@better-auth/cli (>=0.0.1, <=1.1.15), @vxrn/better-auth (>=1.1.368, <=1.1.416) +2 more potentially affected by CVE-2025-71404 via better-auth (>=0.4.9, <=1.1.15-beta.7)

better-auth NPM version =0.4.9, =0.0.1, =1.1.368, =1.1.0, =1.1.2 - better-auth-monitor 1.0.0 Source cves: CVE-2025-71404 Source advisory: OSV:GHSA-9X4V-XFQ5-M8X5...

org.webjars.npm:vxe-pc-ui (4.14.26), org.webjars.npm:vxe-table (4.19.6) +1 more potentially affected by CVE-2024-57074 via org.webjars.npm:xe-utils (4.0.8)

org.webjars.npm:xe-utils MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:xe-utils and may be impacted: - org.webjars.npm:vxe-pc-ui 4.14.26 - org.webjars.npm:vxe-table 4.19.6 - org.webjars.npm:vxe-uicore 4.4.13 Source...

@armit/eslint-config-bases (>=0.1.1, <=0.1.5), @bpinternal/expresso (0.2.4) +47 more potentially affected by CVE-2025-24964 via vitest (>=1.0.0-beta.0, <=1.6.0)

vitest NPM version =1.0.0-beta.0, =0.1.1, =1.2.3, =1.7.0, =1.7.0, =1.7.0, =0.10.0-vitest-0.0.2, =1.0.295, =8.22.0, =0.0.0, =1.4.0, =4.7.0, =4.21.0 and more Source cves: CVE-2025-24964 Source advisory: OSV:GHSA-9CRC-Q9X8-HGQQ...

bitcoin-harness (0.1.0), bitcoin_rpc_client (>=0.5.0, <=0.6.1) +82 more potentially affected by CVE-2025-24898 via openssl (>=0.10.7, <=0.10.68)

openssl CARGO version =0.10.7, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.0.3, =0.1.24, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2025-24898 Source advisory: OSV:GHSA-RPMJ-RPGJ-QMPM...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +414 more potentially affected by CVE-2025-23061 via mongoose (>=6.0.1, <=6.13.5)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.1.16 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.a3b3f47e2c, <=1.24.0-rc.3)

@lodestar/reqresp NPM version =1.3.0-dev.a3b3f47e2c, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.24.0-rc.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M9C9-MC2H-9WJW...

cvars-console-fyrox (>=0.1.0, <=0.5.0), fyrox (>=0.24.0, <=0.27.1) +7 more potentially affected by unknown CVE via fyrox-core (>=0.19.0, <=0.28.1)

fyrox-core CARGO version =0.19.0, =0.1.0, =0.24.0, =0.1.0, =0.3.0, =0.26.0, =0.15.0, =0.11.0, =0.12.0, =0.14.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0435...

lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2024-53847 via trix (>=2.0.8, <=2.0.10)

trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2024-53847 Source advisory: OSV:GHSA-6VX4-V2JW-QWQH...

@directus/api (>=20.0.0-rc.0, <=23.1.2) potentially affected by CVE-2024-54128 via directus (>=11.0.0, <=11.2.1)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.1.2 Source cves: CVE-2024-54128 Source advisory: OSV:GHSA-R6WX-627V-GH2F...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53857 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53857 Source advisory: OSV:GHSA-4GRW-M28R-Q285...

acir (>=0.44.0, <=0.46.0), age (>=0.7.0, <=0.9.3) +154 more potentially affected by unknown CVE via pprof (>=0.3.23, <=0.13.0)

pprof CARGO version =0.3.23, =0.44.0, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.2, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0, =0.1005.0, =0.1010.2 - binario 0.0.2 - bmssp 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0408...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +111 more potentially affected by CVE-2024-53900 via mongoose (>=7.0.0, <=7.8.2)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =1.0.0, =1.0.6-beta.0, =0.2.0-alpha.1, =0.2.0-alpha.0, =0.0.0, =1.0.2, =1.0.0, =1.0.9 - @dedel.alex/adonis5-mongoose 7.6.10 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

@acronis-platform/ui-component-library (1.33.0), @aesoper/i18n (>=1.0.56, <=1.0.57) +27 more potentially affected by CVE-2024-52809 via vue-i18n (>=10.0.0, <=10.0.4)

vue-i18n NPM version =10.0.0, =1.0.56, =1.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52809 Source advisory: OSV:GHSA-9R9M-FFP6-9X4V...

@litcore/cli (>=1.0.1, <=1.0.2) potentially affected by unknown CVE via litcore (0.0.1-security)

litcore NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on litcore and may be impacted: - @litcore/cli =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2024-10936...

joplin (>=2.8.1, <=2.13.2) potentially affected by CVE-2024-53268 via @joplin/lib (>=2.8.1, <=2.13.4)

@joplin/lib NPM version =2.8.1, =2.8.1, =2.13.2 Source cves: CVE-2024-53268 Source advisory: SNYK:JS-JOPLINLIB-15048153...

@semic/testing (2.2.11) potentially affected by CVE-2024-48914 via @vendure/asset-server-plugin (3.0.0)

@vendure/asset-server-plugin NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @vendure/asset-server-plugin and may be impacted: - @semic/testing 2.2.11 Source cves: CVE-2024-48914 Source advisory: OSV:GHSA-R9MQ-3C9R-FMJQ...

@backan/core (>=0.0.3, <=0.1.0), @bepp/api (>=1.3.2, <=1.3.17) +49 more potentially affected by CVE-2024-48913 via hono (>=4.0.0, <=4.6.4)

hono NPM version =4.0.0, =0.0.3, =1.3.2, =0.75.0, =2.1.5, =0.1.0, =2.13.0, =1.2.0, =1.0.1, =0.0.1, =1.0.0-apm.0, =0.0.0-next-20240721155721, =0.1.0, =0.2.1-beta.1, =0.5.1 and more Source cves: CVE-2024-48913 Source advisory: OSV:GHSA-2234-FMW7-43WR...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @digitalnative/standard-protocol-sdk (>=0.0.190, <=0.0.195) +48 more potentially affected by CVE-2024-21533 via ggit (>=2.0.0, <=2.4.12)

ggit NPM version =2.0.0, =2.4.0-alpha.0, =0.0.190, =1.1.2, =0.1.0, =4.1.6, =0.1.0, =0.1.0, =0.0.1, =1.7.3, =1.0.0, =0.13.4, =1.9.1, =1.0.0, =1.21.0, =1.23.3 and more Source cves: CVE-2024-21533 Source advisory: OSV:GHSA-PR45-CG4X-FF4M...

@1d/analytics (>=3.0.1, <=3.0.4), @adamduren/sentry-remix (>=7.86.0-vercel-patch.1, <=7.86.0) +229 more potentially affected by unknown CVE via @sentry/browser (>=7.0.0, <=7.119.0)

@sentry/browser NPM version =7.0.0, =3.0.1, =7.86.0-vercel-patch.1, =1.16.23-1, =1.0.15, =0.0.0-dev.1739244769735, =1.0.0, =0.17.7-ludo.13, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.3.1-alpha.2 - @canva/app-ui-kit 4.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-593M-55HH-J8GV...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), @_mehrad/ckeditor5-build-mmr (>=41.3.1, <=42.0.3) +586 more potentially affected by CVE-2024-45613 via @ckeditor/ckeditor5-clipboard (>=40.0.0, <=43.1.0-alpha.8)

@ckeditor/ckeditor5-clipboard NPM version =40.0.0, =0.0.1, =41.3.1, =2.1.0, =1.0.1, =0.0.1, =0.0.1, =1.0.0, =0.0.0-Beta1, =0.0.17-Beta, =0.0.15-Beta100, =0.0.1, =1.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2024-45613 Source advisory: OSV:GHSA-RGG8-G5X8-WR9V...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +46 more potentially affected by CVE-2024-45812 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 an...

@akrc/vidocs (>=0.0.0, <=0.0.2), @alexzzz/npms (>=0.0.5, <=0.2.0) +136 more potentially affected by CVE-2024-45812 via vite (>=3.0.0, <=3.2.8)

vite NPM version =3.0.0, =0.0.0, =0.0.5, =1.0.1, =1.0.1, =3.2.0, =1.11.2, =0.0.37, =0.0.35, =0.2.3, =0.0.0-canary-20220718083044, =0.0.6, =0.1.0, =0.0.3, =6.24.0, =7.12.2 and more Source cves: CVE-2024-45812 Source advisory: OSV:GHSA-64VR-G452-QVP3...

afarray (>=0.1.0, <=0.15.1), b-table (>=0.1.0, <=0.2.1) +43 more potentially affected by unknown CVE via get-size (>=0.1.3, <=0.1.4)

get-size CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.8.0, =0.1.0, =0.3.1, =0.3.3, =0.1.0, =0.9.1, =0.14.0 - pathlink 0.1.0 - poseidon-bn128 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0425...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58362 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58362 Source advisory: OSV:GHSA-64F8-PJGR-9WMR...

01-numacert (>=1.0.0, <=3.0.0), 02-infrastructure (1.0.0) +20263 more potentially affected by CVE-2024-43800 via serve-static (>=1.0.1, <=1.15.0)

serve-static NPM version =1.0.1, =1.0.0, =1.0.0, =1.0.1, =1.0.3, =1.0.11 - 2-angular 1.0.0 - 20190403-utils 1.0.0 - 20231122-npm 1.0.0 - 2048.io 0.0.1 and more Source cves: CVE-2024-43800 Source advisory: OSV:GHSA-CM22-4G7W-348P...

@daiyu-5577/quickbuild (>=1.2.1, <=2.6.8), @dataunions/default-join-server (>=3.0.0-alpha.1, <=3.0.3) +14 more potentially affected by CVE-2024-43800 via serve-static (>=2.0.0-beta.1, <=2.0.0-beta.2)

serve-static NPM version =2.0.0-beta.1, =1.2.1, =3.0.0-alpha.1, =3.0.0-alpha.1, =2.0.0, =3.0.3, =4.2.0, =0.2.0, =0.0.1, =0.1.0, =0.55.1, =4.89.0, =1.27.20, =5.0.0-beta.1, =4.0.0, =0.2.0, =0.5.16 and more Source cves: CVE-2024-43800 Source advisory: OSV:GHSA-CM22-4G7W-348P...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3266 more potentially affected by CVE-2024-8372 via angular (>=1.3.2, <=1.8.3)

angular NPM version =1.3.2, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8372 Source advisory: OSV:GHSA-M9GF-397R-HWPG...

foxear (0.1.0), pressurize (>=0.0.1, <=0.1.0) potentially affected by unknown CVE via bcc (>=0.0.31, <=0.0.32)

bcc CARGO version =0.0.31, =0.0.1, =0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0383...

@abdul-kissflow/form-field-scripts (0.0.7), @abo-academy/core (>=0.0.1, <=0.0.2) +1753 more potentially affected by CVE-2024-43788 +2 more via webpack (>=5.0.0, <=5.93.0)

webpack NPM version =5.0.0, =0.0.1, =0.0.1, =0.0.1, =0.2.14, =1.6.0, =1.0.0, =3.0.0, =1.0.44, =3.0.0-beta.0, =1.0.0-rc2, =2.0.5-beta.11, =1.0.0-beta.0, =1.2.1-alpha.0 and more Source cves: CVE-2024-43788, CVE-2024-45389, CVE-2024-45812 Source advisory: OSV:GHSA-4VVJ-4CPR-P986...

assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +7 more potentially affected by CVE-2024-43410 via russh (>=0.34.0, <=0.43.0)

russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - sshrpc 0.1.0 - tunnels 0.1.0 Source cves: CVE-2024-43410 Source advisory: OSV:GHSA-VGVV-X7XG-6CQG...

biscuit-cli (>=0.4.1, <=0.4.2) potentially affected by CVE-2024-41949 +1 more via biscuit-auth (4.1.1)

biscuit-auth CARGO version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on biscuit-auth and may be impacted: - biscuit-cli =0.4.1, =0.4.2 Source cves: CVE-2024-41949, CVE-2024-42350 Source advisory: OSV:GHSA-P9W4-585H-G3C7...

@automatedtf/catalog (>=0.0.1, <=0.0.27), @automatedtf/reactor (>=0.0.1, <=0.0.9) +3 more potentially affected by CVE-2024-41655 via tf2-item-format (4.3.5)

tf2-item-format NPM version 4.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on tf2-item-format and may be impacted: - @automatedtf/catalog =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.25 - @vendortf/catalog 0.0.27 Source cves: CVE-2024-41655 Source advisory...

01.webpack-study (1.0.0), 0226 (1.0.0) +3319 more potentially affected by CVE-2024-6485 via bootstrap (>=3.1.1, <=3.4.1)

bootstrap NPM version =3.1.1, =0.1.0, =4.13.7-rc4, =3.0.1, =3.0.4, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =0.0.2, =0.3.6, =0.4.35 and more Source cves: CVE-2024-6485 Source advisory: OSV:GHSA-VXMC-5X29-H64V...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58363 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58363 Source advisory: OSV:GHSA-GH9F-6XM2-C4J2...

ayaka-model (0.2.0), ayaka-runtime (0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0, <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob 1.0.0-beta1 - icusegmenter 1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-74R5-G7VC-J2V2...

apikit (>=0.1.0, <=0.2.0), apisdk (>=0.0.1, <=0.0.5) +131 more potentially affected by unknown CVE via opentelemetry_api (>=0.1.0, <=0.20.0)

opentelemetryapi CARGO version =0.1.0, =0.1.0, =0.0.1, =0.8.1, =0.3.0, =4.0.15, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.4.0-rc.1, =0.5.0, =0.1.0, =6.6.4, =0.6.1, =0.8.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0387...

@crystaldesign/diva-backoffice (>=24.6.0-rc.1, <=24.7.3), @steedos-widgets/ag-grid (>=3.6.2-beta.9, <=6.3.11-beta.13) +4 more potentially affected by CVE-2024-39001 via ag-grid-enterprise (>=31.0.0, <=31.3.2)

ag-grid-enterprise NPM version =31.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =0.1.65, =31.0.0, =0.0.22, =0.0.38 - react-resuable-table 1.0.0 Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

@crystaldesign/diva-backoffice (>=24.6.0-rc.1, <=24.7.3), @steedos-widgets/ag-grid (>=3.6.2-beta.9, <=6.3.11-beta.13) +4 more potentially affected by CVE-2024-38996 via ag-grid-enterprise (>=31.0.0, <=31.3.2)

ag-grid-enterprise NPM version =31.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =0.1.65, =31.0.0, =0.0.22, =0.0.38 - react-resuable-table 1.0.0 Source cves: CVE-2024-38996 Source advisory: OSV:GHSA-876P-C77M-X2HC...

@amoy/animate (>=0.1.0, <=0.1.8), @amoy/query (>=0.1.1, <=0.4.3) +4 more potentially affected by CVE-2024-38994 via @amoy/common (1.0.10)

@amoy/common NPM version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @amoy/common and may be impacted: - @amoy/animate =0.1.0, =0.1.1, =1.0.0, =0.1.0, =1.0.1, =1.0.42 - react-webgl.js 0.0.1 Source cves: CVE-2024-38994 Source advisory:...

@arkxio/ark-ui (>=0.1.0, <=0.1.23), @arkxio/ark-ui-src (0.1.0) +39 more potentially affected by CVE-2024-38356 via tinymce (>=6.0.0, <=6.8.3)

tinymce NPM version =6.0.0, =0.1.0, =0.1.19, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

@ifanrx/dashboard (>=0.1.1, <=1.3.0), @ithinkdt/editor (>=3.4.11, <=3.5.1) +1 more potentially affected by CVE-2024-38357 via tinymce (>=7.0.1, <=7.1.2)

tinymce NPM version =7.0.1, =0.1.1, =3.4.11, =3.0.7-9, =3.4.0 Source cves: CVE-2024-38357 Source advisory: OSV:GHSA-W9JX-4G6G-RP7X...

@artusx/init (>=1.2.0-beta.1, <=1.2.1), @artusx/rush-utils (>=0.0.1, <=0.0.11) +20 more potentially affected by CVE-2024-35255 via @azure/identity (>=4.0.0, <=4.2.0)

@azure/identity NPM version =4.0.0, =1.2.0-beta.1, =0.0.1, =1.0.0-alpha.20231026.4, =1.0.1-alpha.20231026.4, =2.0.1, =1.19.0-beta.0, =5.112.0, =5.112.0, =0.9.11, =1.0.0, =1.0.1 and more Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

@adinsure-ops/ops-cli (5.3.2), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)

@azure/msal-node NPM version =2.7.0, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

@accordproject/concerto-ui-react-demo (>=0.82.10-20200221024018, <=0.83.1-20200224151908), @alfresco/adf-testing (6.0.0-A.2-8258) +25 more potentially affected by CVE-2024-4068 via braces (>=3.0.0, <=3.0.2)

braces NPM version =3.0.0, =0.82.10-20200221024018, =0.0.2, =1.0.1, =1.16.0, =0.4.1, =0.4.16, =0.4.17, =0.4.17, =0.4.1, =0.4.26 - @react-jsonschema-form-custom/material-ui-fy2ybeyiz 1.0.0 - @react-jsonschema-form-custom/material-ui-nd6dp3pzm 1.0.0 - @react-jsonschema-form/material-ui-bh9hzkrmk...

@kentcdodds/workshop-app (>=1.41.0, <=1.46.7), remix-server-kit (>=3.0.0-beta1, <=3.0.0-beta4) potentially affected by CVE-2024-32866 via @conform-to/zod (>=0.5.1, <=0.7.4)

@conform-to/zod NPM version =0.5.1, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...

endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2024-32884 via gix (0.0.0)

gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2024-32884 Source advisory: OSV:GHSA-98P4-XJMM-8MFH...

@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +140 more potentially affected by CVE-2024-21509 via mysql2 (>=3.0.0, <=3.9.3)

mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21509 Source advisory: OSV:GHSA-49J4-86M8-Q2JW...

emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MC39-H54G-PVW6...

003-gas-convert (1.0.1), 0510test (1.0.0) +9139 more potentially affected by CVE-2024-22363 via xlsx (>=0.3.10, <=0.18.5)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =1.0.1, =0.1.0, =0.1.0, =1.0.0, =1.0.46 and more Source cves: CVE-2024-22363 Source advisory: OSV:GHSA-5PGG-2G8V-P4X9...

@aklesky/vite-config (>=0.7.9, <=0.9.0), @angular-devkit/build-angular (>=17.1.0-next.0, <=17.2.3) +126 more potentially affected by CVE-2024-31207 via vite (>=5.0.0, <=5.0.12)

vite NPM version =5.0.0, =0.7.9, =17.1.0-next.0, =1.0.25-beta.0, =0.5.0, =0.22.0, =1.0.0-rc.12, =0.9.0, =4.20.4, =1.0.0-dev.74fcb60, =1.0.274, =0.40.2, =1.0.8, =1.0.17 - @eagle-tracker-plugin/vite-plugin 1.0.0 - @eagle-tracker-plugin/webpack-plugin 1.0.0 - @equinor/roma-nx-plugin 0.0.21 and more...