@angular-devkit/build-angular (>=17.1.0-next.1, <=17.2.0-next.1), @directus/api (15.0.0) +16 more potentially affected by CVE-2024-24750 via undici (>=6.0.0, <=6.5.0)

undici NPM version =6.0.0, =17.1.0-next.1, =1.0.0, =17.0.0, =1.0.5, =5.3.0, =4.1.0, =4.2.0 - directus 10.8.3 and more Source cves: CVE-2024-24750 Source advisory: OSV:GHSA-9F24-JQHM-JFCW...

@icanbwell/composite (>=1.89.4, <=1.202.0), @icanbwell/native-components (>=0.21.6, <=0.31.0) +4 more potentially affected by CVE-2024-25466 via react-native-document-picker (>=9.0.1, <=9.1.0)

react-native-document-picker NPM version =9.0.1, =1.89.4, =0.21.6, =0.14.5, =1.1.0, =1.8.0 - @likeminds.community/feed-rn-core 0.6.0 - @likeminds.community/feed-rn-core-beta 0.0.1 Source cves: CVE-2024-25466 Source advisory: OSV:GHSA-PMGM-H3CC-M4HJ...

@kafudev/react-native-shell (>=0.66.4-beta.18, <=0.66.5-beta.8), @likeminds.community/chat-rn-core (>=0.5.0, <=1.0.1) +4 more potentially affected by CVE-2024-25466 via react-native-document-picker (>=8.0.0, <=8.2.0)

react-native-document-picker NPM version =8.0.0, =0.66.4-beta.18, =0.5.0, =0.0.8, =0.0.1, =0.5.0, =0.5.14 - yan-react-hook-form 0.1.7 Source cves: CVE-2024-25466 Source advisory: OSV:GHSA-PMGM-H3CC-M4HJ...

@etalab/cadastre (>=0.14.0-1, <=0.21.0), @fmidev/smartmet-alert-client (>=3.0.0-rc.1, <=3.8.8) +10 more potentially affected by CVE-2024-1163 via mapshaper (>=0.3.43, <=0.6.42)

mapshaper NPM version =0.3.43, =0.14.0-1, =3.0.0-rc.1, =0.1.9, =0.0.3, =2.1.0, =1.3.1, =0.0.1, =0.0.1, =0.1.0 - tile-maker 0.0.1 Source cves: CVE-2024-1163 Source advisory: OSV:GHSA-8M36-62RW-9MXW...

a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1149 more potentially affected by unknown CVE via libgit2-sys (>=0.1.13, <=0.15.2+1.6.4)

libgit2-sys CARGO version =0.1.13, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.1.0, =0.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q8-GHMQ-63VF...

abi-stable-host-api (>=0.1.1, <=0.1.13), abi_stable (>=0.2.0, <=0.11.3) +267 more potentially affected by unknown CVE via generational-arena (>=0.1.0, <=0.2.9)

generational-arena CARGO version =0.1.0, =0.1.1, =0.2.0, =0.4.0, =0.4.0, =0.5.0, =0.1.14, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.10.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0014...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3270 more potentially affected by CVE-2024-21490 via angular (>=1.3.2, <=1.8.3)

angular NPM version =1.3.2, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-21490 Source advisory: OSV:GHSA-4W4V-5HC9-XRR2...

certificate_authority (0.1.0), citadel_crypt (>=0.3.0, <=0.7.0) +15 more potentially affected by unknown CVE via pqc_kyber (>=0.4.0, <=0.7.1)

pqckyber CARGO version =0.4.0, =0.3.0, =0.3.0, =0.1.0-alpha, =1.3.0, =0.1.0, =11.0.0, =0.1.0, =9.0.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-X5J2-G63M-F8G4...

007putra-my-bot (1.1.1), 8mb (>=1.0.1, <=1.1.4) +199 more potentially affected by CVE-2024-24828 via pkg (>=5.1.0, <=5.8.1)

pkg NPM version =5.1.0, =1.0.1, =1.0.0, =2.5.16, =2.7.7, =2.7.7, =1.0.1, =3.32.1, =10.38.1--canary.2299.2e83683.0, =0.2.0-pre.1, =0.0.0-development, =0.0.1, =0.1.0, =0.0.29, =1.0.0-alpha.2 and more Source cves: CVE-2024-24828 Source advisory: OSV:GHSA-22R3-9W55-CJ54...

007-nodejs (>=2.5.0, <=2.5.3), 10by10-react-app (1.2.1) +5001 more potentially affected by CVE-2023-42282 via ip (>=1.0.0, <=1.1.8)

ip NPM version =1.0.0, =2.5.0, =4.11.0, =1.0.1-5.4, =3.16.2, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =3.0.0-beta.22, =3.10.1, =3.11.0 and more Source cves: CVE-2023-42282 Source advisory: OSV:GHSA-78XJ-CGH5-2H22...

@gun-vue/relay (>=0.4.2, <=0.5.0), @mimik/configuration (>=4.4.10, <=5.0.11) +5 more potentially affected by CVE-2023-42282 via ip (2.0.0)

ip NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ip and may be impacted: - @gun-vue/relay =0.4.2, =4.4.10, =1.0.0, =1.0.19-alpha.2, =1.0.0, =1.0.3 Source cves: CVE-2023-42282 Source advisory: OSV:GHSA-78XJ-CGH5-2H22...

@amplicode/addon-email-templates (>=0.0.1-snapshot.8, <=0.1.0-snapshot.1.6), @dankolz/news-flash (>=1.0.1, <=1.0.2) +10 more potentially affected by CVE-2023-4771 via ckeditor4 (>=4.14.0, <=4.22.1)

ckeditor4 NPM version =4.14.0, =0.0.1-snapshot.8, =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2023-4771 Source advisory: OSV:GHSA-WH5W-82F3-WRXH...

@amplicode/addon-email-templates (>=0.0.1-snapshot.8, <=0.1.0-snapshot.1.6), @dankolz/news-flash (>=1.0.1, <=1.0.2) +10 more potentially affected by CVE-2024-24816 via ckeditor4 (>=4.14.0, <=4.22.1)

ckeditor4 NPM version =4.14.0, =0.0.1-snapshot.8, =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2024-24816 Source advisory: OSV:GHSA-MW2C-VX6J-MG76...

@amplicode/addon-email-templates (>=0.0.1-snapshot.8, <=0.1.0-snapshot.1.6), @dankolz/news-flash (>=1.0.1, <=1.0.2) +10 more potentially affected by CVE-2024-24815 via ckeditor4 (>=4.14.0, <=4.22.1)

ckeditor4 NPM version =4.14.0, =0.0.1-snapshot.8, =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2024-24815 Source advisory: OSV:GHSA-FQ6H-4G8V-QQVM...

a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1149 more potentially affected by CVE-2024-24575 +1 more via libgit2-sys (>=0.1.13, <=0.15.2+1.6.4)

libgit2-sys CARGO version =0.1.13, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.1.0, =0.3.3 and more Source cves: CVE-2024-24575, CVE-2024-24577 Source advisory: OSV:RUSTSEC-2024-0013...

@hyperledger/cactus-plugin-htlc-coordinator-besu (2.0.0-alpha.2), @hyperledger/cactus-plugin-persistence-ethereum (>=2.0.0-2945-supply-chain-app-build-failed.241, <=2.0.0-main.214) +20 more potentially affected by CVE-2024-21505 via web3-utils (>=4.0.0-alpha.1, <=4.1.2-dev.998954f.0)

web3-utils NPM version =4.0.0-alpha.1, =2.0.0-2945-supply-chain-app-build-failed.241, =2.0.0-2945-supply-chain-app-build-failed.241, =0.0.88, =0.0.84, =0.0.244-test-deposit-improve-v19, =4.0.2-dev.023f02d.0, =4.0.2-dev.023f02d.0, =4.0.2-dev.023f02d.0, =4.0.2-dev.023f02d.0, =4.0.2-dev.023f02d.0,...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2) +63 more potentially affected by CVE-2021-4435 via yarn (>=1.0.2, <=1.22.11)

yarn NPM version =1.0.2, =1.17.6-next.0, =1.0.2-6river, =0.0.9, =0.0.1, =1.6.0, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.4.0-next.7, =0.3.0-next.1, =0.3.0-next.1, =1.1.0-dev.2, =5.6.4, =3.1.264, =1.15.3, =1.15.5 and more Source cves: CVE-2021-4435 Source advisory: OSV:GHSA-MPWJ-FCR6-X34C...

markdown-math-editor (>=1.1.0, <=1.1.3), mse-md2html (>=1.0.0, <=1.0.1) +1 more potentially affected by unknown CVE via remark-images-download (3.0.5)

remark-images-download NPM version 3.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on remark-images-download and may be impacted: - markdown-math-editor =1.1.0, =1.0.0, =8.0.0, =12.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MF74-QQ7W-6J7...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +693 more potentially affected by CVE-2024-58379 via nodemailer (>=6.0.0, <=6.9.8)

nodemailer NPM version =6.0.0, =1.0.49, =0.0.1, =0.0.1, =0.1.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =2.3.4 and more Source cves: CVE-2024-58379 Source advisory: OSV:GHSA-9H6G-PR28-7CQP...

glibc qsort() Out-Of-Bounds Read / Write

Qualys Security Advisory For the algorithm lovers: Nontransitive comparison functions lead to out-of-bounds read & write in glibc's qsort ======================================================================== Contents ========================================================================...