@qwikui-org/ui (>=0.2.2, <=0.2.3), @react-portable/core (>=0.4.0, <=0.11.2) +1 more potentially affected by CVE-2024-41677 via @builder.io/qwik (>=1.2.6, <=1.4.5)

@builder.io/qwik NPM version =1.2.6, =0.2.2, =0.4.0, =0.11.2 - not-qwik-library-test1 0.0.3 Source cves: CVE-2024-41677 Source advisory: OSV:GHSA-2RWJ-7XQ8-4GX4...

@alfresco/adf-core (>=4.12.0-35591, <=6.0.0-A.1-github-run-3758819331), @bigbossstudio/strapi-plugin-editorjs (>=0.0.1, <=0.0.4) +44 more potentially affected by CVE-2022-23474 via @editorjs/editorjs (>=2.15.1, <=2.25.0)

@editorjs/editorjs NPM version =2.15.1, =4.12.0-35591, =0.0.1, =1.1.3, =1.1.7, =1.0.2, =0.0.0-ee-vpcs.549378cf03, =0.0.0-ee-vpcs.549378cf03, =0.0.0-ee-vpcs.549378cf03, =0.0.0-ee-vpcs.549378cf03, =0.0.0-ee-vpcs.549378cf03, =0.0.0-unstable.1e66d121db, =0.0.0-ee-vpcs.549378cf03,...

@bloggrify/bento (>=0.9.1, <=0.9.4), @bloggrify/core (>=1.1.1, <=1.4.5) +26 more potentially affected by CVE-2024-34344 via nuxt (>=3.4.2, <=3.12.3)

nuxt NPM version =3.4.2, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =4.0.3, =0.1.0, =0.0.1, =0.0.1, =0.5.0, =1.1.1-beta.3, =1.4.1-alpha.13, =1.0.1-alpha.1024, =1.4.0 and more Source cves: CVE-2024-34344 Source advisory: OSV:GHSA-V784-FJJH-F8R4...

@bloggrify/bento (>=0.9.1, <=0.9.4), @bloggrify/core (>=1.1.1, <=1.4.5) +62 more potentially affected by CVE-2024-34343 via nuxt (>=3.0.0, <=3.12.3)

nuxt NPM version =3.0.0, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =4.0.3, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.5.0, =1.0.0-beta.11, =1.2.0 and more Source cves: CVE-2024-34343 Source advisory: OSV:GHSA-VF6R-87Q4-2VJF...

@dargmuesli/nuxt-vio (>=8.3.3, <=13.1.14) potentially affected by CVE-2024-23657 via @nuxt/devtools (>=1.0.0, <=1.3.7)

@nuxt/devtools NPM version =1.0.0, =8.3.3, =13.1.14 Source cves: CVE-2024-23657 Source advisory: OSV:GHSA-RCVG-RGF7-PPPV...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8132 more potentially affected by CVE-2024-42459 via elliptic (>=4.1.0, <=6.5.6)

elliptic NPM version =4.1.0, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-42459 Source advisory: OSV:GHSA-F7Q4-PWC6-W24P...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8129 more potentially affected by CVE-2024-42461 via elliptic (>=5.2.1, <=6.5.6)

elliptic NPM version =5.2.1, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-42461 Source advisory: OSV:GHSA-49Q7-C7J4-3P7M...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8814 more potentially affected by CVE-2024-42460 via elliptic (>=2.0.2, <=6.5.6)

elliptic NPM version =2.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =1.0.0, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =6.2.4 and more Source cves: CVE-2024-42460 Source advisory: OSV:GHSA-977X-G7H5-7QGW...

biscuit-cli (>=0.4.1, <=0.4.2) potentially affected by CVE-2024-41949 +1 more via biscuit-auth (4.1.1)

biscuit-auth CARGO version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on biscuit-auth and may be impacted: - biscuit-cli =0.4.1, =0.4.2 Source cves: CVE-2024-41949, CVE-2024-42350 Source advisory: OSV:GHSA-P9W4-585H-G3C7...

@fractl-ui/fuel (>=0.3.4, <=0.3.5), @fuel-ts/contract (>=0.0.0-next-20240210135306, <=0.92.1) +15 more potentially affected by CVE-2024-41945 via @fuel-ts/account (>=0.0.0-next-20240210135306, <=0.92.1)

@fuel-ts/account NPM version =0.0.0-next-20240210135306, =0.3.4, =0.0.0-next-20240210135306, =0.0.0-next-20240210135306, =0.0.0-next-20241128172443, =0.0.0-next-20240210135306, =0.1.5, =0.1.0, =1.0.0, =2.35.1-rc.1, =0.1.0, =0.0.50, =0.0.0-next-20240210135306, =1.0.0, =1.0.5 and more Source cves:...

@appium/universal-xml-plugin (>=1.0.18, <=1.0.20), @cardscan.ai/cardscan-client (>=0.1.0, <=0.4.3) +103 more potentially affected by CVE-2024-41818 via fast-xml-parser (>=4.3.5, <=4.4.0)

fast-xml-parser NPM version =4.3.5, =1.0.18, =0.1.0, =1.1.0, =8.0.167, =11.49.0, =13.4.12, =11.49.0, =28.16.23, =11.49.0, =0.0.145, =1.0.0, =10.3.11, =0.1.11, =8.0.167, =5.0.167, =5.0.200 and more Source cves: CVE-2024-41818 Source advisory: OSV:GHSA-MPG4-RC92-VX8V...

c2pa (>=0.16.1, <=0.19.1), c2patool (>=0.3.9, <=0.5.1) potentially affected by unknown CVE via xmp_toolkit (1.7.3)

xmptoolkit CARGO version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on xmptoolkit and may be impacted: - c2pa =0.16.1, =0.3.9, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-66FW-43H8-F8P3...

c2pa (>=0.16.1, <=0.19.1), c2patool (>=0.3.9, <=0.5.1) potentially affected by unknown CVE via xmp_toolkit (1.7.3)

xmptoolkit CARGO version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on xmptoolkit and may be impacted: - c2pa =0.16.1, =0.3.9, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0360...

ballista (>=0.8.0, <=0.9.0), ballista-cli (0.9.0) +52 more potentially affected by CVE-2024-41178 via object_store (>=0.5.6, <=0.9.1)

objectstore CARGO version =0.5.6, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.4.0, =0.7.0, =0.0.1, =0.0.0, =12.0.0, =12.0.0, =12.0.0, =20.0.0, =38.0.0 - datafusion-expr 31.0.0 - datafusion-extra 0.0.2 and more Source cves: CVE-2024-41178 Source advisory: OSV:GHSA-C2HF-VCMR-QJRF...

0-1-project (0.0.1), 02vue_toast_demo (>=1.0.0, <=1.0.4) +9009 more potentially affected by CVE-2024-6783 via vue-template-compiler (>=2.0.0, <=2.7.16)

vue-template-compiler NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =2.0.0, =1.0.0, =0.3.11, =0.0.1, =0.8.0 and more Source cves: CVE-2024-6783 Source advisory: OSV:GHSA-G3CH-RX76-35FX...

@automatedtf/catalog (>=0.0.1, <=0.0.27), @automatedtf/reactor (>=0.0.1, <=0.0.9) +3 more potentially affected by CVE-2024-41655 via tf2-item-format (4.3.5)

tf2-item-format NPM version 4.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on tf2-item-format and may be impacted: - @automatedtf/catalog =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.25 - @vendortf/catalog 0.0.27 Source cves: CVE-2024-41655 Source advisory...

ballista (>=0.8.0, <=0.9.0), ballista-cli (0.9.0) +52 more potentially affected by CVE-2024-41178 via object_store (>=0.5.6, <=0.9.1)

objectstore CARGO version =0.5.6, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.4.0, =0.7.0, =0.0.1, =0.0.0, =12.0.0, =12.0.0, =12.0.0, =20.0.0, =38.0.0 - datafusion-expr 31.0.0 - datafusion-extra 0.0.2 and more Source cves: CVE-2024-41178 Source advisory: OSV:RUSTSEC-2024-0358...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +868 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.57)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q445-7M23-QRMW...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +868 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.57)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0357...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2024-40648 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-40648 Source advisory: OSV:GHSA-4QG4-CVH2-CRGG...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2024-40648 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-40648 Source advisory: OSV:RUSTSEC-2024-0356...

flowlang (>=0.1.6, <=0.1.8), lavendeux-parser (>=0.3.0, <=0.8.1) +2 more potentially affected by unknown CVE via js-sandbox (>=0.1.6, <=0.2.0-rc.1)

js-sandbox CARGO version =0.1.6, =0.1.6, =0.3.0, =0.1.0, =0.6.3 - wakflo-funx 0.0.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0403...

matrix-qrcode (0.3.0), matrix-sdk-base (>=0.5.0, <=0.5.1) +5 more potentially affected by CVE-2024-40640 via vodozemac (>=0.2.0, <=0.3.0)

vodozemac CARGO version =0.2.0, =0.5.0, =0.3.0, =0.4.0 - matrix-sdk-sled 0.1.0 - matrix-sdk-sql 0.1.0-beta.2 Source cves: CVE-2024-40640 Source advisory: OSV:GHSA-J8CM-G7R6-HFPQ...

@ibm/rse-api-for-zowe-cli (>=3.2.2, <=4.1.0), @zowe/zowe-explorer-api (>=2.13.0, <=2.15.0) potentially affected by CVE-2024-6833 via @zowe/cli (>=7.18.0, <=7.23.3)

@zowe/cli NPM version =7.18.0, =3.2.2, =2.13.0, =2.15.0 Source cves: CVE-2024-6833 Source advisory: OSV:GHSA-GHGQ-X6WC-6JR5...

matrix-qrcode (0.3.0), matrix-sdk-base (>=0.5.0, <=0.5.1) +5 more potentially affected by CVE-2024-40640 via vodozemac (>=0.2.0, <=0.3.0)

vodozemac CARGO version =0.2.0, =0.5.0, =0.3.0, =0.4.0 - matrix-sdk-sled 0.1.0 - matrix-sdk-sql 0.1.0-beta.2 Source cves: CVE-2024-40640 Source advisory: OSV:RUSTSEC-2024-0354...

@udecode/plate (>=36.0.0, <=36.0.9), @udecode/plate-serializer-docx (>=36.0.0, <=36.0.9) potentially affected by CVE-2024-40631 via @udecode/plate-media (36.0.0)

@udecode/plate-media NPM version 36.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @udecode/plate-media and may be impacted: - @udecode/plate =36.0.0, =36.0.0, =36.0.9 Source cves: CVE-2024-40631 Source advisory: OSV:GHSA-H3PQ-667X-R789...

@a-type/ui (>=0.8.17, <=1.2.3), @adminjs/design-system (>=3.0.0-beta.4, <=3.1.1) +427 more potentially affected by unknown CVE via prosemirror-model (>=1.0.1, <=1.21.3)

prosemirror-model NPM version =1.0.1, =0.8.17, =3.0.0-beta.4, =0.1.0, =0.0.1, =13.1.0, =10.4.0, =0.0.2, =3.0.0, =16.0.0, =0.0.1, =3.1.7, =11.0.6, =4.0.13, =73.4.4, =194.4.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-PROSEMIRRORMODEL-7838221...

01.webpack-study (1.0.0), 0226 (1.0.0) +3319 more potentially affected by CVE-2024-6485 via bootstrap (>=3.1.1, <=3.4.1)

bootstrap NPM version =3.1.1, =0.1.0, =4.13.7-rc4, =3.0.1, =3.0.4, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =0.0.2, =0.3.6, =0.4.35 and more Source cves: CVE-2024-6485 Source advisory: OSV:GHSA-VXMC-5X29-H64V...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +2 more potentially affected by CVE-2024-58363 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58363 Source advisory: OSV:GHSA-GH9F-6XM2-C4J2...

24social-ui (>=1.0.0, <=1.0.5), @90pixel/okr (0.1.0) +2134 more potentially affected by CVE-2024-39693 via next (>=13.3.1, <=13.4.20-canary.40)

next NPM version =13.3.1, =1.0.0, =0.1.23, =0.0.2, =1.0.0, =0.0.1, =0.1.0, =0.1.1, =1.1.2, =1.0.0, =0.1.6, =0.1.22 and more Source cves: CVE-2024-39693 Source advisory: OSV:GHSA-FQ54-2J52-JC42...

3abn (>=1.0.0, <=2.1.11), @2003scape/rsc-sounds (>=1.0.0, <=1.0.1) +379 more potentially affected by CVE-2024-21526 via speaker (>=0.0.10, <=0.5.5)

speaker NPM version =0.0.10, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21526 Source advisory: OSV:GHSA-W5FC-GJ3H-26RX...

08cms (1.0.0), @artdotstyle/filepix (>=1.0.10, <=1.0.11) +327 more potentially affected by CVE-2024-21523 via images (>=3.0.0, <=3.2.4)

images NPM version =3.0.0, =1.0.10, =1.1.2, =0.0.1, =0.1.0, =1.0.1, =1.4.0, =1.1.2, =1.1.8, =0.4.0, =0.6.2 and more Source cves: CVE-2024-21523 Source advisory: OSV:GHSA-VJPV-X8P9-7P85...

@persistr/cli (>=2.7.1, <=2.9.1), spidersharkcli (>=0.0.4, <=0.0.8) potentially affected by CVE-2024-21524 via node-stringbuilder (2.2.7)

node-stringbuilder NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-stringbuilder and may be impacted: - @persistr/cli =2.7.1, =0.0.4, =0.0.8 Source cves: CVE-2024-21524 Source advisory: OSV:GHSA-G533-XQ5W-JMF3...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +151 more potentially affected by CVE-2024-21521 via @discordjs/opus (>=0.1.0, <=0.8.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-21521 Source advisory: OSV:GHSA-43WQ-XRCM-3VGR...

@ascua/app (>=0.1.0, <=0.4.6), @itsfe/electron-bootstrap (>=1.0.0, <=1.0.1) +7 more potentially affected by CVE-2024-39698 via electron-updater (>=6.0.2, <=6.2.1)

electron-updater NPM version =6.0.2, =0.1.0, =1.0.0, =0.11.11-dev.1, =0.0.0-snapshot-20240316121210, =2024.4.146, =2024.10.110 Source cves: CVE-2024-39698 Source advisory: OSV:GHSA-9JXC-QJR9-VJXQ...

@angular-devkit/build-angular (>=18.0.0-next.4, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +64 more potentially affected by CVE-2024-38372 via undici (>=6.14.1, <=6.19.1)

undici NPM version =6.14.1, =18.0.0-next.4, =18.0.0-next.3, =1.2.0, =0.1.0, =2.1.0, =2.3.0, =1.1.1, =19.1.0, =10.0.20, =1.0.12, =2.1.1-dev.1717589072-346d1be72, =2.4.0-dev.1717589083-346d1be72, =2.4.0-dev.1724328261-ec9080b88 - @draftbot/discord.js 14.15.3 - @draftbot/rest 2.3.0 and more Source...

@directus/api (>=15.0.0, <=19.3.1), @meta-factory/cms (0.1.1) +6 more potentially affected by CVE-2024-39896 via directus (>=9.21.2, <=10.12.1)

directus NPM version =9.21.2, =15.0.0, =0.1.0, =1.2.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2024-39896 Source advisory: OSV:GHSA-JGF4-VWC3-R46V...

@directus/api (>=16.0.0, <=19.2.0), directus (>=10.9.0, <=10.11.2) +3 more potentially affected by CVE-2024-39895 via @directus/env (>=1.0.0, <=1.1.5)

@directus/env NPM version =1.0.0, =16.0.0, =10.9.0, =1.2.0, =10.10.4, =18.2.1-q1, =19.0.3-quantum.2 Source cves: CVE-2024-39895 Source advisory: OSV:GHSA-7HMH-PFRP-VCX4...

ayaka-model (0.2.0), ayaka-runtime (0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0, <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob 1.0.0-beta1 - icusegmenter 1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-74R5-G7VC-J2V2...

@meta-factory/cms (0.1.1), @wep2/editor-dev (1.0.0) +4 more potentially affected by CVE-2024-39701 via directus (9.26.0)

directus NPM version 9.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on directus and may be impacted: - @meta-factory/cms 0.1.1 - @wep2/editor-dev 1.0.0 - dbaas =0.1.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2024-39701 Sourc...

ayaka-model (0.2.0), ayaka-runtime (0.2.0) +26 more potentially affected by unknown CVE via zerovec (>=0.2.3, <=0.8.1)

zerovec CARGO version =0.2.3, =0.3.0, =0.6.0, =1.0.0-beta1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XRV3-JMCP-374J...

directus (>=10.9.1, <=10.9.2) potentially affected by CVE-2024-39699 via @directus/api (>=17.0.0, <=17.0.1)

@directus/api NPM version =17.0.0, =10.9.1, =10.9.2 Source cves: CVE-2024-39699 Source advisory: OSV:GHSA-8P72-RCQ4-H6PW...

apikit (>=0.1.0, <=0.2.0), apisdk (>=0.0.1, <=0.0.5) +138 more potentially affected by unknown CVE via opentelemetry_api (>=0.1.0, <=0.20.0)

opentelemetryapi CARGO version =0.1.0, =0.1.0, =0.0.1, =0.8.1, =0.3.0, =4.0.15, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.4.0-rc.1, =0.5.0, =0.1.0, =6.6.4, =0.6.1, =0.8.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0387...

async-mongodb-session (2.1.0), chord-action (>=0.1.13, <=0.1.16) +7 more potentially affected by CVE-2024-6382 via mongodb (>=2.0.0-alpha, <=2.6.1)

mongodb CARGO version =2.0.0-alpha, =0.1.13, =0.1.13, =0.1.13, =0.2.1, =0.3.2 - mongodb-gridfs 0.2.0 - rocketauthifier 0.111.0 - sqlite2mongo 0.3.0 Source cves: CVE-2024-6382 Source advisory: OSV:GHSA-32JF-H775-G29H...

@nokecy/qc-ui (>=0.4.7, <=0.9.6), ag-grid-charts-enterprise (32.0.0) +3 more potentially affected by CVE-2024-39001 via ag-grid-community (32.0.0)

ag-grid-community NPM version 32.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ag-grid-community and may be impacted: - @nokecy/qc-ui =0.4.7, =0.9.6 - ag-grid-charts-enterprise 32.0.0 - ag-grid-enterprise 32.0.0 - ag-grid-react 32.0.0 -...

@ag-grid-enterprise/charts-enterprise (>=31.1.0, <=31.3.3) potentially affected by CVE-2024-39001 via @ag-grid-enterprise/charts (>=31.1.1, <=31.3.3)

@ag-grid-enterprise/charts NPM version =31.1.1, =31.1.0, =31.3.3 Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

@ag-grid-enterprise/charts-enterprise (32.0.0) potentially affected by CVE-2024-39001 via @ag-grid-enterprise/charts (32.0.0)

@ag-grid-enterprise/charts NPM version 32.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @ag-grid-enterprise/charts and may be impacted: - @ag-grid-enterprise/charts-enterprise 32.0.0 Source cves: CVE-2024-39001 Source advisory:...

@crystaldesign/diva-backoffice (>=24.6.0-rc.1, <=24.7.3), @steedos-widgets/ag-grid (>=3.6.2-beta.9, <=6.3.11-beta.13) +4 more potentially affected by CVE-2024-39001 via ag-grid-enterprise (>=31.0.0, <=31.3.2)

ag-grid-enterprise NPM version =31.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =0.1.65, =31.0.0, =0.0.22, =0.0.38 - react-resuable-table 1.0.0 Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

@nokecy/qc-ui (>=0.4.7, <=0.9.6) potentially affected by CVE-2024-39001 via ag-grid-enterprise (32.0.0)

ag-grid-enterprise NPM version 32.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ag-grid-enterprise and may be impacted: - @nokecy/qc-ui =0.4.7, =0.9.6 Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

@cdmx/wappler_ag_grid (>=1.2.5, <=1.7.8), @cosmotech/ui (>=8.0.0, <=9.0.0) +20 more potentially affected by CVE-2024-39001 via ag-grid-community (>=31.0.0, <=31.3.2)

ag-grid-community NPM version =31.0.0, =1.2.5, =8.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =2.7.9, =31.0.0, =31.1.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =0.1.65, =0.1.72 and more Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...