datafu (>=0.0.6, <=0.0.7) potentially affected by unknown CVE via totally-safe-transmute (0.0.3)

totally-safe-transmute CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on totally-safe-transmute and may be impacted: - datafu =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0030...

@armit/eslint-config-bases (>=0.1.1, <=0.1.5), @bpinternal/expresso (0.2.4) +47 more potentially affected by CVE-2025-24964 via vitest (>=1.0.0-beta.0, <=1.6.0)

vitest NPM version =1.0.0-beta.0, =0.1.1, =1.2.3, =1.7.0, =1.7.0, =1.7.0, =0.10.0-vitest-0.0.2, =1.0.295, =8.22.0, =0.0.0, =1.4.0, =4.7.0, =4.21.0 and more Source cves: CVE-2025-24964 Source advisory: OSV:GHSA-9CRC-Q9X8-HGQQ...

@abaplint/database-snowflake (>=2.7.93, <=2.7.101), @altimateai/datamate (>=0.0.19-beta.2, <=0.4.4) +161 more potentially affected by CVE-2025-24791 via snowflake-sdk (>=1.13.1, <=1.15.0)

snowflake-sdk NPM version =1.13.1, =2.7.93, =0.0.19-beta.2, =0.0.5, =8.0.0, =1.8.0, =0.0.0, =0.4.4, =0.7.17, =0.0.2, =1.0.2, =1.0.93, =0.0.0-beta.1, =0.0.31, =0.0.1-beta.22, =0.0.30 and more Source cves: CVE-2025-24791 Source advisory: OSV:GHSA-XFHV-WQJ6-RX99...

@laboratory-one/api-components (>=0.0.16, <=0.0.21), @rxap/nest-sentry (>=10.4.5-dev.1, <=10.4.5) potentially affected by unknown CVE via @sentry/nestjs (>=8.18.0, <=8.26.0)

@sentry/nestjs NPM version =8.18.0, =0.0.16, =10.4.5-dev.1, =10.4.5 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@directus/api (>=20.0.0-rc.0, <=23.1.0), directus (>=11.0.0-rc.1, <=11.1.2) potentially affected by CVE-2025-24353 via @directus/app (>=13.0.0, <=13.3.0)

@directus/app NPM version =13.0.0, =20.0.0-rc.0, =11.0.0-rc.1, =11.1.2 Source cves: CVE-2025-24353 Source advisory: OSV:GHSA-PMF4-V838-29HG...

@directus/api (>=20.0.0-rc.0, <=23.1.0) potentially affected by CVE-2025-24353 via directus (>=11.0.0, <=11.1.2)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.1.0 Source cves: CVE-2025-24353 Source advisory: OSV:GHSA-PMF4-V838-29HG...

acct (>=0.2.0, <=0.5.0), acid-store (>=0.8.0, <=0.14.2) +277 more potentially affected by CVE-2025-5791 via users (>=0.8.1, <=0.11.0)

users CARGO version =0.8.1, =0.2.0, =0.8.0, =0.4.0, =4.1.0, =0.1.0, =1.0.0, =0.1.0, =1.1.0, =0.3.0, =0.3.0, =0.3.0, =0.9.0, =0.9.0, =0.1.0, =0.1.1 and more Source cves: CVE-2025-5791 Source advisory: OSV:RUSTSEC-2025-0040...

accountnovafi (>=0.1.0, <=0.2.0), accountnovafi1 (0.1.0) +1312 more potentially affected by unknown CVE via libsecp256k1 (>=0.1.3, <=0.7.2)

libsecp256k1 CARGO version =0.1.3, =0.1.0, =0.1.0, =1.0.5, =0.0.1, =0.0.1, =0.0.0-alpha, =0.0.1-alpha.1, =0.1.0, =0.0.1, =0.0.3 - anchor-client 0.26.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0161...

arci-urdf-viz (>=0.0.7, <=0.1.0), asp_lib (>=0.1.0, <=0.1.1) +96 more potentially affected by unknown CVE via fast-float (0.2.0)

fast-float CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - arci-urdf-viz =0.0.7, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.13.0, =0.19.0, =0.3.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.20.2 and more...

actinium226-librespot-playback (>=0.4.3-updated, <=0.4.3), aipster (>=1.0.0, <=2.0.0) +502 more potentially affected by unknown CVE via glib (>=0.15.12, <=0.19.9)

glib CARGO version =0.15.12, =0.4.3-updated, =1.0.0, =0.1.0, =0.2.9, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.9, =0.8.0, =0.8.0, =0.8.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WRW7-89JP-8Q8G...

dbs-arch (>=0.2.2, <=0.2.3), dbs-boot (>=0.3.0, <=0.4.0) +7 more potentially affected by unknown CVE via kvm-ioctls (>=0.6.1, <=0.18.0)

kvm-ioctls CARGO version =0.6.1, =0.2.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.29, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3QX8-RV27-J6GP...

ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)

ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: OSV:MAL-2024-11879...

5c-2023 (>=1.0.88, <=1.0.317), 5c-angle (>=0.0.1, <=0.0.3) +4833 more potentially affected by CVE-2024-55565 via nanoid (>=4.0.0, <=5.0.8)

nanoid NPM version =4.0.0, =1.0.88, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2024-55565 Source advisory: OSV:GHSA-MWCW-C2X4-8C55...

@directus/api (>=20.0.0-rc.0, <=23.1.2) potentially affected by CVE-2024-54128 via directus (>=11.0.0, <=11.2.1)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.1.2 Source cves: CVE-2024-54128 Source advisory: OSV:GHSA-R6WX-627V-GH2F...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53856 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53856 Source advisory: OSV:GHSA-9RMP-2568-59RV...

dbs-arch (>=0.2.2, <=0.2.3), dbs-boot (>=0.3.0, <=0.4.0) +7 more potentially affected by unknown CVE via kvm-ioctls (>=0.6.1, <=0.18.0)

kvm-ioctls CARGO version =0.6.1, =0.2.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.29, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0428...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53856 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53856 Source advisory: OSV:RUSTSEC-2024-0447...

aide (>=0.1.0, <=0.4.3), bpxe (>=0.1.0, <=0.1.2) +66 more potentially affected by unknown CVE via linkme (>=0.1.6, <=0.2.10)

linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:GHSA-F95P-4CV5-8W8X...

1405-authtokens (>=1.0.1, <=1.0.5), 1405_logging (1.0.0) +4123 more potentially affected by CVE-2024-53900 via mongoose (>=3.6.2, <=5.13.22)

mongoose NPM version =3.6.2, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.0.1, =0.3.5, =0.2.0, =0.0.1, =1.0.16, =1.0.30, =1.0.95 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +414 more potentially affected by CVE-2024-53900 via mongoose (>=6.0.1, <=6.13.4)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.1.16 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...