@aragonite/vbox-runner (>=0.0.1, <=0.0.2), @arisan/streamer2 (>=0.0.0, <=0.1.4) +116 more potentially affected by CVE-2024-21488 via network (>=0.0.12, <=0.6.1)

network NPM version =0.0.12, =0.0.1, =0.0.0, =1.0.0, =1.0.0-alpha-13, =0.0.3, =1.0.0, =0.0.0, =0.0.0, =0.0.0-beta.0, =3.0.0, =0.4.0, =1.0.0, =1.2.11 and more Source cves: CVE-2024-21488 Source advisory: OSV:GHSA-VVH2-82C7-PPFG...

carpo (>=0.1.2, <=0.1.3) potentially affected by unknown CVE via conrod (0.61.1)

conrod CARGO version 0.61.1 is affected by a known vulnerability. The following packages have a transitive dependency on conrod and may be impacted: - carpo =0.1.2, =0.1.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0397...

lillinput (>=0.2.1, <=0.3.0), lillinput-cli (0.3.0) potentially affected by CVE-2024-58266 via shlex (1.1.0)

shlex CARGO version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shlex and may be impacted: - lillinput =0.2.1, =0.3.0 - lillinput-cli 0.3.0 Source cves: CVE-2024-58266 Source advisory: OSV:RUSTSEC-2024-0006...

dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +25 more potentially affected by CVE-2023-50711 via vmm-sys-util (>=0.7.0, <=0.11.2)

vmm-sys-util CARGO version =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.5.0, =0.1.0, =0.9.3, =0.3.1, =0.6.1, =0.1.1, =0.4.0, =0.4.1 and more Source cves: CVE-2023-50711 Source advisory: OSV:GHSA-875G-MFP6-G7F9...

blinksocks-gui (>=0.1.0, <=0.2.1) potentially affected by CVE-2023-50481 via blinksocks (3.3.8)

blinksocks NPM version 3.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on blinksocks and may be impacted: - blinksocks-gui =0.1.0, =0.2.1 Source cves: CVE-2023-50481 Source advisory: OSV:GHSA-PQJ5-37XF-X5GC...

@ai-lighthouse/cli (>=1.0.1, <=1.0.3), @ccnoname/kk-log (>=1.0.0, <=1.0.2) +60 more potentially affected by CVE-2023-44402 via electron (>=23.0.0, <=23.3.13)

electron NPM version =23.0.0, =1.0.1, =1.0.0, =1.0.15, =0.49.0, =0.0.1, =0.0.5, =0.30.0, =1.0.0-beta.1, =2.4.1, =0.0.2, =0.0.0-next-1d0257ec5ae772888fbfb677bbacf8cd7dfb3127, =0.0.0-next-1d0257ec5ae772888fbfb677bbacf8cd7dfb3127, =8.12.0 - @mongodb-js/compass-settings 0.14.0 and more Source cves:...

certificate_authority (0.1.0), citadel_crypt (>=0.3.0, <=0.7.0) +14 more potentially affected by unknown CVE via pqc_kyber (>=0.4.0, <=0.7.1)

pqckyber CARGO version =0.4.0, =0.3.0, =0.3.0, =0.1.0-alpha, =1.3.0, =0.1.0, =11.0.0, =0.1.0, =9.0.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.19, =0.1.24 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0079...

cpython-json (>=0.1.0, <=0.3.0), crowbar (>=0.1.0, <=0.2.0) +33 more potentially affected by unknown CVE via cpython (>=0.1.0, <=0.7.2)

cpython CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0-beta, =0.1.0, =0.0.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0076...

@affinidi/common-check-widget (1.5.1), @deep-foundation/deepcase-app (>=0.1.0-beta.20, <=0.1.0-beta.41) +30 more potentially affected by CVE-2023-46234 via browserify-sign (>=2.6.0, <=4.0.4)

browserify-sign NPM version =2.6.0, =0.1.0-beta.20, =1.4.811, =1.1.3, =1.1.1, =1.3.0-15, =3.3.0, =0.1.1, =3.7.0, =0.0.1, =0.0.8 and more Source cves: CVE-2023-46234 Source advisory: OSV:GHSA-X9W5-V3Q2-3RHW...

amadeus (>=0.3.5, <=0.4.3), amadeus-parquet (>=0.3.5, <=0.4.3) +102 more potentially affected by unknown CVE via fehler (1.0.0)

fehler CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fehler and may be impacted: - amadeus =0.3.5, =0.3.5, =0.9.0, =0.9.0, =1.0.0, =0.0.2, =0.7.0, =0.5.0, =0.1.0, =0.1.0, =0.2.0, =0.3.2 and more Source cves: unknown CVE Source...

123-x-ed-eied (>=1.0.5, <=1.0.6), 1k-tasks (>=2.3.0, <=3.6.1) +5866 more potentially affected by CVE-2023-44270 via postcss (>=8.0.0, <=8.4.30)

postcss NPM version =8.0.0, =1.0.5, =2.3.0, =1.0.0, =0.0.14, =1.0.51, =0.0.23-alpha.5, =0.3.27, =1.6.1, =0.3.0, =0.0.2, =0.0.1, =0.14.3 and more Source cves: CVE-2023-44270 Source advisory: OSV:GHSA-7FH5-64P2-3V2J...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +9 more potentially affected by CVE-2023-5217 via electron (>=22.0.0, <=22.3.13)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =9.13.1, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-5217 Source advisory: OSV:GHSA-QQVQ-6XGJ-JW8G...

validator (>=0.6.1, <=0.6.3) potentially affected by CVE-2023-42444 via phonenumber (0.1.0+8.7.0)

phonenumber CARGO version 0.1.0+8.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on phonenumber and may be impacted: - validator =0.6.1, =0.6.3 Source cves: CVE-2023-42444 Source advisory: OSV:GHSA-WHHR-7F2W-QQJ2...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +691 more potentially affected by unknown CVE via hpack (>=0.2.0, <=0.3.0)

hpack CARGO version =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.5.0, =0.6.5 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0084...

ahqstore_cli_rs (>=1.0.0-rc10, <=1.0.0-rc11), algebraics (>=0.1.2, <=0.2.0) +244 more potentially affected by unknown CVE via inventory (>=0.1.10, <=0.1.11)

inventory CARGO version =0.1.10, =1.0.0-rc10, =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.7.0, =0.6.0, =0.5.0, =0.6.0, =0.4.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GHC8-5CGM-5RPF...

acct (>=0.2.0, <=0.5.0), acid-store (>=0.8.0, <=0.14.2) +292 more potentially affected by unknown CVE via users (>=0.4.4, <=0.11.0)

users CARGO version =0.4.4, =0.2.0, =0.8.0, =0.4.0, =4.1.0, =0.1.0, =1.0.0, =0.1.0, =1.1.0, =0.3.0, =0.3.0, =0.3.0, =0.9.0, =0.9.0, =0.10.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0059...

ahqstore_cli_rs (>=1.0.0-rc10, <=1.0.0-rc11), algebraics (>=0.1.2, <=0.2.0) +244 more potentially affected by unknown CVE via inventory (>=0.1.10, <=0.1.11)

inventory CARGO version =0.1.10, =1.0.0-rc10, =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.7.0, =0.6.0, =0.5.0, =0.6.0, =0.4.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0058...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +8 more potentially affected by CVE-2023-29198 via electron (>=22.0.0, <=22.3.5)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

decentraland-gatsby (>=5.76.0, <=5.77.1) potentially affected by CVE-2023-41049 via @dcl/single-sign-on-client (0.0.13)

@dcl/single-sign-on-client NPM version 0.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on @dcl/single-sign-on-client and may be impacted: - decentraland-gatsby =5.76.0, =5.77.1 Source cves: CVE-2023-41049 Source advisory: OSV:GHSA-VP4F-WXGW-7X8X...

@aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3), @aerogear/apollo-voyager-server (>=0.1.0, <=0.2.7-rc3) +157 more potentially affected by unknown CVE via apollo-server-core (>=2.0.0, <=2.25.3)

apollo-server-core NPM version =2.0.0, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.5.0-rc1, =0.3.0-SNAPSHOT1, =0.5.2-dev1, =2018.8.28-0, =0.5.1-alpha.0, =2.11.0, =3.9.0, =2.2.0-alpha.1, =2.3.10, =0.12.0-alpha.3, =0.13.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...