adder-codec-rs (0.1.15), assimp (>=0.0.4, <=0.0.6) +56 more potentially affected by unknown CVE via mmap (0.1.1)

mmap CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mmap and may be impacted: - adder-codec-rs 0.1.15 - assimp =0.0.4, =0.9.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.4.0 - cupi 0.1.0 - cupishift 0.1.0 - cylus 0.1.0 and...

cbqn (>=0.1.1, <=0.2.4), exers (0.2.0) +41 more potentially affected by CVE-2024-38358 via wasmer (>=4.0.0, <=4.3.0-beta.1)

wasmer CARGO version =4.0.0, =0.1.1, =0.3.0, =0.2.0, =0.6.0, =0.78.0, =0.3.0-beta-dev.35, =0.1.0, =0.1.0, =0.3.0-beta-dev.35, =0.3.0-beta-dev.35, =0.3.0, =0.5.0, =0.9.0, =0.0.1, =0.4.0-dev.7 and more Source cves: CVE-2024-38358 Source advisory: OSV:GHSA-55F3-3QVG-8PV5...

s2n-quic (>=1.18.0, <=1.34.0), s2n-quic-tls (>=0.18.2, <=0.34.0) +2 more potentially affected by unknown CVE via s2n-tls (>=0.0.6, <=0.2.6)

s2n-tls CARGO version =0.0.6, =1.18.0, =0.18.2, =0.18.2, =0.0.6, =0.2.6 Source cves: unknown CVE Source advisory: OSV:GHSA-52XF-5P2M-9WRV...

@directus/api (>=15.0.0, <=19.1.1), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-36128 via directus (>=10.8.3, <=10.11.1)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-36128 Source advisory: OSV:GHSA-632P-P495-25M5...

sessions (>=0.2.0, <=0.6.0), viz (>=0.1.0-alpha.3, <=0.1.0-alpha.10) +1 more potentially affected by CVE-2024-36400 via nano-id (>=0.1.1, <=0.3.3)

nano-id CARGO version =0.1.1, =0.2.0, =0.1.0-alpha.3, =0.1.0-alpha.5, =0.1.2 Source cves: CVE-2024-36400 Source advisory: OSV:RUSTSEC-2024-0343...

0me.sh (0.1.15), 0xrtest (1.0.0) +2393 more potentially affected by CVE-2024-29415 via ip (>=2.0.0, <=2.0.1)

ip NPM version =2.0.0, =1.0.1, =0.0.1, =1.0.3, =0.0.11, =0.0.0-experimental-827-react-checked-states, =0.0.0-experimental-827-react-checked-states, =3.5.0-rc.1 and more Source cves: CVE-2024-29415 Source advisory: OSV:GHSA-2P57-RM9W-GVFP...

@1px-no/img (>=4.2.3, <=4.2.50), @5minds/processcube_engine (>=15.0.0, <=18.0.0-renovate-aee2c3-lw4ddkx5) +148 more potentially affected by CVE-2024-21512 via mysql2 (>=3.0.0, <=3.9.7)

mysql2 NPM version =3.0.0, =4.2.3, =15.0.0, =1.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =0.62.20 and more Source cves: CVE-2024-21512 Source advisory: OSV:GHSA-PMH2-WPJM-FJ45...

@adber/adber-ui (>=0.4.0, <=0.4.21), @datalinkx/common (>=0.0.1, <=0.0.3) +57 more potentially affected by CVE-2023-1001 via vxe-table (>=3.0.11, <=3.7.9-beta.2)

vxe-table NPM version =3.0.11, =0.4.0, =0.0.1, =1.0.0-beta.1, =0.1.43-1, =1.0.11, =1.0.0, =1.0.0, =0.1.0, =0.2.18-beta.6, =1.0.5, =0.1.1, =1.0.8, =1.0.61 - arktos-next-dev 1.0.53 and more Source cves: CVE-2023-1001 Source advisory: OSV:GHSA-2QJP-FG8C-G878...

pug (>=3.0.0-canary-1, <=3.0.2-canary-10) potentially affected by CVE-2024-36361 via pug-code-gen (>=3.0.0-canary-1, <=3.0.2-canary-5)

pug-code-gen NPM version =3.0.0-canary-1, =3.0.0-canary-1, =3.0.2-canary-10 Source cves: CVE-2024-36361 Source advisory: OSV:GHSA-3965-HPX2-Q597...

@abhayb/code-push-server (>=1.0.0, <=1.0.3), @ahbbvc/invoice-generator (1.0.0) +115 more potentially affected by CVE-2024-36361 via pug (>=3.0.0, <=3.0.2)

pug NPM version =3.0.0, =1.0.0, =1.2.0, =2.0.0-17, =0.0.12, =1.0.0, =3.0.1, =18.4.0, =0.0.0-canary-0925da6f11e35cc712cc12337716f846a67c0e4c, =0.0.0-canary-0925da6f11e35cc712cc12337716f846a67c0e4c, =0.0.0-canary-0925da6f11e35cc712cc12337716f846a67c0e4c, =21.4.0 and more Source cves: CVE-2024-36361...

endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2024-35197 via gix (0.0.0)

gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2024-35197 Source advisory: OSV:GHSA-49JC-R788-3FC9...

endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2024-35186 via gix (0.0.0)

gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2024-35186 Source advisory: OSV:GHSA-7W47-3WG8-547C...

gix-lock (>=5.0.0, <=12.0.1), gix-tempfile (>=5.0.3, <=12.0.1) potentially affected by CVE-2024-35186 via gix-fs (>=0.1.1, <=0.9.1)

gix-fs CARGO version =0.1.1, =5.0.0, =5.0.3, =12.0.1 Source cves: CVE-2024-35186 Source advisory: OSV:GHSA-7W47-3WG8-547C...

@aipmorg/lint (1.23.4), @arietta-studio/lint (>=1.0.0, <=1.2.0) +29 more potentially affected by CVE-2024-29651 via @apidevtools/json-schema-ref-parser (11.1.0)

@apidevtools/json-schema-ref-parser NPM version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @apidevtools/json-schema-ref-parser and may be impacted: - @aipmorg/lint 1.23.4 - @arietta-studio/lint =1.0.0, =0.0.0-alpha.7, =0.0.0-alpha.7,...

@bit/bundler (>=12.0.0, <=12.1.3), pakit (>=2.0.0, <=2.3.0) potentially affected by CVE-2024-24293 via @bit/loader (10.0.3)

@bit/loader NPM version 10.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @bit/loader and may be impacted: - @bit/bundler =12.0.0, =2.0.0, =2.3.0 Source cves: CVE-2024-24293 Source advisory: OSV:GHSA-8VR4-H4RR-8PH6...

@okta/jwt-verifier (3.2.1) potentially affected by CVE-2024-34273 via njwt (2.0.0)

njwt NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on njwt and may be impacted: - @okta/jwt-verifier 3.2.1 Source cves: CVE-2024-34273 Source advisory: OSV:GHSA-3HVJ-2783-34X2...

@1px-no/img (>=4.2.3, <=4.2.50), @5minds/processcube_engine (>=15.0.0, <=18.0.0-renovate-aee2c3-lw4ddkx5) +148 more potentially affected by CVE-2024-21512 via mysql2 (>=3.0.0, <=3.9.7)

mysql2 NPM version =3.0.0, =4.2.3, =15.0.0, =1.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =0.62.20 and more Source cves: CVE-2024-21512 Source advisory: SNYK:JS-MYSQL2-6861580...

lavacord (>=2.0.0, <=2.1.4-v4), oceanic.js-interactions (>=0.0.9, <=0.0.11) potentially affected by CVE-2024-34712 via oceanic.js (>=1.6.1-dev.ecc3a90, <=1.9.0)

oceanic.js NPM version =1.6.1-dev.ecc3a90, =2.0.0, =0.0.9, =0.0.11 Source cves: CVE-2024-34712 Source advisory: OSV:GHSA-5H5V-HW44-F6GG...

@accordproject/concerto-ui-react-demo (>=0.82.10-20200221024018, <=0.83.1-20200224151908), @alfresco/adf-testing (6.0.0-A.2-8258) +25 more potentially affected by CVE-2024-4068 via braces (>=3.0.0, <=3.0.2)

braces NPM version =3.0.0, =0.82.10-20200221024018, =0.0.2, =1.0.1, =1.16.0, =0.4.1, =0.4.16, =0.4.17, =0.4.17, =0.4.1, =0.4.26 - @react-jsonschema-form-custom/material-ui-fy2ybeyiz 1.0.0 - @react-jsonschema-form-custom/material-ui-nd6dp3pzm 1.0.0 - @react-jsonschema-form/material-ui-bh9hzkrmk...

@1stg/app-config (>=4.0.0, <=9.0.1), @1stg/common-config (>=4.2.0, <=9.0.1) +1001 more potentially affected by CVE-2024-4067 via micromatch (>=4.0.2, <=4.0.7)

micromatch NPM version =4.0.2, =4.0.0, =4.2.0, =6.0.0, =1.0.1, =15.0.0, =14.4.0, =11.2.0, =0.2.0, =1.0.68, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2024-4067 Source advisory: OSV:GHSA-952P-6RRQ-RCJV...