@oconva/qvikchat (>=1.0.0, <=2.0.0-alpha.4), genkit-intro (1.0.0) +3 more potentially affected by unknown CVE via @genkit-ai/firebase (0.5.17)

@genkit-ai/firebase NPM version 0.5.17 is affected by a known vulnerability. The following packages have a transitive dependency on @genkit-ai/firebase and may be impacted: - @oconva/qvikchat =1.0.0, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-GENKITAIFIREBASE-12671227...

Race Condition

Overview @genkit-ai/firebase is a Genkit AI framework plugin for Firebase including Firestore trace/state store and deployment helpers for Cloud Functions for Firebase. Affected versions of this package are vulnerable to Race Condition via the asynchronous user engagement collection in the...