a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5273 more potentially affected by unknown CVE via ring (>=0.13.5, <=0.16.20)

ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.2, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0010...

@assistant-ui/react-ai-sdk (>=0.5.2, <=0.5.4), @avmkit/pipeline (1.0.3) +95 more potentially affected by CVE-2024-53384 via tsup (>=8.0.0, <=8.3.0)

tsup NPM version =8.0.0, =0.5.2, =1.0.1, =1.0.0, =3.0.0-canary.0.0c9beb2ae, =4.0.0-canary.0.0c9beb2ae, =0.1.0-canary.0.0c9beb2ae, =0.0.2, =0.1.5, =0.1.0-canary.0.0c9beb2ae, =1.0.0, =0.0.15, =0.0.1-canary.0.0c9beb2ae, =0.0.1 and more Source cves: CVE-2024-53384 Source advisory:...

@agent-embed/js (>=0.0.1, <=0.0.45), @altbot/js (>=1.0.0, <=1.0.1) +262 more potentially affected by CVE-2025-27109 via solid-js (>=1.0.0, <=1.9.3)

solid-js NPM version =1.0.0, =0.0.1, =1.0.0, =1.1.7, =0.0.1, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =0.1.26, =0.0.1, =0.0.1-3.1-dev, =0.0.17 - @codyg/datatables 0.0.1 - @converseform.com/js 0.2.31 and more Source cves: CVE-2025-27109 Source advisory: OSV:GHSA-3QXH-P7JC-5XH6...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.20), @silgi/better-auth (>=0.0.5, <=0.0.12) +1 more potentially affected by CVE-2025-71403 via better-auth (>=1.0.0, <=1.1.20-beta.5)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =0.0.5, =1.1.368, =1.1.416 Source cves: CVE-2025-71403 Source advisory: OSV:GHSA-VP58-J275-797X...

blit-server (>=0.20.0, <=0.28.3), dahua-camera-rtsp (>=0.3.0, <=0.3.1) +8 more potentially affected by CVE-2025-27091 via openh264-sys2 (>=0.1.17, <=0.7.1)

openh264-sys2 CARGO version =0.1.17, =0.20.0, =0.3.0, =0.1.0, =0.1.9, =0.1.33, =0.2.0, =0.1.0, =0.4.0, =0.5.5 Source cves: CVE-2025-27091 Source advisory: OSV:RUSTSEC-2025-0008...

@authorium/ckeditor5-build-multi-root (>=41.3.1, <=41.4.2), @eagerworks/ckeditor5-build-multi-root (>=41.4.2-auth.1, <=41.4.2) +8 more potentially affected by CVE-2025-25299 via @ckeditor/ckeditor5-real-time-collaboration (>=41.3.0-alpha.2, <=44.2.0-alpha.16)

@ckeditor/ckeditor5-real-time-collaboration NPM version =41.3.0-alpha.2, =41.3.1, =41.4.2-auth.1, =1.0.1, =4.0.45, =18.0.20, =0.0.8, =41.3.0-alpha.2, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...

-temp-electron-manager-somiibo (0.0.200), 0z_export (>=1.0.0, <=1.0.102) +9461 more potentially affected by CVE-2025-25288 via @octokit/plugin-paginate-rest (>=1.1.2, <=8.0.0)

@octokit/plugin-paginate-rest NPM version =1.1.2, =1.0.0, =1.0.0, =0.0.1, =3.0.0-beta.22, =3.0.0-beta.22, =3.16.2, =3.16.3, =3.16.2, =3.16.2, =4.2.1, =4.4.0 and more Source cves: CVE-2025-25288 Source advisory: OSV:GHSA-H5C3-5R3R-RR8Q...

@activeboxes/piece-github (0.4.1), @activepieces/piece-github (>=0.3.11, <=0.4.1) +157 more potentially affected by CVE-2025-25288 via @octokit/plugin-paginate-rest (>=10.0.0, <=11.4.0)

@octokit/plugin-paginate-rest NPM version =10.0.0, =0.3.11, =0.1.5-alpha.0, =1.0.1, =0.2.4, =1.0.0, =3.0.0-next.5, =1.0.0, =0.5.1, =5.0.7, =0.2.0, =0.21.0, =0.25.7 and more Source cves: CVE-2025-25288 Source advisory: OSV:GHSA-H5C3-5R3R-RR8Q...

@0xyy/elpis (>=1.0.0, <=1.0.2), @1234wu/elpis (>=1.0.0, <=1.0.4) +1397 more potentially affected by CVE-2025-25200 via koa (>=2.0.0, <=2.15.3)

koa NPM version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =1.0.0, =1.1.0 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...

91jin (>=0.1.7, <=0.1.8), @aftonbladet/roc-package-web-app-gaea (>=0.1.0, <=0.4.1) +147 more potentially affected by CVE-2025-25200 via koa (>=1.0.0, <=1.7.0)

koa NPM version =1.0.0, =0.1.7, =0.1.0, =2.4.1, =0.0.2, =0.0.1, =0.1.0, =0.4.11, =0.1.0, =0.0.2, =1.2.1 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...

datafu (>=0.0.6, <=0.0.7) potentially affected by unknown CVE via totally-safe-transmute (0.0.3)

totally-safe-transmute CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on totally-safe-transmute and may be impacted: - datafu =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0030...

@funboxteam/blueprinter (>=5.3.2, <=6.1.0), @henrycatalinismith/11tysnap (0.0.15) +1 more potentially affected by CVE-2024-57075 via eazy-logger (>=4.0.0, <=4.0.1)

eazy-logger NPM version =4.0.0, =5.3.2, =2.28.0, =2.28.2 Source cves: CVE-2024-57075 Source advisory: OSV:GHSA-R7JX-5M6M-CPG9...

3h1-ui (>=3.0.0-liingyun.1, <=3.0.0-next.266), @ayu-mu/core-common (>=1.0.0, <=1.0.2) +164 more potentially affected by CVE-2024-57080 via vxe-table (>=4.1.0, <=4.8.10)

vxe-table NPM version =4.1.0, =3.0.0-liingyun.1, =1.0.0, =1.2.3, =0.16.13, =0.1.1-beta.0, =1.0.0, =1.0.6, =1.0.0, =1.0.4, =0.13.25, =0.1.5-dev.9, =0.1.5-dev.9, =0.1.6-dev.1 and more Source cves: CVE-2024-57080 Source advisory: OSV:GHSA-89FP-F5MX-748X...

org.webjars.npm:github-com-xdan-datetimepicker (2.5.20), org.webjars.npm:jquery-datetimepicker (>=2.5.4, <=2.5.21) potentially affected by CVE-2024-57063 via org.webjars.npm:php-date-formatter (1.3.6)

org.webjars.npm:php-date-formatter MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:php-date-formatter and may be impacted: - org.webjars.npm:github-com-xdan-datetimepicker 2.5.20 - org.webjars.npm:jquery-datetimepick...

org.webjars.npm:catharsis (0.8.9) potentially affected by CVE-2024-57081 via org.webjars.npm:underscore-contrib (0.3.0)

org.webjars.npm:underscore-contrib MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:underscore-contrib and may be impacted: - org.webjars.npm:catharsis 0.8.9 Source cves: CVE-2024-57081 Source advisory:...

org.webjars.npm:vxe-pc-ui (4.14.26), org.webjars.npm:vxe-table (4.19.6) +1 more potentially affected by CVE-2024-57074 via org.webjars.npm:xe-utils (4.0.8)

org.webjars.npm:xe-utils MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:xe-utils and may be impacted: - org.webjars.npm:vxe-pc-ui 4.14.26 - org.webjars.npm:vxe-table 4.19.6 - org.webjars.npm:vxe-uicore 4.4.13 Source...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MX2J-7CMV-353C...

bitcoin-harness (0.1.0), bitcoin_rpc_client (>=0.5.0, <=0.6.1) +82 more potentially affected by CVE-2025-24898 via openssl (>=0.10.7, <=0.10.68)

openssl CARGO version =0.10.7, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.0.3, =0.1.24, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2025-24898 Source advisory: OSV:GHSA-RPMJ-RPGJ-QMPM...

@ronin-dist/render (>=1.0.386-leo-ron-885-experimental.35, <=1.0.490), @ronin/blade (>=0.0.1, <=0.2.7) +1 more potentially affected by unknown CVE via @sentry/bun (>=8.11.0, <=8.41.0)

@sentry/bun NPM version =8.11.0, =1.0.386-leo-ron-885-experimental.35, =0.0.1, =0.1.0, =0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@capawesome/cli (>=1.2.0, <=1.6.3), @crowd-engineers/logger (>=1.0.2, <=1.0.8) +44 more potentially affected by unknown CVE via @sentry/node (>=8.10.0, <=8.48.0)

@sentry/node NPM version =8.10.0, =1.2.0, =1.0.2, =1.6.4, =8.31.1, =0.0.16, =0.1.0, =1.10.0, =1.12.17, =1.26.29, =1.4.23, =3.11.1, =1.0.0, =1.7.1, =1.0.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@laboratory-one/api-components (>=0.0.16, <=0.0.21), @rxap/nest-sentry (>=10.4.5-dev.1, <=10.4.5) potentially affected by unknown CVE via @sentry/nestjs (>=8.18.0, <=8.26.0)

@sentry/nestjs NPM version =8.18.0, =0.0.16, =10.4.5-dev.1, =10.4.5 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...

@directus/api (>=20.0.0-rc.0, <=23.1.0), directus (>=11.0.0-rc.1, <=11.1.2) potentially affected by CVE-2025-24353 via @directus/app (>=13.0.0, <=13.3.0)

@directus/app NPM version =13.0.0, =20.0.0-rc.0, =11.0.0-rc.1, =11.1.2 Source cves: CVE-2025-24353 Source advisory: OSV:GHSA-PMF4-V838-29HG...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +1859 more potentially affected by CVE-2025-22150 via undici (>=6.0.0, <=6.21.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.0.0, =1.0.0, =0.1.5-alpha.0, =1.0.9-beta.0, =0.5.21-beta.0, =0.5.21-beta.0, =0.1.0, =0.1.5 - @aivue/chatbot-storage 1.0.1 and more Source cves: CVE-2025-22150 Source advisory: OSV:GHSA-C76H-2CCP-4975...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) potentially affected by unknown CVE via platform-browser-dynamic (0.0.1-security)

platform-browser-dynamic NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser-dynamic and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 Source cves: unknown...

4casterschemas (>=1.0.0, <=1.0.1), @3kles/3kles-coremongodb (>=2.1.5, <=2.1.6) +113 more potentially affected by CVE-2025-23061 via mongoose (>=8.0.0, <=8.9.4)

mongoose NPM version =8.0.0, =1.0.0, =2.1.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =3.13.0, =1.1.9, =2.0.0, =2.0.7 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.a3b3f47e2c, <=1.24.0-rc.3)

@lodestar/reqresp NPM version =1.3.0-dev.a3b3f47e2c, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.24.0-rc.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M9C9-MC2H-9WJW...

@abuaiman/abujunainah (1.1.4), @abuaiman/spy (1.1.4) +300 more potentially affected by CVE-2024-56332 via next (>=15.0.0, <=15.1.1)

next NPM version =15.0.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =1.0.19, =0.1.0, =0.0.4, =0.1.0, =0.1.11, =1.0.0, =0.0.1-alpha, =0.0.4-alpha - @benimaru/ahgas 1.1.4 - @benimaru/asduq 1.1.4 - @benimaru/balon 1.1.4 and more Source cves: CVE-2024-56332 Source advisory...

1ocalendar (1.0.0), 24social-ui (>=1.0.0, <=1.0.5) +2611 more potentially affected by CVE-2024-56332 via next (>=13.0.0, <=13.5.7-canary.37)

next NPM version =13.0.0, =1.0.0, =1.0.51, =1.6.1, =0.5.5, =0.1.23, =2.0.0-rc19, =0.2.47, =0.4.37, =1.3.2, =0.0.2, =1.0.0, =0.0.1, =0.0.6 and more Source cves: CVE-2024-56332 Source advisory: OSV:GHSA-7M27-7GHC-44W9...

clipass (0.1.0), clipperd (>=0.1.1, <=0.1.5) +14 more potentially affected by unknown CVE via magic-crypt (3.1.13)

magic-crypt CARGO version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on magic-crypt and may be impacted: - clipass 0.1.0 - clipperd =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =1.0.0, =1.0.1, =0.1.0, =0.1.0, =0.19.7, =0.6.1, =0.11.1 and mo...

actinium226-librespot-playback (>=0.4.3-updated, <=0.4.3), aipster (>=1.0.0, <=2.0.0) +502 more potentially affected by unknown CVE via glib (>=0.15.12, <=0.19.9)

glib CARGO version =0.15.12, =0.4.3-updated, =1.0.0, =0.1.0, =0.2.9, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.9, =0.8.0, =0.8.0, =0.8.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WRW7-89JP-8Q8G...

ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)

ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: OSV:MAL-2024-11879...

@agent_z/egg (>=1.0.0, <=1.0.2), @ccci/micro-server (>=1.0.57, <=1.0.132) +12 more potentially affected by CVE-2024-21548 via bun (>=0.5.9, <=1.1.29)

bun NPM version =0.5.9, =1.0.0, =1.0.57, =1.0.0, =0.0.0, =0.0.2, =0.0.19-beta.11, =0.0.3, =0.0.2, =0.0.3, =0.0.55, =0.0.4, =0.0.7 Source cves: CVE-2024-21548 Source advisory: SNYK:JS-BUN-8499549...

pqcrypto (>=0.12.2, <=0.16.1), pqcrypto-compat (0.1.0) potentially affected by unknown CVE via pqcrypto-hqc (>=0.0.4, <=0.1.6)

pqcrypto-hqc CARGO version =0.0.4, =0.12.2, =0.16.1 - pqcrypto-compat 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-753P-WRJ5-G8FJ...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q97-M5RC-P3GP...

lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2024-53847 via trix (>=2.0.8, <=2.0.10)

trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2024-53847 Source advisory: OSV:GHSA-6VX4-V2JW-QWQH...

@directus/api (>=20.0.0-rc.0, <=23.1.2) potentially affected by CVE-2024-54128 via directus (>=11.0.0, <=11.2.1)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.1.2 Source cves: CVE-2024-54128 Source advisory: OSV:GHSA-R6WX-627V-GH2F...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53857 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53857 Source advisory: OSV:GHSA-4GRW-M28R-Q285...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53856 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53856 Source advisory: OSV:GHSA-9RMP-2568-59RV...

flowlang (>=0.1.6, <=0.1.8), lavendeux-parser (>=0.3.0, <=0.8.1) +1 more potentially affected by unknown CVE via js-sandbox (0.1.6)

js-sandbox CARGO version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on js-sandbox and may be impacted: - flowlang =0.1.6, =0.3.0, =0.1.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-4MW5-2636-4535...

aide (>=0.1.0, <=0.4.3), bpxe (>=0.1.0, <=0.1.2) +66 more potentially affected by unknown CVE via linkme (>=0.1.6, <=0.2.10)

linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:GHSA-F95P-4CV5-8W8X...

@3kles/3kles-coremongodb (>=2.1.5, <=2.1.6), @akemona-org/strapi-connector-mongoose (>=3.13.0, <=3.16.2) +96 more potentially affected by CVE-2024-53900 via mongoose (>=8.0.0, <=8.8.2)

mongoose NPM version =8.0.0, =2.1.5, =3.13.0, =2.0.0, =0.0.34, =0.5.0, =0.4.3, =0.4.5, =0.4.12, =4.1.5, =1.3.5, =0.0.5, =0.2.1, =8.3.1, =4.8.0, =1.0.0, =1.2.2 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +111 more potentially affected by CVE-2024-53900 via mongoose (>=7.0.0, <=7.8.2)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =1.0.0, =1.0.6-beta.0, =0.2.0-alpha.1, =0.2.0-alpha.0, =0.0.0, =1.0.2, =1.0.0, =1.0.9 - @dedel.alex/adonis5-mongoose 7.6.10 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

joplin (>=2.8.1, <=2.13.2) potentially affected by CVE-2024-53268 via @joplin/lib (>=2.8.1, <=2.13.4)

@joplin/lib NPM version =2.8.1, =2.8.1, =2.13.2 Source cves: CVE-2024-53268 Source advisory: SNYK:JS-JOPLINLIB-15048153...

acia (>=0.3.0, <=0.3.2), ai-parrot (>=0.22.0, <=0.24.0) +235 more potentially affected by CVE-2024-30896 via influxdb-client (>=1.3.0, <=1.50.0)

influxdb-client PYPI version =1.3.0, =0.3.0, =0.22.0, =0.0.7, =1.0.0rc1, =0.1.0, =1.0.8, =0.0.1, =0.1.6, =0.1.0a1, =1.0.37, =0.1.0, =0.5.0, =0.12.0, =1.6.0b0, =20.0.0.0rc1, =24.0.0 and more Source cves: CVE-2024-30896 Source advisory: SNYK:PYTHON-INFLUXDBCLIENT-8422793...

@2digits/eslint-config (>=2.6.0, <=2.7.0), @2digits/eslint-plugin (>=2.2.9, <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (0.1.0)

@eslint/plugin-kit NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

cryprot-net (0.1.0), dbx-core (>=0.2.0-beta, <=0.2.2) +6 more potentially affected by unknown CVE via s2n-tls (>=0.0.6, <=0.3.1)

s2n-tls CARGO version =0.0.6, =0.2.0-beta, =0.2.0-beta, =0.1.0, =1.18.0, =0.18.2, =0.18.2, =0.0.6, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RP9H-RF7G-HWGR...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0401...

hotg-rune-runtime (>=0.11.0, <=0.11.3), hotg-rune-wasm3-runtime (>=0.6.0, <=0.10.0) +7 more potentially affected by CVE-2024-27529 via wasm3 (>=0.1.3, <=0.3.1)

wasm3 CARGO version =0.1.3, =0.11.0, =0.6.0, =0.7.0, =0.4.0, =0.2.0, =0.0.1, =0.16.0, =0.15.0, =0.19.0 Source cves: CVE-2024-27529 Source advisory: OSV:GHSA-FMQ6-4W57-2W3V...

1uphealth-provider-search (>=0.1.0, <=0.3.0), 20190403-utils (1.0.0) +6909 more potentially affected by CVE-2024-21538 via cross-spawn (>=6.0.0, <=6.0.5)

cross-spawn NPM version =6.0.0, =0.1.0, =0.1.0, =0.1.4, =0.1.0, =1.0.0-beta.1, =0.1.1, =0.1.72, =9.0.0, =3.0.0, =1.0.0, =1.0.3 - @352inc/react-scripts 2.0.5-custom-6 and more Source cves: CVE-2024-21538 Source advisory: OSV:GHSA-3XGQ-45JJ-V275...

@casablanca-css/core (0.2.0), @nuxtjs/device (>=3.2.0, <=3.2.2) +4 more potentially affected by CVE-2024-51757 via happy-dom (>=15.0.0, <=15.7.4)

happy-dom NPM version =15.0.0, =3.2.0, =6.0.1, =4.1.4, =5.1.4, =1.1.78, =1.1.79 Source cves: CVE-2024-51757 Source advisory: OSV:GHSA-96G7-G7G9-JXW8...