@darka-software/text-design-qwik (>=0.0.137, <=0.0.139), @turnipxenon/pineapple (>=5.0.0-alpha.1, <=5.0.0-alpha.5) +1 more potentially affected by unknown CVE via @sveltejs/kit (>=2.49.0, <=2.49.5)

@sveltejs/kit NPM version =2.49.0, =0.0.137, =5.0.0-alpha.1, =1.12.2, =1.12.3 Source cves: unknown CVE Source advisory: OSV:GHSA-VRHM-GVG7-FPCF...

CVE-2008-6420

Social Site Generator SSG 2.0 allows remote attackers to read arbitrary files via the file parameter to 1 filedload.php, 2 webadmin/download.php, and 3 webadmin/downloadfile.php...