@0xgg/echomd (>=1.0.0, <=1.0.4), @21st-night/analytics-web (>=0.65.0, <=0.73.8) +1162 more potentially affected by CVE-2024-28243 via katex (>=0.12.0, <=0.16.9)

katex NPM version =0.12.0, =1.0.0, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.53.0, =0.48.0, =0.53.0, =0.16.0, =0.49.0, =0.76.0, =1.0.7, =0.3.0, =0.6.2 and more Source cves: CVE-2024-28243 Source advisory: OSV:GHSA-64FM-8HW2-V72W...

@oneuptime/common-server (>=7.0.141, <=7.0.1814), @oneuptime/common-ui (>=7.0.141, <=7.0.1814) +1 more potentially affected by CVE-2024-29194 via @oneuptime/model (>=7.0.141, <=7.0.1814)

@oneuptime/model NPM version =7.0.141, =7.0.141, =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: OSV:GHSA-246P-XMG8-WMCQ...

@oneuptime/infrastructure-agent (>=7.0.141, <=7.0.1769) potentially affected by CVE-2024-29194 via @oneuptime/common-server (>=7.0.141, <=7.0.1769)

@oneuptime/common-server NPM version =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: OSV:GHSA-246P-XMG8-WMCQ...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +2102 more potentially affected by CVE-2024-28863 via tar (>=6.0.0, <=6.2.0)

tar NPM version =6.0.0, =1.0.0, =0.0.1, =1.4.0-beta, =0.0.9, =0.0.1, =1.6.0, =4.14.0, =1.0.0, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.28 and more Source cves: CVE-2024-28863 Source advisory: OSV:GHSA-F5X3-32G6-XQ36...

@angular-architects/build-angular (16.2.0-next.2), @angular-devkit/build-angular (>=15.1.0-next.0, <=17.3.1) +165 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (>=6.0.0, <=6.1.1)

webpack-dev-middleware NPM version =6.0.0, =15.1.0-next.0, =9.3.0, =1.12.3, =4.20.4, =0.1.0, =3.1.0-0, =3.0.0-alpha.14, =15.1.0-snapshot-1674521814202, =16.0.0-next.6, =2.6.0, =8.4.0-rc.2, =7.0.0-rc.11, =7.0.0-rc.16 and more Source cves: CVE-2024-29180, CVE-2026-76844 Source advisory:...

@alex91ivanov/ngx-run-builder (1.0.0), @alfresco/adf-testing (6.0.0-A.2-8258) +137 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (>=5.0.0, <=5.3.3)

webpack-dev-middleware NPM version =5.0.0, =2.0.70, =0.12.0, =13.0.0, =0.9.2, =12.0.0-beta.0, =12.1.0-next.5, =1.0.0-alpha.32, =0.0.15, =6.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2024-29180, CVE-2026-76844 Source advisory: OSV:GHSA-WR3J-PWJ9-HQQ6...

@moneko/core (>=3.9.17-beta.25, <=3.11.1-beta.2), @proteinjs/server (>=1.0.1, <=2.1.10) +2 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (7.0.0)

webpack-dev-middleware NPM version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on webpack-dev-middleware and may be impacted: - @moneko/core =3.9.17-beta.25, =1.0.1, =1.1.0, =0.0.101, =0.0.113 Source cves: CVE-2024-29180, CVE-2026-76844 Source...

a-gpt (>=0.1.0, <=0.4.0), aa2 (>=0.9.0, <=0.9.1) +3701 more potentially affected by unknown CVE via yaml-rust (>=0.2.2, <=0.4.5)

yaml-rust CARGO version =0.2.2, =0.1.0, =0.9.0, =1.0.0, =0.1.13, =0.0.9, =0.0.1, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.1.1-alpha.0, =0.1.0, =0.1.27, =0.2.2, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0320...

aliyundrive-webdav (>=1.2.0, <=1.10.1), simple-hyper-server-tls (>=0.1.0, <=0.3.2) +1 more potentially affected by CVE-2024-28854 via tls-listener (>=0.3.0, <=0.5.1)

tls-listener CARGO version =0.3.0, =1.2.0, =0.1.0, =0.3.2 - yahf 0.0.2 Source cves: CVE-2024-28854 Source advisory: OSV:GHSA-2QPH-QPVM-2QF7...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42489 more potentially affected by CVE-2024-28849 via follow-redirects (>=1.0.0, <=1.15.5)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2024-28849 Source advisory: OSV:GHSA-CXJH-PQWP-8MFP...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +3 more potentially affected by CVE-2024-1410 via quiche (>=0.10.0, <=0.18.0)

quiche CARGO version =0.10.0, =0.1.0, =0.6.9 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2024-1410 Source advisory: OSV:GHSA-XHG9-XWCH-VR7X...

@directus/api (>=15.0.0, <=17.1.0), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-28239 via directus (>=10.8.3, <=10.9.3)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-28239 Source advisory: OSV:GHSA-FR3W-2P22-6W7P...

@adobe/helix-google-support (>=1.3.4, <=3.0.8), @adobe/helix-html-pipeline (>=3.0.0, <=5.0.11) +454 more potentially affected by CVE-2024-28176 via jose (>=3.7.0, <=4.15.4)

jose NPM version =3.7.0, =1.3.4, =3.0.0, =1.11.39, =8.0.0, =2.1.2, =1.6.0, =2.1.1, =1.5.3, =7.1.0, =0.1.0, =1.23.2, =0.1.1, =0.1.4 and more Source cves: CVE-2024-28176 Source advisory: OSV:GHSA-HHHV-Q57G-882Q...

@decentralized-identity/ion-sdk (>=0.1.0, <=0.4.1), @tadashi/jwt (>=6.0.0, <=7.0.0) +21 more potentially affected by CVE-2024-28176 via jose (>=2.0.1, <=2.0.5)

jose NPM version =2.0.1, =0.1.0, =6.0.0, =3.0.4, =3.0.4, =3.0.5, =3.0.4, =3.0.5, =3.0.4, =3.0.6, =3.0.3, =3.0.5, =3.1.0, =2.3.2, =0.1.0, =1.2.4 and more Source cves: CVE-2024-28176 Source advisory: OSV:GHSA-HHHV-Q57G-882Q...

cortex-cli (>=2.0.8, <=2.1.1) potentially affected by CVE-2024-28176 via jose-node-cjs-runtime (>=4.6.0, <=4.10.0)

jose-node-cjs-runtime NPM version =4.6.0, =2.0.8, =2.1.1 Source cves: CVE-2024-28176 Source advisory: OSV:GHSA-HHHV-Q57G-882Q...

inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2024-28101 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2024-28101 Source advisory: OSV:GHSA-CGQF-3CQ5-WVCJ...

BIT-SQLITE-2020-15358

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation...

vl-convert-rs (0.8.0) potentially affected by CVE-2024-27936 via deno_runtime (0.105.0)

denoruntime CARGO version 0.105.0 is affected by a known vulnerability. The following packages have a transitive dependency on denoruntime and may be impacted: - vl-convert-rs 0.8.0 Source cves: CVE-2024-27936 Source advisory: OSV:GHSA-M4PQ-FV2W-6HRW...

aide (>=0.1.0, <=0.4.3), bpxe (>=0.1.0, <=0.1.2) +66 more potentially affected by unknown CVE via linkme (>=0.1.6, <=0.2.10)

linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0407...

aaa (>=0.1.0, <=1.1.1), abbegm (0.5.0) +1499 more potentially affected by CVE-2024-27308 via mio (>=0.7.14, <=0.8.8)

mio CARGO version =0.7.14, =0.1.0, =2.0.0-beta.1, =0.9.0, =0.9.0, =0.1.0, =0.1.0, =1.0.9, =1.0.11 - aminograph 0.0.1 and more Source cves: CVE-2024-27308 Source advisory: OSV:GHSA-R8W9-5WCG-VFJ7...