@0xgg/echomd (>=1.0.0, <=1.0.4), @accelbyte/widgets (>=0.2.0-beta.9, <=0.2.10) +858 more potentially affected by CVE-2024-48910 via dompurify (>=2.0.0, <=2.4.1)

dompurify NPM version =2.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.13, =6.2.3, =6.4.3, =0.0.2-next.4, =0.1.0, =1.0.0, =0.0.18, =6.8.0, =9.3.14, =9.5.4 and more Source cves: CVE-2024-48910 Source advisory: OSV:GHSA-P3VF-V8QC-CWCR...

arci-urdf-viz (>=0.0.7, <=0.1.0), asp_lib (>=0.1.0, <=0.1.1) +96 more potentially affected by unknown CVE via fast-float (0.2.0)

fast-float CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - arci-urdf-viz =0.0.7, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.13.0, =0.19.0, =0.3.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.20.2 and more...

bounded-prescience (0.0.3), chainer-chemistry (0.7.1) +21 more potentially affected by CVE-2024-48206 via chainer (>=6.0.0, <=7.8.1)

chainer PYPI version =6.0.0, =0.1.0, =0.2.0, =0.3.0, =0.0.1, =0.1.0, =0.6.1, =0.2.0, =0.6.0.post1, =1.3.1rc2, =2024.0.0, =2024.0.1 and more Source cves: CVE-2024-48206 Source advisory: SNYK:PYTHON-CHAINER-8340635...

@aerocorp/cli (7.0.5), @aj-archipelago/cortex (>=1.1.7, <=1.3.16) +368 more potentially affected by CVE-2024-7042 via @langchain/community (>=0.0.15, <=0.3.2)

@langchain/community NPM version =0.0.15, =1.1.7, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =0.0.1, =0.0.2, =0.1.0, =1.54.2, =2.0.0-next.2, =1.0.0-alpha.0, =0.2.13-alpha.0, =0.0.28, =0.0.30 and more Source cves: CVE-2024-7042 Source advisory: OSV:GHSA-6M59-8FMV-M5F9...

10minions-engine (>=0.0.1, <=0.0.4), @0xd541ecb3/byte-babe (>=1.0.0, <=1.2.1) +510 more potentially affected by CVE-2024-7774 via langchain (>=0.0.11, <=0.2.10)

langchain NPM version =0.0.11, =0.0.1, =1.0.0, =0.1.4, =0.0.11, =0.0.0, =0.0.2-alpha, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =2.0.68, =0.0.2, =0.1.0, =0.1.4 - @builderbot-plugins/free-gpt 0.0.6-alpha.0 and more Source cves: CVE-2024-7774 Source advisory: OSV:GHSA-HC5W-C9F8-9CC4...

@augmt/request-header-parser-microservice (0.2.4), @bb-cli/bb (>=2.3.0, <=2.11.0) +265 more potentially affected by CVE-2020-26311 via useragent (>=2.0.0, <=2.2.1)

useragent NPM version =2.0.0, =2.3.0, =2.9.0, =8.0.0-beta.0, =1.0.0, =0.0.1, =1.0.0, =3.1.0, =10.3.3, =0.0.2, =0.0.0, =1.0.4, =1.0.6, =1.0.24 - @criollapp/config 1.0.23 and more Source cves: CVE-2020-26311 Source advisory: OSV:GHSA-MGFV-M47X-4WQP...

asksuite-core (>=1.0.93, <=2.32.83), machinepack-knwl (1.0.0) potentially affected by CVE-2020-26306 via knwl.js (1.0.2)

knwl.js NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on knwl.js and may be impacted: - asksuite-core =1.0.93, =2.32.83 - machinepack-knwl 1.0.0 Source cves: CVE-2020-26306 Source advisory: OSV:GHSA-68QG-G787-3RP5...

7ghost (>=4.11.16, <=4.11.46), @abhilashgoswami/block-text (>=0.0.6, <=0.0.7) +232 more potentially affected by CVE-2020-26303 via insane (>=2.4.0, <=2.6.2)

insane NPM version =2.4.0, =4.11.16, =0.0.6, =0.0.8, =8.3.28-ST.0, =0.2.0-beta.0, =0.0.2-canary.1.10.0, =2.35.0, =14.42.1-canary.1016.19978.0, =0.1.0, =22.0.0-rc.1, =0.1.0, =1.9.3, =0.1.0, =0.13.85 and more Source cves: CVE-2020-26303 Source advisory: OSV:GHSA-W455-MFQ9-HF74...

@greenhousegames/firebase-reporting-jquery (0.1.0), @maxdome/component-common-styles (2.26.0) +22 more potentially affected by CVE-2020-26304 via foundation-sites (>=6.2.0, <=6.3.1)

foundation-sites NPM version =6.2.0, =4.0.0-beta.2, =0.0.1, =1.0.0-dev.20161219T192728Z.df3de96, =0.0.1, =0.0.0-semantically-released, =0.5010.0, =1.0.0, =0.8.0, =0.14.0, =0.0.12, =1.3.3 and more Source cves: CVE-2020-26304 Source advisory: OSV:GHSA-P8PC-3F7W-JR5Q...

nope-env (1.0.0) potentially affected by CVE-2020-26309 via nope-validator (0.11.3)

nope-validator NPM version 0.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on nope-validator and may be impacted: - nope-env 1.0.0 Source cves: CVE-2020-26309 Source advisory: OSV:GHSA-3PHV-83CJ-P8P7...

1game-texas-holdem (>=1.2.0, <=1.11.1), @1studio/ui (>=1.0.0-beta.1, <=3.9.0) +1087 more potentially affected by CVE-2020-26308 via validate.js (>=0.1.3, <=0.13.1)

validate.js NPM version =0.1.3, =1.2.0, =1.0.0-beta.1, =5.0.1, =0.1.0, =1.0.6, =3.3.20, =2.0.0-alpha.1, =0.3.9, =1.3.0, =1.2.1, =0.3.12, =1.3.12, =0.1.1, =0.1.26 and more Source cves: CVE-2020-26308 Source advisory: OSV:GHSA-RV73-9C8W-JP4C...

b4ae (>=2.0.0, <=2.1.3), crypt_guard (>=0.1.4, <=1.3.6) +25 more potentially affected by unknown CVE via pqcrypto-dilithium (>=0.1.1, <=0.5.0)

pqcrypto-dilithium CARGO version =0.1.1, =2.0.0, =0.1.4, =0.1.1, =0.1.0, =0.1.1, =0.0.1, =0.6.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0380...

b4ae (>=2.0.0, <=2.1.3), clatter (>=0.1.2-alpha, <=2.0.0-rc.1) +28 more potentially affected by unknown CVE via pqcrypto-kyber (>=0.1.2, <=0.8.1)

pqcrypto-kyber CARGO version =0.1.2, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - qudag-exchange 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0381...

@2digits/eslint-config (>=2.6.0, <=2.7.0), @2digits/eslint-plugin (>=2.2.9, <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (0.1.0)

@eslint/plugin-kit NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

1uphealth-provider-search (>=0.1.0, <=0.3.0), 20190403-utils (1.0.0) +6909 more potentially affected by CVE-2024-21538 via cross-spawn (>=6.0.0, <=6.0.5)

cross-spawn NPM version =6.0.0, =0.1.0, =0.1.0, =0.1.4, =0.1.0, =1.0.0-beta.1, =0.1.1, =0.1.72, =9.0.0, =3.0.0, =1.0.0, =1.0.3 - @352inc/react-scripts 2.0.5-custom-6 and more Source cves: CVE-2024-21538 Source advisory: SNYK:JS-CROSSSPAWN-8303230...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14299 more potentially affected by CVE-2024-21538 via cross-spawn (>=7.0.0, <=7.0.3)

cross-spawn NPM version =7.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0....

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +67 more potentially affected by CVE-2024-48963 via snyk-php-plugin (>=1.1.2, <=1.9.2)

snyk-php-plugin NPM version =1.1.2, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 and more Source cves: CVE-2024-48963 Source advisory: OSV:GHSA-69F9-H8F9-7VJF...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +67 more potentially affected by CVE-2024-48963 via snyk-php-plugin (>=1.1.2, <=1.9.2)

snyk-php-plugin NPM version =1.1.2, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 and more Source cves: CVE-2024-48963 Source advisory: SNYK:JS-SNYKPHPPLUGIN-8248485...

@alkemio/excalidraw (>=0.17.0-alkemio-1, <=0.17.6-alkemio-4), @betternotion/excalidraw (>=0.0.1-BETA, <=1.1.1) +141 more potentially affected by unknown CVE via mermaid (>=10.0.0, <=10.9.2)

mermaid NPM version =10.0.0, =0.17.0-alkemio-1, =0.0.1-BETA, =0.17.1, =0.0.19, =3.0.0, =0.0.12, =0.114.3, =0.4.0-1437953, =0.17.1, =18.0.3, =18.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M4GQ-X24J-JPMF...

@0xcleon/dain-bridge-sdk (>=1.0.0, <=1.0.17), @0xcleon/wormhole-sdk (>=0.1.0, <=0.10.19) +998 more potentially affected by CVE-2024-48930 via secp256k1 (>=3.0.1, <=3.8.0)

secp256k1 NPM version =3.0.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2, =0.1.0, =0.0.1, =0.0.3, =1.0.2, =1.1.0, =0.0.3, =0.0.1, =1.35.0, =0.13.3, =0.13.2, =7.16.1 and more Source cves: CVE-2024-48930 Source advisory: OSV:GHSA-584Q-6J8J-R5PM...

@0xvitto/context (>=0.1.0, <=0.1.1), @1001-digital/components.evm (>=1.3.0, <=4.0.3) +720 more potentially affected by CVE-2024-48930 via secp256k1 (5.0.0)

secp256k1 NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on secp256k1 and may be impacted: - @0xvitto/context =0.1.0, =1.3.0, =0.1.0, =1.2.2, =0.0.3, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.3, =0.1.0-alpha.20260610213851.5857f96, =1.0.1 an...

@0day-network/mod-renderer (>=0.1.0, <=0.1.1), @0day-network/react-sdk (>=0.0.1, <=0.2.1) +792 more potentially affected by CVE-2024-48930 via secp256k1 (>=4.0.0, <=4.0.3)

secp256k1 NPM version =4.0.0, =0.1.0, =0.0.1, =1.0.21, =1.0.6, =1.0.2, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.4.1 - @aloe2/abstract-eth 1.0.20228282226 - @aloe2/account-lib 2.20.20228282226 - @aloe2/bitgo 14.2.20228282226 - @aloe2/sdk-coin-avaxc 1.1.20228282226 - @aloe2/sdk-coin-bsc 1.0.20228282226 a...

@amazeelabs/publisher (>=2.4.28, <=2.5.8), @angular-devkit/build-angular (>=18.0.0-next.3, <=19.0.0-next.9) +65 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=3.0.0, <=3.0.2)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =18.0.0-next.3, =18.0.0-next.39, =18.0.0-next.39, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =8.10.0-nightly.20240906232837, =3.11.0-beta.6, =1.1.0, =0.0.26, =0.0.26, =8.0.0-canary.984, =9.0.0-canary.203 and more...

@alfresco/adf-testing (6.0.0-A.2-8258), @aller/svelte-components (>=1.5.1, <=1.5.17) +207 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=2.0.0, <=2.0.6)

http-proxy-middleware NPM version =2.0.0, =1.5.1, =2.0.0, =17.0.0-next.0, =9.3.0, =2.3.1, =1.92.0, =1.0.1, =1.0.10, =1015.132.0, =0.0.1, =1.2.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21536 Source advisory: OSV:GHSA-C7QV-Q95Q-8V27...

@alfresco/adf-testing (6.0.0-A.2-8258), @aller/svelte-components (>=1.5.1, <=1.5.17) +207 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=2.0.0, <=2.0.6)

http-proxy-middleware NPM version =2.0.0, =1.5.1, =2.0.0, =17.0.0-next.0, =9.3.0, =2.3.1, =1.92.0, =1.0.1, =1.0.10, =1015.132.0, =0.0.1, =1.2.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21536 Source advisory: SNYK:JS-HTTPPROXYMIDDLEWARE-8229906...

@amazeelabs/publisher (>=2.4.28, <=2.5.8), @angular-devkit/build-angular (>=18.0.0-next.3, <=19.0.0-next.9) +65 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=3.0.0, <=3.0.2)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =18.0.0-next.3, =18.0.0-next.39, =18.0.0-next.39, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =8.10.0-nightly.20240906232837, =3.11.0-beta.6, =1.1.0, =0.0.26, =0.0.26, =8.0.0-canary.984, =9.0.0-canary.203 and more...

abraham3k (>=1.3.8, <=1.5.3), accutuning-helpers (>=1.0.32, <=1.0.33) +75 more potentially affected by CVE-2024-10073 via flair (>=0.4.5, <=0.15.1)

flair PYPI version =0.4.5, =1.3.8, =1.0.32, =0.0.1, =0.1.0, =0.0.6, =0.1.20, =0.1.0, =0.1.0, =0.0.1.1, =0.2.4, =0.1.1, =0.0.1rc2, =0.0.1rc3488056308109 and more Source cves: CVE-2024-10073 Source advisory: SNYK:PYTHON-FLAIR-8230414...

1k-tasks (>=0.0.1, <=1.0.5), 360-lib (1.0.0) +5494 more potentially affected by CVE-2026-9496 via pacote (>=11.2.7, <=21.5.0)

pacote NPM version =11.2.7, =0.0.1, =0.1.13, =52.3.0, =4.0.0, =4.2.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.2.17 and more Source cves: CVE-2026-9496 Source advisory: SNYK:JS-PACOTE-8225084...

0-1-project (0.0.1), 0.8.18-p11 (0.8.18-p12) +61263 more potentially affected by CVE-2024-9506 via vue (>=2.0.0, <=2.7.16)

vue NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.1.0, =1.1.0, =1.2.3 and more Source cves: CVE-2024-9506 Source advisory: OSV:GHSA-5J4C-8P2G-V4JX...

@dstny/scp-sdk (>=2.0.0, <=3.0.0-rc3), @elizaos/plugin-matrix (>=2.0.0-alpha.3, <=2.0.0-alpha.8) +33 more potentially affected by CVE-2024-47080 via matrix-js-sdk (>=9.11.0, <=34.7.0-rc.0)

matrix-js-sdk NPM version =9.11.0, =2.0.0, =2.0.0-alpha.3, =2.0.0-alpha.1, =1.4.1, =2.5.0, =0.2.0, =0.0.14, =0.0.1, =0.0.0-development, =0.17.0, =4.0.1, =1.2.0, =0.1.14, =0.1.18, =0.2.4 - @zqbflynn/kernel 6.4.2 and more Source cves: CVE-2024-47080 Source advisory: OSV:GHSA-4JF8-G8WP-CX7C...

@semic/testing (2.2.11) potentially affected by CVE-2024-48914 via @vendure/asset-server-plugin (3.0.0)

@vendure/asset-server-plugin NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @vendure/asset-server-plugin and may be impacted: - @semic/testing 2.2.11 Source cves: CVE-2024-48914 Source advisory: OSV:GHSA-R9MQ-3C9R-FMJQ...

@grupo-loja/vendure-banner-plugin (1.0.0), @grupo-loja/vendure-conect-envios-plugin (>=1.0.0, <=1.0.1) +51 more potentially affected by CVE-2024-48914 via @vendure/asset-server-plugin (>=2.0.3, <=2.2.7)

@vendure/asset-server-plugin NPM version =2.0.3, =1.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.2.4 and more Source cves: CVE-2024-48914 Source advisory: OSV:GHSA-R9MQ-3C9R-FMJQ...

@backan/core (>=0.0.3, <=0.1.0), @bepp/api (>=1.3.2, <=1.3.17) +50 more potentially affected by CVE-2024-48913 via hono (>=4.0.0, <=4.6.4)

hono NPM version =4.0.0, =0.0.3, =1.3.2, =0.75.0, =2.1.5, =0.1.0, =1.0.0, =2.13.0, =1.2.0, =1.0.1, =0.0.1, =1.0.0-apm.0, =0.0.0-next-20240721155721, =0.1.0, =0.3.0 and more Source cves: CVE-2024-48913 Source advisory: OSV:GHSA-2234-FMW7-43WR...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8238 more potentially affected by CVE-2024-48948 via elliptic (>=6.0.2, <=6.5.7)

elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-48948 Source advisory: OSV:GHSA-FC9H-WHQ2-V747...

@apolitical/component-library (>=1.7.0-beta.1, <=10.5.0), @apolitical/styleguide2 (>=3.17.0-rc.1, <=7.8.1) +60 more potentially affected by CVE-2024-21535 via markdown-to-jsx (>=7.0.0, <=7.3.2)

markdown-to-jsx NPM version =7.0.0, =1.7.0-beta.1, =3.17.0-rc.1, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =6.1.1, =7.3.2, =0.1.0, =0.9.1, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =0.1.0-alpha.39, =1.1.1-beta.3, =1.2.2 and more Source cves: CVE-2024-21535 Source advisory:...

@astro-reactive/common (>=0.2.0, <=0.2.1), @bookshop/astro-engine (>=3.7.0, <=3.10.1) +68 more potentially affected by CVE-2024-47885 via astro (>=3.0.12, <=4.15.12)

astro NPM version =3.0.12, =0.2.0, =3.7.0, =0.40.5, =0.34.0, =0.34.0, =2.8.4, =0.0.2, =2.0.0-alpha.1, =0.0.0-test-20230907022505, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2024-47885 Source advisory: OSV:GHSA-M85W-3H95-HCF9...

@0xgg/echomd (>=1.0.0, <=1.0.4), @7nohe/vite-plugin-vue-marked (0.2.1) +1056 more potentially affected by CVE-2024-47875 via dompurify (>=2.0.0, <=2.4.9)

dompurify NPM version =2.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.13, =6.2.3, =6.4.3, =0.0.2-next.4, =0.3.0, =0.1.0, =0.1.0-a0, =1.0.0, =0.4.0, =0.0.18, =0.0.32 and more Source cves: CVE-2024-47875 Source advisory: OSV:GHSA-GX9M-WHJM-85JF...

@3t-transform/threeteeui (>=1.5.1, <=1.11.0), @accelbyte/sdk-legal (>=0.0.0-dev-20240828032938, <=6.0.2) +292 more potentially affected by CVE-2024-47875 via dompurify (>=3.0.0, <=3.1.2)

dompurify NPM version =3.0.0, =1.5.1, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =6.4.10, =5.1.1, =1.0.22, =1.0.12, =1.0.0, =1.0.22, =1.0.25, =0.0.1, =0.0.0-nightly-2021101222132, =0.9.4 and more Source cves: CVE-2024-47875 Source advisory: OSV:GHSA-GX9M-WHJM-85JF...

@appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11), @appknit-project/appknit-platform-sdk-v2 (>=1.3.65-alpha.0, <=1.3.65-alpha.10) +97 more potentially affected by CVE-2024-21534 via jsonpath-plus (>=10.0.0, <=10.1.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.12, =0.0.13 and more Source cves: CVE-2024-21534 Source advisory: OSV:GHSA-PPPG-CPFQ-H7WR...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +7965 more potentially affected by CVE-2024-48949 via elliptic (>=6.0.2, <=6.5.5)

elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-48949 Source advisory: OSV:GHSA-434G-2637-QMQR...

candid-extractor (>=0.1.0, <=0.1.2), purewasm (0.1.0) +12 more potentially affected by CVE-2024-47763 via wasmtime (12.0.2)

wasmtime CARGO version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - candid-extractor =0.1.0, =12.0.0, =12.0.0, =12.0.0, =0.1.2, =0.3.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.2 Source cves:...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @digitalnative/standard-protocol-sdk (>=0.0.190, <=0.0.195) +48 more potentially affected by CVE-2024-21533 via ggit (>=2.0.0, <=2.4.12)

ggit NPM version =2.0.0, =2.4.0-alpha.0, =0.0.190, =1.1.2, =0.1.0, =4.1.6, =0.1.0, =0.1.0, =0.0.1, =1.7.3, =1.0.0, =0.13.4, =1.9.1, =1.0.0, =1.21.0, =1.23.3 and more Source cves: CVE-2024-21533 Source advisory: OSV:GHSA-PR45-CG4X-FF4M...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @digitalnative/standard-protocol-sdk (>=0.0.190, <=0.0.195) +48 more potentially affected by CVE-2024-21532 via ggit (>=2.0.0, <=2.4.12)

ggit NPM version =2.0.0, =2.4.0-alpha.0, =0.0.190, =1.1.2, =0.1.0, =4.1.6, =0.1.0, =0.1.0, =0.0.1, =1.7.3, =1.0.0, =0.13.4, =1.9.1, =1.0.0, =1.21.0, =1.23.3 and more Source cves: CVE-2024-21532 Source advisory: OSV:GHSA-62CX-5XJ4-WFM4...

@antonovicha/hdbext-async (>=1.0.0, <=1.0.4), @christianwheeler/typeorm (>=0.2.23, <=0.2.27) +37 more potentially affected by CVE-2024-45277 via @sap/hana-client (>=2.3.119, <=2.21.28)

@sap/hana-client NPM version =2.3.119, =1.0.0, =0.2.23, =0.0.1-alpha.3, =0.1.2, =1.1.1, =0.1.0, =1.0.2, =6.2.0, =2.0.0, =1.0.0, =1.1.0, =2.4.3, =1.3.2, =1.26.1 and more Source cves: CVE-2024-45277 Source advisory: OSV:GHSA-6339-GV7W-G5F4...

aa2nucaln (0.1.1), aamp (>=0.1.0, <=0.1.6) +9428 more potentially affected by unknown CVE via paste (>=0.1.18, <=1.0.15)

paste CARGO version =0.1.18, =0.1.0, =0.1.0, =0.1.0, =0.11.2, =0.1.0, =0.1.0, =0.1.1, =0.10.3, =0.9.0, =0.2.0-beta.4, =0.15.1, =0.19.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0436...

-temp-electron-manager-somiibo (0.0.200), 0.edsql (>=1.0.49, <=1.0.50) +49224 more potentially affected by CVE-2024-47764 via cookie (>=0.0.2, <=0.6.0)

cookie NPM version =0.0.2, =1.0.49, =1.0.51, =1.0.0, =1.0.0, =0.0.1, =1.0.3, =1.0.1, =1.0.5 and more Source cves: CVE-2024-47764 Source advisory: OSV:GHSA-PXG6-PF52-XH8X...

20231122-npm (1.0.0), 3vot-salesforce-proxy (>=0.0.1, <=0.1.6) +2012 more potentially affected by CVE-2024-9266 via express (>=3.4.5, <=3.21.2)

express NPM version =3.4.5, =0.0.1, =2.0.0, =0.25.0, =1.0.4, =0.4.5-rc.0, =0.0.1, =0.12.0-edge9, =1.1.1, =1.0.2, =7.0.0, =1.0.0, =1.0.9 and more Source cves: CVE-2024-9266 Source advisory: OSV:GHSA-JJ78-5FMV-MV28...

activecube-rs (>=0.0.1, <=0.1.30), async-graphql-actix-web (>=7.0.0, <=7.0.3) +26 more potentially affected by CVE-2024-47614 via async-graphql (7.0.3)

async-graphql CARGO version 7.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on async-graphql and may be impacted: - activecube-rs =0.0.1, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.2.0 and more Source cves: CVE-2024-47614...

@1d/analytics (>=3.0.1, <=3.0.4), @adamduren/sentry-remix (>=7.86.0-vercel-patch.1, <=7.86.0) +229 more potentially affected by unknown CVE via @sentry/browser (>=7.0.0, <=7.119.0)

@sentry/browser NPM version =7.0.0, =3.0.1, =7.86.0-vercel-patch.1, =1.16.23-1, =1.0.15, =0.0.0-dev.1739244769735, =1.0.0, =0.17.7-ludo.13, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.3.1-alpha.2 - @canva/app-ui-kit 4.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-593M-55HH-J8GV...

@gambalabs/sentry-nuxt (>=8.31.1, <=8.32.0), @globalbrain/sefirot (3.40.0) +31 more potentially affected by unknown CVE via @sentry/browser (>=8.0.0, <=8.32.0)

@sentry/browser NPM version =8.0.0, =8.31.1, =7.0.0, =8.9.0, =1.0.386-leo-ron-885-experimental.13, =0.0.1, =0.1.0, =8.0.0-alpha.2, =8.0.0-alpha.2, =8.0.0-alpha.2, =1.0.0-beta.1, =5.0.0-beta.0, =8.0.0-alpha.2, =8.0.0-alpha.2, =8.32.0 and more Source cves: unknown CVE Source advisory:...