@directus/api (>=18.0.0, <=19.0.2) potentially affected by CVE-2024-34709 via directus (>=10.10.0, <=10.10.7)

directus NPM version =10.10.0, =18.0.0, =19.0.2 Source cves: CVE-2024-34709 Source advisory: OSV:GHSA-G65H-35F3-X2W3...

@directus/api (>=15.0.0, <=19.0.2), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-34708 via directus (>=10.8.3, <=10.10.7)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-34708 Source advisory: OSV:GHSA-P8V3-M643-4XQX...

thelounge-plugin-shortcuts (1.0.13), thelounge-theme-flat-blue (>=1.4.3, <=1.5.9) +1 more potentially affected by unknown CVE via thelounge (4.2.0)

thelounge NPM version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on thelounge and may be impacted: - thelounge-plugin-shortcuts 1.0.13 - thelounge-theme-flat-blue =1.4.3, =1.4.2, =1.6.0 Source cves: unknown CVE Source advisory:...

0x0lob (0.1.0), 0xdariel (>=0.1.0, <=1.1.2) +7734 more potentially affected by CVE-2024-34351 via next (>=13.4.0, <=14.1.0)

next NPM version =13.4.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =2.0.0-beta.1, =2.0.0-beta.2 - @7c0de/ipmdcm 1.0.0 - @7c0de/moeera 1.0.0 - @90pixel/okr 0.1.0 and more Source cves: CVE-2024-34351 Source advisory: OSV:GHSA-FR5H-RQP8-MJ6G...

24social-ui (>=1.0.0, <=1.0.5), @90pixel/okr (0.1.0) +2105 more potentially affected by CVE-2024-34350 via next (>=13.4.0, <=13.4.20-canary.40)

next NPM version =13.4.0, =1.0.0, =0.1.23, =0.0.2, =1.0.0, =0.0.1, =0.1.0, =0.1.1, =1.1.2, =1.0.0, =0.1.6, =0.1.22 and more Source cves: CVE-2024-34350 Source advisory: OSV:GHSA-77R5-GW3J-2MPF...

leptos-spin-macro (0.1.0), leptos_reactive (>=0.5.5, <=0.7.0-preview2) +1 more potentially affected by CVE-2024-32980 via spin-sdk (2.2.0)

spin-sdk CARGO version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on spin-sdk and may be impacted: - leptos-spin-macro 0.1.0 - leptosreactive =0.5.5, =0.7.0-preview2 - libsql-client 0.33.3 Source cves: CVE-2024-32980 Source advisory:...

@caedman/arma (>=0.1.18, <=0.1.87), @caedman/armdda (>=0.1.85, <=1.1.89) +17 more potentially affected by CVE-2024-34341 +1 more via trix (>=0.9.1, <=1.3.1)

trix NPM version =0.9.1, =0.1.18, =0.1.85, =0.0.1, =0.1.0, =0.2.0, =0.1.7, =7.8.0, =0.1.0, =1.0.0, =0.0.2, =3.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-34341, CVE-2024-43368 Source advisory: OSV:GHSA-QJQP-XR96-CJ99...

lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2024-34341 +1 more via trix (>=2.0.8, <=2.0.10)

trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2024-34341, CVE-2024-43368 Source advisory: OSV:GHSA-QJQP-XR96-CJ99...

@boxwood-connor/react-doc-viewer (>=1.0.1, <=1.0.2), @bty/business-components (>=1.0.2, <=1.0.4) +65 more potentially affected by CVE-2024-34342 via react-pdf (>=7.1.2, <=7.7.1)

react-pdf NPM version =7.1.2, =1.0.1, =1.0.2, =0.2.70, =0.2.57, =0.1.2-1.beta-1, =0.0.8, =0.3.21, =0.0.1, =1.14.0, =1.0.13, =1.1.0, =0.1.10, =0.0.16-8.14204.alpha.1, =0.0.182-alpha.30184.1 and more Source cves: CVE-2024-34342 Source advisory: OSV:GHSA-87HQ-Q4GP-9WR4...

@aidc/chat-ui-plugin-knowledge (>=0.5.43-beta.0, <=0.5.44), @aidc/saas-ui (>=0.5.43-beta.0, <=0.5.44) +23 more potentially affected by CVE-2024-34342 +1 more via pdfjs-dist (>=4.0.189, <=4.1.392)

pdfjs-dist NPM version =4.0.189, =0.5.43-beta.0, =0.5.43-beta.0, =0.5.43-beta.0, =0.5.43-beta.0, =0.5.43-beta.0, =8.0.0, =0.0.0-test, =1.8.4-beta.1, =0.2.1, =1.0.4, =1.6.0-dev.0-update-pdfjs-dist, =1.4.0, =1.5.1 and more Source cves: CVE-2024-34342, CVE-2024-4367 Source advisory:...

@net7/boilerplate-arianna (>=5.6.0, <=5.6.11), myrta-ui (>=17.0.56, <=17.0.57) +1 more potentially affected by CVE-2024-4367 via ngx-extended-pdf-viewer (>=19.2.0, <=19.7.1)

ngx-extended-pdf-viewer NPM version =19.2.0, =5.6.0, =17.0.56, =18.0.0-next.0, =18.0.0-next.3 Source cves: CVE-2024-4367 Source advisory: SNYK:JS-NGXEXTENDEDPDFVIEWER-11790310...

3scale (>=0.3.2, <=0.6.2), 3scale-cm (0.5.1) +189 more potentially affected by CVE-2024-34391 via libxmljs (>=1.0.9, <=1.0.11)

libxmljs NPM version =1.0.9, =0.3.2, =0.3.2, =1.10.4, =1.8.1, =1.8.8, =1.0.0, =1.1.0, =0.1.0, =250.1010.0, =250.1018.0, =252.1021.0 and more Source cves: CVE-2024-34391 Source advisory: OSV:GHSA-6433-X5P4-8JC7...

3scale (>=0.3.2, <=0.6.2), 3scale-cm (0.5.1) +189 more potentially affected by CVE-2024-34392 via libxmljs (>=1.0.9, <=1.0.11)

libxmljs NPM version =1.0.9, =0.3.2, =0.3.2, =1.10.4, =1.8.1, =1.8.8, =1.0.0, =1.1.0, =0.1.0, =250.1010.0, =250.1018.0, =252.1021.0 and more Source cves: CVE-2024-34392 Source advisory: OSV:GHSA-MG49-JQGW-GCJ6...

@128technology/ply (>=1.0.0-alpha.0, <=1.0.0-alpha.7), @128technology/yinz (5.0.0-alpha.6) +87 more potentially affected by CVE-2024-34394 via libxmljs2 (>=0.21.7, <=0.33.0)

libxmljs2 NPM version =0.21.7, =1.0.0-alpha.0, =5.0.0, =2.4.0, =1.14.0-rc.0, =1.0.0-beta.1, =3.0.0, =6.0.0-2020.8, =6.0.0-2020.12, =11.0.0-refactor-types.0, =6.0.0-2020.8, =6.0.0-2020.8, =0.186.0, =1.205.5 and more Source cves: CVE-2024-34394 Source advisory: OSV:GHSA-78H3-PG4X-J8CV...

@128technology/ply (>=1.0.0-alpha.0, <=1.0.0-alpha.7), @128technology/yinz (5.0.0-alpha.6) +68 more potentially affected by CVE-2024-34393 via libxmljs2 (>=0.21.7, <=0.32.0)

libxmljs2 NPM version =0.21.7, =1.0.0-alpha.0, =5.0.0, =2.4.0, =1.14.0-rc.0, =1.0.0-beta.1, =3.0.0, =6.0.0-2020.8, =6.0.0-2020.12, =11.0.0-refactor-types.0, =6.0.0-2020.8, =6.0.0-2020.8, =0.186.0, =1.205.5 and more Source cves: CVE-2024-34393 Source advisory: OSV:GHSA-MJR4-7XG5-PFVH...

@boxyhq/saml-jackson (>=1.11.2, <=1.17.1), @boxyhq/saml20 (>=1.2.4, <=1.4.1) +7 more potentially affected by CVE-2024-32962 via xml-crypto (>=4.1.0, <=5.1.1)

xml-crypto NPM version =4.1.0, =1.11.2, =1.2.4, =4.0.0, =1.0.0, =0.0.1, =0.0.2 - saml-nofs 3.0.2 - verifactu-utils 1.1.0 Source cves: CVE-2024-32962 Source advisory: OSV:GHSA-2XP3-57P7-QF4V...

5ug-cli (>=1.0.72, <=1.4.0), @0xgraph/cli (>=0.0.1, <=0.2.1) +823 more potentially affected by CVE-2024-33883 via ejs (>=3.0.1, <=3.1.9)

ejs NPM version =3.0.1, =1.0.72, =0.0.1, =1.1.0, =0.1.7, =0.0.9, =1.0.1, =2.16.49, =1.2.4, =1.15.41, =2.0.0-beta.2, =2.0.0-beta.2, =1.1.21, =1.4.3 and more Source cves: CVE-2024-33883 Source advisory: OSV:GHSA-GHR5-CH3P-VCR6...

abstract-account-factory (>=0.13.0, <=0.16.1), abstract-adapter-utils (>=0.16.0, <=0.19.2) +416 more potentially affected by CVE-2024-58263 via cosmwasm-std (1.3.4)

cosmwasm-std CARGO version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cosmwasm-std and may be impacted: - abstract-account-factory =0.13.0, =0.16.0, =0.1.0-rc.2, =0.0.1, =0.1.0-rc.2, =0.2.0-beta.4, =0.2.0-beta.4, =0.13.0, =0.16.5,...

abstract-account-factory (>=0.13.0, <=0.16.1), abstract-adapter-utils (>=0.16.0, <=0.19.2) +416 more potentially affected by CVE-2024-58263 via cosmwasm-std (1.3.4)

cosmwasm-std CARGO version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cosmwasm-std and may be impacted: - abstract-account-factory =0.13.0, =0.16.0, =0.1.0-rc.2, =0.0.1, =0.1.0-rc.2, =0.2.0-beta.4, =0.2.0-beta.4, =0.13.0, =0.16.5,...

@conform-to/react (>=0.1.0, <=0.9.1), @kentcdodds/workshop-app (>=1.41.0, <=1.46.7) +1 more potentially affected by CVE-2024-32866 via @conform-to/dom (>=0.1.0, <=0.9.1)

@conform-to/dom NPM version =0.1.0, =0.1.0, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...