c2pa (>=0.16.1, <=0.19.1), c2patool (>=0.3.9, <=0.5.1) potentially affected by unknown CVE via xmp_toolkit (1.7.3)

xmptoolkit CARGO version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on xmptoolkit and may be impacted: - c2pa =0.16.1, =0.3.9, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0360...

@a-type/ui (>=0.8.17, <=1.2.3), @adminjs/design-system (>=3.0.0-beta.4, <=3.1.1) +427 more potentially affected by unknown CVE via prosemirror-model (>=1.0.1, <=1.21.3)

prosemirror-model NPM version =1.0.1, =0.8.17, =3.0.0-beta.4, =0.1.0, =0.0.1, =13.1.0, =10.4.0, =0.0.2, =3.0.0, =16.0.0, =0.0.1, =3.1.7, =11.0.6, =4.0.13, =73.4.4, =194.4.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-PROSEMIRRORMODEL-7838221...

ayaka-model (0.2.0), ayaka-runtime (0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0, <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob 1.0.0-beta1 - icusegmenter 1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-74R5-G7VC-J2V2...

thelounge-plugin-shortcuts (1.0.13), thelounge-theme-flat-blue (>=1.4.3, <=1.5.9) +1 more potentially affected by unknown CVE via thelounge (4.2.0)

thelounge NPM version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on thelounge and may be impacted: - thelounge-plugin-shortcuts 1.0.13 - thelounge-theme-flat-blue =1.4.3, =1.4.2, =1.6.0 Source cves: unknown CVE Source advisory:...

emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MC39-H54G-PVW6...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +683 more potentially affected by unknown CVE via hpack (0.2.0)

hpack CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - acme-client =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.5.0, =0.1.3, =0.1.13 and more Source cves: unknown CVE Source advisory...

aipster (>=1.0.0, <=2.0.0), aki-image-view-gtk (>=0.2.0, <=0.2.10) +398 more potentially affected by unknown CVE via gdk-sys (>=0.2.1, <=0.18.2)

gdk-sys CARGO version =0.2.1, =1.0.0, =0.2.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.21.0, =0.30.1 - avr-vm 0.1.0 - awl 0.0.1 - bare-metrics-gui 0.1.0 - battery-savior 0.1.0 - bbfpromix 0.1.0 - beemovie-gui 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0418...

aipster (>=1.0.0, <=2.0.0), aki-image-view-gtk (>=0.2.0, <=0.2.10) +187 more potentially affected by unknown CVE via gtk3-macros (>=0.14.0, <=0.18.2)

gtk3-macros CARGO version =0.14.0, =1.0.0, =0.2.0, =0.1.0, =0.2.0-alpha, =0.29.2, =0.1.0, =0.1.0, =0.9.0, =0.1.0, =0.4.0, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0419...

ashpd (>=0.2.0-beta-1, <=0.4.0) potentially affected by unknown CVE via gdkwayland (>=0.15.5, <=0.17.0)

gdkwayland CARGO version =0.15.5, =0.2.0-beta-1, =0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0410...

minibili (>=0.3.0, <=0.3.1), perf-hook (>=1.0.1, <=1.0.4) +2 more potentially affected by unknown CVE via @sentry/react-native (>=5.16.0, <=5.17.0)

@sentry/react-native NPM version =5.16.0, =0.3.0, =1.0.1, =1.2.3, =1.2.7 - sentry-expo 7.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-68C2-4MPX-QH95...

@edropin/canvas (>=1.1.0, <=2.0.0), @launchtray/hatch-test-pdf (>=0.11.2, <=0.23.0) +15 more potentially affected by unknown CVE via pdf-image (>=1.1.0, <=2.0.0)

pdf-image NPM version =1.1.0, =1.1.0, =0.11.2, =0.2.0, =0.0.2, =0.13.0-beta.1, =0.0.2, =0.0.12, =0.19.5, =0.0.2, =0.1.1, =0.3.0, =0.1.1, =1.0.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-PDFIMAGE-6424686...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +2 more potentially affected by unknown CVE via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-58J9-J2FJ-V8F4...

certificate_authority (0.1.0), citadel_crypt (>=0.3.0, <=0.7.0) +14 more potentially affected by unknown CVE via pqc_kyber (>=0.4.0, <=0.7.1)

pqckyber CARGO version =0.4.0, =0.3.0, =0.3.0, =0.1.0-alpha, =1.3.0, =0.1.0, =11.0.0, =0.1.0, =9.0.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.19, =0.1.24 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0079...

@semic/admin-ui-vendure (1.0.3), @semic/common (>=2.0.0, <=2.1.3) +37 more potentially affected by unknown CVE via @vendure/core (>=2.0.3, <=2.1.2)

@vendure/core NPM version =2.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WM63-7627-CH33...

cpython-json (>=0.1.0, <=0.3.0), crowbar (>=0.1.0, <=0.2.0) +33 more potentially affected by unknown CVE via cpython (>=0.1.0, <=0.7.2)

cpython CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0-beta, =0.1.0, =0.0.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0076...

@10yun/cv-mobile-ui (0.3.20), @ant-hospital/drantsdk-module (1.0.0) +160 more potentially affected by unknown CVE via aaptjs (1.3.2)

aaptjs NPM version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on aaptjs and may be impacted: - @10yun/cv-mobile-ui 0.3.20 - @ant-hospital/drantsdk-module 1.0.0 - @chinapnr/dg-bill-plugin 1.1.0 - @dcloudio/uni-quickapp =2.0.0-26820200330001,...

amadeus (>=0.3.5, <=0.4.3), amadeus-parquet (>=0.3.5, <=0.4.3) +102 more potentially affected by unknown CVE via fehler (1.0.0)

fehler CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fehler and may be impacted: - amadeus =0.3.5, =0.3.5, =0.9.0, =0.9.0, =1.0.0, =0.0.2, =0.7.0, =0.5.0, =0.1.0, =0.1.0, =0.2.0, =0.3.2 and more Source cves: unknown CVE Source...

@xn-sakina/mahiro-png2jpg (>=1.0.0, <=14.0.3) potentially affected by unknown CVE via @napi-rs/image (1.6.1)

@napi-rs/image NPM version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on @napi-rs/image and may be impacted: - @xn-sakina/mahiro-png2jpg =1.0.0, =14.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-4VJR-CRVH-383H...

ahqstore_cli_rs (>=1.0.0-rc10, <=1.0.0-rc11), algebraics (>=0.1.2, <=0.2.0) +244 more potentially affected by unknown CVE via inventory (>=0.1.10, <=0.1.11)

inventory CARGO version =0.1.10, =1.0.0-rc10, =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.7.0, =0.6.0, =0.5.0, =0.6.0, =0.4.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0058...

ahtx0 (>=0.1.0, <=0.1.4), algostru (>=0.1.0, <=0.4.0) +415 more potentially affected by unknown CVE via tui (>=0.1.3, <=0.19.0)

tui CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.2, =0.1.6, =0.1.0, =0.1.0, =0.0.9, =0.0.1, =0.0.7 - ashiba 0.1.0 - atlas-tui 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0049...