cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RG2Q-2JH9-447Q...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8815 more potentially affected by CVE-2024-42460 via elliptic (>=2.0.2, <=6.5.6)

elliptic NPM version =2.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =1.0.0, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =6.2.4 and more Source cves: CVE-2024-42460 Source advisory: OSV:GHSA-977X-G7H5-7QGW...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +868 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.57)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0357...

@ibm/rse-api-for-zowe-cli (>=3.2.2, <=4.1.0), @zowe/zowe-explorer-api (>=2.13.0, <=2.15.0) potentially affected by CVE-2024-6833 via @zowe/cli (>=7.18.0, <=7.23.3)

@zowe/cli NPM version =7.18.0, =3.2.2, =2.13.0, =2.15.0 Source cves: CVE-2024-6833 Source advisory: OSV:GHSA-GHGQ-X6WC-6JR5...

@ascua/app (>=0.1.0, <=0.4.6), @itsfe/electron-bootstrap (>=1.0.0, <=1.0.1) +7 more potentially affected by CVE-2024-39698 via electron-updater (>=6.0.2, <=6.2.1)

electron-updater NPM version =6.0.2, =0.1.0, =1.0.0, =0.11.11-dev.1, =0.0.0-snapshot-20240316121210, =2024.4.146, =2024.10.110 Source cves: CVE-2024-39698 Source advisory: OSV:GHSA-9JXC-QJR9-VJXQ...

@directus/api (>=15.0.0, <=19.3.1), @meta-factory/cms (0.1.1) +6 more potentially affected by CVE-2024-39896 via directus (>=9.21.2, <=10.12.1)

directus NPM version =9.21.2, =15.0.0, =0.1.0, =1.2.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2024-39896 Source advisory: OSV:GHSA-JGF4-VWC3-R46V...

ayaka-model (0.2.0), ayaka-runtime (0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0, <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob 1.0.0-beta1 - icusegmenter 1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-74R5-G7VC-J2V2...

btctax-store (>=0.1.0, <=0.17.0), csaf-walker (0.1.0) +19 more potentially affected by CVE-2024-58261 via sequoia-openpgp (>=1.14.0, <=1.17.0)

sequoia-openpgp CARGO version =1.14.0, =0.1.0, =0.3.0, =0.25.0, =0.1.0, =0.30.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0 - sequoia-keystore-tpm 0.1.0 and more Source cves: CVE-2024-58261 Source advisory: OSV:GHSA-9344-P847-QM5C...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +17048 more potentially affected by CVE-2024-37890 via ws (>=2.1.0, <=5.2.2)

ws NPM version =2.1.0, =1.0.0-3, =0.0.3, =1.1.0, =0.9.9, =0.7.41, =0.1.0-beta.1, =0.1.3, =0.0.3, =1.0.0, =2.0.7 and more Source cves: CVE-2024-37890 Source advisory: OSV:GHSA-3H5V-Q93C-6H6Q...

0x0lob (0.1.0), 0xdariel (>=0.1.0, <=1.1.2) +7734 more potentially affected by CVE-2024-34351 via next (>=13.4.0, <=14.1.0)

next NPM version =13.4.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =2.0.0-beta.1, =2.0.0-beta.2 - @7c0de/ipmdcm 1.0.0 - @7c0de/moeera 1.0.0 - @90pixel/okr 0.1.0 and more Source cves: CVE-2024-34351 Source advisory: OSV:GHSA-FR5H-RQP8-MJ6G...

@boxwood-connor/react-doc-viewer (>=1.0.1, <=1.0.2), @bty/business-components (>=1.0.2, <=1.0.4) +65 more potentially affected by CVE-2024-34342 via react-pdf (>=7.1.2, <=7.7.1)

react-pdf NPM version =7.1.2, =1.0.1, =1.0.2, =0.2.70, =0.2.57, =0.1.2-1.beta-1, =0.0.8, =0.3.21, =0.0.1, =1.14.0, =1.0.13, =1.1.0, =0.1.10, =0.0.16-8.14204.alpha.1, =0.0.182-alpha.30184.1 and more Source cves: CVE-2024-34342 Source advisory: OSV:GHSA-87HQ-Q4GP-9WR4...

@128technology/ply (>=1.0.0-alpha.0, <=1.0.0-alpha.7), @128technology/yinz (5.0.0-alpha.6) +87 more potentially affected by CVE-2024-34394 via libxmljs2 (>=0.21.7, <=0.33.0)

libxmljs2 NPM version =0.21.7, =1.0.0-alpha.0, =5.0.0, =2.4.0, =1.14.0-rc.0, =1.0.0-beta.1, =3.0.0, =6.0.0-2020.8, =6.0.0-2020.12, =11.0.0-refactor-types.0, =6.0.0-2020.8, =6.0.0-2020.8, =0.186.0, =1.205.5 and more Source cves: CVE-2024-34394 Source advisory: OSV:GHSA-78H3-PG4X-J8CV...

@128technology/ply (>=1.0.0-alpha.0, <=1.0.0-alpha.7), @128technology/yinz (5.0.0-alpha.6) +68 more potentially affected by CVE-2024-34393 via libxmljs2 (>=0.21.7, <=0.32.0)

libxmljs2 NPM version =0.21.7, =1.0.0-alpha.0, =5.0.0, =2.4.0, =1.14.0-rc.0, =1.0.0-beta.1, =3.0.0, =6.0.0-2020.8, =6.0.0-2020.12, =11.0.0-refactor-types.0, =6.0.0-2020.8, =6.0.0-2020.8, =0.186.0, =1.205.5 and more Source cves: CVE-2024-34393 Source advisory: OSV:GHSA-MJR4-7XG5-PFVH...

abstract-account-factory (>=0.13.0, <=0.16.1), abstract-adapter-utils (>=0.16.0, <=0.19.2) +416 more potentially affected by CVE-2024-58263 via cosmwasm-std (1.3.4)

cosmwasm-std CARGO version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cosmwasm-std and may be impacted: - abstract-account-factory =0.13.0, =0.16.0, =0.1.0-rc.2, =0.0.1, =0.1.0-rc.2, =0.2.0-beta.4, =0.2.0-beta.4, =0.13.0, =0.16.5,...

@0xunreal/dynamic-amm-sdk (>=0.4.22, <=0.4.23), @0xunreal/vault-sdk (0.5.3) +58 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.66.0, <=1.66.2)

@solana/web3.js NPM version =1.66.0, =0.4.22, =2.0.0-alpha.1, =2.0.0-alpha.5, =2.0.0-alpha.1, =2.11.0-alpha.0, =0.1.0, =0.2.0-master.41, =1.9.0, =0.0.2, =1.10.0-alpha.6, =4.0.0-beta.5, =4.0.0-beta.5, =4.0.0-beta.14 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@glow-app/glow-react (>=0.6.0, <=1.0.1), @glow-app/solana-client (>=0.5.2, <=1.0.4) +17 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.44.0, <=1.44.2)

@solana/web3.js NPM version =1.44.0, =0.6.0, =0.5.2, =1.1.0, =0.1.0, =1.0.5, =4.1.2, =4.1.3, =4.1.3, =0.1.20-beta-1, =0.2.40, =3.2.0, =0.0.50, =0.1.0, =0.1.2 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@fabric-foundation/sdk (>=0.0.2, <=0.0.64), @zetamarkets/flex-sdk (0.1.0) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.18.0)

@solana/web3.js NPM version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @fabric-foundation/sdk =0.0.2, =0.6.15, =0.9.9 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@axyzsdk/js (0.0.0), @axyzsdk/react (0.0.0) +4 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.35.0, <=1.35.1)

@solana/web3.js NPM version =1.35.0, =3.0.7, =1.0.0-alpha.1, =0.0.1-rc.1, =0.0.1-rc.3, =0.0.2-rc.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@audius/fetch-nft (>=0.1.8-beta.1, <=0.2.6), @audius/sdk (>=3.0.8-beta.13, <=4.2.0) +52 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.78.0, <=1.78.7)

@solana/web3.js NPM version =1.78.0, =0.1.8-beta.1, =3.0.8-beta.13, =0.0.10, =2.20.1-beta.306, =14.2.1-beta.306, =2.2.3-alpha.61, =1.0.1-rc.0, =2.21.0-hotfix.0, =2.6.0, =0.0.5-beta.0, =1.1.0-alpha.1, =1.1.11 - @ctrl-tech/chains-controller 2.0.5 - @ctrl-tech/chains-solana 2.0.18 and more Source...

@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +138 more potentially affected by CVE-2024-21507 via mysql2 (>=3.0.0, <=3.9.2)

mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21507 Source advisory: SNYK:JS-MYSQL2-6591300...