inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2024-28101 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2024-28101 Source advisory: OSV:GHSA-CGQF-3CQ5-WVCJ...

vl-convert-rs (0.8.0) potentially affected by CVE-2024-27936 via deno_runtime (0.105.0)

denoruntime CARGO version 0.105.0 is affected by a known vulnerability. The following packages have a transitive dependency on denoruntime and may be impacted: - vl-convert-rs 0.8.0 Source cves: CVE-2024-27936 Source advisory: OSV:GHSA-M4PQ-FV2W-6HRW...

aide (>=0.1.0, <=0.4.3), bpxe (>=0.1.0, <=0.1.2) +66 more potentially affected by unknown CVE via linkme (>=0.1.6, <=0.2.10)

linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0407...

aaa (>=0.1.0, <=1.1.1), abbegm (0.5.0) +1501 more potentially affected by CVE-2024-27308 via mio (>=0.7.14, <=0.8.8)

mio CARGO version =0.7.14, =0.1.0, =2.0.0-beta.1, =0.9.0, =0.9.0, =0.1.0, =0.1.0, =1.0.9, =1.0.11 - aminograph 0.0.1 and more Source cves: CVE-2024-27308 Source advisory: OSV:GHSA-R8W9-5WCG-VFJ7...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +244 more potentially affected by CVE-2024-27307 via jsonata (>=1.5.0, <=1.8.6)

jsonata NPM version =1.5.0, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.8.0, =0.0.1, =1.0.0, =1.0.1, =2.0.0, =2.0.4 - @elastic.io/batching-library 2.0.1-dev.4 and more Source cves: CVE-2024-27307 Source advisory: OSV:GHSA-FQG8-VFV7-8FJ8...

@activepieces/piece-json (0.1.7), @bifravst/muninn-proto (>=5.0.0, <=5.2.0) +10 more potentially affected by CVE-2024-27307 via jsonata (>=2.0.0, <=2.0.3)

jsonata NPM version =2.0.0, =5.0.0, =2.3.132, =1.0.0, =1.0.0, =0.14.0, =5.1.0, =4.0.0, =1.0.7, =1.0.17 - renovate 36.109.4 Source cves: CVE-2024-27307 Source advisory: OSV:GHSA-FQG8-VFV7-8FJ8...

@attq/blackboox (>=0.4.0, <=0.5.5), @overwolf/ow-electron-builder (>=24.7.0-beta.0, <=24.7.0) +11 more potentially affected by CVE-2024-27303 via app-builder-lib (>=24.0.0-alpha.1, <=24.13.1)

app-builder-lib NPM version =24.0.0-alpha.1, =0.4.0, =24.7.0-beta.0, =1.0.0-canary.0, =24.6.3, =24.0.0-alpha.1, =24.0.0-alpha.1, =24.0.0-alpha.1, =1.0.0, =24.0.0-alpha.1, =24.0.0-alpha.1, =24.0.0-alpha.1, =24.0.0-alpha.1, =24.13.1 Source cves: CVE-2024-27303 Source advisory: OSV:GHSA-R4PF-3V7R-HH...

aaa (>=0.1.0, <=1.1.1), abbegm (0.5.0) +1501 more potentially affected by CVE-2024-27308 via mio (>=0.7.14, <=0.8.8)

mio CARGO version =0.7.14, =0.1.0, =2.0.0-beta.1, =0.9.0, =0.9.0, =0.1.0, =0.1.0, =1.0.9, =1.0.11 - aminograph 0.0.1 and more Source cves: CVE-2024-27308 Source advisory: OSV:RUSTSEC-2024-0019...

minibili (>=0.3.0, <=0.3.1), perf-hook (>=1.0.1, <=1.0.4) +2 more potentially affected by unknown CVE via @sentry/react-native (>=5.16.0, <=5.17.0)

@sentry/react-native NPM version =5.16.0, =0.3.0, =1.0.1, =1.2.3, =1.2.7 - sentry-expo 7.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-68C2-4MPX-QH95...

sn-cicd (>=4.6.12, <=4.6.17) potentially affected by CVE-2023-52555 via mongo-express (1.0.0-alpha.1)

mongo-express NPM version 1.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongo-express and may be impacted: - sn-cicd =4.6.12, =4.6.17 Source cves: CVE-2023-52555 Source advisory: OSV:GHSA-FFFG-CWC9-XVJ7...

@1inch/calldata-compressor (>=0.0.6, <=0.0.7), @1inch/delegating (>=1.1.0, <=2.0.0) +29 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts (>=5.0.0, <=5.0.1)

@openzeppelin/contracts NPM version =5.0.0, =0.0.6, =1.1.0, =3.2.0, =4.0.0-prerelease-16, =4.0.1, =2.0.0-prerelease, =3.3.0, =1.2.0, =2.0.0-rc.0, =0.0.2-00080dc-272, =1.0.0, =2.5.5, =2.7.0-3 and more Source cves: CVE-2024-27094 Source advisory: OSV:GHSA-9VX6-7XXF-X967...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1505 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts (>=4.5.0, <=4.9.5)

@openzeppelin/contracts NPM version =4.5.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2024-27094 Source advisory: OSV:GHSA-9VX6-7XXF-X967...

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +432 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts-upgradeable (>=4.5.0, <=4.9.5)

@openzeppelin/contracts-upgradeable NPM version =4.5.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =0.2.1-alpha, =0.2.1-beta2 and more Source cves: CVE-2024-27094 Source advisory:...

@rocketmakers/prettier-config (>=1.0.1, <=2.1.0), @rocketmakers/stylelint-config (>=1.0.1, <=2.1.0) potentially affected by CVE-2024-1899 via showdown (2.0.1)

showdown NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on showdown and may be impacted: - @rocketmakers/prettier-config =1.0.1, =1.0.1, =2.1.0 Source cves: CVE-2024-1899 Source advisory: OSV:GHSA-RMMH-P597-PPVV...

@alfresco/adf-testing (6.0.0-A.2-8258), @avnet-iotc/iotc-demo (1.0.0-beta-2) +121 more potentially affected by CVE-2024-27088 via es5-ext (>=0.10.53, <=0.10.62)

es5-ext NPM version =0.10.53, =0.30.77, =0.30.77, =0.29.0, =0.29.0, =0.29.0, =0.30.46, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.30.66 and more Source cves: CVE-2024-27088 Source advisory: OSV:GHSA-4GMJ-3P3H-GM8H...

org.webjars:angular-markdown-directive (0.3.0) potentially affected by CVE-2024-1899 via org.webjars:showdown (0.3.1)

org.webjars:showdown MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:showdown and may be impacted: - org.webjars:angular-markdown-directive 0.3.0 Source cves: CVE-2024-1899 Source advisory: SNYK:JAVA-ORGWEBJARS-8685134...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), org.webjars.npm:github-com-showdownjs-ng-showdown (1.1.0) +3 more potentially affected by CVE-2024-1899 via org.webjars.npm:showdown (>=1.9.1, <=2.1.0)

org.webjars.npm:showdown MAVEN version =1.9.1, =2.0.0, =1.0.2, =1.0.3 - org.webjars.npm:showdown-prism 0.2.0 Source cves: CVE-2024-1899 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-8685132...

org.webjars.bower:ng-swagger-ui (0.0.4) potentially affected by CVE-2024-1899 via org.webjars.bower:showdown (1.7.6)

org.webjars.bower:showdown MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bower:showdown and may be impacted: - org.webjars.bower:ng-swagger-ui 0.0.4 Source cves: CVE-2024-1899 Source advisory:...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +1094 more potentially affected by CVE-2024-21501 via sanitize-html (>=2.1.0, <=2.12.0)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =3.0.0, =1.3.0, =0.2.0-a0, =1.0.0, =3.7.0, =0.2.47, =0.4.37, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.8.21 and more Source cves: CVE-2024-21501 Source advisory: OSV:GHSA-RM97-X556-Q36H...

@adamlonsdale/backstage-plugin-armorcode-backend (>=0.0.1-alpha, <=0.0.4), @austin-garrard/backstage-plugin-backend (>=0.0.1-alpha.22, <=0.0.1) +194 more potentially affected by CVE-2024-26150 via @backstage/backend-common (>=0.0.0-nightly-20220708025041, <=0.17.0)

@backstage/backend-common NPM version =0.0.0-nightly-20220708025041, =0.0.1-alpha, =0.0.1-alpha.22, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-20220709024234, =0.0.0-nightly-20220811024336, =0.0.0-nightly-20240116021644, =0.0.0-nightly-20220709024234, =0.0.0-nightly-2021101322257,...