@colmena/colmena-loopback (>=0.0.4, <=0.2.1), loopback-component-meta (1.0.0) +2 more potentially affected by unknown CVE via loopback (>=2.8.6, <=2.36.2)

loopback NPM version =2.8.6, =0.0.4, =0.2.1 - loopback-component-meta 1.0.0 - loopback-connector-couchbase 1.0.6 - loopback-connector-couchbase-mappingport 1.0.1 Source cves: unknown CVE Source advisory: MEND:WS-2019-0247...

CVE-2024-39236

Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/componentmeta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself...

SUSE CVE-2024-39236

Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/componentmeta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself...

PYSEC-2024-274

Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/componentmeta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself...

@colmena/colmena-loopback (>=0.0.4, <=0.2.1), loopback-component-meta (1.0.0) +2 more potentially affected by unknown CVE via loopback (>=2.8.6, <=2.36.2)

loopback NPM version =2.8.6, =0.0.4, =0.2.1 - loopback-component-meta 1.0.0 - loopback-connector-couchbase 1.0.6 - loopback-connector-couchbase-mappingport 1.0.1 Source cves: unknown CVE Source advisory: GHSA-724C-6VRF-99RQ...

@colmena/colmena-loopback (>=0.0.4, <=0.2.1), loopback-component-meta (1.0.0) +2 more potentially affected by unknown CVE via loopback (>=2.8.6, <=2.36.2)

loopback NPM version =2.8.6, =0.0.4, =0.2.1 - loopback-component-meta 1.0.0 - loopback-connector-couchbase 1.0.6 - loopback-connector-couchbase-mappingport 1.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-724C-6VRF-99RQ...

@colmena/colmena-loopback (>=0.0.4, <=0.2.1), loopback-component-meta (1.0.0) +2 more potentially affected by unknown CVE via loopback (>=2.8.6, <=2.36.2)

loopback NPM version =2.8.6, =0.0.4, =0.2.1 - loopback-component-meta 1.0.0 - loopback-connector-couchbase 1.0.6 - loopback-connector-couchbase-mappingport 1.0.1 Source cves: unknown CVE Source advisory: GHSA-8WGC-JJVV-CV6V...