pug (>=3.0.0-canary-1, <=3.0.2-canary-10) potentially affected by CVE-2024-36361 via pug-code-gen (>=3.0.0-canary-1, <=3.0.2-canary-5)

pug-code-gen NPM version =3.0.0-canary-1, =3.0.0-canary-1, =3.0.2-canary-10 Source cves: CVE-2024-36361 Source advisory: OSV:GHSA-3965-HPX2-Q597...

endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2024-35186 via gix (0.0.0)

gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2024-35186 Source advisory: OSV:GHSA-7W47-3WG8-547C...

@okta/jwt-verifier (3.2.1) potentially affected by CVE-2024-34273 via njwt (2.0.0)

njwt NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on njwt and may be impacted: - @okta/jwt-verifier 3.2.1 Source cves: CVE-2024-34273 Source advisory: OSV:GHSA-3HVJ-2783-34X2...

@directus/api (>=18.0.0, <=19.0.2) potentially affected by CVE-2024-34709 via directus (>=10.10.0, <=10.10.7)

directus NPM version =10.10.0, =18.0.0, =19.0.2 Source cves: CVE-2024-34709 Source advisory: OSV:GHSA-G65H-35F3-X2W3...

@net7/boilerplate-arianna (>=5.6.0, <=5.6.11), myrta-ui (>=17.0.56, <=17.0.57) +1 more potentially affected by CVE-2024-4367 via ngx-extended-pdf-viewer (>=19.2.0, <=19.7.1)

ngx-extended-pdf-viewer NPM version =19.2.0, =5.6.0, =17.0.56, =18.0.0-next.0, =18.0.0-next.3 Source cves: CVE-2024-4367 Source advisory: SNYK:JS-NGXEXTENDEDPDFVIEWER-11790310...

abstract-account-factory (>=0.13.0, <=0.16.1), abstract-adapter-utils (>=0.16.0, <=0.19.2) +416 more potentially affected by CVE-2024-58263 via cosmwasm-std (1.3.4)

cosmwasm-std CARGO version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cosmwasm-std and may be impacted: - abstract-account-factory =0.13.0, =0.16.0, =0.1.0-rc.2, =0.0.1, =0.1.0-rc.2, =0.2.0-beta.4, =0.2.0-beta.4, =0.13.0, =0.16.5,...

@conform-to/react (>=1.0.0-pre.0, <=1.1.0), @conform-to/zod (>=1.0.0-pre.3, <=1.1.0) potentially affected by CVE-2024-32866 via @conform-to/dom (>=1.0.0, <=1.1.0-pre.0)

@conform-to/dom NPM version =1.0.0, =1.0.0-pre.0, =1.0.0-pre.3, =1.1.0 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...

@neon.id/worker (>=0.1.0, <=0.3.0), @ronin-dist/render (>=1.0.228-hooks-experimental.0, <=1.0.383-dependabot-npm-and-yarn-development-e6e9b294d4-experimental.0) +9 more potentially affected by CVE-2024-32869 via hono (>=4.0.0, <=4.2.6)

hono NPM version =4.0.0, =0.1.0, =1.0.228-hooks-experimental.0, =0.6.7, =0.5.0, =0.2.0, =0.0.285, =2.0.21-fix-experimental-package-cleanup-experimental.0, =3.0.7, =0.19.3, =0.20.2-alpha.0 Source cves: CVE-2024-32869 Source advisory: OSV:GHSA-3MPF-RCC7-5347...

@dialectlabs/react (>=0.4.8, <=0.5.1) potentially affected by CVE-2024-30253 via @solana/web3.js (1.38.0)

@solana/web3.js NPM version 1.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @dialectlabs/react =0.4.8, =0.5.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@chainify/solana (>=1.2.14, <=2.4.1), @liquality/error-parser (>=1.1.0-next.1, <=1.1.4-next.2) +13 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.50.1)

@solana/web3.js NPM version 1.50.1 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @chainify/solana =1.2.14, =1.1.0-next.1, =1.28.2, =0.0.1-rc12, =3.0.0-alpha.16, =3.4.4, =2.0.0, =2.0.0, =0.3.12, =0.3.3, =0.3.3,...

@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +140 more potentially affected by CVE-2024-21509 via mysql2 (>=3.0.0, <=3.9.3)

mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21509 Source advisory: OSV:GHSA-49J4-86M8-Q2JW...

003-gas-convert (1.0.1), 0510test (1.0.0) +9104 more potentially affected by CVE-2024-22363 via xlsx (>=0.3.10, <=0.18.5)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =1.0.1, =0.1.0, =0.1.0, =1.0.0, =1.0.46 and more Source cves: CVE-2024-22363 Source advisory: OSV:GHSA-5PGG-2G8V-P4X9...

@akrc/vidocs (>=0.0.0, <=0.0.2), @alexzzz/npms (>=0.0.5, <=0.2.0) +136 more potentially affected by CVE-2024-31207 via vite (>=3.0.0, <=3.2.8)

vite NPM version =3.0.0, =0.0.0, =0.0.5, =1.0.1, =1.0.1, =3.2.0, =1.11.2, =0.0.37, =0.0.35, =0.2.3, =0.0.0-canary-20220718083044, =0.0.6, =0.1.0, =0.0.3, =6.24.0, =7.12.2 and more Source cves: CVE-2024-31207 Source advisory: OSV:GHSA-8JHW-289H-JH2G...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +479 more potentially affected by CVE-2024-31207 via vite (>=4.0.0, <=4.5.2)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2024-31207 Source advisory: OSV:GHSA-8JHW-289H-JH2G...

@angular-devkit/build-angular (18.0.0-next.0), @eui/deps-base (>=18.0.0-next.1, <=18.0.0-next.2) +10 more potentially affected by CVE-2024-31207 via vite (>=5.2.0, <=5.2.4)

vite NPM version =5.2.0, =18.0.0-next.1, =18.0.0-next.1, =1.0.2, =0.0.39, =1.1.3, =1.1.9, =0.1.3, =0.20.0-beta.3, =0.20.0 Source cves: CVE-2024-31207 Source advisory: OSV:GHSA-8JHW-289H-JH2G...

0xsodium (>=0.2.0, <=0.14.0), @0xsodium/graphquery (>=0.2.0, <=0.14.0) +174 more potentially affected by CVE-2024-21529 via dset (>=3.1.0, <=3.1.3)

dset NPM version =3.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.6.0, =0.2.0, =0.2.0, =0.0.0, =1.4.0-beta.2, =0.1.0, =0.1.10, =0.1.11 - @didomi/react 1.8.3 and more Source cves: CVE-2024-21529 Source...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +2102 more potentially affected by CVE-2024-28863 via tar (>=6.0.0, <=6.2.0)

tar NPM version =6.0.0, =1.0.0, =0.0.1, =1.4.0-beta, =0.0.9, =0.0.1, =1.6.0, =4.14.0, =1.0.0, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.28 and more Source cves: CVE-2024-28863 Source advisory: OSV:GHSA-F5X3-32G6-XQ36...

@angular-architects/build-angular (16.2.0-next.2), @angular-devkit/build-angular (>=15.1.0-next.0, <=17.3.1) +165 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (>=6.0.0, <=6.1.1)

webpack-dev-middleware NPM version =6.0.0, =15.1.0-next.0, =9.3.0, =1.12.3, =4.20.4, =0.1.0, =3.1.0-0, =3.0.0-alpha.14, =15.1.0-snapshot-1674521814202, =16.0.0-next.6, =2.6.0, =8.4.0-rc.2, =7.0.0-rc.11, =7.0.0-rc.16 and more Source cves: CVE-2024-29180, CVE-2026-76844 Source advisory:...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42489 more potentially affected by CVE-2024-28849 via follow-redirects (>=1.0.0, <=1.15.5)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2024-28849 Source advisory: OSV:GHSA-CXJH-PQWP-8MFP...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +3 more potentially affected by CVE-2024-1765 via quiche (>=0.10.0, <=0.18.0)

quiche CARGO version =0.10.0, =0.1.0, =0.6.9 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2024-1765 Source advisory: OSV:GHSA-78WX-JG4J-5J6G...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +3 more potentially affected by CVE-2024-1410 via quiche (>=0.10.0, <=0.18.0)

quiche CARGO version =0.10.0, =0.1.0, =0.6.9 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2024-1410 Source advisory: OSV:GHSA-XHG9-XWCH-VR7X...

vl-convert-rs (0.8.0) potentially affected by CVE-2024-27936 via deno_runtime (0.105.0)

denoruntime CARGO version 0.105.0 is affected by a known vulnerability. The following packages have a transitive dependency on denoruntime and may be impacted: - vl-convert-rs 0.8.0 Source cves: CVE-2024-27936 Source advisory: OSV:GHSA-M4PQ-FV2W-6HRW...

ashpd (>=0.2.0-alpha, <=0.4.0) potentially affected by unknown CVE via gdkx11 (>=0.14.0, <=0.17.0)

gdkx11 CARGO version =0.14.0, =0.2.0-alpha, =0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0417...

org.webjars:angular-markdown-directive (0.3.0) potentially affected by CVE-2024-1899 via org.webjars:showdown (0.3.1)

org.webjars:showdown MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:showdown and may be impacted: - org.webjars:angular-markdown-directive 0.3.0 Source cves: CVE-2024-1899 Source advisory: SNYK:JAVA-ORGWEBJARS-8685134...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), org.webjars.npm:github-com-showdownjs-ng-showdown (1.1.0) +3 more potentially affected by CVE-2024-1899 via org.webjars.npm:showdown (>=1.9.1, <=2.1.0)

org.webjars.npm:showdown MAVEN version =1.9.1, =2.0.0, =1.0.2, =1.0.3 - org.webjars.npm:showdown-prism 0.2.0 Source cves: CVE-2024-1899 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-8685132...

org.webjars.bower:ng-swagger-ui (0.0.4) potentially affected by CVE-2024-1899 via org.webjars.bower:showdown (1.7.6)

org.webjars.bower:showdown MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bower:showdown and may be impacted: - org.webjars.bower:ng-swagger-ui 0.0.4 Source cves: CVE-2024-1899 Source advisory:...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +2 more potentially affected by CVE-2024-58365 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58365 Source advisory: OSV:GHSA-6WR5-JMPR-MJCX...

anchor-token (>=0.0.1, <=0.3.0), archid-marketplace (>=1.0.5, <=1.0.8) +150 more potentially affected by CVE-2024-58264 via serde-json-wasm (>=0.1.3, <=0.4.1)

serde-json-wasm CARGO version =0.1.3, =0.0.1, =1.0.5, =1.0.0, =1.0.0, =0.3.1, =0.1.0, =2.5.2, =0.1.0, =1.0.0, =0.4.0, =1.0.0, =2.2.0 - cosmwasm-contract-migratable-std 0.1.0 and more Source cves: CVE-2024-58264 Source advisory: OSV:GHSA-RR69-RXR6-8QWF...

@gun-vue/relay (>=0.4.2, <=0.5.0), @mimik/configuration (>=4.4.10, <=5.0.11) +5 more potentially affected by CVE-2023-42282 via ip (2.0.0)

ip NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ip and may be impacted: - @gun-vue/relay =0.4.2, =4.4.10, =1.0.0, =1.0.19-alpha.2, =1.0.0, =1.0.3 Source cves: CVE-2023-42282 Source advisory: OSV:GHSA-78XJ-CGH5-2H22...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2) +63 more potentially affected by CVE-2021-4435 via yarn (>=1.0.2, <=1.22.11)

yarn NPM version =1.0.2, =1.17.6-next.0, =1.0.2-6river, =0.0.9, =0.0.1, =1.6.0, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.4.0-next.7, =0.3.0-next.1, =0.3.0-next.1, =1.1.0-dev.2, =5.6.4, =3.1.264, =1.15.3, =1.15.5 and more Source cves: CVE-2021-4435 Source advisory: OSV:GHSA-MPWJ-FCR6-X34C...

blake-streams (0.1.0), canary (>=0.0.6, <=0.1.6) +65 more potentially affected by CVE-2024-58265 via snow (>=0.1.9, <=0.9.3)

snow CARGO version =0.1.9, =0.0.6, =0.8.0, =0.1.0, =0.1.0, =0.1.5, =0.8.0, =0.10.0, =1.0.0-rc.2, =0.8.0, =0.8.0, =1.0.0-rc.1, =0.13.0-rc.1, =1.0.0-rc.1, =0.8.0, =1.0.0 and more Source cves: CVE-2024-58265 Source advisory: OSV:GHSA-7G9J-G5JG-3VV3...

@zemble/node (>=0.0.11, <=0.0.14), waku (>=0.19.0-alpha.2, <=0.19.1) potentially affected by CVE-2024-23340 via @hono/node-server (>=1.3.3, <=1.4.0)

@hono/node-server NPM version =1.3.3, =0.0.11, =0.19.0-alpha.2, =0.19.1 Source cves: CVE-2024-23340 Source advisory: OSV:GHSA-RJQ5-W47X-X359...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +415 more potentially affected by CVE-2024-23331 via vite (>=4.0.0, <=4.5.1)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

aries-askar (0.1.2), indy-credx (>=0.2.0, <=0.3.1) +5 more potentially affected by CVE-2022-31021 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.0.6, =0.0.8 Source cves: CVE-2022-31021 Source advisory: OSV:GHSA-2Q6J-GQC4-4GW3...

managed-component-to-cloudflare-worker (1.5.2) potentially affected by CVE-2023-7080 via wrangler (2.0.23)

wrangler NPM version 2.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on wrangler and may be impacted: - managed-component-to-cloudflare-worker 1.5.2 Source cves: CVE-2023-7080 Source advisory: OSV:GHSA-F8MP-X433-5WPF...

@darajs/components (>=1.0.0-a.1, <=1.5.1), @datalayer-jupyter/widgets (>=0.0.5, <=0.0.6) +14 more potentially affected by CVE-2023-46308 via plotly.js (>=2.0.0, <=2.23.2)

plotly.js NPM version =2.0.0, =1.0.0-a.1, =0.0.5, =0.0.1, =0.47.0, =0.50.3, =1.0.0, =0.0.23, =1.33.0-rc.1, =1.0.0, =1.17.1, =0.1.3, =0.23.0, =1.0.0, =0.40.38, =0.40.80 and more Source cves: CVE-2023-46308 Source advisory: OSV:GHSA-WJC4-73Q6-GV3M...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42481 more potentially affected by CVE-2023-26159 via follow-redirects (>=1.0.0, <=1.15.3)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2023-26159 Source advisory: SNYK:JS-FOLLOWREDIRECTS-6141137...

@fdm-monster/server (>=1.5.0-rc1, <=1.5.3), @inlang/paraglide-js (>=1.0.0-prerelease.23, <=1.0.0-prerelease.25) +21 more potentially affected by CVE-2023-50728 via octokit (>=3.1.0, <=3.1.1)

octokit NPM version =3.1.0, =1.5.0-rc1, =1.0.0-prerelease.23, =0.1.0, =1.1.3, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2023-50728 Source advisory: OSV:GHSA-PWFR-8PQ7-X9QV...

@bbtfe/core (1.0.5), @inceptiongt/yapi-vendor (1.9.3) +79 more potentially affected by CVE-2023-26158 via mockjs (>=1.0.0, <=1.0.1-beta3)

mockjs NPM version =1.0.0, =0.0.1, =1.0.0-alpha.0, =0.1.0, =1.0.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.5, =0.1.7, =1.5.2 and more Source cves: CVE-2023-26158 Source advisory: OSV:GHSA-MH8J-9JVH-GJF6...

@angular-devkit/build-angular (17.1.0-next.0), @beetpx/beetpx (>=0.22.0, <=0.36.0) +17 more potentially affected by CVE-2023-49293 via vite (>=5.0.0, <=5.0.4)

vite NPM version =5.0.0, =0.22.0, =1.0.0-dev.74fcb60, =1.0.274, =0.0.1, =11.12.0-beta.0, =7.0.0, =0.1.38, =2.0.0-alpha.35, =0.12.0, =1.1.0, =2.0.9, =0.0.7, =1.1.0-develop.0, =1.1.0 and more Source cves: CVE-2023-49293 Source advisory: OSV:GHSA-92R3-M2MG-PJ97...

@acronis-platform/ui-component-library (0.0.4), @aimmarc/http-module (0.0.1) +139 more potentially affected by CVE-2023-49293 via vite (>=4.4.0-beta.3, <=4.4.11)

vite NPM version =4.4.0-beta.3, =0.6.7, =16.2.0-next.2, =0.0.9, =0.4.0, =0.5.1, =1.0.10-beta.ced5d6e.202405270802, =1.0.0-rc.1, =0.0.0-canary-20230927134149, =1.0.0, =1.0.1 - @committed/ds-colors 0.2.0 and more Source cves: CVE-2023-49293 Source advisory: OSV:GHSA-92R3-M2MG-PJ97...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +9 more potentially affected by CVE-2023-44402 via electron (>=22.0.0, <=22.3.13)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =9.13.1, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-44402 Source advisory: OSV:GHSA-7M48-WC93-9G85...

abacuz (0.1.1), acmer (>=0.0.1, <=0.0.4) +371 more potentially affected by CVE-2023-49092 via rsa (>=0.1.2, <=0.8.2)

rsa CARGO version =0.1.2, =0.0.1, =0.12.0, =0.5.0, =0.2.0, =0.1.0, =1.0.1, =0.1.0, =0.3.11, =0.2.0, =0.1.0, =0.2.0, =0.11.0, =0.16.0 and more Source cves: CVE-2023-49092 Source advisory: OSV:GHSA-C38W-74PG-36HR...

@fibus-digital/sluby (>=0.3.0-beta.17, <=0.4.0) potentially affected by CVE-2023-48223 via fast-jwt (3.0.0)

fast-jwt NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @fibus-digital/sluby =0.3.0-beta.17, =0.4.0 Source cves: CVE-2023-48223 Source advisory: OSV:GHSA-C2FF-88X2-X9PG...

@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +134 more potentially affected by CVE-2023-48219 via tinymce (>=5.0.6, <=5.10.8)

tinymce NPM version =5.0.6, =0.1.2, =0.3.7, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =0.5.2, =10.3.1-snapshot-1616513687673, =0.1.0, =1.68.82, =0.65.0, =0.18.0, =3.4.0 and more Source cves: CVE-2023-48219 Source advisory: OSV:GHSA-V626-R774-J7F8...

@gem-sdk/pages (>=1.9.33, <=1.33.4) potentially affected by CVE-2023-46729 via @sentry/nextjs (>=7.46.0, <=7.57.0)

@sentry/nextjs NPM version =7.46.0, =1.9.33, =1.33.4 Source cves: CVE-2023-46729 Source advisory: OSV:GHSA-2RMR-XW8M-22Q9...

1.5fabao (1.0.0), 11-3-address-ly (>=1.0.0, <=1.0.2) +2392 more potentially affected by CVE-2023-26158 via mockjs (>=0.1.1, <=1.1.0)

mockjs NPM version =0.1.1, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.0.5, =0.0.3, =1.0.0, =0.1.1, =0.2.0 and more Source cves: CVE-2023-26158 Source advisory: SNYK:JS-MOCKJS-6051365...

@animelist/auth (>=0.0.1-alpha.1, <=0.1.2), @animelist/auth-next (>=0.0.1-alpha.1, <=0.1.2) +6 more potentially affected by CVE-2023-46133 via crypto-es (>=2.0.3, <=2.0.4)

crypto-es NPM version =2.0.3, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =3.5.18, =3.4.17, =0.1.5, =0.2.11, =3.5.1, =3.5.8 Source cves: CVE-2023-46133 Source advisory: OSV:GHSA-MPJ8-Q39X-WQ5H...

@bigegg/parse-server-schema-config (>=1.0.5, <=1.0.10), @peterpme/parse-server-mailgun (>=2.4.8, <=2.5.11) +19 more potentially affected by CVE-2023-46119 via parse-server (>=2.0.8, <=3.10.0)

parse-server NPM version =2.0.8, =1.0.5, =2.4.8, =1.0.0, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.0, =1.0.0, =1.0.0, =1.4.0 and more Source cves: CVE-2023-46119 Source advisory: OSV:GHSA-792Q-Q67H-W579...

agora (0.1.0), ashpd (>=0.2.0-alpha, <=0.2.0-alpha-3) +30 more potentially affected by CVE-2024-43806 via rustix (>=0.37.3, <=0.37.13)

rustix CARGO version =0.37.3, =0.2.0-alpha, =0.2.0, =1.0.2, =0.6.0, =0.4.0, =0.2.0, =0.2.0-beta.4, =0.25.0, =0.25.1 and more Source cves: CVE-2024-43806 Source advisory: OSV:GHSA-C827-HFW6-QWVM...