inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2024-43414 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2024-43414 Source advisory: OSV:GHSA-FMJ9-77Q8-G6C4...

anchor-token (>=0.0.1, <=0.3.0), astro4nit (0.0.1) +60 more potentially affected by unknown CVE via cw0 (>=0.2.3, <=0.10.3)

cw0 CARGO version =0.2.3, =0.0.1, =0.3.1, =2.5.2, =0.1.0, =0.3.0, =0.4.0, =0.4.0, =0.2.0, =0.2.0, =0.6.0-beta1, =0.6.0-beta1, =0.2.0, =0.2.1, =0.10.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0385...

aruna_policy (>=0.1.0, <=0.1.2), async-bb8-diesel (>=0.1.0, <=0.2.1) +103 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.1.6)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.0, =0.1.1 - crabrocketschema 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WQ9X-QWCQ-MMGF...

aruna_policy (>=0.1.0, <=0.1.2), async-bb8-diesel (>=0.1.0, <=0.2.1) +103 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.1.6)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.0, =0.1.1 - crabrocketschema 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0365...

com.alipay.sofa.koupleless:arklet-springboot-starter (>=2.0.0, <=2.0.4), com.alipay.sofa.koupleless:koupleless-base-starter (>=2.0.0, <=2.0.4) +11 more potentially affected by CVE-2024-38807 via org.springframework.boot:spring-boot-loader (>=3.0.0, <=3.0.13)

org.springframework.boot:spring-boot-loader MAVEN version =3.0.0, =2.0.0, =2.0.0, =4.0.0-m2, =4.0.0-m2, =3.0.0, =0.0.1, =4.0.0-m1, =3.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2024-38807 Source advisory: OSV:GHSA-7CJ3-X93G-GJ76...

com.alipay.sofa.koupleless:arklet-springboot-starter (>=2.1.0, <=2.1.11), com.alipay.sofa.koupleless:koupleless-base-starter (>=2.1.0, <=2.1.11) +8 more potentially affected by CVE-2024-38807 via org.springframework.boot:spring-boot-loader (>=3.2.0, <=3.2.7)

org.springframework.boot:spring-boot-loader MAVEN version =3.2.0, =2.1.0, =2.1.0, =4.2.0, =4.2.0, =3.1.0, =0.4.0, =4.3.0, =4.1.0, =4.1.0, =4.1.3 Source cves: CVE-2024-38807 Source advisory: OSV:GHSA-7CJ3-X93G-GJ76...

gitoxide (>=0.1.0, <=0.15.0) potentially affected by CVE-2024-43785 via gitoxide-core (>=0.1.0, <=0.17.0)

gitoxide-core CARGO version =0.1.0, =0.1.0, =0.15.0 Source cves: CVE-2024-43785 Source advisory: OSV:GHSA-88G2-R9RW-G55H...

@backan/core (>=0.0.3, <=0.0.19), @bepp/api (>=1.3.2, <=1.3.17) +40 more potentially affected by CVE-2024-43787 via hono (>=4.0.0, <=4.5.7)

hono NPM version =4.0.0, =0.0.3, =1.3.2, =2.1.5, =0.1.0, =1.0.0, =2.13.0, =1.0.1, =0.0.1, =1.0.0-apm.0, =0.0.0-next-20240721155721, =0.1.0, =0.1.0, =0.1.0, =0.82.2-rc.1, =0.83.0-rc.5 and more Source cves: CVE-2024-43787 Source advisory: OSV:GHSA-RPFR-3M35-5VX5...

gitoxide (>=0.1.0, <=0.15.0) potentially affected by CVE-2024-43785 via gitoxide-core (>=0.1.0, <=0.17.0)

gitoxide-core CARGO version =0.1.0, =0.1.0, =0.15.0 Source cves: CVE-2024-43785 Source advisory: OSV:RUSTSEC-2024-0364...

@miragon/miranum-cli (>=0.5.5, <=0.5.12) potentially affected by CVE-2024-40453 via squirrelly (9.0.0)

squirrelly NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on squirrelly and may be impacted: - @miragon/miranum-cli =0.5.5, =0.5.12 Source cves: CVE-2024-40453 Source advisory: OSV:GHSA-W5PW-GMCW-RFC8...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2024-41937 via apache-airflow (1.10.6)

apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2024-41937...

@dankolz/news-flash (>=1.0.1, <=1.0.2), @trikoder/trim (0.86.0) +8 more potentially affected by CVE-2024-43411 via ckeditor4 (4.22.1)

ckeditor4 NPM version 4.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - @dankolz/news-flash =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2024-43411 Source...

@amplicode/addon-email-templates (>=0.0.1-snapshot.8, <=0.1.0-snapshot.1.6), @dankolz/news-flash (>=1.0.1, <=1.0.2) +10 more potentially affected by CVE-2024-43407 via ckeditor4 (>=4.14.0, <=4.22.1)

ckeditor4 NPM version =4.14.0, =0.0.1-snapshot.8, =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2024-43407 Source advisory: OSV:GHSA-7R32-VFJ5-C2JV...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +156 more potentially affected by CVE-2024-38808 via org.springframework:spring-expression (4.0.8.release)

org.springframework:spring-expression MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 -...

be.rufer.swisscom.sms:api-client (1.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (0.9) +233 more potentially affected by CVE-2024-38808 via org.springframework:spring-expression (4.1.3.release)

org.springframework:spring-expression MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.rufer.swisscom.sms:api-client 1.0 -...

ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1), ch.epfl.bbp.nlp:bluima_corpora (>=1.0.0, <=1.0.1) +732 more potentially affected by CVE-2024-38808 via org.springframework:spring-expression (3.1.2.release)

org.springframework:spring-expression MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.epfl.bbp.nlp:bluimaabbreviations =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +1188 more potentially affected by CVE-2024-38808 via org.springframework:spring-expression (4.2.5.release)

org.springframework:spring-expression MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 -...

be.personify.iam:personify-api (>=1.0.2.release, <=1.0.8.release), club.trandiscuss:api-doc-gen (0.1) +806 more potentially affected by CVE-2024-38808 via org.springframework:spring-expression (4.3.25.release)

org.springframework:spring-expression MAVEN version 4.3.25.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.personify.iam:personify-api =1.0.2.release, =2.2.1zzlh, =2.2.1zzlh, =1.4....

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +1590 more potentially affected by CVE-2024-38808 via org.springframework:spring-expression (4.3.9.release)

org.springframework:spring-expression MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.2, =1.1.1,...

com.dtflys.forest:forest-spring (1.0.0), com.garethahealy.amq6-dual-jaas-plugin:amq6-dual-jaas-plugin-parent (>=1.2.0-beta2, <=1.4.0) +557 more potentially affected by CVE-2024-38808 via org.springframework:spring-expression (3.2.16.release)

org.springframework:spring-expression MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.dtflys.forest:forest-spring 1.0.0 -...