@bundly/ic-core-js (>=0.1.0, <=0.4.2-rc.4), @bundly/ic-react (>=0.1.0, <=0.4.2-rc.4) +8 more potentially affected by CVE-2024-1631 via @dfinity/auth-client (>=0.20.2, <=0.21.4)

@dfinity/auth-client NPM version =0.20.2, =0.1.0, =0.1.0, =0.1.1, =0.0.1, =0.0.1, =0.0.3, =0.0.2, =0.0.38-next-2023-12-19, =0.0.1, =0.0.7 Source cves: CVE-2024-1631 Source advisory: OSV:GHSA-C9VV-FHGV-CJC3...

@bundly/ic-core-js (>=0.1.0, <=0.4.2-rc.4), @bundly/ic-react (>=0.1.0, <=0.4.2-rc.4) +10 more potentially affected by CVE-2024-1631 via @dfinity/identity (>=0.20.2, <=0.21.4)

@dfinity/identity NPM version =0.20.2, =0.1.0, =0.1.0, =0.1.1, =0.0.1, =0.0.1, =0.0.44, =0.0.38-next-2023-12-19, =1.0.0, =0.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-1631 Source advisory: OSV:GHSA-C9VV-FHGV-CJC3...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58366 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58366 Source advisory: OSV:GHSA-Q3GG-M8HR-H4X4...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58365 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58365 Source advisory: OSV:GHSA-6WR5-JMPR-MJCX...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58364 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58364 Source advisory: OSV:GHSA-8XFF-473H-F863...

@apolitical/component-library (>=1.7.0-beta.1, <=10.5.2), @apolitical/styleguide2 (>=3.17.0-rc.1, <=7.8.1) +60 more potentially affected by CVE-2024-21535 via markdown-to-jsx (>=7.0.0, <=7.3.2)

markdown-to-jsx NPM version =7.0.0, =1.7.0-beta.1, =3.17.0-rc.1, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =6.1.1, =7.3.2, =0.1.0, =0.9.1, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =0.1.0-alpha.39, =1.1.1-beta.3, =1.2.2 and more Source cves: CVE-2024-21535 Source advisory:...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +1094 more potentially affected by CVE-2024-21501 via sanitize-html (>=2.1.0, <=2.12.0)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =3.0.0, =1.3.0, =0.2.0-a0, =1.0.0, =3.7.0, =0.2.47, =0.4.37, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.8.21 and more Source cves: CVE-2024-21501 Source advisory: SNYK:JS-SANITIZEHTML-6256334...

@persistr/cli (>=2.7.1, <=2.9.1), spidersharkcli (>=0.0.4, <=0.0.8) potentially affected by CVE-2024-21524 via node-stringbuilder (2.2.7)

node-stringbuilder NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-stringbuilder and may be impacted: - @persistr/cli =2.7.1, =0.0.4, =0.0.8 Source cves: CVE-2024-21524 Source advisory: SNYK:JS-NODESTRINGBUILDER-6421617...

08cms (1.0.0), @artdotstyle/filepix (>=1.0.10, <=1.0.11) +427 more potentially affected by CVE-2024-21523 via images (>=2.0.2, <=3.2.4)

images NPM version =2.0.2, =1.0.10, =1.1.2, =0.0.1, =0.1.0, =1.0.1, =1.4.0, =1.1.2, =1.1.8, =0.4.0, =0.6.2 and more Source cves: CVE-2024-21523 Source advisory: SNYK:JS-IMAGES-6421826...

@edropin/canvas (>=1.1.0, <=2.0.0), @launchtray/hatch-test-pdf (>=0.11.2, <=0.23.0) +15 more potentially affected by unknown CVE via pdf-image (>=1.1.0, <=2.0.0)

pdf-image NPM version =1.1.0, =1.1.0, =0.11.2, =0.2.0, =0.0.2, =0.13.0-beta.1, =0.0.2, =0.0.12, =0.19.5, =0.0.2, =0.1.1, =0.3.0, =0.1.1, =1.0.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-PDFIMAGE-6424686...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +195 more potentially affected by CVE-2024-21521 via @discordjs/opus (>=0.1.0, <=0.9.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.0, =2.0.0, =1.0.3, =1.0.1, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2024-21521 Source advisory: SNYK:JS-DISCORDJSOPUS-6370643...

3abn (>=1.0.0, <=2.1.11), @2003scape/rsc-sounds (>=1.0.0, <=1.0.1) +381 more potentially affected by CVE-2024-21526 via speaker (>=0.0.10, <=0.5.5)

speaker NPM version =0.0.10, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21526 Source advisory: SNYK:JS-SPEAKER-6370676...

@angular-devkit/build-angular (>=17.1.0-next.1, <=17.2.0-next.1), @directus/api (15.0.0) +16 more potentially affected by CVE-2024-24758 via undici (>=6.0.0, <=6.5.0)

undici NPM version =6.0.0, =17.1.0-next.1, =1.0.0, =17.0.0, =1.0.5, =5.3.0, =4.1.0, =4.2.0 - directus 10.8.3 and more Source cves: CVE-2024-24758 Source advisory: OSV:GHSA-3787-6PRV-H9W3...

2002-app-demo (>=1.0.0, <=1.2.1), 3.21lianxi (1.0.0) +1297 more potentially affected by CVE-2024-24758 via undici (>=5.0.0, <=5.28.2)

undici NPM version =5.0.0, =1.0.0, =0.5.0, =0.1.23, =0.2.0, =0.5.7, =17.0.0-rc.3, =1.0.0, =12.0.0, =0.2.1, =0.2.11, =0.4.12 and more Source cves: CVE-2024-24758 Source advisory: OSV:GHSA-3787-6PRV-H9W3...

@angular-devkit/build-angular (>=17.1.0-next.1, <=17.2.0-next.1), @directus/api (15.0.0) +16 more potentially affected by CVE-2024-24750 via undici (>=6.0.0, <=6.5.0)

undici NPM version =6.0.0, =17.1.0-next.1, =1.0.0, =17.0.0, =1.0.5, =5.3.0, =4.1.0, =4.2.0 - directus 10.8.3 and more Source cves: CVE-2024-24750 Source advisory: OSV:GHSA-9F24-JQHM-JFCW...

@icanbwell/composite (>=1.89.4, <=1.202.0), @icanbwell/native-components (>=0.21.6, <=0.31.0) +4 more potentially affected by CVE-2024-25466 via react-native-document-picker (>=9.0.1, <=9.1.0)

react-native-document-picker NPM version =9.0.1, =1.89.4, =0.21.6, =0.14.5, =1.1.0, =1.8.0 - @likeminds.community/feed-rn-core 0.6.0 - @likeminds.community/feed-rn-core-beta 0.0.1 Source cves: CVE-2024-25466 Source advisory: OSV:GHSA-PMGM-H3CC-M4HJ...

@kafudev/react-native-shell (>=0.66.4-beta.18, <=0.66.5-beta.8), @likeminds.community/chat-rn-core (>=0.5.0, <=1.0.1) +4 more potentially affected by CVE-2024-25466 via react-native-document-picker (>=8.0.0, <=8.2.0)

react-native-document-picker NPM version =8.0.0, =0.66.4-beta.18, =0.5.0, =0.0.8, =0.0.1, =0.5.0, =0.5.14 - yan-react-hook-form 0.1.7 Source cves: CVE-2024-25466 Source advisory: OSV:GHSA-PMGM-H3CC-M4HJ...

@etalab/cadastre (>=0.14.0-1, <=0.21.0), @fmidev/smartmet-alert-client (>=3.0.0-rc.1, <=3.8.8) +10 more potentially affected by CVE-2024-1163 via mapshaper (>=0.3.43, <=0.6.42)

mapshaper NPM version =0.3.43, =0.14.0-1, =3.0.0-rc.1, =0.1.9, =0.0.3, =2.1.0, =1.3.1, =0.0.1, =0.0.1, =0.1.0 - tile-maker 0.0.1 Source cves: CVE-2024-1163 Source advisory: OSV:GHSA-8M36-62RW-9MXW...

a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1147 more potentially affected by unknown CVE via libgit2-sys (>=0.1.13, <=0.15.2+1.6.4)

libgit2-sys CARGO version =0.1.13, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.1.0, =0.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q8-GHMQ-63VF...

abi-stable-host-api (>=0.1.1, <=0.1.13), abi_stable (>=0.2.0, <=0.11.3) +267 more potentially affected by unknown CVE via generational-arena (>=0.1.0, <=0.2.9)

generational-arena CARGO version =0.1.0, =0.1.1, =0.2.0, =0.4.0, =0.4.0, =0.5.0, =0.1.14, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.10.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0014...