@quickguidehealth/connector-logto-novu (>=0.1.0, <=0.1.4) potentially affected by unknown CVE via @novu/api (3.11.0)

@novu/api NPM version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on @novu/api and may be impacted: - @quickguidehealth/connector-logto-novu =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-4X48-CGF9-Q33F...

EUVD-2023-39932

Malicious code in bioql PyPI...