@10duke/event-data-reader-cli (=1.0.0), @adonisjs/auth (>=4.0.0 <=4.0.1) +524 more potentially affected by CVE-2024-28176 via jose (>=0.3.2 <=2.0.5)

jose NPM version =0.3.2, =4.0.0, =0.4.0-next.10, =0.13.0, =1.6.0, =1.2.3, =1.6.11, =1.10.0, =1.0.0, =0.7.0, =0.1.1, =0.2.0, =0.2.33 - @arianee/arianee-server =0.0.1-beta and more Source cves: CVE-2024-28176 Source advisory: OSV:GHSA-HHHV-Q57G-882Q...

PT-2023-9863 · Unknown · Cfire24 Ajaxlife

Name of the Vulnerable Software and Affected Versions: cfire24 ajaxlife versions up to 0.3.2 Description: A vulnerability has been found in cfire24 ajaxlife, classified as problematic. The manipulation leads to cross site scripting. The attack can be initiated remotely. Recommendations: For cfire...