>=2.6.0, <=2.7.0), @2digits/eslint-plugin (>=2.2.9, <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (0.1.0)

@eslint/plugin-kit NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

1uphealth-provider-search (>=0.1.0, <=0.3.0), 20190403-utils (1.0.0) +6905 more potentially affected by CVE-2024-21538 via cross-spawn (>=6.0.0, <=6.0.5)

cross-spawn NPM version =6.0.0, =0.1.0, =0.1.0, =0.1.4, =0.1.0, =1.0.0-beta.1, =0.1.1, =0.1.72, =9.0.0, =3.0.0, =1.0.0, =1.0.3 - @352inc/react-scripts 2.0.5-custom-6 and more Source cves: CVE-2024-21538 Source advisory: SNYK:JS-CROSSSPAWN-8303230...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14298 more potentially affected by CVE-2024-21538 via cross-spawn (>=7.0.0, <=7.0.3)

cross-spawn NPM version =7.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0....

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +67 more potentially affected by CVE-2024-48963 via snyk-php-plugin (>=1.1.2, <=1.9.2)

snyk-php-plugin NPM version =1.1.2, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 and more Source cves: CVE-2024-48963 Source advisory: OSV:GHSA-69F9-H8F9-7VJF...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +67 more potentially affected by CVE-2024-48963 via snyk-php-plugin (>=1.1.2, <=1.9.2)

snyk-php-plugin NPM version =1.1.2, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 and more Source cves: CVE-2024-48963 Source advisory: SNYK:JS-SNYKPHPPLUGIN-8248485...

@alkemio/excalidraw (>=0.17.0-alkemio-1, <=0.17.6-alkemio-4), @betternotion/excalidraw (>=0.0.1-BETA, <=1.1.1) +140 more potentially affected by unknown CVE via mermaid (>=10.0.0, <=10.9.2)

mermaid NPM version =10.0.0, =0.17.0-alkemio-1, =0.0.1-BETA, =0.17.1, =0.0.19, =3.0.0, =0.0.12, =0.114.3, =0.4.0-1437953, =0.17.1, =18.0.3, =18.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M4GQ-X24J-JPMF...

@0xcleon/dain-bridge-sdk (>=1.0.0, <=1.0.17), @0xcleon/wormhole-sdk (>=0.1.0, <=0.10.19) +997 more potentially affected by CVE-2024-48930 via secp256k1 (>=3.0.1, <=3.8.0)

secp256k1 NPM version =3.0.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2, =0.1.0, =0.0.1, =0.0.3, =1.0.2, =1.1.0, =0.0.3, =0.0.1, =1.35.0, =0.13.3, =0.13.2, =7.16.1 and more Source cves: CVE-2024-48930 Source advisory: OSV:GHSA-584Q-6J8J-R5PM...

@0xvitto/context (>=0.1.0, <=0.1.1), @1001-digital/components.evm (>=1.3.0, <=4.2.1) +726 more potentially affected by CVE-2024-48930 via secp256k1 (5.0.0)

secp256k1 NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on secp256k1 and may be impacted: - @0xvitto/context =0.1.0, =1.3.0, =0.1.0, =1.2.2, =0.0.3, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.3, =0.1.0-alpha.20260610213851.5857f96, =1.0.5 an...

@0day-network/mod-renderer (>=0.1.0, <=0.1.1), @0day-network/react-sdk (>=0.0.1, <=0.2.1) +791 more potentially affected by CVE-2024-48930 via secp256k1 (>=4.0.0, <=4.0.3)

secp256k1 NPM version =4.0.0, =0.1.0, =0.0.1, =1.0.21, =1.0.6, =1.0.2, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.4.1 - @aloe2/abstract-eth 1.0.20228282226 - @aloe2/account-lib 2.20.20228282226 - @aloe2/bitgo 14.2.20228282226 - @aloe2/sdk-coin-avaxc 1.1.20228282226 - @aloe2/sdk-coin-bsc 1.0.20228282226 a...

@alfresco/adf-testing (6.0.0-A.2-8258), @aller/svelte-components (>=1.5.1, <=1.5.17) +207 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=2.0.0, <=2.0.6)

http-proxy-middleware NPM version =2.0.0, =1.5.1, =2.0.0, =17.0.0-next.0, =9.3.0, =2.3.1, =1.92.0, =1.0.1, =1.0.10, =1015.132.0, =0.0.1, =1.2.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21536 Source advisory: OSV:GHSA-C7QV-Q95Q-8V27...

@alfresco/adf-testing (6.0.0-A.2-8258), @aller/svelte-components (>=1.5.1, <=1.5.17) +207 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=2.0.0, <=2.0.6)

http-proxy-middleware NPM version =2.0.0, =1.5.1, =2.0.0, =17.0.0-next.0, =9.3.0, =2.3.1, =1.92.0, =1.0.1, =1.0.10, =1015.132.0, =0.0.1, =1.2.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21536 Source advisory: SNYK:JS-HTTPPROXYMIDDLEWARE-8229906...

@amazeelabs/publisher (>=2.4.28, <=2.5.8), @angular-devkit/build-angular (>=18.0.0-next.3, <=19.0.0-next.9) +65 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=3.0.0, <=3.0.2)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =18.0.0-next.3, =18.0.0-next.39, =18.0.0-next.39, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =8.10.0-nightly.20240906232837, =3.11.0-beta.6, =1.1.0, =0.0.26, =0.0.26, =8.0.0-canary.984, =9.0.0-canary.203 and more...

abraham3k (>=1.3.8, <=1.5.3), accutuning-helpers (>=1.0.32, <=1.0.33) +75 more potentially affected by CVE-2024-10073 via flair (>=0.4.5, <=0.15.1)

flair PYPI version =0.4.5, =1.3.8, =1.0.32, =0.0.1, =0.1.0, =0.0.6, =0.1.20, =0.1.0, =0.1.0, =0.0.1.1, =0.2.4, =0.1.1, =0.0.1rc2, =0.0.1rc3488056308109 and more Source cves: CVE-2024-10073 Source advisory: SNYK:PYTHON-FLAIR-8230414...

1k-tasks (>=0.0.1, <=1.0.5), 360-lib (1.0.0) +5501 more potentially affected by CVE-2026-9496 via pacote (>=11.2.7, <=21.5.0)

pacote NPM version =11.2.7, =0.0.1, =0.1.13, =52.3.0, =4.0.0, =4.2.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.2.17 and more Source cves: CVE-2026-9496 Source advisory: SNYK:JS-PACOTE-8225084...

0-1-project (0.0.1), 0.8.18-p11 (0.8.18-p12) +61272 more potentially affected by CVE-2024-9506 via vue (>=2.0.0, <=2.7.16)

vue NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.1.0, =1.1.0, =1.2.3 and more Source cves: CVE-2024-9506 Source advisory: OSV:GHSA-5J4C-8P2G-V4JX...

@dstny/scp-sdk (>=2.0.0, <=3.0.0-rc3), @elizaos/plugin-matrix (>=2.0.0-alpha.3, <=2.0.0-alpha.8) +33 more potentially affected by CVE-2024-47080 via matrix-js-sdk (>=9.11.0, <=34.7.0-rc.0)

matrix-js-sdk NPM version =9.11.0, =2.0.0, =2.0.0-alpha.3, =2.0.0-alpha.1, =1.4.1, =2.5.0, =0.2.0, =0.0.14, =0.0.1, =0.0.0-development, =0.17.0, =4.0.1, =1.2.0, =0.1.14, =0.1.18, =0.2.4 - @zqbflynn/kernel 6.4.2 and more Source cves: CVE-2024-47080 Source advisory: OSV:GHSA-4JF8-G8WP-CX7C...