br.com.nitertech:jwt (>=1.1.4.2 <=1.1.5), cn.herodotus.engine:oauth2-core (>=3.0.6.4 <=3.1.1.3) +354 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.1.0 <=6.1.1)

org.springframework.security:spring-security-web MAVEN version =6.1.0, =1.1.4.2, =3.0.6.4, =3.0.6.4, =3.0.6.4, =3.0.6.4, =3.0.6.4, =3.0.6.4, =3.0.6.4, =4.0.1, =4.0.1, =4.0.1, =4.0.1, =0.1.0, =6.1.11, =7.0.4 and more Source cves: CVE-2024-38821 Source advisory: OSV:GHSA-C4Q5-6C82-3QPW...

@adobe/git-server (>=0.9.17 <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293 <=6.1.0) +69 more potentially affected by CVE-2024-48964 via snyk-gradle-plugin (>=1.0.2 <=3.9.0)

snyk-gradle-plugin NPM version =1.0.2, =0.9.17, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.1.3, =0.0.2, =0.0.3 and more Source cves: CVE-2024-48964 Source advisory: OSV:GHSA-QQQW-GM93-QF6M...

ai.ancf.lmos-router:benchmarks (>=0.2.0 <=0.28.0), ai.ancf.lmos-router:lmos-router-hybrid (>=0.2.0 <=0.28.0) +2456 more potentially affected by CVE-2024-49580 via io.ktor:ktor-client-core-jvm (>=1.0.0-rc <=2.3.12)

io.ktor:ktor-client-core-jvm MAVEN version =1.0.0-rc, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.3 - ai.systema:systema-sdk-android-debug =0.1.0-alpha and more Source cves: CVE-2024-49580 Source advisory: OSV:GHSA-8QV4-773J-C979...

afs2-datasource (>=3.8.0.0 <=3.8.2), afw (>=0.0.6 <=0.0.21) +282 more potentially affected by CVE-2024-21272 via mysql-connector-python (>=8.0.21 <=9.0.0)

mysql-connector-python PYPI version =8.0.21, =3.8.0.0, =0.0.6, =1.4.20, =0.0.1, =0.1.1, =0.3.0, =0.0.1, =1.0.0b1, =0.10.0, =2021.2.5, =1.0.1, =1.0.12, =1.1.15, =1.2.24 and more Source cves: CVE-2024-21272 Source advisory: OSV:GHSA-HGJP-83M4-H4FJ...

academic-chatgpt (>=0.3.0 <=0.4.1), africanwhisper (>=0.2.1 <=0.9.0) +316 more potentially affected by CVE-2024-47164 via gradio (>=1.7.7 <=4.8.0)

gradio PYPI version =1.7.7, =0.3.0, =0.2.1, =0.1.5, =0.0.6, =0.0.2, =0.1.0, =0.8.11, =0.4.0, =0.0.4, =0.7.0.dev134, =0.7.0.dev143 - anymodality =0.1.0 - apillava =0.1.0 and more Source cves: CVE-2024-47164 Source advisory: OSV:GHSA-77XQ-6G77-H274...

0x-relayer-cat (>=0.0.2 <=0.0.10), 0xauth (>=0.0.2 <=0.0.6) +8838 more potentially affected by CVE-2024-48949 via elliptic (>=0.10.2 <=6.5.5)

elliptic NPM version =0.10.2, =0.0.2, =0.0.2, =1.0.6, =0.0.1-beta.1, =1.0.0, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =6.2.4 and more Source cves: CVE-2024-48949 Source advisory: OSV:GHSA-434G-2637-QMQR...

@belym.a.2105/publish-please (>=2.4.0 <=2.4.1), @codefresh-io/docker-compose-environment (>=0.0.4 <=0.0.8) +93 more potentially affected by CVE-2024-21533 via ggit (>=0.0.4 <=2.4.12)

ggit NPM version =0.0.4, =2.4.0, =0.0.4, =0.0.12, =1.0.1, =0.1.5, =0.7.2, =4.1.6, =0.0.2, =0.7.3, =1.0.8, =1.0.0, =0.13.0, =1.4.0, =1.0.3, =1.2.0 and more Source cves: CVE-2024-21533 Source advisory: OSV:GHSA-PR45-CG4X-FF4M...

4game-support-ckeditor5-custom-build (>=0.0.1 <=0.0.5), @_mehrad/ckeditor5-build-mmr (>=41.3.1 <=42.0.3) +586 more potentially affected by CVE-2024-45613 via @ckeditor/ckeditor5-clipboard (>=40.0.0 <=43.1.0)

@ckeditor/ckeditor5-clipboard NPM version =40.0.0, =0.0.1, =41.3.1, =2.1.0, =1.0.1, =0.0.1, =0.0.1, =1.0.0, =0.0.0-Beta1, =0.0.17-Beta, =0.0.15-Beta78, =0.0.1, =1.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2024-45613 Source advisory: OSV:GHSA-RGG8-G5X8-WR9V...

ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.70.0 <=0.74.0), ai.ancf.lmos:arc-runner (=0.73.0) +3489 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (>=6.1.0 <=6.1.11)

org.springframework:spring-web MAVEN version =6.1.0, =0.70.0, =0.1.0, =0.5.0, =0.6.0, =0.6.0, =0.5.0, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.8.7 and more Source cves: CVE-2024-38809 Source advisory: OSV:GHSA-2RMJ-MQ67-H97G...

ai.optfor:spring-openai-api (>=0.1 <=0.3.25), am.ik.s3:simple-s3-client (>=0.1.0 <=0.1.1) +4182 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (>=6.0.0 <=6.0.22)

org.springframework:spring-web MAVEN version =6.0.0, =0.1, =0.1.0, =0.2.3, =0.2.3, =0.0.6, =0.0.6, =4.0.0, =1.5.0.RELEASE, =1.5.1.RELEASE, =1.5.0.RELEASE, =2.1.0.RELEASE, =1.5.0.RELEASE, =3.0.0, =3.1.1 and more Source cves: CVE-2024-38809 Source advisory: OSV:GHSA-2RMJ-MQ67-H97G...

de.gematik.bbriccs:bricks-integration-coverage (=0.1.9), de.gematik.bbriccs:fd-fhir-client-brick (=0.1.9) +18 more potentially affected by CVE-2024-46984 via de.gematik.refv.commons:commons (>=0.1.3 <=2.5.0)

de.gematik.refv.commons:commons MAVEN version =0.1.3, =0.1.9, =0.1.9, =2.1.0, =1.0.0, =0.6.0, =0.3.0, =0.1.3, =0.5.0, =0.5.0, =0.4.1, =0.1.3, =0.3.0 and more Source cves: CVE-2024-46984 Source advisory: OSV:GHSA-68J8-FP38-P48Q...

ai.edgestore:engine (=1.0.1-alpha03), androidx.health:health-connect-client (>=1.0.0-alpha01 <=1.0.0-alpha02) +323 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-javalite (>=3.10.0-rc-1 <=3.25.4)

com.google.protobuf:protobuf-javalite MAVEN version =3.10.0-rc-1, =1.0.0-alpha01, =1.0.0, =1.0.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha01, =1.5.0, =2.0.1, =1.14.0, =0.0.0-230221, =0.1.10 and more Source cves: CVE-2024-7254 Source advisory: SNYK:JAVA-COMGOOGLEPROTOBUF-9398723...

@667/restify (=9.0.0-1), @aeppic/install-build-server (>=2.0.0 <=2.44.0) +938 more potentially affected by CVE-2024-45813 via find-my-way (>=5.6.0 <=8.2.0)

find-my-way NPM version =5.6.0, =2.0.0, =3.0.0, =1.0.1, =1.0.0, =2.0.0, =0.0.0-dev.1739244769735, =0.0.0-dev.1739244769735, =2.0.0, =0.0.0-dev.1757040677030, =0.0.0-dev.1739244769735, =0.0.1, =1.6.0, =1.3.1, =3.0.7 and more Source cves: CVE-2024-45813 Source advisory: OSV:GHSA-RRR8-F88R-H8Q6...

intelligenzaartificiale (>=0.0.0.35 <=0.0.0.38), nexus-corr-discovery (=0.0.1.post2) +1 more potentially affected by CVE-2024-8862 via dtale (>=2.16.0 <=3.12.0)

dtale PYPI version =2.16.0, =0.0.0.35, =0.1.0, =0.1.5 Source cves: CVE-2024-8862 Source advisory: OSV:GHSA-FG5M-M723-7MV6...

composio-autogen (>=0.3.13 <=0.5.52rc2), composio-camel (>=0.3.17 <=0.5.52rc2) +15 more potentially affected by CVE-2024-8865 via composio-core (>=0.3.13 <=0.5.8)

composio-core PYPI version =0.3.13, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.5.26, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.3.13, =0.3.13, =0.3.13, =0.4.2, =0.3.24, =0.5.43 - gensphere =0.1.9 and more Source cves: CVE-2024-8865 Source advisory: OSV:GHSA-66R2-XM28-74W9...

composio-autogen (>=0.3.13 <=0.5.52rc2), composio-camel (>=0.3.17 <=0.5.52rc2) +15 more potentially affected by CVE-2024-8864 via composio-core (>=0.3.13 <=0.5.6)

composio-core PYPI version =0.3.13, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.5.26, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.3.13, =0.3.13, =0.3.13, =0.4.2, =0.3.24, =0.5.43 - gensphere =0.1.9 and more Source cves: CVE-2024-8864 Source advisory: OSV:GHSA-MRMH-3HQH-PFW7...

@deconz-community/directus-extension-ddf-store (=0.1.0), @directus/api (=21.0.1) +3 more potentially affected by CVE-2024-45596 via @directus/api (>=10.0.0 <=21.0.0)

@directus/api NPM version =10.0.0, =10.0.0, =1.0.0, =2.0.0 Source cves: CVE-2024-45596 Source advisory: OSV:GHSA-CFF8-X7JV-4FM8...

aglow (>=0.1.0rc3 <=0.1.0rc4), ai-flow (>=0.1.0 <=0.3.1) +8 more potentially affected by CVE-2024-45034 via apache-airflow (>=1.8.2 <=2.0.2)

apache-airflow PYPI version =1.8.2, =0.1.0rc3, =0.1.0, =2.4.2, =1.7.2, =0.3.12, =11.8.0, =0.0.5, =0.0.6 Source cves: CVE-2024-45034 Source advisory: OSV:PYSEC-2024-212...

AitSar (=0.1.1), Boa (>=0.11.0 <=0.13.1) +9707 more potentially affected by unknown CVE via instant (>=0.1.13 <=0.1.9)

instant CARGO version =0.1.13, =0.11.0, =0.1.0-beta.1, =0.1.1, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0384...

31g-form-parser (>=1.0.1 <=1.0.126), 5p-buyform (>=0.0.1 <=0.0.4) +5438 more potentially affected by CVE-2024-39338 via axios (>=1.3.2 <=1.7.3)

axios NPM version =1.3.2, =1.0.1, =0.0.1, =0.0.1, =0.1.2, =2.1.0, =3.0.0, =0.2.1, =0.5.0, =0.0.74, =0.0.14, =2.5.4, =1.0.1, =1.14.5, =1.0.30, =1.0.36 and more Source cves: CVE-2024-39338 Source advisory: OSV:GHSA-8HC4-VH64-CXMJ...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1705 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:remoting (>=1.396 <=3206.vb_15dcf73f6a_9)

org.jenkins-ci.main:remoting MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =1.3, =1.23 and more Source cves: CVE-2024-43044 Source advisory: OSV:GHSA-H856-FFVV-XVR4...

@awes-io/base-nuxt (>=1.0.0 <=1.0.2), @bee-hole/theme (>=1.22.17 <=1.22.82) +146 more potentially affected by CVE-2024-34343 via nuxt (>=0.10.7 <=3.12.3)

nuxt NPM version =0.10.7, =1.0.0, =1.22.17, =0.9.1, =1.1.1, =1.0.1, =1.1.0, =2.17.8, =0.1.5, =0.4.0, =0.1.0, =2.0.1, =0.0.1, =1.0.1, =1.0.0, =1.1.0, =1.1.4 and more Source cves: CVE-2024-34343 Source advisory: OSV:GHSA-VF6R-87Q4-2VJF...

@aneoconsultingfr/armonik-docs-theme (>=0.6.4 <=0.6.13), @cssninja/nuxt-media-viewer (>=0.0.4 <=0.0.15) +14 more potentially affected by CVE-2024-23657 via @nuxt/devtools (>=0.1.6 <=1.3.7)

@nuxt/devtools NPM version =0.1.6, =0.6.4, =0.0.4, =8.3.3, =1.1.1, =0.0.1, =2.0.2, =0.2.5, =1.0.0, =0.0.1, =0.0.0-rc.29, =0.0.1, =2.0.0, =2.1.1 and more Source cves: CVE-2024-23657 Source advisory: OSV:GHSA-RCVG-RGF7-PPPV...

org.apache.inlong:audit-proxy (>=1.10.0 <=1.12.0), org.apache.inlong:dataproxy-dist (>=1.10.0 <=1.12.0) +20 more potentially affected by CVE-2024-36268 via org.apache.inlong:tubemq-core (>=1.10.0 <=1.12.0)

org.apache.inlong:tubemq-core MAVEN version =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.12.0 and more Source cves: CVE-2024-36268 Source advisory: OSV:GHSA-QFF2-8QW7-HCVW...

c2pa (>=0.1.0 <=1.0.0), c2patool (>=0.1.1 <=0.5.1) potentially affected by unknown CVE via xmp_toolkit (>=0.3.8 <=1.7.3)

xmptoolkit CARGO version =0.3.8, =0.1.0, =0.1.1, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0360...

alerter (>=0.3.0 <=0.3.1), maruc (=0.1.0) +9 more potentially affected by CVE-2024-40648 via matrix-sdk-crypto (>=0.1.0 <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-40648 Source advisory: OSV:GHSA-4QG4-CVH2-CRGG...

ai.timefold.solver:timefold-solver-quarkus-jsonb (>=0.9.38 <=1.2.0), ai.timefold.solver:timefold-solver-quarkus-jsonb-deployment (>=0.9.38 <=1.2.0) +2527 more potentially affected by CVE-2023-7272 via org.eclipse.parsson:parsson (>=1.1.0 <=1.1.2)

org.eclipse.parsson:parsson MAVEN version =1.1.0, =0.9.38, =0.9.38, =0.9.38, =22.12.0, =22.11.0, =22.9.0, =24.7.0, =22.5.0, =22.10.0, =22.11.0, =24.7.0 and more Source cves: CVE-2023-7272 Source advisory: OSV:GHSA-2RWM-XV5J-777P...

5p-buyform (>=0.0.1 <=0.0.4), 5paisa-tradingview-webhook (>=0.0.1 <=0.0.2) +232 more potentially affected by CVE-2024-38996 via ag-grid-enterprise (>=12.0.2 <=31.3.2)

ag-grid-enterprise NPM version =12.0.2, =0.0.1, =0.0.1, =1.0.21, =0.0.70, =0.1.43--canary.7d2bdde.0, =0.0.1, =0.1.46, =0.0.1, =0.0.1-rc.0, =4.0.0-alpha, =2.0.0, =1.1.0, =1.0.1, =0.0.0, =0.0.1-991 and more Source cves: CVE-2024-38996 Source advisory: OSV:GHSA-876P-C77M-X2HC...

elita (>=0.60.0 <=0.64.1), slskit (>=2020.1.1 <=2020.9.0) potentially affected by CVE-2024-22231 via salt (>=2014.1.10 <=3001.8.0)

salt PYPI version =2014.1.10, =0.60.0, =2020.1.1, =2020.9.0 Source cves: CVE-2024-22231 Source advisory: OSV:GHSA-Q27C-J6J9-53W3...

@cdr0/active-development (=1.0.0), @cdr0/config (>=1.0.1 <=1.0.2) +6 more potentially affected by CVE-2024-36580 via @cdr0/sg (=1.0.10)

@cdr0/sg NPM version =1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @cdr0/sg and may be impacted: - @cdr0/active-development =1.0.0 - @cdr0/config =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-36580 Source advisory:...

@chargeover/strapi (=0.0.1-rc1.1), @cowprotocol/cms (=0.1.0-rc.5) +14 more potentially affected by CVE-2024-34065 via @strapi/plugin-users-permissions (>=4.0.0-beta.0 <=4.1.9)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0-alpha.0, =0.0.1, =0.1.0, =0.1.10 - strapi-voting =0.2.1 - strapigo =0.1.0 - sveltekit-strapi =0.1.0 and more Source cves: CVE-2024-34065 Source advisory: OSV:GHSA-WRVH-RCMR-9QFC...

org.apache.submarine:submarine-submitter-k8s (>=0.8.0 <=0.8.0-RC0), org.apache.submarine:submarine-test-k8s (>=0.6.0 <=0.8.0-RC0) potentially affected by CVE-2024-36263 via org.apache.submarine:submarine-server-core (>=0.6.0 <=0.8.0)

org.apache.submarine:submarine-server-core MAVEN version =0.6.0, =0.8.0, =0.6.0, =0.8.0-RC0 Source cves: CVE-2024-36263 Source advisory: OSV:GHSA-V74C-QC46-9GG9...

365center-mcp (>=1.0.0 <=1.4.0), @0cfg/rpc-common (>=0.0.1 <=0.1.3) +5096 more potentially affected by CVE-2024-35255 via @azure/identity (>=1.0.0-preview.2 <=4.2.0)

@azure/identity NPM version =1.0.0-preview.2, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =1.0.0, =0.0.1-alpha.3, =0.0.1, =1.0.0, =1.0.1, =16.0.5, =0.3.1, =0.0.1, =0.0.5 and more Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0 <=0.8.7), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0 <=0.8.7) +7655 more potentially affected by CVE-2024-30171 via org.bouncycastle:bcprov-jdk18on (>=1.71 <=1.77)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =1.4.0, =1.2.0, =1.2.0-alpha07, =2023.12.01.210510-f61f157, =2023.12.01.210510-f61f157, =2025.05.12.160240-6152e21 and more Source cves: CVE-2024-30171 Source...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0 <=0.8.7), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0 <=0.8.7) +6798 more potentially affected by CVE-2024-30172 via org.bouncycastle:bcprov-jdk18on (>=1.73 <=1.77)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.73, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =1.7.0-alpha01, =1.3.0, =1.3.0, =2025.01.23.182856-596558a, =2025.01.23.182856-596558a, =2025.05.12.160240-6152e21 and more Source cves: CVE-2024-30172 Source...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1 <=1.0.2), aero.m-click:mcpdf (>=0.2.3 <=0.2.10) +30376 more potentially affected by CVE-2024-29857 via org.bouncycastle:bcprov-jdk15on (>=1.46 <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2024-29857 Source advisory: OSV:GHSA-8XFC-GM6G-VGPV...

br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=1.2.2), com.alanpoi:alanpoi-all (>=1.3.5 <=3.0.0) +126 more potentially affected by CVE-2024-29857 via org.bouncycastle:bcprov-jdk14 (>=1.38 <=1.77)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.38, =1.2.1, =1.3.5, =1.3.5, =2.0, =1.0, =1.6.1.P24, =1.7, =0.0.1, =1.0, =1.1 - com.github.lkkushan101.RestAssuredPDFReport:com.github.lkkushan101.RestAssuredPDFReport =1.00 - com.github.lkkushan101.appiumlocator:com.github.lkkushan101.appiumlocator...

@neoswap/solana-collection-swap (=0.1.6-Beta1), @orbiter-finance/balances (>=0.0.18 <=0.0.21) +2 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.91.1 <=1.91.2)

@solana/web3.js NPM version =1.91.1, =0.0.18, =4.1.2, =2.2.5, =6.1.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

droplinked-payment-hub (>=0.1.3 <=0.2.37), droplinked-web3 (>=0.0.1 <=5.0.2) +3 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.88.0)

@solana/web3.js NPM version =1.88.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - droplinked-payment-hub =0.1.3, =0.0.1, =0.0.1, =0.0.1, =0.0.26 - expand-network =3.0.2 Source cves: CVE-2024-30253 Source advisor...

ai.optfor:spring-openai-api (>=0.1 <=0.3.25), am.ik.s3:simple-s3-client (>=0.1.0 <=0.1.1) +3872 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (>=6.0.0 <=6.0.18)

org.springframework:spring-web MAVEN version =6.0.0, =0.1, =0.1.0, =0.2.3, =0.2.3, =4.0.0, =1.5.0.RELEASE, =1.5.1.RELEASE, =1.5.0.RELEASE, =2.1.0.RELEASE, =1.5.0.RELEASE, =1.5.2.RELEASE - be.tomcools:rickroll-security-spring-boot-starter =3.1.1 -...

llm-toys (=0.1.1), tcbench (>=0.0.20 <=0.0.22) potentially affected by CVE-2024-2196 via aim (>=3.17.4 <=3.17.5)

aim PYPI version =3.17.4, =0.0.20, =0.0.22 Source cves: CVE-2024-2196 Source advisory: OSV:GHSA-99W2-67H8-5948...

org.apache.pulsar:pulsar-broker-auth-athenz (>=3.2.0 <=3.2.1), org.apache.pulsar:pulsar-broker-auth-sasl (>=3.2.0 <=3.2.1) +2 more potentially affected by CVE-2024-29834 via org.apache.pulsar:pulsar-broker (>=3.2.0 <=3.2.1)

org.apache.pulsar:pulsar-broker MAVEN version =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.1 Source cves: CVE-2024-29834 Source advisory: OSV:GHSA-7MG2-6C6V-342R...

apache-airflow-providers-smtp (>=1.0.0rc1 <=1.8.1rc1) potentially affected by CVE-2024-29735 via apache-airflow (=2.8.2)

apache-airflow PYPI version =2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-airflow-providers-smtp =1.0.0rc1, =1.8.1rc1 Source cves: CVE-2024-29735 Source advisory: OSV:GHSA-CFF3-5QRP-HQX7...

com.elega9t:fitnesse-params (=0.0.1), com.github.andreptb:fitnesse-maven-runner-plugin (>=0.2.0 <=0.2.1) +68 more potentially affected by CVE-2024-28128 via org.fitnesse:fitnesse (>=20050731 <=20211030)

org.fitnesse:fitnesse MAVEN version =20050731, =0.2.0, =0.1.0, =BETA-V1.00, =1.0.6, =1.0.0, =1.0.0, =1.2.1, =1.0.1, =1.1.0, =1.0.0, =1.0.0, =1.6.0, =1.6.5 and more Source cves: CVE-2024-28128 Source advisory: OSV:GHSA-MJQ8-GG9X-87GR...

ashpd (>=0.2.0 <=0.4.0-alpha.4) potentially affected by unknown CVE via gdkwayland (>=0.15.5 <=0.17.0)

gdkwayland CARGO version =0.15.5, =0.2.0, =0.4.0-alpha.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0410...

org.apache.archiva:archiva-artifact-converter (>=2.0.0 <=2.1.0), org.apache.archiva:archiva-checksum (>=2.0.0 <=2.2.10) +43 more potentially affected by CVE-2024-27140 via org.apache.archiva:archiva-common (>=2.0.0 <=2.2.10)

org.apache.archiva:archiva-common MAVEN version =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.2.1, =2.0.0, =2.2.10 and more Source cves: CVE-2024-27140 Source advisory: OSV:GHSA-HP2X-6VRM-7J7V...

ae.teletronics.nlp:entityextraction (>=1.3 <=1.4), au.com.turingg:turingg-files (=0.0.1) +1172 more potentially affected by CVE-2024-21742 via org.apache.james:apache-mime4j-core (>=0.7 <=0.8.1)

org.apache.james:apache-mime4j-core MAVEN version =0.7, =1.3, =1.0.1, =3.00.4, =3.00.3, =4.00.10, =3.6.1, =3.11.0, =0.1, =1.2.3, =1.1, =0.3, =0.2, =0.3 and more Source cves: CVE-2024-21742 Source advisory: OSV:GHSA-JW7R-RXFF-GV24...

acetone-nnet (>=0.1.0 <=0.4.0.dev1), acuity (=6.18.0) +154 more potentially affected by CVE-2024-27319 via onnx (>=0.2.0 <=1.15.0)

onnx PYPI version =0.2.0, =0.1.0, =0.0.0, =0.0.157, =1.3.0, =0.0.9, =0.2.19, =0.0.1, =0.1.0, =0.0.0, =1.0.45, =1.44.0, =1.55.0 and more Source cves: CVE-2024-27319 Source advisory: OSV:GHSA-H8WV-9H96-M4HR...

article-extract (>=0.1.2 <=0.1.3), bookscrape (>=0.0.1.dev1 <=0.0.2b7) +19 more potentially affected by CVE-2024-3574 via scrapy (>=1.3.3 <=1.8.0)

scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3, =0.0.1, =1.0.0, =1.0.0, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2024-3574 Source advisory: OSV:GHSA-CW9J-Q3VF-HRRV...

org.graylog.plugins:graylog-plugin-parent (>=5.2.0 <=5.2.12), org.graylog.plugins:graylog-plugin-web-parent (>=5.2.0 <=5.2.12) potentially affected by CVE-2024-24824 via org.graylog2:graylog2-server (>=5.2.0-alpha.1 <=5.2.3)

org.graylog2:graylog2-server MAVEN version =5.2.0-alpha.1, =5.2.0, =5.2.0, =5.2.12 Source cves: CVE-2024-24824 Source advisory: OSV:GHSA-P6GG-5HF4-4RGJ...