@directus/api (>=20.0.0-rc.0, <=23.1.0) potentially affected by CVE-2025-24353 via directus (>=11.0.0, <=11.1.2)

directus NPM version =11.0.0, =20.0.0-rc.0, =23.1.0 Source cves: CVE-2025-24353 Source advisory: OSV:GHSA-PMF4-V838-29HG...

@fibus-digital/sluby (>=0.4.0, <=0.4.14), @hexancore/core (>=0.15.0, <=0.16.0) +6 more potentially affected by CVE-2025-24033 via @fastify/multipart (>=8.0.0, <=8.3.0)

@fastify/multipart NPM version =8.0.0, =0.4.0, =0.15.0, =8.0.0-canary.1293, =8.0.0-canary.1293, =8.0.0-canary.1293, =0.0.1, =4.50.7-test.1, =0.0.1, =0.14.0 Source cves: CVE-2025-24033 Source advisory: OSV:GHSA-27C6-MCXV-X3FH...

@andesite-lab/andesite-core (>=1.60.2, <=1.62.0), @dzangolab/fastify-s3 (0.80.0) +6 more potentially affected by CVE-2025-24033 via @fastify/multipart (>=9.0.0, <=9.0.2)

@fastify/multipart NPM version =9.0.0, =1.60.2, =0.4.15, =1.0.36, =1.91.0, =5.0.0-beta.36, =0.15.0, =0.1.10, =0.1.15 Source cves: CVE-2025-24033 Source advisory: OSV:GHSA-27C6-MCXV-X3FH...

@aulazero/task (>=0.0.1, <=0.7.2), @aulazero/task-2 (>=2.0.1, <=2.0.5) +81 more potentially affected by CVE-2025-29049 via mathlive (>=0.25.0, <=0.103.0)

mathlive NPM version =0.25.0, =0.0.1, =2.0.1, =1.17.3, =0.2.6, =0.0.1, =0.1.0, =0.1.0, =1.20.0, =11.25.1, =1.0.0, =0.1.0, =0.1.0, =5.12.1, =8.1.0 and more Source cves: CVE-2025-29049 Source advisory: OSV:GHSA-QWJ6-Q94F-8425...

2002-app-demo (>=1.0.0, <=1.2.1), 3.21lianxi (1.0.0) +1979 more potentially affected by CVE-2025-22150 via undici (>=4.5.0, <=5.28.4)

undici NPM version =4.5.0, =1.0.0, =0.2.1, =0.5.0, =1.0.0, =0.1.23, =0.0.24, =0.0.0, =0.7.1, =3.2.4, =1.0.0, =1.0.0-beta.15, =1.0.0 and more Source cves: CVE-2025-22150 Source advisory: OSV:GHSA-C76H-2CCP-4975...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +1863 more potentially affected by CVE-2025-22150 via undici (>=6.0.0, <=6.21.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =1.0.0, =1.0.0, =0.1.5-alpha.0, =0.1.6 and more Source cves: CVE-2025-22150 Source advisory: OSV:GHSA-C76H-2CCP-4975...

@apt-repositories/generator (>=1.0.1-dev.120, <=1.0.2-dev.39), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.4) +58 more potentially affected by CVE-2025-22150 via undici (>=7.0.0, <=7.2.2)

undici NPM version =7.0.0, =1.0.1-dev.120, =1.6.3, =24.0.0, =12.0.0, =3.0.0, =0.92.0-alpha-20241217175715-33d88539e49f1b72d6dd1c7e5f8d3a0c16e8dcb9, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.19.0-alpha.4, =2.38.0 and more Source cves: CVE-2025-22150...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +49 more potentially affected by CVE-2025-24010 +1 more via vite (>=6.0.0, <=6.0.8)

vite NPM version =6.0.0, =0.2.0, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =2.9.2, =2.9.2, =2.10.3 and more Source cves:...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +433 more potentially affected by CVE-2025-24010 +1 more via vite (>=5.0.0, <=5.4.11)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-24010, CVE-2025-24360 Source advisory: OSV:GHSA-VG6X-RCGG-RJX6...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +506 more potentially affected by CVE-2025-24010 +1 more via vite (>=4.0.0, <=4.5.5)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2025-24010, CVE-2025-24360 Source advisory: OSV:GHSA-VG6X-RCGG-RJX6...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) potentially affected by unknown CVE via platform-browser-dynamic (0.0.1-security)

platform-browser-dynamic NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser-dynamic and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 Source cves: unknown...

@0xgg/echomd (>=1.0.0, <=1.0.4), @21st-night/analytics-web (>=0.65.0, <=0.73.8) +1179 more potentially affected by CVE-2025-23207 via katex (>=0.12.0, <=0.16.19)

katex NPM version =0.12.0, =1.0.0, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.53.0, =0.48.0, =0.53.0, =0.16.0, =0.49.0, =0.76.0, =1.0.7, =0.3.0, =0.6.2 and more Source cves: CVE-2025-23207 Source advisory: OSV:GHSA-CG87-WMX4-V546...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +407 more potentially affected by CVE-2025-23206 via aws-cdk-lib (>=2.0.0, <=2.176.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =3.1.25 and more Source cves: CVE-2025-23206 Source advisory:...

@tinyjs/tiny (1.6.6), @trezor/connect (>=9.0.0-beta.1, <=9.0.7) +2 more potentially affected by CVE-2024-36751 via parse-uri (>=1.0.3, <=1.0.7)

parse-uri NPM version =1.0.3, =9.0.0-beta.1, =9.0.0-beta.1, =0.2.0, =0.6.0 Source cves: CVE-2024-36751 Source advisory: OSV:GHSA-6FX8-H7JM-663J...

acct (>=0.2.0, <=0.5.0), acid-store (>=0.8.0, <=0.14.2) +277 more potentially affected by CVE-2025-5791 via users (>=0.8.1, <=0.11.0)

users CARGO version =0.8.1, =0.2.0, =0.8.0, =0.4.0, =4.1.0, =0.1.0, =1.0.0, =0.1.0, =1.1.0, =0.3.0, =0.3.0, =0.3.0, =0.9.0, =0.9.0, =0.1.0, =0.1.1 and more Source cves: CVE-2025-5791 Source advisory: OSV:RUSTSEC-2025-0040...

4casterschemas (>=1.0.0, <=1.0.1), @3kles/3kles-coremongodb (>=2.1.5, <=2.1.6) +113 more potentially affected by CVE-2025-23061 via mongoose (>=8.0.0, <=8.9.4)

mongoose NPM version =8.0.0, =1.0.0, =2.1.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =3.13.0, =1.1.9, =2.0.0, =2.0.7 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +111 more potentially affected by CVE-2025-23061 via mongoose (>=7.0.0, <=7.8.3)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =1.0.0, =1.0.6-beta.0, =0.2.0-alpha.1, =0.2.0-alpha.0, =0.0.0, =1.0.2, =1.0.0, =7.6.10, =7.8.3 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +414 more potentially affected by CVE-2025-23061 via mongoose (>=6.0.1, <=6.13.5)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.1.16 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.a3b3f47e2c, <=1.24.0-rc.3)

@lodestar/reqresp NPM version =1.3.0-dev.a3b3f47e2c, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.24.0-rc.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M9C9-MC2H-9WJW...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.24.0-rc.3) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.a3b3f47e2c, <=1.24.0-rc.3)

@lodestar/reqresp NPM version =1.3.0-dev.a3b3f47e2c, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.24.0-rc.3 Source cves: unknown CVE Source advisory: OSV:GHSA-53RV-HCVM-RPP9...

accountnovafi (>=0.1.0, <=0.2.0), accountnovafi1 (0.1.0) +1297 more potentially affected by unknown CVE via libsecp256k1 (>=0.1.3, <=0.7.2)

libsecp256k1 CARGO version =0.1.3, =0.1.0, =0.1.0, =1.0.5, =0.0.1, =0.0.1, =0.0.0-alpha, =0.0.1-alpha.1, =0.1.0, =0.0.1, =0.0.3 - anchor-client 0.26.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0161...

csgo-gsi (>=0.1.0, <=0.3.0), csgo-gsi2 (>=0.3.1, <=0.3.4) +10 more potentially affected by unknown CVE via registry (1.3.0)

registry CARGO version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on registry and may be impacted: - csgo-gsi =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.9.0, =0.1.0+winfsp-1.11, =0.0.0, =0.2.0, =0.2.0, =0.4.1 Source cves: unknown CVE Source advisory:...

arci-urdf-viz (>=0.0.7, <=0.1.0), asp_lib (>=0.1.0, <=0.1.1) +97 more potentially affected by unknown CVE via fast-float (0.2.0)

fast-float CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - arci-urdf-viz =0.0.7, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.13.0, =0.19.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.3.2, =0.20.2 and more...

gpt-cli (>=0.0.13, <=0.0.20), htmlentity (>=0.1.0, <=1.2.0) +5 more potentially affected by unknown CVE via grcov (>=0.5.15, <=0.8.13)

grcov CARGO version =0.5.15, =0.0.13, =0.1.0, =0.2.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0005...

@alell/azure-pipelines-task-jsonpath-plus (1.1.3), @appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11) +260 more potentially affected by CVE-2025-1302 via jsonpath-plus (>=10.0.0, <=10.2.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.4 and more Source cves: CVE-2025-1302 Source advisory: SNYK:JS-JSONPATHPLUS-8719585...

unicef-hope-aurora (>=1.7.0.dev639, <=1.7.0rc1) potentially affected by CVE-2025-13030 via django-mdeditor (0.1.20)

django-mdeditor PYPI version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on django-mdeditor and may be impacted: - unicef-hope-aurora =1.7.0.dev639, =1.7.0rc1 Source cves: CVE-2025-13030 Source advisory: SNYK:PYTHON-DJANGOMDEDITOR-8630926...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2024-52813 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-52813 Source advisory: OSV:GHSA-R5VF-WF4H-82GG...

basejmp (0.1.0), clarinet (>=0.2.0, <=0.10.0) +15 more potentially affected by CVE-2025-21620 via deno_fetch (>=0.2.0, <=0.123.0)

denofetch CARGO version =0.2.0, =0.2.0, =1.4.2, =0.1.0, =0.55.0, =0.1.0, =1.12.2, =0.1.1, =0.2.0-rc1, =0.4.1, =0.4.1, =0.4.1, =0.4.2 and more Source cves: CVE-2025-21620 Source advisory: OSV:GHSA-F27P-CMV8-XHM6...

1ocalendar (1.0.0), 24social-ui (>=1.0.0, <=1.0.5) +2609 more potentially affected by CVE-2024-56332 via next (>=13.0.0, <=13.5.7-canary.37)

next NPM version =13.0.0, =1.0.0, =1.0.51, =1.6.1, =0.5.5, =0.1.23, =2.0.0-rc19, =0.2.47, =0.4.37, =1.3.2, =0.0.2, =1.0.0, =0.0.1, =0.0.6 and more Source cves: CVE-2024-56332 Source advisory: OSV:GHSA-7M27-7GHC-44W9...

@abuaiman/abujunainah (1.1.4), @abuaiman/spy (1.1.4) +298 more potentially affected by CVE-2024-56332 via next (>=15.0.0, <=15.1.1)

next NPM version =15.0.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =1.0.19, =0.1.0, =0.0.4, =0.1.0, =0.1.11, =1.0.0, =0.0.1-alpha, =0.0.4-alpha - @benimaru/ahgas 1.1.4 - @benimaru/asduq 1.1.4 - @benimaru/balon 1.1.4 and more Source cves: CVE-2024-56332 Source advisory...

lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2025-21610 via trix (>=2.0.8, <=2.0.10)

trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2025-21610 Source advisory: OSV:GHSA-J386-3444-QGWG...

xous-ipc (0.8.0) potentially affected by unknown CVE via xous (0.8.3)

xous CARGO version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on xous and may be impacted: - xous-ipc 0.8.0 Source cves: unknown CVE Source advisory: OSV:GHSA-GV7F-5QQH-VXFX...

@better-auth/cli (>=1.0.0-canary.2, <=1.1.5), @vxrn/better-auth (>=1.1.368, <=1.1.416) potentially affected by CVE-2024-56734 +1 more via better-auth (>=1.0.0, <=1.1.5)

better-auth NPM version =1.0.0, =1.0.0-canary.2, =1.1.368, =1.1.416 Source cves: CVE-2024-56734, CVE-2025-27143 Source advisory: OSV:GHSA-8JHW-6PJJ-8723...

data-agora (0.1.1), dtx (>=0.31.0, <=0.34.0) +9 more potentially affected by CVE-2024-10044 via fastchat (0.1.0)

fastchat PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastchat and may be impacted: - data-agora 0.1.1 - dtx =0.31.0, =0.2.0, =0.18.3, =0.0.2, =0.4.0, =0.0.1, =0.1.3, =0.1.0, =0.1.20 Source cves: CVE-2024-10044 Source advisory:...

clipass (0.1.0), clipperd (>=0.1.1, <=0.1.5) +13 more potentially affected by unknown CVE via magic-crypt (3.1.13)

magic-crypt CARGO version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on magic-crypt and may be impacted: - clipass 0.1.0 - clipperd =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =1.0.0, =1.0.1, =0.1.0, =0.1.0, =0.6.1, =0.1.0, =0.1.4 Source...

actinium226-librespot-playback (>=0.4.3-updated, <=0.4.3), aipster (>=1.0.0, <=2.0.0) +502 more potentially affected by unknown CVE via glib (>=0.15.12, <=0.19.9)

glib CARGO version =0.15.12, =0.4.3-updated, =1.0.0, =0.1.0, =0.2.9, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.0.9, =0.8.0, =0.8.0, =0.8.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WRW7-89JP-8Q8G...

butterfly-fuzz (>=0.1.0, <=0.2.2), feroxfuzz (>=0.1.0-rc.0, <=1.0.0-rc.10) +5 more potentially affected by unknown CVE via libafl (>=0.1.0, <=0.10.1)

libafl CARGO version =0.1.0, =0.1.0, =0.1.0-rc.0, =0.1.0, =0.6.0, =0.6.0, =0.3.1, =0.1.0, =0.10.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F7QJ-V3VP-4856...

dbs-arch (>=0.2.2, <=0.2.3), dbs-boot (>=0.3.0, <=0.4.0) +8 more potentially affected by unknown CVE via kvm-ioctls (>=0.6.1, <=0.18.0)

kvm-ioctls CARGO version =0.6.1, =0.2.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.29, =0.1.0, =2.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-3QX8-RV27-J6GP...

xous-ipc (0.8.0) potentially affected by unknown CVE via xous (0.8.3)

xous CARGO version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on xous and may be impacted: - xous-ipc 0.8.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0431...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @ai16z/client-telegram (>=0.1.1, <=0.1.4-alpha.3) +133 more potentially affected by CVE-2024-56334 via systeminformation (>=5.0.6, <=5.23.6)

systeminformation NPM version =5.0.6, =1.17.6-next.0, =0.1.1, =0.1.1, =0.0.1-2.1-beta-provision, =1.0.10, =7.0.1, =7.0.1, =6.1.4, =6.1.4, =6.1.4, =6.1.4, =7.0.1, =6.1.4, =6.1.4, =6.1.4, =13.0.0 and more Source cves: CVE-2024-56334 Source advisory: OSV:GHSA-CVV5-9H9W-QP2M...

@volpe/astro-utils (>=0.0.1, <=0.0.20), astro-npm-loader (>=0.0.1, <=0.1.2) potentially affected by CVE-2024-56159 via astro (5.0.0-beta.5)

astro NPM version 5.0.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on astro and may be impacted: - @volpe/astro-utils =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2024-56159 Source advisory: OSV:GHSA-49W6-73CW-CHJR...

@bookshop/browser (3.11.0-rc.0), @bookshop/generate (3.11.0-rc.0) +24 more potentially affected by CVE-2024-56159 via astro (>=4.0.3, <=4.16.17)

astro NPM version =4.0.3, =0.40.5, =0.38.0, =0.38.0, =2.8.4, =0.2.0, =0.0.0-dev-20231211183354, =0.0.3, =0.0.3, =0.0.5, =0.0.1, =1.0.2, =1.0.9 - @thewebforge/astro-og-images 3.0.0 and more Source cves: CVE-2024-56159 Source advisory: OSV:GHSA-49W6-73CW-CHJR...

rcc-solana (0.1.0) potentially affected by unknown CVE via spl-token-swap (3.0.0)

spl-token-swap CARGO version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on spl-token-swap and may be impacted: - rcc-solana 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0426...

cvars-console-fyrox (>=0.1.0, <=0.5.0), fyrox (>=0.24.0, <=0.27.1) +7 more potentially affected by unknown CVE via fyrox-core (>=0.19.0, <=0.28.1)

fyrox-core CARGO version =0.19.0, =0.1.0, =0.24.0, =0.1.0, =0.3.0, =0.26.0, =0.15.0, =0.11.0, =0.12.0, =0.14.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0435...

butterfly-fuzz (>=0.1.0, <=0.2.2), feroxfuzz (>=0.1.0-rc.0, <=1.0.0-rc.10) +5 more potentially affected by unknown CVE via libafl (>=0.1.0, <=0.10.1)

libafl CARGO version =0.1.0, =0.1.0, =0.1.0-rc.0, =0.1.0, =0.6.0, =0.6.0, =0.3.1, =0.1.0, =0.10.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0424...

@boostercloud/framework-provider-azure-infrastructure (>=3.1.0, <=3.4.4), @cdktf/cli-core (>=0.20.8, <=0.21.0-pre.151) +3 more potentially affected by unknown CVE via jsii (>=5.4.12, <=5.4.31)

jsii NPM version =5.4.12, =3.1.0, =0.20.8, =5.12.7, =0.20.8, =1.26.0, =1.29.0 Source cves: unknown CVE Source advisory: OSV:GHSA-M56H-5XX3-2JC2...

@bookshop/browser (3.11.0-rc.0), @bookshop/generate (3.11.0-rc.0) +24 more potentially affected by CVE-2024-56140 via astro (>=4.0.3, <=4.16.16)

astro NPM version =4.0.3, =0.40.5, =0.38.0, =0.38.0, =2.8.4, =0.2.0, =0.0.0-dev-20231211183354, =0.0.3, =0.0.3, =0.0.5, =0.0.1, =1.0.2, =1.0.9 - @thewebforge/astro-og-images 3.0.0 and more Source cves: CVE-2024-56140 Source advisory: OSV:GHSA-C4PW-33H3-35XW...

@ccci/micro-server (>=1.0.57, <=1.0.132), @kevinkidd/aicommit (1.0.3) +6 more potentially affected by CVE-2024-21548 via bun (>=1.0.2, <=1.1.29)

bun NPM version =1.0.2, =1.0.57, =1.0.0, =0.0.0, =0.0.2, =0.0.19-beta.11, =0.0.3, =0.0.4, =0.0.7 Source cves: CVE-2024-21548 Source advisory: OSV:GHSA-V9MX-4PQQ-H232...

ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)

ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: OSV:MAL-2024-11879...

@agent_z/egg (>=1.0.0, <=1.0.2), @ccci/micro-server (>=1.0.57, <=1.0.132) +12 more potentially affected by CVE-2024-21548 via bun (>=0.5.9, <=1.1.29)

bun NPM version =0.5.9, =1.0.0, =1.0.57, =1.0.0, =0.0.0, =0.0.2, =0.0.19-beta.11, =0.0.3, =0.0.2, =0.0.3, =0.0.55, =0.0.4, =0.0.7 Source cves: CVE-2024-21548 Source advisory: SNYK:JS-BUN-8499549...