9946 matches found
@neon.id/worker (>=0.1.0, <=0.3.0), @ronin-dist/render (>=1.0.228-hooks-experimental.0, <=1.0.383-dependabot-npm-and-yarn-development-e6e9b294d4-experimental.0) +9 more potentially affected by CVE-2024-32869 via hono (>=4.0.0, <=4.2.6)
hono NPM version =4.0.0, =0.1.0, =1.0.228-hooks-experimental.0, =0.6.7, =0.5.0, =0.2.0, =0.0.285, =2.0.21-fix-experimental-package-cleanup-experimental.0, =3.0.7, =0.19.3, =0.20.2-alpha.0 Source cves: CVE-2024-32869 Source advisory: OSV:GHSA-3MPF-RCC7-5347...
@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +143 more potentially affected by CVE-2024-21511 via mysql2 (>=3.0.0, <=3.9.6)
mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21511 Source advisory: OSV:GHSA-4RCH-2FH8-94VW...
@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +143 more potentially affected by CVE-2024-21511 via mysql2 (>=3.0.0, <=3.9.6)
mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21511 Source advisory: SNYK:JS-MYSQL2-6670046...
@skeet-framework/base-sql (>=0.6.7, <=0.6.12), @zemble/node (>=0.0.11, <=0.0.30) +2 more potentially affected by CVE-2024-32652 via @hono/node-server (>=1.3.3, <=1.10.0)
@hono/node-server NPM version =1.3.3, =0.6.7, =0.0.11, =0.19.0-alpha.2, =0.20.2-alpha.0 Source cves: CVE-2024-32652 Source advisory: OSV:GHSA-HGXW-5XG3-69JX...
a2 (>=0.2.0, <=0.8.1), abacuz (>=0.1.0, <=0.1.1) +3820 more potentially affected by CVE-2024-32650 via rustls (>=0.12.0, <=0.21.5)
rustls CARGO version =0.12.0, =0.2.0, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =1.0.0, =0.1.0, =0.8.2 and more Source cves: CVE-2024-32650 Source advisory: OSV:RUSTSEC-2024-0336...
@haklex/rich-ext-excalidraw (>=0.0.51, <=0.3.4), @haklex/rich-kit-shiro (>=0.0.51, <=0.3.4) +38 more potentially affected by CVE-2024-32472 via @excalidraw/excalidraw (>=0.17.0, <=0.17.3)
@excalidraw/excalidraw NPM version =0.17.0, =0.0.51, =0.0.51, =0.0.51, =0.0.51, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.71, =0.0.72 and more Source cves: CVE-2024-32472 Source advisory: OSV:GHSA-M64Q-4JQH-F72F...
@jup-ag/core (>=3.0.0-beta.0, <=3.0.0-beta.8-eacba78), @jup-ag/react-hook (>=3.0.0-beta.0, <=3.0.0-beta.8-eacba78) +7 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.63.0, <=1.63.1)
@solana/web3.js NPM version =1.63.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.1-38592825.0, =0.0.1-0f199db9.0, =4.0.0-maple-1, =0.1.0, =1.4.8, =1.0.0, =1.7.1-alpha.4 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@glow-app/solana-client (>=0.4.0, <=0.5.1), @zetamarkets/flex-sdk (>=0.6.3, <=0.15.0) +8 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.43.4, <=1.43.6)
@solana/web3.js NPM version =1.43.4, =0.4.0, =0.6.3, =0.1.1, =0.0.1, =1.4.0, =0.1.0, =1.0.4, =1.4.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@beeman/my-anchor-app-anchor (0.0.1), @epplex-xyz/sdk (>=0.1.42, <=0.3.0) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.90.0)
@solana/web3.js NPM version 1.90.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @beeman/my-anchor-app-anchor 0.0.1 - @epplex-xyz/sdk =0.1.42, =0.0.1, =0.1.2 Source cves: CVE-2024-30253 Source advisory:...
@dialectlabs/react (>=0.4.8, <=0.5.1) potentially affected by CVE-2024-30253 via @solana/web3.js (1.38.0)
@solana/web3.js NPM version 1.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @dialectlabs/react =0.4.8, =0.5.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@arb-protocol/core (>=2.0.0-alpha.1, <=2.0.0-alpha.6), @arb-protocol/jupiter-adapter (>=2.0.0-alpha.5, <=2.0.0-alpha.6) +18 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.69.0)
@solana/web3.js NPM version 1.69.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @arb-protocol/core =2.0.0-alpha.1, =2.0.0-alpha.5, =2.0.0-alpha.1, =0.0.0, =1.0.0, =1.0.0, =1.0.0, =0.1.1, =0.1.8, =1.0.63, =1.0.0...
@brbb/bot-farm-ts (>=0.0.1, <=0.0.3), @phantasia/blockchain-interface (>=3.6.10, <=5.0.0) +3 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.47.2, <=1.47.3)
@solana/web3.js NPM version =1.47.2, =0.0.1, =3.6.10, =1.13.2, =1.0.0, =0.3.53, =0.3.54 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@alphabatem/metaplex-shadow-drive (>=2.0.4, <=2.0.5), @builderdao/apis (>=0.0.4, <=0.0.8) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.33.0)
@solana/web3.js NPM version 1.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @alphabatem/metaplex-shadow-drive =2.0.4, =0.0.4, =0.0.2, =0.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...
@fabric-foundation/sdk (>=0.0.65, <=1.0.2-beta.6), @frakt-protocol/frakt-sdk (>=0.0.7, <=0.0.9) +2 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.34.0)
@solana/web3.js NPM version 1.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @fabric-foundation/sdk =0.0.65, =0.0.7, =3.0.4, =3.0.6 - @toruslabs/solana-embed 0.1.4 Source cves: CVE-2024-30253 Source advisory...
@jup-ag/dca-v2-sdk (>=0.0.0-beta-1, <=0.0.0-beta-9), @jup-ag/smart-wallet (>=0.0.0-beta-1, <=0.0.0-beta-9) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.75.0)
@solana/web3.js NPM version 1.75.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @jup-ag/dca-v2-sdk =0.0.0-beta-1, =0.0.0-beta-1, =0.0.31, =1.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...
@parrotfi/wallets (1.0.0) potentially affected by CVE-2024-30253 via @solana/web3.js (1.2.5)
@solana/web3.js NPM version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @parrotfi/wallets 1.0.0 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@bonfida/sns-reputation (>=0.0.1, <=0.0.7), @levelfinance/keeper (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.30.2)
@solana/web3.js NPM version 1.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @bonfida/sns-reputation =0.0.1, =0.1.0, =0.1.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@chainify/solana (>=1.2.14, <=2.4.1), @liquality/error-parser (>=1.1.0-next.1, <=1.1.4-next.2) +13 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.50.1)
@solana/web3.js NPM version 1.50.1 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @chainify/solana =1.2.14, =1.1.0-next.1, =1.28.2, =0.0.1-rc12, =3.0.0-alpha.16, =3.4.4, =2.0.0, =2.0.0, =0.3.12, =0.3.3, =0.3.3,...
@cremafinance/crema-sdk (>=2.0.11, <=2.0.14), @currie0612/crema-cli (>=0.0.12, <=0.0.42) +9 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.41.0, <=1.41.4)
@solana/web3.js NPM version =1.41.0, =2.0.11, =0.0.12, =2.0.11, =0.2.0-master.0, =1.0.3-beta.1, =1.2.2, =1.0.25, =1.0.1, =2.0.12, =1.0.0, =1.0.7 - winto-sdk 1.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@convexitydmcc/wallet-adapter-walletconnect (>=2.0.0-beta.26, <=2.0.0-rc.5), @renec-foundation/gasless-sdk (>=0.2.3, <=0.2.6) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.48.0)
@solana/web3.js NPM version 1.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @convexitydmcc/wallet-adapter-walletconnect =2.0.0-beta.26, =0.2.3, =3.0.0-beta.1, =6.3.0-profits-mercurial-rc8 Source cves:...