@automattic/jetpack-ai-client (>=0.1.5, <=0.16.1), @automattic/jetpack-components (>=0.41.2, <=0.56.0) +45 more potentially affected by CVE-2024-21489 via uplot (>=1.1.2, <=1.6.30)

uplot NPM version =1.1.2, =0.1.5, =0.41.2, =0.29.8, =0.11.2, =5.0.1-beta.0, =1.0.0, =0.0.2, =8.3.0-beta.1, =10.2.0-nightly.0238db42, =0.0.1-beta.4, =0.8.0, =0.0.1-preview1, =0.1.10, =0.14.0 and more Source cves: CVE-2024-21489 Source advisory: OSV:GHSA-34Q8-JCQ6-MC37...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @bndynet/bbootstrap (>=1.1.0, <=2.2.1) +41 more potentially affected by CVE-2024-53391 via pace-js (>=1.0.2, <=1.2.4)

pace-js NPM version =1.0.2, =1.0.0, =1.1.0, =1.0.0, =1.0.1, =0.0.0, =0.0.1, =2.0.2, =14.0.1, =1.0.4, =1.0.4, =1.0.114, =0.1.0, =0.20.0 - freeman-admintheme 1.2.1 and more Source cves: CVE-2024-53391 Source advisory: SNYK:JS-PACEJS-8136829...

20231122-npm (1.0.0), @3dr/potree (1.6.0) +3220 more potentially affected by CVE-2024-47178 via basic-auth-connect (1.0.0)

basic-auth-connect NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on basic-auth-connect and may be impacted: - 20231122-npm 1.0.0 - @3dr/potree 1.6.0 - @inlimbo/nativeui =0.0.1, =0.0.0, =0.20.0, =0.0.1, =0.0.1, =0.0.1, =1.0.1, =0.0.1,...

repo-to-pdf (0.1.6) potentially affected by CVE-2024-9283 via relaxedjs (0.2.4)

relaxedjs NPM version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on relaxedjs and may be impacted: - repo-to-pdf 0.1.6 Source cves: CVE-2024-9283 Source advisory: OSV:GHSA-GJ3P-J74V-3X57...

i-form-base (1.0.0) potentially affected by CVE-2024-47075 via layui (2.7.6)

layui NPM version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on layui and may be impacted: - i-form-base 1.0.0 Source cves: CVE-2024-47075 Source advisory: OSV:GHSA-J827-6RGF-9629...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), @_mehrad/ckeditor5-build-mmr (>=41.3.1, <=42.0.3) +583 more potentially affected by CVE-2024-45613 via ckeditor5 (>=40.0.0, <=43.1.0-alpha.8)

ckeditor5 NPM version =40.0.0, =0.0.1, =41.3.1, =2.1.0, =1.0.1, =0.0.1, =0.0.1, =1.0.0, =0.0.0-Beta1, =0.0.17-Beta, =0.0.15-Beta100, =0.0.1, =1.0.0, =0.0.1, =0.0.3, =0.0.8 and more Source cves: CVE-2024-45613 Source advisory: OSV:GHSA-RGG8-G5X8-WR9V...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), @_mehrad/ckeditor5-build-mmr (>=41.3.1, <=42.0.3) +586 more potentially affected by CVE-2024-45613 via @ckeditor/ckeditor5-clipboard (>=40.0.0, <=43.1.0-alpha.8)

@ckeditor/ckeditor5-clipboard NPM version =40.0.0, =0.0.1, =41.3.1, =2.1.0, =1.0.1, =0.0.1, =0.0.1, =1.0.0, =0.0.0-Beta1, =0.0.17-Beta, =0.0.15-Beta100, =0.0.1, =1.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2024-45613 Source advisory: OSV:GHSA-RGG8-G5X8-WR9V...

a-bot (0.0.1), a-gpt (>=0.1.0, <=0.4.0) +24298 more potentially affected by unknown CVE via atty (>=0.1.2, <=0.2.14)

atty CARGO version =0.1.2, =0.1.0, =0.0.5, =0.2.0, =0.0.1, =0.0.2, =0.4.1, =0.9.0, =0.1.0, =0.2.1, =1.0.3, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0375...

@rocket.chat/core-typings (>=6.3.0-rc.7, <=6.3.13), @rocket.chat/rest-typings (>=6.3.0-rc.7, <=6.3.13) potentially affected by CVE-2024-46935 via @rocket.chat/message-parser (0.31.24)

@rocket.chat/message-parser NPM version 0.31.24 is affected by a known vulnerability. The following packages have a transitive dependency on @rocket.chat/message-parser and may be impacted: - @rocket.chat/core-typings =6.3.0-rc.7, =6.3.0-rc.7, =6.3.13 Source cves: CVE-2024-46935 Source advisory:...

1k-tasks (>=4.0.0, <=4.2.2), @adobe/helix-deploy (>=9.3.8, <=9.6.1) +227 more potentially affected by CVE-2024-47068 via rollup (>=4.0.2, <=4.22.2)

rollup NPM version =4.0.2, =4.0.0, =9.3.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =2.17.15, =1.9.12, =18.1.0-rc.1, =18.1.0-rc.1, =10.0.0-alpha.0, =10.0.0-alpha.0, =13.0.0 and more Source cves: CVE-2024-47068 Source advisory: OSV:GHSA-GCX4-MW62-G8WM...

0.2-ui (0.0.1), 1k-tasks (>=2.3.0, <=3.0.2) +2349 more potentially affected by CVE-2024-47068 via rollup (>=2.0.0, <=2.79.1)

rollup NPM version =2.0.0, =2.3.0, =1.0.17, =1.0.0-canary.1, =1.0.0, =0.0.10, =0.0.3, =1.0.1, =1.0.12, =1.0.0, =0.0.4, =3.1.0-next.7, =3.1.0-next.7, =3.1.0-rc.2 and more Source cves: CVE-2024-47068 Source advisory: OSV:GHSA-GCX4-MW62-G8WM...

10-javascriptlib (1.0.0), 1k-tasks (>=3.1.0, <=3.6.1) +391 more potentially affected by CVE-2024-47068 via rollup (>=3.0.0, <=3.29.4)

rollup NPM version =3.0.0, =3.1.0, =9.0.19, =0.0.2, =4.0.0-alpha.2, =0.6.0, =12.0.0, =0.0.3, =0.1.0, =0.0.4, =3.0.1-canary.8, =3.0.1-canary.12 - @clairview/api 23.1.0 and more Source cves: CVE-2024-47068 Source advisory: OSV:GHSA-GCX4-MW62-G8WM...

@teable/sdk (>=1.5.0, <=1.8.0), @udecode/plate (>=37.0.0, <=38.0.5) +3 more potentially affected by CVE-2024-47061 via @udecode/plate-core (>=37.0.0, <=38.0.4)

@udecode/plate-core NPM version =37.0.0, =1.5.0, =37.0.0, =37.0.0, =37.0.0, =0.2.62, =0.2.83 Source cves: CVE-2024-47061 Source advisory: OSV:GHSA-73RG-F94J-XVHX...

@baseline-ui/app (0.22.1), @baseline-ui/core (0.22.1) +109 more potentially affected by CVE-2024-47061 via @udecode/plate-core (>=22.0.0, <=36.3.9)

@udecode/plate-core NPM version =22.0.0, =3.11.0, =0.1.0, =5.1.1, =0.0.1, =0.0.1, =0.0.2, =12.0.0-beta.405, =0.34.0, =0.9.7, =0.0.23, =0.2.8, =0.3.45 and more Source cves: CVE-2024-47061 Source advisory: OSV:GHSA-73RG-F94J-XVHX...

@directus/api (>=20.0.0-rc.0, <=22.1.1) potentially affected by CVE-2024-46990 via directus (>=11.0.0, <=11.0.2)

directus NPM version =11.0.0, =20.0.0-rc.0, =22.1.1 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

directus (>=11.0.0, <=11.0.1) potentially affected by CVE-2024-46990 via @directus/api (>=22.0.0, <=22.1.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.0.1 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

@directus/api (>=15.0.0, <=21.0.1), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-46990 via directus (>=10.8.3, <=10.13.2)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

1ocalendar (1.0.0), @alpaca-headless/alpaca-headless-nextjs (>=1.0.13, <=1.0.27) +152 more potentially affected by CVE-2024-46982 via next (>=13.5.1, <=13.5.6)

next NPM version =13.5.1, =1.0.13, =1.0.7, =1.0.0, =1.0.5, =0.1.0, =24.4.0, =0.2.7, =5.4.2, =1.0.0, =0.0.1, =0.0.14 and more Source cves: CVE-2024-46982 Source advisory: OSV:GHSA-GP8F-8M3G-QVJ9...

@janus-idp/backstage-plugin-keycloak-backend (1.0.0) potentially affected by CVE-2024-45815 via @backstage/plugin-catalog-backend (1.5.1)

@backstage/plugin-catalog-backend NPM version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-catalog-backend and may be impacted: - @janus-idp/backstage-plugin-keycloak-backend 1.0.0 Source cves: CVE-2024-45815 Source advisory:...

@angular-devkit/build-angular (>=18.2.0, <=19.0.0-next.6), @angular/build (>=18.2.0, <=19.0.0-next.6) +44 more potentially affected by CVE-2024-45812 via vite (>=5.4.0, <=5.4.5)

vite NPM version =5.4.0, =18.2.0, =18.2.0, =0.0.1-alpha.0, =1.0.1, =2025.1.17-950, =2025.2.11-1732, =18.2.0-snapshot-1724807614589, =18.2.0-snapshot-1724807614589, =2.2.1, =2.3.0, =0.0.1724939132543, =8.6.0, =1.0.15, =2.23.16, =2.27.11 and more Source cves: CVE-2024-45812 Source advisory:...