@aem-vite/import-rewriter (>=5.0.1, <=6.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=2.3.1) +145 more potentially affected by CVE-2024-23331 via vite (>=2.7.0, <=2.9.16)

vite NPM version =2.7.0, =5.0.1, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =0.9.1, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.37, =0.0.42 and more Source cves: CVE-2024-23331 Source advisory:...

@akrc/vidocs (>=0.0.0, <=0.0.2), @alexzzz/npms (>=0.0.5, <=0.2.0) +136 more potentially affected by CVE-2024-23331 via vite (>=3.0.0, <=3.2.7)

vite NPM version =3.0.0, =0.0.0, =0.0.5, =1.0.1, =1.0.1, =3.2.0, =1.11.2, =0.0.37, =0.0.35, =0.2.3, =0.0.0-canary-20220718083044, =0.0.6, =0.1.0, =0.0.3, =6.24.0, =7.12.2 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

@aklesky/vite-config (>=0.7.9, <=0.9.0), @angular-devkit/build-angular (>=17.1.0-next.0, <=17.1.0) +91 more potentially affected by CVE-2024-23331 via vite (>=5.0.0, <=5.0.11)

vite NPM version =5.0.0, =0.7.9, =17.1.0-next.0, =1.0.25-beta.0, =0.5.0, =0.22.0, =1.0.0-rc.12, =4.20.4, =1.0.0-dev.74fcb60, =1.0.274, =0.40.2, =0.0.7, =0.0.1, =11.12.0-beta.0, =11.13.0 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +415 more potentially affected by CVE-2024-23331 via vite (>=4.0.0, <=4.5.1)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +2 more potentially affected by unknown CVE via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-58J9-J2FJ-V8F4...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +2 more potentially affected by CVE-2024-58370 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58370 Source advisory: OSV:GHSA-6R8P-HPG7-825G...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +2 more potentially affected by CVE-2024-58368 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58368 Source advisory: OSV:GHSA-M24X-R6Q3-2VP9...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +2 more potentially affected by CVE-2024-58369 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58369 Source advisory: OSV:GHSA-JM4V-58R5-66HJ...

arcon_compiler (>=0.1.0, <=0.1.1), astrology (>=0.1.0, <=0.1.55) +18 more potentially affected by unknown CVE via ferris-says (>=0.1.2, <=0.2.1)

ferris-says CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =10.10.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V363-RRF2-5FMJ...

accountpro (>=1.0.0, <=2.1.9) potentially affected by unknown CVE via dicsord.js-selfbot-v13 (0.0.1-security)

dicsord.js-selfbot-v13 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on dicsord.js-selfbot-v13 and may be impacted: - accountpro =1.0.0, =2.1.9 Source cves: unknown CVE Source advisory: OSV:MAL-2024-114...

aries-askar (0.1.2), indy-credx (>=0.2.0, <=0.3.1) +5 more potentially affected by CVE-2024-22192 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.0.6, =0.0.8 Source cves: CVE-2024-22192 Source advisory: OSV:GHSA-6698-MHXX-R84G...

aries-askar (0.1.2), indy-credx (>=0.2.0, <=0.3.1) +5 more potentially affected by CVE-2022-31021 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.0.6, =0.0.8 Source cves: CVE-2022-31021 Source advisory: OSV:GHSA-2Q6J-GQC4-4GW3...

crabsay (>=0.1.0, <=0.1.1), craterfinder (>=0.1.0, <=0.1.1) +11 more potentially affected by unknown CVE via ferris-says (0.2.1)

ferris-says CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on ferris-says and may be impacted: - crabsay =0.1.0, =0.1.0, =0.1.0, =0.1.1 - rs-lean 0.1.0 - rust-study 0.1.0 - rustbyexample 0.2.0 - rusty-grep 0.1.0 - rusty-redis 0.1.0...

@coinbase/wallet-mobile-sdk (>=0.1.1, <=1.0.10), @getvolume/react-native (>=0.3.2, <=2.2.3) +44 more potentially affected by CVE-2024-21668 via react-native-mmkv (>=2.1.0, <=2.10.2)

react-native-mmkv NPM version =2.1.0, =0.1.1, =0.3.2, =0.66.4-beta.18, =1.0.0, =1.0.0, =6.0.0, =1.0.0, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.89 and more Source cves: CVE-2024-21668 Source advisory: OSV:GHSA-4JH3-6JHV-2MGP...

http-proxy-with-cors (>=1.2.2, <=1.2.4) potentially affected by CVE-2023-51701 via @fastify/reply-from (9.1.0)

@fastify/reply-from NPM version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/reply-from and may be impacted: - http-proxy-with-cors =1.2.2, =1.2.4 Source cves: CVE-2023-51701 Source advisory: OSV:GHSA-V2V2-HPH8-Q5XP...

@backstage/backend-common (>=0.0.0-nightly-20230111022819, <=0.0.0-nightly-20240612021718), @backstage/backend-defaults (>=0.0.0-nightly-20220811024336, <=0.0.0-nightly-20260818023149) +26 more potentially affected by CVE-2023-6944 via @backstage/backend-app-api (>=0.0.0-nightly-20220811024336, <=0.0.0-nightly-20260818023149)

@backstage/backend-app-api NPM version =0.0.0-nightly-20220811024336, =0.0.0-nightly-20230111022819, =0.0.0-nightly-20220811024336, =0.0.0-nightly-20240214021031, =0.0.0-nightly-20220813024304, =0.0.0-nightly-20220813024304, =0.0.0-nightly-20240929023448, =0.0.0-nightly-20240929023448,...

etclient (0.3.0), eth-utils (>=0.1.1, <=0.2.0) +32 more potentially affected by CVE-2024-21629 via evm (>=0.7.1, <=0.33.1)

evm CARGO version =0.7.1, =0.1.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2024-21629 Source advisory: OSV:GHSA-27WG-99G8-2V4V...

managed-component-to-cloudflare-worker (1.5.2) potentially affected by CVE-2023-7080 via wrangler (2.0.23)

wrangler NPM version 2.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on wrangler and may be impacted: - managed-component-to-cloudflare-worker 1.5.2 Source cves: CVE-2023-7080 Source advisory: OSV:GHSA-F8MP-X433-5WPF...

@clevercanyon/dev-deps (>=1.0.274, <=1.0.287), @flare-city/test (>=0.2.0, <=0.4.3) potentially affected by CVE-2023-7080 via wrangler (>=3.15.0, <=3.18.0)

wrangler NPM version =3.15.0, =1.0.274, =0.2.0, =0.4.3 Source cves: CVE-2023-7080 Source advisory: OSV:GHSA-F8MP-X433-5WPF...

@clevercanyon/dev-deps (>=1.0.274, <=1.0.287), @flare-city/test (>=0.2.0, <=0.4.3) potentially affected by CVE-2023-7079 via wrangler (>=3.15.0, <=3.18.0)

wrangler NPM version =3.15.0, =1.0.274, =0.2.0, =0.4.3 Source cves: CVE-2023-7079 Source advisory: OSV:GHSA-CFPH-4QQH-W828...