crystal-toolkit (=2020.9.28), ddfacet (>=0.8.0.0 <=0.8.0.1) +11 more potentially affected by unknown CVE via pyfftw (>=0.11.1 <=0.13.1)

pyfftw PYPI version =0.11.1, =0.8.0.0, =0.1.5, =24.5.1, =0.8.0, =0.1.0, =0.6.0, =0.1.3, =0.0.2, =1.0.2, =2.0.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-PYFFTW-8446347...

dspy (>=2.5.43 <=2.6.0rc8), jac-cloud (>=0.1.0 <=0.1.24) +9 more potentially affected by unknown CVE via fastapi-sso (>=0.10.0 <=0.15.0)

fastapi-sso PYPI version =0.10.0, =2.5.43, =0.1.0, =0.0.1, =0.0.1, =2.0.5, =1.0.1, =0.12.11, =2.7.11, =0.5.71, =0.6.52 Source cves: unknown CVE Source advisory: SNYK:PYTHON-FASTAPISSO-8445602...

@10play/tentap-editor (>=0.5.27 <=0.7.5-alpha.0), @adminjs/design-system (>=3.0.0 <=4.0.3) +131 more potentially affected by CVE-2025-14284 via @tiptap/extension-link (>=2.0.0-beta.18 <=2.10.3)

@tiptap/extension-link NPM version =2.0.0-beta.18, =0.5.27, =3.0.0, =0.4.1, =3.0.0-alpha.1, =0.0.1, =0.2.1, =0.2.0, =0.1.0, =0.28.0, =3.4.0, =1.2.0, =0.0.3, =0.4.1 and more Source cves: CVE-2025-14284 Source advisory: SNYK:JS-TIPTAPEXTENSIONLINK-14222197...

com.charlyghislain.keycloak:keycloak-importexport (>=21.0.0 <=23.0.1), com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.10 <=1.4.11) +97 more potentially affected by CVE-2024-10270 via org.keycloak:keycloak-services (>=1.0-alpha-1 <=24.0.5)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =21.0.0, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.0.1, =1.1.23, =1.1.28 and more Source cves: CVE-2024-10270 Source advisory: OSV:GHSA-WQ8X-CG39-8MRR...

danceschool-dancervax (>=0.1.1 <=0.1.5), django-danceschool (>=0.9.1 <=0.9.3) +5 more potentially affected by CVE-2024-11404 via django-filer (=3.0.3)

django-filer PYPI version =3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - danceschool-dancervax =0.1.1, =0.9.1, =0.2.0.0, =1.16.0, =2.7.1 Source cves: CVE-2024-11404 Source advisory:...

cryptoballot (>=0.2.0 <=0.3.1), dark-crystal-key-backup-rust (>=0.1.0 <=0.2.3) +10 more potentially affected by unknown CVE via sharks (>=0.3.3 <=0.5.0)

sharks CARGO version =0.3.3, =0.2.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.7.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-JP37-5QHW-MFFW...

@airgap/beacon-sdk (>=0.0.1 <=0.0.3-beta.9), @caelum-tech/lorena-matrix-client (>=1.3.0 <=2.1.2) +52 more potentially affected by CVE-2024-50336 via matrix-js-sdk (>=0.0.4 <=34.0.0)

matrix-js-sdk NPM version =0.0.4, =0.0.1, =1.3.0, =1.0.0, =2.0.0, =2.0.0-alpha.3, =2.0.0-alpha.1, =1.4.1, =0.0.1, =0.0.0-development, =0.17.0, =4.0.1, =1.2.0, =1.1.0, =1.8.0-beta.1 and more Source cves: CVE-2024-50336 Source advisory: OSV:GHSA-XVG8-M4X3-W6XR...

au.csiro.pathling:encoders (>=5.1.0 <=7.1.0), au.csiro.pathling:fhir-server (>=5.3.1 <=7.1.0) +315 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (>=0.0.1 <=6.3.9)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version =0.0.1, =5.1.0, =5.3.1, =6.2.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =5.6.5, =5.6.5, =3.4.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =7.4.5 and more Source cves: CVE-2024-51132 Source advisory: OSV:GHSA-4CF2-CXP3-RJR7...

auto-wasi (=0.1.0), candid-extractor (>=0.1.0 <=0.1.2) +105 more potentially affected by CVE-2024-51745 via wasmtime (>=0.10.0 <=1.0.2)

wasmtime CARGO version =0.10.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0, =0.4.0, =0.0.0, =0.5.0, =0.0.1-alpha, =0.40.1, =0.45.0, =0.1.0, =0.3.0 and more Source cves: CVE-2024-51745 Source advisory: OSV:RUSTSEC-2024-0438...

aberoth-ephemeris (>=1.0.0 <=1.0.2), adop (>=0.0.1 <=0.0.4) +213 more potentially affected by CVE-2024-49768 via waitress (>=2.0.0 <=3.0.0)

waitress PYPI version =2.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.13, =1.1.0, =0.1.13, =0.1.1, =0.0.1, =0.2.0, =0.1.1, =0.0.4, =0.1.0 - brython-components =0.3.1 and more Source cves: CVE-2024-49768 Source advisory: SNYK:PYTHON-WAITRESS-8309636...

ai.langsa:ccaas-starter (>=cloud-0.1 <=cloud-0.3), ai.langsa:pom-ccaas-langsa (=0.1) +1526 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.3.0 <=6.3.3)

org.springframework.security:spring-security-web MAVEN version =6.3.0, =cloud-0.1, =1.0.0, =1.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.4.3 and more Source cves: CVE-2024-38821 Source advisory: OSV:GHSA-C4Q5-6C82-3QPW...

com.buession.security:buession-security-spring (>=3.0.0 <=3.0.1), com.buession.security:buession-security-web (>=3.0.0 <=3.0.1) +496 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=5.8.0 <=5.8.14)

org.springframework.security:spring-security-web MAVEN version =5.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.48.0, =1.48.0, =1.48.0, =2.4.0, =2.4.0, =2.4.0, =4.5.0, =4.5.0, =4.5.0, =4.5.1 and more Source cves: CVE-2024-38821 Source advisory: OSV:GHSA-C4Q5-6C82-3QPW...

@herodevs/cli (>=1.0.0-beta.2 <=2.0.0-beta.4), @socketsecurity/cli (>=0.10.0 <=0.11.1) +1 more potentially affected by CVE-2024-50611 via @cyclonedx/cdxgen (>=10.11.0 <=11.11.0)

@cyclonedx/cdxgen NPM version =10.11.0, =1.0.0-beta.2, =0.10.0, =0.1.0, =0.2.2 Source cves: CVE-2024-50611 Source advisory: OSV:GHSA-HXF3-VGPM-FV9P...

@amazeelabs/publisher (>=2.4.28 <=2.5.8), @flatjs/mock (>=2.1.0-next.0 <=2.1.0-next.5) +10 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=3.0.0 <=3.0.2)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =2.1.0-next.0, =2.1.0-next.0, =1.1.0, =8.0.0, =0.1.55, =3.9.5-beta.0, =3.9.1-beta.1, =3.1.2-beta.1, =1.0.0, =1.6.90, =1.1.3, =1.2.1 Source cves: CVE-2024-21536 Source advisory: SNYK:JS-HTTPPROXYMIDDLEWARE-8229906...

0agent (>=1.0.1 <=1.1.5), 0dot (=0.6.0) +60728 more potentially affected by CVE-2024-48913 via hono (>=0.5.10 <=4.6.4)

hono NPM version =0.5.10, =1.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.6, =0.1.0, =2.0.0, =1.0.0, =0.3.2, =0.1.0, =0.3.8 and more Source cves: CVE-2024-48913 Source advisory: OSV:GHSA-2234-FMW7-43WR...

@astro-reactive/common (>=0.2.0 <=0.2.1), @bookshop/astro-engine (>=3.7.0 <=3.10.1) +57 more potentially affected by CVE-2024-47885 via astro (>=3.0.12 <=4.15.9)

astro NPM version =3.0.12, =0.2.0, =3.7.0, =0.40.5, =0.34.0, =0.34.0, =0.0.2, =2.0.0, =0.0.0-test-20230907022505, =0.0.1, =0.0.1, =0.0.6, =0.1.4 and more Source cves: CVE-2024-47885 Source advisory: OSV:GHSA-M85W-3H95-HCF9...

org.webjars.npm:json-schema-faker (>=0.5.0-rcv.29 <=0.5.0-rcv.33) potentially affected by CVE-2024-21534 via org.webjars.npm:jsonpath-plus (=3.0.0)

org.webjars.npm:jsonpath-plus MAVEN version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsonpath-plus and may be impacted: - org.webjars.npm:json-schema-faker =0.5.0-rcv.29, =0.5.0-rcv.33 Source cves: CVE-2024-21534 Source...

academic-chatgpt (>=0.3.0 <=0.4.1), africanwhisper (>=0.2.1 <=0.9.0) +316 more potentially affected by CVE-2024-47164 via gradio (>=1.7.7 <=4.8.0)

gradio PYPI version =1.7.7, =0.3.0, =0.2.1, =0.1.5, =0.0.6, =0.0.2, =0.1.0, =0.8.11, =0.4.0, =0.0.4, =0.7.0.dev134, =0.7.0.dev143 - anymodality =0.1.0 - apillava =0.1.0 and more Source cves: CVE-2024-47164 Source advisory: OSV:GHSA-77XQ-6G77-H274...

-temp-electron-manager-somiibo (=0.0.200), 360sentry (>=1.0.0 <=1.0.4) +1709 more potentially affected by unknown CVE via @sentry/browser (>=0.1.0 <=7.119.0)

@sentry/browser NPM version =0.1.0, =1.0.0, =0.0.4, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.40.0, =0.53.0, =0.16.0, =0.16.0, =0.53.0, =0.79.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-593M-55HH-J8GV...

ai.optfor:spring-openai-api (>=0.1 <=0.3.25), am.ik.s3:simple-s3-client (>=0.1.0 <=0.1.1) +4182 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (>=6.0.0 <=6.0.22)

org.springframework:spring-web MAVEN version =6.0.0, =0.1, =0.1.0, =0.2.3, =0.2.3, =0.0.6, =0.0.6, =4.0.0, =1.5.0.RELEASE, =1.5.1.RELEASE, =1.5.0.RELEASE, =2.1.0.RELEASE, =1.5.0.RELEASE, =3.0.0, =3.1.1 and more Source cves: CVE-2024-38809 Source advisory: OSV:GHSA-2RMJ-MQ67-H97G...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +36951 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (>=1.2.1 <=5.3.37)

org.springframework:spring-web MAVEN version =1.2.1, =1.1, =0.0.1, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 and more Source cves: CVE-2024-38809 Source advisory: OSV:GHSA-2RMJ-MQ67-H97G...

build.buf:protovalidate (>=0.3.1 <=0.4.1), cn.loyom.boot:loyom-boot-cache (=1.0.0-JDK21) +113 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-java (>=4.28.0-RC1 <=4.28.1)

com.google.protobuf:protobuf-java MAVEN version =4.28.0-RC1, =0.3.1, =0.4.1 - cn.loyom.boot:loyom-boot-cache =1.0.0-JDK21 - cn.loyom.boot:loyom-boot-common =1.0.0-JDK21 - cn.loyom.boot:loyom-boot-jar-loader =1.0.0-JDK21 - cn.loyom.boot:loyom-boot-plugin =1.0.0-JDK21 -...

de.gematik.bbriccs:bricks-integration-coverage (=0.1.9), de.gematik.bbriccs:fd-fhir-client-brick (=0.1.9) +18 more potentially affected by CVE-2024-46984 via de.gematik.refv.commons:commons (>=0.1.3 <=2.5.0)

de.gematik.refv.commons:commons MAVEN version =0.1.3, =0.1.9, =0.1.9, =2.1.0, =1.0.0, =0.6.0, =0.3.0, =0.1.3, =0.5.0, =0.5.0, =0.4.1, =0.1.3, =0.3.0 and more Source cves: CVE-2024-46984 Source advisory: OSV:GHSA-68J8-FP38-P48Q...

@angular/build (>=18.1.0 <=18.2.0-rc.0), @bebasebuild/basebuild (>=2.0.0-beta.3 <=3.0.0-alpha.1) +40 more potentially affected by CVE-2024-45812 via vite (>=5.3.0 <=5.3.5)

vite NPM version =5.3.0, =18.1.0, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =1.0.1, =11.17.8, =0.0.1, =14.190.0, =0.0.1719809477737, =8.1.1, =0.0.1, =1.0.0, =1.0.2 and more Source cves: CVE-2024-45812 Source advisory: OSV:GHSA-64VR-G452-QVP3...

composio-autogen (>=0.3.13 <=0.5.52rc2), composio-camel (>=0.3.17 <=0.5.52rc2) +15 more potentially affected by CVE-2024-8865 via composio-core (>=0.3.13 <=0.5.8)

composio-core PYPI version =0.3.13, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.5.26, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.3.13, =0.3.13, =0.3.13, =0.4.2, =0.3.24, =0.5.43 - gensphere =0.1.9 and more Source cves: CVE-2024-8865 Source advisory: OSV:GHSA-66R2-XM28-74W9...

@coder/code-server-pr (>=0.0.0-5720-b0b6a997d711d1596cd75597cb51aefe64be150e <=4.8.3-5762-deebf96f942f25d874570d654b2baa91e77c5967), @daiyu-5577/quickbuild (>=1.2.1 <=2.6.8) +33 more potentially affected by CVE-2024-43796 via express (>=5.0.0-alpha.2 <=5.0.0-beta.3)

express NPM version =5.0.0-alpha.2, =0.0.0-5720-b0b6a997d711d1596cd75597cb51aefe64be150e, =1.2.1, =3.0.0, =3.0.0, =3.0.3, =4.2.0, =0.2.0, =0.0.1, =0.1.0, =0.55.1, =2.0.0-2, =2.0.0-1, =0.5.9, =0.0.13-12a6a820047e3132ee61831695cef6c364501b06, =4.0.2-4925-8b6a45f5d4ee7831398049b4716df775a3f16f2e,...

be.jidoka:jdk-keycloak-admin (>=2.0.0 <=2.3.0), cn.sparrowmini:sparrow-keycloak-adapter (>=0.0.1 <=0.0.2) +639 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (>=1.0-alpha-1 <=24.0.5)

org.keycloak:keycloak-core MAVEN version =1.0-alpha-1, =2.0.0, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.4.3, =1.4.3, =1.2.9, =1.6.0 and more Source cves: CVE-2024-7260 Source advisory: OSV:GHSA-G4GC-RH26-M3P5...

@astrojs/starlight (>=0.0.1 <=0.9.1), astro-pagefind (>=1.0.0 <=1.2.4) potentially affected by CVE-2024-45389 via @pagefind/default-ui (>=0.11.0 <=1.0.0-beta.2)

@pagefind/default-ui NPM version =0.11.0, =0.0.1, =1.0.0, =1.2.4 Source cves: CVE-2024-45389 Source advisory: OSV:GHSA-GPRJ-6M2F-J9HX...

AeP (>=0.1.0 <=0.1.3), AskAI (=0.1.0) +11418 more potentially affected by unknown CVE via proc-macro-error (>=0.2.6 <=1.0.4)

proc-macro-error CARGO version =0.2.6, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.13.2, =0.13.4 - Voidrenderer =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0370...

-react-file-list-components (=1.1.1), 00ricardo-utils (>=2.1.1 <=2.1.12) +33449 more potentially affected by CVE-2024-43788 +2 more via webpack (>=5.0.0-alpha.14 <=5.93.0)

webpack NPM version =5.0.0-alpha.14, =2.1.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.6 - 0beny1s =1.1.6 - 0scarclassa =1.0.1 - 0scarclassb =1.0.1 - 0scarclassc =1.0.1 - 0scarclassd =1.0.1 and more Source cves: CVE-2024-43788, CVE-2024-45389, CVE-2024-45812 Source advisory:...

@c8y/application (>=1019.0.3 <=1019.24.6), @c8y/cli (>=10.0.7 <=1018.510.4) +99 more potentially affected by unknown CVE via unzip-stream (>=0.1.2 <=0.3.1)

unzip-stream NPM version =0.1.2, =1019.0.3, =10.0.7, =1019.0.3, =1019.0.3, =1019.4.8, =1019.4.8, =0.1.0, =0.1.0, =0.6.0, =0.2.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6JRJ-VC65-C983...

31g-form-parser (>=1.0.1 <=1.0.126), 5p-buyform (>=0.0.1 <=0.0.4) +5438 more potentially affected by CVE-2024-39338 via axios (>=1.3.2 <=1.7.3)

axios NPM version =1.3.2, =1.0.1, =0.0.1, =0.0.1, =0.1.2, =2.1.0, =3.0.0, =0.2.1, =0.5.0, =0.0.74, =0.0.14, =2.5.4, =1.0.1, =1.14.5, =1.0.30, =1.0.36 and more Source cves: CVE-2024-39338 Source advisory: OSV:GHSA-8HC4-VH64-CXMJ...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1603 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.452.3)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2024-43045 Source advisory: OSV:GHSA-8PV9-QH96-9HC6...

org.springframework.cloud.stream.app:spring-cloud-starter-stream-sink-task-launcher-dataflow (>=1.0.0.RELEASE <=1.0.2.RELEASE), org.springframework.cloud.stream.app:spring-cloud-stream-app-starters-docs (>=Einstein.RELEASE <=Einstein.SR5) +46 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (>=1.0.0.RELEASE <=2.11.3)

org.springframework.cloud:spring-cloud-skipper MAVEN version =1.0.0.RELEASE, =1.0.0.RELEASE, =Einstein.RELEASE, =1.0.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =1.1.1.RELEASE, =Clark.SR1, =2.11.0, =2.0.0.RELEASE, =2.0.0.RELEASE, =1.6.0.RELEASE, =2.0.0.RELEASE, =2.11.3 -...

be.atbash.test:integration-testing (=2.2.0), be.atbash.test:integration-testing-database (=2.2.0) +511 more potentially affected by CVE-2024-41172 via org.apache.cxf:cxf-rt-transports-http (>=4.0.0 <=4.0.4)

org.apache.cxf:cxf-rt-transports-http MAVEN version =4.0.0, =1.0.0, =12.1-16, =0.0.1, =2.70.0, =2.71.1 - com.codbex.kronos:codbex-kronos-commons =2.70.0 - com.codbex.kronos:codbex-kronos-components-api-parent =2.69.0 - com.codbex.kronos:codbex-kronos-components-engine-xsjob =2.69.0 -...

com.axonivy.ivy.tool.soap:cxf-client-codegen (=1.0.0), cv.igrp:igrp-core (>=1.7.3.230801 <=1.7.3.230802) +294 more potentially affected by CVE-2024-41172 via org.apache.cxf:cxf-rt-transports-http (>=3.6.0 <=3.6.3)

org.apache.cxf:cxf-rt-transports-http MAVEN version =3.6.0, =1.7.3.230801, =3.0-M3, =3.0-M3, =3.0-M3, =4.4.6.hyte-24270, =4.4.6.hyte-24270, =4.4.6.hyte-24270, =4.4.8.hyte-26150 - io.hyte.platform:repo =4.4.6.hyte-24270 - net.tirasa.connid.bundles:net.tirasa.connid.bundles.servicenow =1.0.4 -...

eisen (=0.1.9), eisen-deploy (>=0.0.1 <=0.0.2) potentially affected by CVE-2024-35198 via torchserve (=0.0.1b20200409)

torchserve PYPI version =0.0.1b20200409 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - eisen =0.1.9 - eisen-deploy =0.0.1, =0.0.2 Source cves: CVE-2024-35198 Source advisory: OSV:GHSA-WXCX-GG9C-FWP2...

ai.timefold.solver:timefold-solver-quarkus-jsonb (>=0.9.38 <=1.2.0), ai.timefold.solver:timefold-solver-quarkus-jsonb-deployment (>=0.9.38 <=1.2.0) +2527 more potentially affected by CVE-2023-7272 via org.eclipse.parsson:parsson (>=1.1.0 <=1.1.2)

org.eclipse.parsson:parsson MAVEN version =1.1.0, =0.9.38, =0.9.38, =0.9.38, =22.12.0, =22.11.0, =22.9.0, =24.7.0, =22.5.0, =22.10.0, =22.11.0, =24.7.0 and more Source cves: CVE-2023-7272 Source advisory: OSV:GHSA-2RWM-XV5J-777P...

app.valuationcontrol:webservice (>=0.5.0 <=0.5.1), ba.sake:sharaf_3 (>=0.0.7 <=0.7.4) +974 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (>=2.3.0.Alpha1 <=2.3.14.Final)

io.undertow:undertow-core MAVEN version =2.3.0.Alpha1, =0.5.0, =0.0.7, =1.1.15, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.31 and more Source cves: CVE-2024-3653 Source advisory: OSV:GHSA-CH7Q-GPFF-H9HP...

africa.absa:inception-application (>=1.0.0 <=1.2.0), app.fmgp:scala-did-docs_3 (>=0.1.0-M16 <=0.1.0-M33) +3383 more potentially affected by CVE-2024-5971 via io.undertow:undertow-core (>=1.0.0.Alpha1 <=2.2.33.Final)

io.undertow:undertow-core MAVEN version =1.0.0.Alpha1, =1.0.0, =0.1.0-M16, =1.0.0, =0.4.0, =2.0.0, =1.0.2, =1.0.0, =1.2.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-5971 Source advisory: OSV:GHSA-XPP6-8R3J-WW43...

app.valuationcontrol:webservice (>=0.5.0 <=0.5.1), ba.sake:sharaf_3 (>=0.0.7 <=0.7.4) +974 more potentially affected by CVE-2024-5971 via io.undertow:undertow-core (>=2.3.0.Alpha1 <=2.3.14.Final)

io.undertow:undertow-core MAVEN version =2.3.0.Alpha1, =0.5.0, =0.0.7, =1.1.15, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.31 and more Source cves: CVE-2024-5971 Source advisory: OSV:GHSA-XPP6-8R3J-WW43...

ayaka-model (=0.2.0), ayaka-runtime (=0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0 <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob =1.0.0-beta1 - icusegmenter =1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-74R5-G7VC-J2V2...

amusing-app (>=0.2.0 <=0.4.2), arbi-tr-frontend (>=0.1.0 <=0.1.1) +56 more potentially affected by unknown CVE via yt-dlp (>=2023.9.24 <=2024.7.25)

yt-dlp PYPI version =2023.9.24, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =2024.3.25, =1.1.1, =0.0.1.2, =1.0.1.1, =0.3.0, =3.1.1, =0.1.0, =0.1.0, =0.1.1 - khan-dl =1.2.9 - kick-dl =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3V33-3WMW-3785...

@ag-grid-enterprise/charts-enterprise (=32.0.0) potentially affected by CVE-2024-39001 via @ag-grid-enterprise/charts (=32.0.0)

@ag-grid-enterprise/charts NPM version =32.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @ag-grid-enterprise/charts and may be impacted: - @ag-grid-enterprise/charts-enterprise =32.0.0 Source cves: CVE-2024-39001 Source advisory:...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (=0.0.6), com.adq.jenkins:xml-job-to-job-dsl (>=0.1.1 <=0.1.13) +534 more potentially affected by CVE-2024-39458 via org.jenkins-ci.plugins:structs (>=1.1 <=337.v1b_04ea_4df7c8)

org.jenkins-ci.plugins:structs MAVEN version =1.1, =0.1.1, =2.33.0, =1.9.0, =2.0.1, =2.8, =2.0.12, =1.12, =1.225.v14f9e6b28f53, =1.0.2, =1.28.0, =0.6, =2.37.0, =1.0.0, =1.2.7, =1.3.2 and more Source cves: CVE-2024-39458 Source advisory: OSV:GHSA-XFX3-CR74-X3CV...

autohooks-plugin-pdoc (>=0.1.1 <=0.1.2), bond-order-processing (=1.0.3) +20 more potentially affected by CVE-2024-38526 via pdoc (>=0.3.2 <=14.5.0)

pdoc PYPI version =0.3.2, =0.1.1, =1.0.0, =0.9.3, =0.0.7, =2.5.7, =0.1.1, =0.4.5, =0.2.0, =0.3.0, =0.1.0, =0.1.1 and more Source cves: CVE-2024-38526 Source advisory: OSV:GHSA-5VGJ-GGM4-FG62...

003-gas-convert (=1.0.1), 0x-hunter-core (>=1.0.0 <=1.0.1-5) +17421 more potentially affected by CVE-2024-37890 via ws (>=2.1.0 <=5.2.2)

ws NPM version =2.1.0, =1.0.0, =0.0.3, =1.1.0, =0.9.9, =0.7.41, =0.1.0-beta.1, =0.1.3, =0.0.3, =1.0.0, =2.0.7 and more Source cves: CVE-2024-37890 Source advisory: OSV:GHSA-3H5V-Q93C-6H6Q...

@cdr0/active-development (=1.0.0), @cdr0/config (>=1.0.1 <=1.0.2) +6 more potentially affected by CVE-2024-36580 via @cdr0/sg (=1.0.10)

@cdr0/sg NPM version =1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @cdr0/sg and may be impacted: - @cdr0/active-development =1.0.0 - @cdr0/config =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-36580 Source advisory:...

org.apache.submarine:submarine-all (>=0.4.0 <=0.8.0-RC0), org.apache.submarine:submarine-client (>=0.4.0 <=0.8.0-RC0) +12 more potentially affected by CVE-2024-36264 via org.apache.submarine:submarine-commons-utils (>=0.4.0 <=0.8.0)

org.apache.submarine:submarine-commons-utils MAVEN version =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.8.0, =0.4.0, =0.8.0, =0.8.0, =0.6.0, =0.8.0-RC0 Source cves: CVE-2024-36264 Source advisory: OSV:GHSA-JWCG-WV5X-VG3G...

a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +162 more potentially affected by CVE-2024-3848 via mlflow (>=0.8.2 <=2.11.3)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =3.0.0, =0.1.0, =0.3.5, =0.8.0, =1.2.0, =1.9.30 and more Source cves: CVE-2024-3848 Source advisory: OSV:PYSEC-2024-244...