@bloggrify/bento (>=0.9.1, <=0.9.4), @bloggrify/core (>=1.1.1, <=1.4.5) +26 more potentially affected by CVE-2024-34344 via nuxt (>=3.4.2, <=3.12.3)

nuxt NPM version =3.4.2, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =4.0.3, =0.1.0, =0.0.1, =0.0.1, =0.5.0, =1.1.1-beta.3, =1.4.1-alpha.13, =1.0.1-alpha.1024, =1.4.0 and more Source cves: CVE-2024-34344 Source advisory: OSV:GHSA-V784-FJJH-F8R4...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8133 more potentially affected by CVE-2024-42459 via elliptic (>=4.1.0, <=6.5.6)

elliptic NPM version =4.1.0, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-42459 Source advisory: OSV:GHSA-F7Q4-PWC6-W24P...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8130 more potentially affected by CVE-2024-42461 via elliptic (>=5.2.1, <=6.5.6)

elliptic NPM version =5.2.1, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-42461 Source advisory: OSV:GHSA-49Q7-C7J4-3P7M...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8815 more potentially affected by CVE-2024-42460 via elliptic (>=2.0.2, <=6.5.6)

elliptic NPM version =2.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =1.0.0, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =6.2.4 and more Source cves: CVE-2024-42460 Source advisory: OSV:GHSA-977X-G7H5-7QGW...

biscuit-cli (>=0.4.1, <=0.4.2) potentially affected by CVE-2024-41949 +1 more via biscuit-auth (4.1.1)

biscuit-auth CARGO version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on biscuit-auth and may be impacted: - biscuit-cli =0.4.1, =0.4.2 Source cves: CVE-2024-41949, CVE-2024-42350 Source advisory: OSV:GHSA-P9W4-585H-G3C7...

@fractl-ui/fuel (>=0.3.4, <=0.3.5), @fuel-ts/contract (>=0.0.0-next-20240210135306, <=0.92.1) +15 more potentially affected by CVE-2024-41945 via @fuel-ts/account (>=0.0.0-next-20240210135306, <=0.92.1)

@fuel-ts/account NPM version =0.0.0-next-20240210135306, =0.3.4, =0.0.0-next-20240210135306, =0.0.0-next-20240210135306, =0.0.0-next-20241128172443, =0.0.0-next-20240210135306, =0.1.5, =0.1.0, =1.0.0, =2.35.1-rc.1, =0.1.0, =0.0.50, =0.0.0-next-20240210135306, =1.0.0, =1.0.5 and more Source cves:...

@appium/universal-xml-plugin (>=1.0.18, <=1.0.20), @cardscan.ai/cardscan-client (>=0.1.0, <=0.4.3) +103 more potentially affected by CVE-2024-41818 via fast-xml-parser (>=4.3.5, <=4.4.0)

fast-xml-parser NPM version =4.3.5, =1.0.18, =0.1.0, =1.1.0, =8.0.167, =11.49.0, =13.4.12, =11.49.0, =28.16.23, =11.49.0, =0.0.145, =1.0.0, =10.3.11, =0.1.11, =8.0.167, =5.0.167, =5.0.200 and more Source cves: CVE-2024-41818 Source advisory: OSV:GHSA-MPG4-RC92-VX8V...

c2pa (>=0.16.1, <=0.19.1), c2patool (>=0.3.9, <=0.5.1) potentially affected by unknown CVE via xmp_toolkit (1.7.3)

xmptoolkit CARGO version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on xmptoolkit and may be impacted: - c2pa =0.16.1, =0.3.9, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-66FW-43H8-F8P3...

c2pa (>=0.16.1, <=0.19.1), c2patool (>=0.3.9, <=0.5.1) potentially affected by unknown CVE via xmp_toolkit (1.7.3)

xmptoolkit CARGO version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on xmptoolkit and may be impacted: - c2pa =0.16.1, =0.3.9, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0360...

ballista (>=0.8.0, <=0.9.0), ballista-cli (0.9.0) +52 more potentially affected by CVE-2024-41178 via object_store (>=0.5.6, <=0.9.1)

objectstore CARGO version =0.5.6, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.4.0, =0.7.0, =0.0.1, =0.0.0, =12.0.0, =12.0.0, =12.0.0, =20.0.0, =38.0.0 - datafusion-expr 31.0.0 - datafusion-extra 0.0.2 and more Source cves: CVE-2024-41178 Source advisory: OSV:GHSA-C2HF-VCMR-QJRF...

@automatedtf/catalog (>=0.0.1, <=0.0.27), @automatedtf/reactor (>=0.0.1, <=0.0.9) +3 more potentially affected by CVE-2024-41655 via tf2-item-format (4.3.5)

tf2-item-format NPM version 4.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on tf2-item-format and may be impacted: - @automatedtf/catalog =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.25 - @vendortf/catalog 0.0.27 Source cves: CVE-2024-41655 Source advisory...

ballista (>=0.8.0, <=0.9.0), ballista-cli (0.9.0) +52 more potentially affected by CVE-2024-41178 via object_store (>=0.5.6, <=0.9.1)

objectstore CARGO version =0.5.6, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.4.0, =0.7.0, =0.0.1, =0.0.0, =12.0.0, =12.0.0, =12.0.0, =20.0.0, =38.0.0 - datafusion-expr 31.0.0 - datafusion-extra 0.0.2 and more Source cves: CVE-2024-41178 Source advisory: OSV:RUSTSEC-2024-0358...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +868 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.57)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q445-7M23-QRMW...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +868 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.57)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0357...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2024-40648 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-40648 Source advisory: OSV:GHSA-4QG4-CVH2-CRGG...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2024-40648 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-40648 Source advisory: OSV:RUSTSEC-2024-0356...

flowlang (>=0.1.6, <=0.1.8), lavendeux-parser (>=0.3.0, <=0.8.1) +2 more potentially affected by unknown CVE via js-sandbox (>=0.1.6, <=0.2.0-rc.1)

js-sandbox CARGO version =0.1.6, =0.1.6, =0.3.0, =0.1.0, =0.6.3 - wakflo-funx 0.0.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0403...

matrix-qrcode (0.3.0), matrix-sdk-base (>=0.5.0, <=0.5.1) +5 more potentially affected by CVE-2024-40640 via vodozemac (>=0.2.0, <=0.3.0)

vodozemac CARGO version =0.2.0, =0.5.0, =0.3.0, =0.4.0 - matrix-sdk-sled 0.1.0 - matrix-sdk-sql 0.1.0-beta.2 Source cves: CVE-2024-40640 Source advisory: OSV:GHSA-J8CM-G7R6-HFPQ...

@ibm/rse-api-for-zowe-cli (>=3.2.2, <=4.1.0), @zowe/zowe-explorer-api (>=2.13.0, <=2.15.0) potentially affected by CVE-2024-6833 via @zowe/cli (>=7.18.0, <=7.23.3)

@zowe/cli NPM version =7.18.0, =3.2.2, =2.13.0, =2.15.0 Source cves: CVE-2024-6833 Source advisory: OSV:GHSA-GHGQ-X6WC-6JR5...

matrix-qrcode (0.3.0), matrix-sdk-base (>=0.5.0, <=0.5.1) +5 more potentially affected by CVE-2024-40640 via vodozemac (>=0.2.0, <=0.3.0)

vodozemac CARGO version =0.2.0, =0.5.0, =0.3.0, =0.4.0 - matrix-sdk-sled 0.1.0 - matrix-sdk-sql 0.1.0-beta.2 Source cves: CVE-2024-40640 Source advisory: OSV:RUSTSEC-2024-0354...