@glow-app/glow-react (>=0.6.0, <=1.0.1), @glow-app/solana-client (>=0.5.2, <=1.0.4) +17 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.44.0, <=1.44.2)

@solana/web3.js NPM version =1.44.0, =0.6.0, =0.5.2, =1.1.0, =0.1.0, =1.0.5, =4.1.2, =4.1.3, =4.1.3, =0.1.20-beta-1, =0.2.40, =3.2.0, =0.0.50, =0.1.0, =0.1.2 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@fabric-foundation/sdk (>=0.0.2, <=0.0.64), @zetamarkets/flex-sdk (0.1.0) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.18.0)

@solana/web3.js NPM version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @fabric-foundation/sdk =0.0.2, =0.6.15, =0.9.9 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@altruism-finance/js (>=0.1.0, <=0.1.1), @sh-coins/solana (>=0.3.0, <=0.3.8) potentially affected by CVE-2024-30253 via @solana/web3.js (1.52.0)

@solana/web3.js NPM version 1.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @altruism-finance/js =0.1.0, =0.3.0, =0.3.8 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@axyzsdk/js (>=0.1.0-canary.0, <=0.2.1), @axyzsdk/react (>=0.1.0-canary.0, <=0.2.1) +13 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.36.0)

@solana/web3.js NPM version 1.36.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @axyzsdk/js =0.1.0-canary.0, =0.1.0-canary.0, =0.0.7, =0.0.2, =0.0.3, =2.0.8, =0.1.46, =1.1.135, =0.1.0-alpha-11, =0.3.0, =0.0.4,...

@iwcapital/cli (>=0.3.0, <=0.3.2), @iwcapital/core (>=0.3.0, <=0.3.3) +19 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.77.2, <=1.77.3)

@solana/web3.js NPM version =1.77.2, =0.3.0, =0.3.0, =0.2.0, =0.2.20, =0.7.0-next.0, =0.0.155, =0.8.24, =0.8.19, =0.8.22, =0.8.20, =0.8.33, =0.8.23, =0.8.20, =0.8.53, =0.8.65 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@glow-app/solana-client (>=0.4.0, <=0.5.1), @zetamarkets/flex-sdk (>=0.6.3, <=0.15.0) +8 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.43.4, <=1.43.6)

@solana/web3.js NPM version =1.43.4, =0.4.0, =0.6.3, =0.1.1, =0.0.1, =1.4.0, =0.1.0, =1.0.4, =1.4.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@3s-wallet-core/provider (>=0.0.2, <=1.0.3), @3s-wallet-core/wallet (>=0.0.4, <=1.0.2) +23 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.89.0, <=1.89.1)

@solana/web3.js NPM version =1.89.0, =0.0.2, =0.0.4, =0.4.0-beta.25, =0.4.0-beta.30, =0.4.0-beta.30, =0.4.0-beta.30, =0.0.1, =0.0.2-beta.15, =2.34.0-rc.1, =0.0.1, =0.0.1, =0.0.1-beta, =0.4.0-beta.2, =0.4.0-beta.0, =0.1.8-beta.8, =0.4.6 and more Source cves: CVE-2024-30253 Source advisory:...

@bonfida/sns-reputation (>=0.0.1, <=0.0.7), @levelfinance/keeper (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.30.2)

@solana/web3.js NPM version 1.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @bonfida/sns-reputation =0.0.1, =0.1.0, =0.1.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

droplinked-payment-hub (>=0.1.3, <=0.2.37), droplinked-web3 (>=0.0.1, <=5.0.2) +3 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.88.0)

@solana/web3.js NPM version 1.88.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - droplinked-payment-hub =0.1.3, =0.0.1, =0.0.1, =0.0.1, =0.0.26 - expand-network 3.0.2 Source cves: CVE-2024-30253 Source advisory:...

@debridge-finance/solana-contracts-client (>=0.1.0, <=1.0.0), @debridge-finance/solana-utils (1.0.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.62.0)

@solana/web3.js NPM version 1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-contracts-client =0.1.0, =1.0.0 - @debridge-finance/solana-utils 1.0.2 Source cves: CVE-2024-30253 Source...

@cardinal/namespaces-components (>=4.1.0, <=5.0.0), @frakters/fusion-pool (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.32.0)

@solana/web3.js NPM version 1.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @cardinal/namespaces-components =4.1.0, =1.0.0, =0.0.29, =0.0.32 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...

@cremafinance/crema-sdk (>=2.0.11, <=2.0.14), @currie0612/crema-cli (>=0.0.12, <=0.0.42) +9 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.41.0, <=1.41.4)

@solana/web3.js NPM version =1.41.0, =2.0.11, =0.0.12, =2.0.11, =0.2.0-master.0, =1.0.3-beta.1, =1.2.2, =1.0.25, =1.0.1, =2.0.12, =1.0.0, =1.0.7 - winto-sdk 1.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17), com.charlyghislain.keycloak:keycloak-importexport (16.0.0) +30 more potentially affected by CVE-2023-6544 via org.keycloak:keycloak-services (16.1.0)

org.keycloak:keycloak-services MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.c4-soft.springaddons:keycloak-grants-mapper =3.1.13-jdk1.8, =1.3.17, =1.3.17, =1.3.17, =1.3.17...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.beta2), org.keycloak:keycloak-account-freemarker (1.0-beta-4) +3 more potentially affected by CVE-2023-6544 via org.keycloak:keycloak-services (1.0-beta-4)

org.keycloak:keycloak-services MAVEN version 1.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.beta2 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.19), com.github.vzakharchenko:cisco-radius-plugin (1.3.19) +28 more potentially affected by CVE-2023-6544 via org.keycloak:keycloak-services (16.1.1)

org.keycloak:keycloak-services MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.19 -...

fr.cnieg.keycloak:attribute-login-provider (1.3.4), io.phasetwo.keycloak:keycloak-orgs (>=0.24, <=0.27) +25 more potentially affected by CVE-2023-6544 via org.keycloak:keycloak-services (21.0.2)

org.keycloak:keycloak-services MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.4 - io.phasetwo.keycloak:keycloak-orgs =0.24, =2.5,...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.10), com.github.vzakharchenko:cisco-radius-plugin (1.4.10) +25 more potentially affected by CVE-2023-6544 via org.keycloak:keycloak-services (20.0.3)

org.keycloak:keycloak-services MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +23 more potentially affected by CVE-2023-3597 via org.keycloak:keycloak-services (14.0.0)

org.keycloak:keycloak-services MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

openstef (>=3.2.0a0, <=3.2.6) potentially affected by CVE-2024-1558 via mlflow (1.25.1)

mlflow PYPI version 1.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - openstef =3.2.0a0, =3.2.6 Source cves: CVE-2024-1558 Source advisory: OSV:GHSA-J62R-WXQQ-F3GF...

autorad (>=0.2.2, <=0.2.5), katonic (>=1.3.0, <=1.6.0) potentially affected by CVE-2024-1558 via mlflow (1.23.1)

mlflow PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - autorad =0.2.2, =1.3.0, =1.6.0 Source cves: CVE-2024-1558 Source advisory: OSV:GHSA-J62R-WXQQ-F3GF...