@bookshop/browser (3.11.0-rc.0), @bookshop/generate (3.11.0-rc.0) +24 more potentially affected by CVE-2024-56159 via astro (>=4.0.3, <=4.16.17)

astro NPM version =4.0.3, =0.40.5, =0.38.0, =0.38.0, =2.8.4, =0.2.0, =0.0.0-dev-20231211183354, =0.0.3, =0.0.3, =0.0.5, =0.0.1, =1.0.2, =1.0.9 - @thewebforge/astro-og-images 3.0.0 and more Source cves: CVE-2024-56159 Source advisory: OSV:GHSA-49W6-73CW-CHJR...

rcc-solana (0.1.0) potentially affected by unknown CVE via spl-token-swap (3.0.0)

spl-token-swap CARGO version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on spl-token-swap and may be impacted: - rcc-solana 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0426...

akd (>=0.7.3, <=0.7.7), akd_client (>=0.7.6, <=0.7.7) +41 more potentially affected by CVE-2025-53605 via protobuf (>=3.0.0, <=3.7.1)

protobuf CARGO version =3.0.0, =0.7.3, =0.7.6, =0.2.5, =0.5.12, =0.18.1, =0.7.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.8.0, =0.9.3 and more Source cves: CVE-2025-53605 Source advisory: OSV:RUSTSEC-2024-0437...

@eas-framework/server (>=1.0.1, <=1.5.8), express-nova-login (1.0.0) +2 more potentially affected by CVE-2024-53441 via cookie-encrypter (1.0.1)

cookie-encrypter NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cookie-encrypter and may be impacted: - @eas-framework/server =1.0.1, =1.0.0, =1.6.3, =1.6.4 Source cves: CVE-2024-53441 Source advisory: OSV:GHSA-H63V-HW6G-X8HP...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53857 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53857 Source advisory: OSV:GHSA-4GRW-M28R-Q285...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53856 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53856 Source advisory: OSV:GHSA-9RMP-2568-59RV...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53856 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53856 Source advisory: OSV:RUSTSEC-2024-0447...

dbs-arch (>=0.2.2, <=0.2.3), dbs-boot (>=0.3.0, <=0.4.0) +7 more potentially affected by unknown CVE via kvm-ioctls (>=0.6.1, <=0.18.0)

kvm-ioctls CARGO version =0.6.1, =0.2.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.29, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0428...

flowlang (>=0.1.6, <=0.1.8), lavendeux-parser (>=0.3.0, <=0.8.1) +1 more potentially affected by unknown CVE via js-sandbox (0.1.6)

js-sandbox CARGO version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on js-sandbox and may be impacted: - flowlang =0.1.6, =0.3.0, =0.1.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-4MW5-2636-4535...

1405-authtokens (>=1.0.1, <=1.0.5), 1405_logging (1.0.0) +4123 more potentially affected by CVE-2024-53900 via mongoose (>=3.6.2, <=5.13.22)

mongoose NPM version =3.6.2, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.0.1, =0.3.5, =0.2.0, =0.0.1, =1.0.16, =1.0.30, =1.0.95 and more Source cves: CVE-2024-53900 Source advisory: OSV:GHSA-M7XQ-9374-9RVX...

@alexlit/config-markdownlint (2.8.0), @cluenar/tools (>=1.0.0, <=2.0.1) +57 more potentially affected by unknown CVE via smol-toml (>=1.1.2, <=1.3.0)

smol-toml NPM version =1.1.2, =1.0.0, =3.0.0, =4.2.1-alpha.1, =0.0.0, =1.1.0, =0.2.7, =1.0.10, =7.6.4-next.39, =7.6.4-next.39, =7.6.4-next.39, =7.6.4-next.39, =7.6.4-next.39, =9.0.0-canary.257 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PQHP-25J4-6HQ9...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys-cdylib (>=0.3.0, <=0.3.1) potentially affected by unknown CVE via libz-rs-sys (>=0.1.1, <=0.3.1)

libz-rs-sys CARGO version =0.1.1, =1.0.29, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

hotg-rune-runtime (>=0.11.0, <=0.11.3), hotg-rune-wasm3-runtime (>=0.6.0, <=0.10.0) +7 more potentially affected by CVE-2024-27529 via wasm3 (>=0.1.3, <=0.3.1)

wasm3 CARGO version =0.1.3, =0.11.0, =0.6.0, =0.7.0, =0.4.0, =0.2.0, =0.0.1, =0.16.0, =0.15.0, =0.19.0 Source cves: CVE-2024-27529 Source advisory: OSV:GHSA-FMQ6-4W57-2W3V...

1uphealth-provider-search (>=0.1.0, <=0.3.0), 20190403-utils (1.0.0) +6909 more potentially affected by CVE-2024-21538 via cross-spawn (>=6.0.0, <=6.0.5)

cross-spawn NPM version =6.0.0, =0.1.0, =0.1.0, =0.1.4, =0.1.0, =1.0.0-beta.1, =0.1.1, =0.1.72, =9.0.0, =3.0.0, =1.0.0, =1.0.3 - @352inc/react-scripts 2.0.5-custom-6 and more Source cves: CVE-2024-21538 Source advisory: OSV:GHSA-3XGQ-45JJ-V275...

@casablanca-css/core (0.2.0), @nuxtjs/device (>=3.2.0, <=3.2.2) +4 more potentially affected by CVE-2024-51757 via happy-dom (>=15.0.0, <=15.7.4)

happy-dom NPM version =15.0.0, =3.2.0, =6.0.1, =4.1.4, =5.1.4, =1.1.78, =1.1.79 Source cves: CVE-2024-51757 Source advisory: OSV:GHSA-96G7-G7G9-JXW8...

@2digits/eslint-config (>=2.6.0, <=2.7.0), @2digits/eslint-plugin (>=2.2.9, <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (0.1.0)

@eslint/plugin-kit NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +67 more potentially affected by CVE-2024-48963 via snyk-php-plugin (>=1.1.2, <=1.9.2)

snyk-php-plugin NPM version =1.1.2, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 and more Source cves: CVE-2024-48963 Source advisory: OSV:GHSA-69F9-H8F9-7VJF...

@amazeelabs/publisher (>=2.4.28, <=2.5.8), @angular-devkit/build-angular (>=18.0.0-next.3, <=19.0.0-next.9) +65 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=3.0.0, <=3.0.2)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =18.0.0-next.3, =18.0.0-next.39, =18.0.0-next.39, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =8.10.0-nightly.20240906232837, =3.11.0-beta.6, =1.1.0, =0.0.26, =0.0.26, =8.0.0-canary.984, =9.0.0-canary.203 and more...

@grupo-loja/vendure-banner-plugin (1.0.0), @grupo-loja/vendure-conect-envios-plugin (>=1.0.0, <=1.0.1) +51 more potentially affected by CVE-2024-48914 via @vendure/asset-server-plugin (>=2.0.3, <=2.2.7)

@vendure/asset-server-plugin NPM version =2.0.3, =1.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.2.4 and more Source cves: CVE-2024-48914 Source advisory: OSV:GHSA-R9MQ-3C9R-FMJQ...

@appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11), @appknit-project/appknit-platform-sdk-v2 (>=1.3.65-alpha.0, <=1.3.65-alpha.10) +97 more potentially affected by CVE-2024-21534 via jsonpath-plus (>=10.0.0, <=10.1.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.12, =0.0.13 and more Source cves: CVE-2024-21534 Source advisory: OSV:GHSA-PPPG-CPFQ-H7WR...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @digitalnative/standard-protocol-sdk (>=0.0.190, <=0.0.195) +48 more potentially affected by CVE-2024-21532 via ggit (>=2.0.0, <=2.4.12)

ggit NPM version =2.0.0, =2.4.0-alpha.0, =0.0.190, =1.1.2, =0.1.0, =4.1.6, =0.1.0, =0.1.0, =0.0.1, =1.7.3, =1.0.0, =0.13.4, =1.9.1, =1.0.0, =1.21.0, =1.23.3 and more Source cves: CVE-2024-21532 Source advisory: OSV:GHSA-62CX-5XJ4-WFM4...

@baseline-ui/app (0.22.1), @baseline-ui/core (0.22.1) +109 more potentially affected by CVE-2024-47061 via @udecode/plate-core (>=22.0.0, <=36.3.9)

@udecode/plate-core NPM version =22.0.0, =3.11.0, =0.1.0, =5.1.1, =0.0.1, =0.0.1, =0.0.2, =12.0.0-beta.405, =0.34.0, =0.9.7, =0.0.23, =0.2.8, =0.3.45 and more Source cves: CVE-2024-47061 Source advisory: OSV:GHSA-73RG-F94J-XVHX...

@667/restify (9.0.0-1), @aeppic/install-build-server (>=2.0.0, <=2.44.0) +862 more potentially affected by CVE-2024-45813 via find-my-way (>=5.6.0, <=8.2.0)

find-my-way NPM version =5.6.0, =2.0.0, =3.0.0, =1.0.1, =1.0.0-alpha1, =2.0.0, =0.0.0-dev.1739244769735, =0.0.0-dev.1739244769735, =2.0.0, =0.0.0-dev.1757040677030, =2.10.8, =0.0.0-dev.1739244769735, =0.0.1, =1.6.0, =1.6.4 and more Source cves: CVE-2024-45813 Source advisory: OSV:GHSA-RRR8-F88R-H...

@angular-devkit/build-angular (>=18.2.0, <=19.0.0-next.6), @angular/build (>=18.2.0, <=19.0.0-next.6) +44 more potentially affected by CVE-2024-45812 via vite (>=5.4.0, <=5.4.5)

vite NPM version =5.4.0, =18.2.0, =18.2.0, =0.0.1-alpha.0, =1.0.1, =2025.1.17-950, =2025.2.11-1732, =18.2.0-snapshot-1724807614589, =18.2.0-snapshot-1724807614589, =2.2.1, =2.3.0, =0.0.1724939132543, =8.6.0, =1.0.15, =2.23.16, =2.27.11 and more Source cves: CVE-2024-45812 Source advisory:...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +101 more potentially affected by CVE-2024-45812 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45812 Source advisory: OSV:GHSA-64VR-G452-QVP3...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +485 more potentially affected by CVE-2024-45811 via vite (>=4.0.0, <=4.5.3)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2024-45811 Source advisory: OSV:GHSA-9CWX-2883-4WFX...

@3t-transform/threeteeui (>=1.5.1, <=1.11.0), @accelbyte/sdk-legal (>=0.0.0-dev-20240828032938, <=6.0.2) +292 more potentially affected by CVE-2024-45801 via dompurify (>=3.0.0, <=3.1.2)

dompurify NPM version =3.0.0, =1.5.1, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =6.4.10, =5.1.1, =1.0.22, =1.0.12, =1.0.0, =1.0.22, =1.0.25, =0.0.1, =0.0.0-nightly-2021101222132, =0.9.4 and more Source cves: CVE-2024-45801 Source advisory: OSV:GHSA-MMHX-HMJR-R674...

directus (>=11.0.0, <=11.0.2) potentially affected by CVE-2024-45596 via @directus/api (>=22.0.0, <=22.1.1)

@directus/api NPM version =22.0.0, =11.0.0, =11.0.2 Source cves: CVE-2024-45596 Source advisory: OSV:GHSA-CFF8-X7JV-4FM8...

@directus/api (21.0.1), directus (>=10.13.2, <=11.0.0-rc.3) potentially affected by CVE-2024-45596 via @directus/api (21.0.0-rc.0)

@directus/api NPM version 21.0.0-rc.0 is affected by a known vulnerability. The following packages have a transitive dependency on @directus/api and may be impacted: - @directus/api 21.0.1 - directus =10.13.2, =11.0.0-rc.3 Source cves: CVE-2024-45596 Source advisory: OSV:GHSA-CFF8-X7JV-4FM8...

01-numacert (>=1.0.0, <=3.0.0), 02-infrastructure (1.0.0) +28194 more potentially affected by CVE-2024-43799 via send (>=0.0.1, <=0.18.0)

send NPM version =0.0.1, =1.0.0, =0.0.1, =1.0.0, =1.0.1, =1.0.3, =1.0.11 - 2-angular 1.0.0 and more Source cves: CVE-2024-43799 Source advisory: OSV:GHSA-M6FV-JMCG-4JFG...

bitcoin (>=0.4.2, <=0.18.2), bitcoin-amount (>=0.1.3, <=0.1.4) +23 more potentially affected by unknown CVE via strason (>=0.3.4, <=0.4.0)

strason CARGO version =0.3.4, =0.4.2, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0386...

inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2024-43414 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2024-43414 Source advisory: OSV:GHSA-FMJ9-77Q8-G6C4...

@apollo/gateway (>=2.3.0-beta.2, <=2.8.4), @genesisx/graphql (>=3.0.0-beta.1, <=4.0.1) +8 more potentially affected by CVE-2024-43414 via @apollo/query-planner (>=2.3.0, <=2.8.4)

@apollo/query-planner NPM version =2.3.0, =2.3.0-beta.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.13.8-alpha-20230126151930-d229ec52b, =0.0.1, =9.2.0, =2.8.54, =0.0.0-preview-20230314213245, =1.3.3, =0.0.8, =1.0.48 Source cves: CVE-2024-43414 Source advisory: OSV:GHSA-FMJ9-77Q8-G6C4...

@miragon/miranum-cli (>=0.5.5, <=0.5.12) potentially affected by CVE-2024-40453 via squirrelly (9.0.0)

squirrelly NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on squirrelly and may be impacted: - @miragon/miranum-cli =0.5.5, =0.5.12 Source cves: CVE-2024-40453 Source advisory: OSV:GHSA-W5PW-GMCW-RFC8...

@amplicode/addon-email-templates (>=0.0.1-snapshot.8, <=0.1.0-snapshot.1.6), @dankolz/news-flash (>=1.0.1, <=1.0.2) +10 more potentially affected by CVE-2024-43407 via ckeditor4 (>=4.14.0, <=4.22.1)

ckeditor4 NPM version =4.14.0, =0.0.1-snapshot.8, =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2024-43407 Source advisory: OSV:GHSA-7R32-VFJ5-C2JV...

databend-common-ast (>=0.0.0, <=0.0.2), foyer-common (>=0.8.0, <=0.8.1) +12 more potentially affected by unknown CVE via minitrace (>=0.3.1, <=0.6.7)

minitrace CARGO version =0.3.1, =0.0.0, =0.8.0, =0.8.0, =0.1.7, =0.3.0, =0.6.4, =0.3.0, =0.5.0, =0.11.1, =0.11.1, =0.3.0, =0.1.0, =0.1.1 - risinglight 0.1.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0390...

boa_cli (0.16.0), click_and_load (0.2.0) +1 more potentially affected by CVE-2024-43357 +1 more via boa_engine (0.16.0)

boaengine CARGO version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on boaengine and may be impacted: - boacli 0.16.0 - clickandload 0.2.0 - zippyst 5.0.0 Source cves: CVE-2024-43357, CVE-2024-43367 Source advisory: OSV:RUSTSEC-2024-0444...

@bunt/cli (>=0.12.0, <=0.28.3), @bunt/project (>=0.12.0, <=0.25.0) +2 more potentially affected by CVE-2024-38989 via @bunt/app (>=0.12.0, <=0.28.3)

@bunt/app NPM version =0.12.0, =0.12.0, =0.12.0, =0.12.0, =0.14.0, =0.28.3 Source cves: CVE-2024-38989 Source advisory: OSV:GHSA-P734-XG27-8CFQ...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8130 more potentially affected by CVE-2024-42461 via elliptic (>=5.2.1, <=6.5.6)

elliptic NPM version =5.2.1, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-42461 Source advisory: OSV:GHSA-49Q7-C7J4-3P7M...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2024-40648 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-40648 Source advisory: OSV:RUSTSEC-2024-0356...

@a-type/ui (>=0.8.17, <=1.2.3), @adminjs/design-system (>=3.0.0-beta.4, <=3.1.1) +427 more potentially affected by unknown CVE via prosemirror-model (>=1.0.1, <=1.21.3)

prosemirror-model NPM version =1.0.1, =0.8.17, =3.0.0-beta.4, =0.1.0, =0.0.1, =13.1.0, =10.4.0, =0.0.2, =3.0.0, =16.0.0, =0.0.1, =3.1.7, =11.0.6, =4.0.13, =73.4.4, =194.4.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-PROSEMIRRORMODEL-7838221...

3abn (>=1.0.0, <=2.1.11), @2003scape/rsc-sounds (>=1.0.0, <=1.0.1) +380 more potentially affected by CVE-2024-21526 via speaker (>=0.0.10, <=0.5.5)

speaker NPM version =0.0.10, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21526 Source advisory: OSV:GHSA-W5FC-GJ3H-26RX...

@angular-devkit/build-angular (>=18.0.0-next.4, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +64 more potentially affected by CVE-2024-38372 via undici (>=6.14.1, <=6.19.1)

undici NPM version =6.14.1, =18.0.0-next.4, =18.0.0-next.3, =1.2.0, =0.1.0, =2.1.0, =2.3.0, =1.1.1, =19.1.0, =10.0.20, =1.0.12, =2.1.1-dev.1717589072-346d1be72, =2.4.0-dev.1717589083-346d1be72, =2.4.0-dev.1724328261-ec9080b88 - @draftbot/discord.js 14.15.3 - @draftbot/rest 2.3.0 and more Source...

async-mongodb-session (2.1.0), chord-action (>=0.1.13, <=0.1.16) +7 more potentially affected by CVE-2024-6382 via mongodb (>=2.0.0-alpha, <=2.6.1)

mongodb CARGO version =2.0.0-alpha, =0.1.13, =0.1.13, =0.1.13, =0.2.1, =0.3.2 - mongodb-gridfs 0.2.0 - rocketauthifier 0.111.0 - sqlite2mongo 0.3.0 Source cves: CVE-2024-6382 Source advisory: OSV:GHSA-32JF-H775-G29H...

@ag-grid-enterprise/charts-enterprise (32.0.0) potentially affected by CVE-2024-39001 via @ag-grid-enterprise/charts (32.0.0)

@ag-grid-enterprise/charts NPM version 32.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @ag-grid-enterprise/charts and may be impacted: - @ag-grid-enterprise/charts-enterprise 32.0.0 Source cves: CVE-2024-39001 Source advisory:...

@nokecy/qc-ui (>=0.4.7, <=0.9.6) potentially affected by CVE-2024-39001 via ag-grid-enterprise (32.0.0)

ag-grid-enterprise NPM version 32.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ag-grid-enterprise and may be impacted: - @nokecy/qc-ui =0.4.7, =0.9.6 Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

@cdmx/wappler_ag_grid (>=1.2.5, <=1.7.8), @cosmotech/ui (>=8.0.0, <=9.0.0) +19 more potentially affected by CVE-2024-39001 via ag-grid-community (>=31.0.0, <=31.3.2)

ag-grid-community NPM version =31.0.0, =1.2.5, =8.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =2.7.9, =31.0.0, =31.1.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =0.1.65, =31.0.0, =31.3.0 and more Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

@cdmx/wappler_ag_grid (>=1.2.5, <=1.7.8), @cosmotech/ui (>=8.0.0, <=9.0.0) +19 more potentially affected by CVE-2024-38996 via ag-grid-community (>=31.0.0, <=31.3.2)

ag-grid-community NPM version =31.0.0, =1.2.5, =8.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =2.7.9, =31.0.0, =31.1.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =0.1.65, =31.0.0, =31.3.0 and more Source cves: CVE-2024-38996 Source advisory: OSV:GHSA-876P-C77M-X2HC...

org.webjars.bower:angularamd (0.2.1), org.webjars.bower:annodom (1.0.0) +11 more potentially affected by CVE-2024-38999 via org.webjars.bower:requirejs (>=2.1.22, <=2.3.6)

org.webjars.bower:requirejs MAVEN version =2.1.22, =0.0.2, =3.10.0, =2.1.4, =0.1.13, =0.0.2, =0.0.3 - org.webjars.bower:require-lazy 0.3.8 Source cves: CVE-2024-38999 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-7430220...

a2d (>=0.1.0, <=0.1.11), abstract-account-factory (>=0.13.0, <=0.18.0) +3609 more potentially affected by unknown CVE via derivative (>=1.0.4, <=2.2.0)

derivative CARGO version =1.0.4, =0.1.0, =0.13.0, =0.16.0, =0.1.0-rc.2, =0.0.1, =0.1.0-rc.2, =0.2.0-beta.4, =0.2.0-beta.4, =0.13.0, =0.16.5, =0.2.0-beta.4, =0.0.1, =0.19.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0388...