@axyzsdk/js (0.0.0), @axyzsdk/react (0.0.0) +4 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.35.0, <=1.35.1)

@solana/web3.js NPM version =1.35.0, =3.0.7, =1.0.0-alpha.1, =0.0.1-rc.1, =0.0.1-rc.3, =0.0.2-rc.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@debridge-finance/solana-contracts-client (>=0.1.0, <=1.0.0), @debridge-finance/solana-utils (1.0.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.62.0)

@solana/web3.js NPM version 1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-contracts-client =0.1.0, =1.0.0 - @debridge-finance/solana-utils 1.0.2 Source cves: CVE-2024-30253 Source...

@civic/civic-sign (>=0.0.4, <=0.0.14), @civic/serum (>=0.17.3, <=0.17.4) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.39.0, <=1.39.1)

@solana/web3.js NPM version =1.39.0, =0.0.4, =0.17.3, =0.3.1-3.beta.1, =0.0.1, =0.2.1, =3.4.1, =2.0.0-beta.1, =0.4.3, =3.11.8, =3.11.14 - winto-sdk 1.0.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@altruism-finance/js (>=0.1.0, <=0.1.1), @sh-coins/solana (>=0.3.0, <=0.3.8) potentially affected by CVE-2024-30253 via @solana/web3.js (1.52.0)

@solana/web3.js NPM version 1.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @altruism-finance/js =0.1.0, =0.3.0, =0.3.8 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2024-32884 via gix (0.0.0)

gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2024-32884 Source advisory: OSV:GHSA-98P4-XJMM-8MFH...

@boltboris/react-nodegui (0.14.0), @educandu/rooms-auth-lambda (>=1.0.0, <=1.0.1) +10 more potentially affected by unknown CVE via phin (>=3.2.4, <=3.7.0)

phin NPM version =3.2.4, =1.0.0, =2.0.0-alpha.1, =1.0.0, =0.13.0, =0.0.0, =0.0.1 - pusher-status 1.1.3 - weather-private 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X565-32QP-M3VF...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30572 more potentially affected by CVE-2024-30171 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2024-30171 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-8731360...

@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +140 more potentially affected by CVE-2024-21508 via mysql2 (>=3.0.0, <=3.9.3)

mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21508 Source advisory: OSV:GHSA-FPW7-J2HG-69V5...

@bidvine/react-summernote (2.0.2), @uday_test/wm_codegen_angular_app (0.0.0) +16 more potentially affected by CVE-2024-29504 via summernote (>=0.5.9, <=0.8.18)

summernote NPM version =0.5.9, =1.0.2, =4.8.14, =4.9.23-SNAPSHOT-1643111141537, =4.9.23-SNAPSHOT-1643111141537, =4.9.23-SNAPSHOT-1643111141537, =4.9.23-SNAPSHOT-1643111141537, =5.0.6, =1.0.0, =1.0.0, =1.0.0, =1.0.4 - wavemaker-ng-runtime-new 0.0.0 and more Source cves: CVE-2024-29504 Source...

slim-pack (>=0.0.1, <=0.0.5) potentially affected by CVE-2024-31999 via @fastify/secure-session (7.1.0)

@fastify/secure-session NPM version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/secure-session and may be impacted: - slim-pack =0.0.1, =0.0.5 Source cves: CVE-2024-31999 Source advisory: OSV:GHSA-9WWP-Q7WQ-JX35...

@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +140 more potentially affected by CVE-2024-21509 via mysql2 (>=3.0.0, <=3.9.3)

mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21509 Source advisory: OSV:GHSA-49J4-86M8-Q2JW...

@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +138 more potentially affected by CVE-2024-21507 via mysql2 (>=3.0.0, <=3.9.2)

mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21507 Source advisory: OSV:GHSA-MQR2-W7WJ-JJGR...

@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +138 more potentially affected by CVE-2024-21507 via mysql2 (>=3.0.0, <=3.9.2)

mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21507 Source advisory: SNYK:JS-MYSQL2-6591300...

@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +140 more potentially affected by CVE-2024-21508 via mysql2 (>=3.0.0, <=3.9.3)

mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21508 Source advisory: SNYK:JS-MYSQL2-6591085...

blind-rsa-signatures (0.9.0), cyfs-base (>=0.5.0, <=0.6.7) +4 more potentially affected by unknown CVE via rsa-export (>=0.1.2, <=0.3.3)

rsa-export CARGO version =0.1.2, =0.5.0, =0.5.0, =0.2.7, =0.1.2, =0.1.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0333...

emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MC39-H54G-PVW6...

at51 (>=0.1.1, <=0.4.1), atrac3p-decoder (>=0.1.0, <=0.1.2) +51 more potentially affected by CVE-2023-53156 via transpose (0.1.0)

transpose CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transpose and may be impacted: - at51 =0.1.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =2.6.2, =0.6.0, =0.1.0, =0.1.0, =0.1.1 and more Source...

acme-dns-rust (>=1.0.0, <=1.0.6), asfa (>=0.1.0, <=0.5.2) +72 more potentially affected by unknown CVE via whoami (>=0.5.3, <=1.2.3)

whoami CARGO version =0.5.3, =1.0.0, =0.1.0, =3.0.0, =0.60.0, =0.60.0, =0.1.0, =0.27.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.1, =0.0.0, =0.0.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W5W5-8VFH-XCJQ...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +683 more potentially affected by unknown CVE via hpack (0.2.0)

hpack CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - acme-client =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.5.0, =0.1.3, =0.1.13 and more Source cves: unknown CVE Source advisory...

a2 (>=0.2.0, <=0.5.3), abacuz (>=0.1.0, <=0.1.1) +4569 more potentially affected by unknown CVE via h2 (>=0.1.26, <=0.3.21)

h2 CARGO version =0.1.26, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q6CP-QFWQ-4GCV...