0x20bf (0.0.1), 2keys (0.5.1) +2199 more potentially affected by CVE-2024-27306 via aiohttp (>=0.6.4, <=3.9.4rc0)

aiohttp PYPI version =0.6.4, =0.0.1a0, =0.1.0, =0.5.0a0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.3.3, =0.1.0, =0.1.15 and more Source cves: CVE-2024-27306 Source advisory: MEND:CVE-2024-27306...

muffin (>=0.1.5, <=0.1.6) potentially affected by CVE-2024-27306 via aiohttp (0.17.3)

aiohttp PYPI version 0.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.1.5, =0.1.6 Source cves: CVE-2024-27306 Source advisory: OSV:GHSA-7GPW-8WMC-PM8G...

homeassistant (>=0.42.0, <=0.42.3) potentially affected by CVE-2024-27306 via aiohttp (2.0.5)

aiohttp PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - homeassistant =0.42.0, =0.42.3 Source cves: CVE-2024-27306 Source advisory: OSV:GHSA-7GPW-8WMC-PM8G...

hdx-data-freshness (>=1.0.5, <=1.1.2), pyplanet (>=0.6.0rc1, <=0.10.5) potentially affected by CVE-2024-27306 via aiohttp (2.3.9)

aiohttp PYPI version 2.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - hdx-data-freshness =1.0.5, =0.6.0rc1, =0.10.5 Source cves: CVE-2024-27306 Source advisory: OSV:GHSA-7GPW-8WMC-PM8G...

goblin (1.0.0b1) potentially affected by CVE-2024-27306 via aiohttp (0.22.1)

aiohttp PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - goblin 1.0.0b1 Source cves: CVE-2024-27306 Source advisory: OSV:GHSA-7GPW-8WMC-PM8G...

muffin (>=0.4.0, <=0.4.2) potentially affected by CVE-2024-27306 via aiohttp (0.19.0)

aiohttp PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - muffin =0.4.0, =0.4.2 Source cves: CVE-2024-27306 Source advisory: OSV:GHSA-7GPW-8WMC-PM8G...

pyatv (>=0.1.2, <=0.1.3) potentially affected by CVE-2024-27306 via aiohttp (1.3.0)

aiohttp PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - pyatv =0.1.2, =0.1.3 Source cves: CVE-2024-27306 Source advisory: OSV:GHSA-7GPW-8WMC-PM8G...

aio-tinder (>=0.1.7, <=0.1.8) potentially affected by CVE-2024-27306 via aiohttp (1.0.1)

aiohttp PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.7, =0.1.8 Source cves: CVE-2024-27306 Source advisory: OSV:GHSA-7GPW-8WMC-PM8G...

scriptworker (0.2.1) potentially affected by CVE-2024-27306 via aiohttp (0.22.0a0)

aiohttp PYPI version 0.22.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - scriptworker 0.2.1 Source cves: CVE-2024-27306 Source advisory: OSV:GHSA-7GPW-8WMC-PM8G...

@haklex/rich-ext-excalidraw (>=0.0.51, <=0.3.4), @haklex/rich-kit-shiro (>=0.0.51, <=0.3.4) +38 more potentially affected by CVE-2024-32472 via @excalidraw/excalidraw (>=0.17.0, <=0.17.3)

@excalidraw/excalidraw NPM version =0.17.0, =0.0.51, =0.0.51, =0.0.51, =0.0.51, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.72 and more Source cves: CVE-2024-32472 Source advisory: OSV:GHSA-M64Q-4JQH-F72F...

@blockworks-foundation/mango-client (>=3.0.14, <=3.2.23), @frakters/community-pools-client-library-v2 (>=1.0.7, <=1.0.9) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.21.0)

@solana/web3.js NPM version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @blockworks-foundation/mango-client =3.0.14, =1.0.7, =1.0.1, =2.2.3, =0.0.6, =1.0.0, =0.0.1, =1.0.0, =1.2.5, =1.0.0, =1.0.0, =0.2....

@fabric-foundation/sdk (>=0.0.65, <=1.0.2-beta.6), @frakt-protocol/frakt-sdk (>=0.0.7, <=0.0.9) +2 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.34.0)

@solana/web3.js NPM version 1.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @fabric-foundation/sdk =0.0.65, =0.0.7, =3.0.4, =3.0.6 - @toruslabs/solana-embed 0.1.4 Source cves: CVE-2024-30253 Source advisory...

@aloe2/account-lib (2.20.20228282226), @aloe2/bitgo (14.2.20228282226) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.56.0, <=1.56.2)

@solana/web3.js NPM version =1.56.0, =2.20.0, =14.2.0, =1.0.1, =2.0.0-rc.18, =8.0.1, =3.0.0-alpha.12, =3.1.2-beta.0, =2.2.33, =2.0.1-alpha.412, =7.0.0, =8.0.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@nikaru-dev/provider-all (>=0.25.1-next.3, <=0.26.0), @nikaru-dev/provider-walletconnect-2 (>=0.18.1-next.2, <=0.19.1-next.0) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.67.0, <=1.67.2)

@solana/web3.js NPM version =1.67.0, =0.25.1-next.3, =0.18.1-next.2, =0.20.1-next.9, =0.20.1-next.16, =0.22.1-next.0, =0.14.1-next.5, =0.17.1-next.0, =0.17.1-next.0, =0.22.1-next.9, =0.14.1-next.8, =0.17.1-next.19, =0.17.1-next.30, =0.0.1, =0.1.5 Source cves: CVE-2024-30253 Source advisory:...

@convexitydmcc/wallet-adapter-walletconnect (>=2.0.0-beta.26, <=2.0.0-rc.5), @renec-foundation/gasless-sdk (>=0.2.3, <=0.2.6) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.48.0)

@solana/web3.js NPM version 1.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @convexitydmcc/wallet-adapter-walletconnect =2.0.0-beta.26, =0.2.3, =3.0.0-beta.1, =6.3.0-profits-mercurial-rc8 Source cves:...

@jup-ag/core (>=3.0.0-beta.0, <=3.0.0-beta.8-eacba78), @jup-ag/react-hook (>=3.0.0-beta.0, <=3.0.0-beta.8-eacba78) +7 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.63.0, <=1.63.1)

@solana/web3.js NPM version =1.63.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.1-38592825.0, =0.0.1-0f199db9.0, =4.0.0-maple-1, =0.1.0, =1.4.8, =1.0.0, =1.7.1-alpha.4 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@chainify/solana (>=1.2.14, <=2.4.1), @liquality/error-parser (>=1.1.0-next.1, <=1.1.4-next.2) +13 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.50.1)

@solana/web3.js NPM version 1.50.1 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @chainify/solana =1.2.14, =1.1.0-next.1, =1.28.2, =0.0.1-rc12, =3.0.0-alpha.16, =3.4.4, =2.0.0, =2.0.0, =0.3.12, =0.3.3, =0.3.3,...

@axyzsdk/js (0.0.0), @axyzsdk/react (0.0.0) +4 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.35.0, <=1.35.1)

@solana/web3.js NPM version =1.35.0, =3.0.7, =1.0.0-alpha.1, =0.0.1-rc.1, =0.0.1-rc.3, =0.0.2-rc.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

soltokenbalance (>=1.0.0, <=1.0.1) potentially affected by CVE-2024-30253 via @solana/web3.js (1.20.0)

@solana/web3.js NPM version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - soltokenbalance =1.0.0, =1.0.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@debridge-finance/solana-grpc (>=1.1.2, <=1.1.3), @mochi-web3/connect-wallet-widget (>=0.0.7, <=0.2.10) +2 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.74.0)

@solana/web3.js NPM version 1.74.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-grpc =1.1.2, =0.0.7, =0.2.2, =1.194.0, =1.261.0 Source cves: CVE-2024-30253 Source advisory:...