flowlang (>=0.1.6, <=0.1.8), lavendeux-parser (>=0.3.0, <=0.8.1) +1 more potentially affected by unknown CVE via js-sandbox (0.1.6)

js-sandbox CARGO version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on js-sandbox and may be impacted: - flowlang =0.1.6, =0.3.0, =0.1.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-4MW5-2636-4535...

flowlang (>=0.1.6, <=0.1.8), lavendeux-parser (>=0.3.0, <=0.8.1) +2 more potentially affected by unknown CVE via js-sandbox (>=0.1.6, <=0.2.0-rc.1)

js-sandbox CARGO version =0.1.6, =0.1.6, =0.3.0, =0.1.0, =0.6.3 - wakflo-funx 0.0.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0403...