carpo (>=0.1.2, <=0.1.3) potentially affected by unknown CVE via conrod (0.61.1)

conrod CARGO version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on conrod and may be impacted: - carpo =0.1.2, =0.1.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0397...

bump (0.0.0), resufancy (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via filesystem (0.4.4)

filesystem CARGO version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on filesystem and may be impacted: - bump 0.0.0 - resufancy =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0015...

blake-streams (0.1.0), canary (>=0.0.6, <=0.1.6) +65 more potentially affected by CVE-2024-58265 via snow (>=0.1.9, <=0.9.3)

snow CARGO version =0.1.9, =0.0.6, =0.8.0, =0.1.0, =0.1.0, =0.8.0, =0.10.0, =1.0.0-rc.2, =0.8.0, =0.8.0, =1.0.0-rc.1, =0.13.0-rc.1, =1.0.0-rc.1, =0.8.0, =0.8.0, =1.0.0 and more Source cves: CVE-2024-58265 Source advisory: OSV:GHSA-7G9J-G5JG-3VV3...

objstor (>=0.4.6, <=0.4.20), rblog (>=0.100.0, <=0.123.0) +18 more potentially affected by CVE-2024-23644 via trillium-http (>=0.2.14, <=0.3.3)

trillium-http CARGO version =0.2.14, =0.4.6, =0.100.0, =0.2.0, =0.2.0-rc.1, =0.1.0, =0.2.0, =0.0.1, =0.2.0, =0.2.0, =0.3.0, =0.3.1 and more Source cves: CVE-2024-23644 Source advisory: OSV:GHSA-9F9P-CP3C-72JF...

objstor (>=0.4.6, <=0.4.20), trillium-acme (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2024-23644 via trillium-client (>=0.2.2, <=0.4.9)

trillium-client CARGO version =0.2.2, =0.4.6, =0.1.0, =0.2.0, =0.5.0 Source cves: CVE-2024-23644 Source advisory: OSV:GHSA-9F9P-CP3C-72JF...

@alexaegis/svelte-config (0.9.2), huntflow (>=1.0.2, <=1.0.3) potentially affected by CVE-2024-23641 via @sveltejs/kit (>=2.0.0, <=2.0.8)

@sveltejs/kit NPM version =2.0.0, =1.0.2, =1.0.3 Source cves: CVE-2024-23641 Source advisory: OSV:GHSA-G5M6-HXPP-FC49...

anchor-token (>=0.0.1, <=0.3.0), archid-marketplace (>=1.0.5, <=1.0.8) +150 more potentially affected by CVE-2024-58264 via serde-json-wasm (>=0.1.3, <=0.4.1)

serde-json-wasm CARGO version =0.1.3, =0.0.1, =1.0.5, =1.0.0, =1.0.0, =0.3.1, =0.1.0, =2.5.2, =0.1.0, =1.0.0, =0.4.0, =1.0.0, =2.2.0 - cosmwasm-contract-migratable-std 0.1.0 and more Source cves: CVE-2024-58264 Source advisory: OSV:RUSTSEC-2024-0012...

blake-streams (0.1.0), canary (>=0.0.6, <=0.1.6) +65 more potentially affected by CVE-2024-58265 via snow (>=0.1.9, <=0.9.3)

snow CARGO version =0.1.9, =0.0.6, =0.8.0, =0.1.0, =0.1.0, =0.8.0, =0.10.0, =1.0.0-rc.2, =0.8.0, =0.8.0, =1.0.0-rc.1, =0.13.0-rc.1, =1.0.0-rc.1, =0.8.0, =0.8.0, =1.0.0 and more Source cves: CVE-2024-58265 Source advisory: OSV:RUSTSEC-2024-0011...

objstor (>=0.4.6, <=0.4.20), rblog (>=0.100.0, <=0.123.0) +18 more potentially affected by CVE-2024-23644 via trillium-http (>=0.2.14, <=0.3.3)

trillium-http CARGO version =0.2.14, =0.4.6, =0.100.0, =0.2.0, =0.2.0-rc.1, =0.1.0, =0.2.0, =0.0.1, =0.2.0, =0.2.0, =0.3.0, =0.3.1 and more Source cves: CVE-2024-23644 Source advisory: OSV:RUSTSEC-2024-0009...

@aragonite/vbox-runner (>=0.0.1, <=0.0.2), @arisan/streamer2 (>=0.0.0, <=0.1.4) +116 more potentially affected by CVE-2024-21488 via network (>=0.0.12, <=0.6.1)

network NPM version =0.0.12, =0.0.1, =0.0.0, =1.0.0, =1.0.0-alpha-13, =0.0.3, =1.0.0, =0.0.0, =0.0.0, =0.0.0-beta.0, =3.0.0, =0.4.0, =1.0.0, =1.2.11 and more Source cves: CVE-2024-21488 Source advisory: SNYK:JS-NETWORK-6184371...

lillinput (>=0.2.1, <=0.3.0), lillinput-cli (0.3.0) potentially affected by CVE-2024-58266 via shlex (1.1.0)

shlex CARGO version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shlex and may be impacted: - lillinput =0.2.1, =0.3.0 - lillinput-cli 0.3.0 Source cves: CVE-2024-58266 Source advisory: OSV:GHSA-R7QV-8R2H-PG27...

shenmue.js-dev (0.0.20) potentially affected by unknown CVE via syxx.js (11.9.96)

syxx.js NPM version 11.9.96 is affected by a known vulnerability. The following packages have a transitive dependency on syxx.js and may be impacted: - shenmue.js-dev 0.0.20 Source cves: unknown CVE Source advisory: OSV:MAL-2024-144...

lillinput (>=0.2.1, <=0.3.0), lillinput-cli (0.3.0) potentially affected by CVE-2024-58266 via shlex (1.1.0)

shlex CARGO version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shlex and may be impacted: - lillinput =0.2.1, =0.3.0 - lillinput-cli 0.3.0 Source cves: CVE-2024-58266 Source advisory: OSV:RUSTSEC-2024-0006...

@aem-vite/import-rewriter (>=5.0.1, <=6.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=2.3.1) +145 more potentially affected by CVE-2024-23331 via vite (>=2.7.0, <=2.9.16)

vite NPM version =2.7.0, =5.0.1, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =0.9.1, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.37, =0.0.42 and more Source cves: CVE-2024-23331 Source advisory:...

@akrc/vidocs (>=0.0.0, <=0.0.2), @alexzzz/npms (>=0.0.5, <=0.2.0) +136 more potentially affected by CVE-2024-23331 via vite (>=3.0.0, <=3.2.7)

vite NPM version =3.0.0, =0.0.0, =0.0.5, =1.0.1, =1.0.1, =3.2.0, =1.11.2, =0.0.37, =0.0.35, =0.2.3, =0.0.0-canary-20220718083044, =0.0.6, =0.1.0, =0.0.3, =6.24.0, =7.12.2 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

@aklesky/vite-config (>=0.7.9, <=0.9.0), @angular-devkit/build-angular (>=17.1.0-next.0, <=17.1.0) +91 more potentially affected by CVE-2024-23331 via vite (>=5.0.0, <=5.0.11)

vite NPM version =5.0.0, =0.7.9, =17.1.0-next.0, =1.0.25-beta.0, =0.5.0, =0.22.0, =1.0.0-rc.12, =4.20.4, =1.0.0-dev.74fcb60, =1.0.274, =0.40.2, =0.0.7, =0.0.1, =11.12.0-beta.0, =11.13.0 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +415 more potentially affected by CVE-2024-23331 via vite (>=4.0.0, <=4.5.1)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by unknown CVE via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-58J9-J2FJ-V8F4...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58370 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58370 Source advisory: OSV:GHSA-6R8P-HPG7-825G...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58368 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58368 Source advisory: OSV:GHSA-M24X-R6Q3-2VP9...