joplin (>=2.8.1, <=2.13.2) potentially affected by CVE-2024-53268 via @joplin/lib (>=2.8.1, <=2.13.4)

@joplin/lib NPM version =2.8.1, =2.8.1, =2.13.2 Source cves: CVE-2024-53268 Source advisory: SNYK:JS-JOPLINLIB-15048153...

deno (>=1.3.1, <=1.31.3), easyops_deno (>=1.12.2, <=1.13.0) potentially affected by CVE-2024-32468 via deno_doc (>=0.1.5, <=0.57.0)

denodoc CARGO version =0.1.5, =1.3.1, =1.12.2, =1.13.0 Source cves: CVE-2024-32468 Source advisory: OSV:GHSA-QQWR-J9MM-FHW6...

@alexaegis/svelte-config (>=0.9.2, <=0.11.6), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=1.1.3) +7 more potentially affected by CVE-2024-53261 via @sveltejs/kit (>=2.0.0, <=2.8.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.0-52469075, =10.0.1, =0.0.1-alpha.26, =0.0.10, =1.0.2, =1.0.3 Source cves: CVE-2024-53261 Source advisory: OSV:GHSA-RJJV-87MX-6X3H...

@alexaegis/svelte-config (>=0.9.2, <=0.11.6), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=1.1.3) +7 more potentially affected by CVE-2024-53262 via @sveltejs/kit (>=2.0.0, <=2.8.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.0-52469075, =10.0.1, =0.0.1-alpha.26, =0.0.10, =1.0.2, =1.0.3 Source cves: CVE-2024-53262 Source advisory: OSV:GHSA-MH2X-FCQH-FMQV...

free-mcp-excel (>=0.1.2, <=0.1.3) potentially affected by CVE-2024-53924 via pycel (1.0.0b30)

pycel PYPI version 1.0.0b30 is affected by a known vulnerability. The following packages have a transitive dependency on pycel and may be impacted: - free-mcp-excel =0.1.2, =0.1.3 Source cves: CVE-2024-53924 Source advisory: SNYK:PYTHON-PYCEL-10050519...

@alexlit/config-markdownlint (2.8.0), @cluenar/tools (>=1.0.0, <=2.0.1) +57 more potentially affected by unknown CVE via smol-toml (>=1.1.2, <=1.3.0)

smol-toml NPM version =1.1.2, =1.0.0, =3.0.0, =4.2.1-alpha.1, =0.0.0, =1.1.0, =0.2.7, =1.0.10, =7.6.4-next.39, =7.6.4-next.39, =7.6.4-next.39, =7.6.4-next.39, =7.6.4-next.39, =9.0.0-canary.257 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PQHP-25J4-6HQ9...

acia (>=0.3.0, <=0.4.0), ai-parrot (>=0.22.0, <=0.24.0) +239 more potentially affected by CVE-2024-30896 via influxdb-client (>=1.3.0, <=1.50.0)

influxdb-client PYPI version =1.3.0, =0.3.0, =0.22.0, =0.0.7, =1.0.0rc1, =0.1.0, =1.0.8, =0.0.1, =0.1.6, =0.1.0a1, =1.0.37, =0.1.0, =0.5.0, =0.12.0, =1.6.0b0, =1.14.1 and more Source cves: CVE-2024-30896 Source advisory: SNYK:PYTHON-INFLUXDBCLIENT-8422793...

cryptoballot (>=0.2.0, <=0.3.1), secret-sharing-cli (>=0.1.0, <=0.1.2) +1 more potentially affected by unknown CVE via sharks (>=0.3.3, <=0.4.3)

sharks CARGO version =0.3.3, =0.2.0, =0.1.0, =0.1.0, =0.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-JP37-5QHW-MFFW...

@1023-ventures/vega-core (>=0.5.0, <=0.6.2), @copart/ops-tool-kit (>=1.11.4-alpha.2, <=1.12.13-alpha.1) +44 more potentially affected by CVE-2024-11023 via firebase (>=10.0.0, <=10.8.1)

firebase NPM version =10.0.0, =0.5.0, =1.11.4-alpha.2, =0.0.3-3, =0.0.7-20, =0.0.1-dev.1, =1.0.0, =1.0.0, =0.5.0, =0.0.1, =8.18.0, =1.0.10, =1.0.9, =0.0.2, =1.0.39, =1.0.24, =1.0.128 and more Source cves: CVE-2024-11023 Source advisory: OSV:GHSA-3WF4-68GX-MPH8...

airframe_recovery_bundle (>=1.0.0, <=1.0.2), cryptoballot (>=0.2.0, <=0.3.1) +11 more potentially affected by unknown CVE via sharks (>=0.3.3, <=0.5.0)

sharks CARGO version =0.3.3, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.7.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0398...

@2digits/eslint-config (>=2.6.0, <=2.7.0), @2digits/eslint-plugin (>=2.2.9, <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (0.1.0)

@eslint/plugin-kit NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys-cdylib (>=0.3.0, <=0.3.1) potentially affected by unknown CVE via libz-rs-sys (>=0.1.1, <=0.3.1)

libz-rs-sys CARGO version =0.1.1, =1.0.29, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

byterag-core (0.3.0), byterag-ffi (0.3.0) +8 more potentially affected by unknown CVE via s2n-tls (>=0.0.6, <=0.3.1)

s2n-tls CARGO version =0.0.6, =0.2.0-beta, =0.2.0-beta, =0.1.0, =1.18.0, =0.18.2, =0.18.2, =0.0.6, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RP9H-RF7G-HWGR...

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0401...

difftastic (>=0.29.1, <=0.52.0), difftastic-lib (>=0.0.1, <=0.0.2) +4 more potentially affected by unknown CVE via mimalloc (>=0.1.28, <=0.1.37)

mimalloc CARGO version =0.1.28, =0.29.1, =0.0.1, =0.1.6, =0.17.0-alpha.4, =0.15.0, =0.16.0-alpha.3, =0.18.1 Source cves: unknown CVE Source advisory: OSV:GHSA-G23H-7VF9-XC25...

matrix-react-sdk (>=3.102.0-rc.0, <=3.114.0) potentially affected by CVE-2024-50336 via matrix-js-sdk (>=34.0.0, <=34.9.0-rc.0)

matrix-js-sdk NPM version =34.0.0, =3.102.0-rc.0, =3.114.0 Source cves: CVE-2024-50336 Source advisory: OSV:GHSA-XVG8-M4X3-W6XR...

hotg-rune-runtime (>=0.11.0, <=0.11.3), hotg-rune-wasm3-runtime (>=0.6.0, <=0.10.0) +7 more potentially affected by CVE-2024-27529 via wasm3 (>=0.1.3, <=0.3.1)

wasm3 CARGO version =0.1.3, =0.11.0, =0.6.0, =0.7.0, =0.4.0, =0.2.0, =0.0.1, =0.16.0, =0.15.0, =0.19.0 Source cves: CVE-2024-27529 Source advisory: OSV:GHSA-FMQ6-4W57-2W3V...

1uphealth-provider-search (>=0.1.0, <=0.3.0), 20190403-utils (1.0.0) +6905 more potentially affected by CVE-2024-21538 via cross-spawn (>=6.0.0, <=6.0.5)

cross-spawn NPM version =6.0.0, =0.1.0, =0.1.0, =0.1.4, =0.1.0, =1.0.0-beta.1, =0.1.1, =0.1.72, =9.0.0, =3.0.0, =1.0.0, =1.0.3 - @352inc/react-scripts 2.0.5-custom-6 and more Source cves: CVE-2024-21538 Source advisory: OSV:GHSA-3XGQ-45JJ-V275...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14298 more potentially affected by CVE-2024-21538 via cross-spawn (>=7.0.0, <=7.0.3)

cross-spawn NPM version =7.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0....

@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.9.0-rc.0) +17 more potentially affected by CVE-2024-51434 via froala-editor (>=4.0.0, <=4.2.2)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =26.2.3, =26.2.3, =14.0.0-109224, =14.0.0-109224, =2.0.2, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.2.2 - aurelia2-froala-editor 1.0.0 - froalaadmin 4.0.7 and more Source cves: CVE-2024-51434 Source advisory: OSV:GHSA-549P-5C7F-C5P4...

@casablanca-css/core (0.2.0), @nuxtjs/device (>=3.2.0, <=3.2.2) +4 more potentially affected by CVE-2024-51757 via happy-dom (>=15.0.0, <=15.7.4)

happy-dom NPM version =15.0.0, =3.2.0, =6.0.1, =4.1.4, =5.1.4, =1.1.78, =1.1.79 Source cves: CVE-2024-51757 Source advisory: OSV:GHSA-96G7-G7G9-JXW8...

gpiocdev (>=0.4.3, <=0.7.0), gpiocdev-embedded-hal (0.1.0) +1 more potentially affected by CVE-2024-51756 via cap-primitives (3.0.0)

cap-primitives CARGO version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cap-primitives and may be impacted: - gpiocdev =0.4.3, =0.16.0, =0.16.3 Source cves: CVE-2024-51756 Source advisory: OSV:GHSA-HXF5-99XG-86HW...

gpiocdev (>=0.4.3, <=0.7.0), gpiocdev-embedded-hal (0.1.0) +1 more potentially affected by CVE-2024-51756 via cap-std (3.0.0)

cap-std CARGO version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cap-std and may be impacted: - gpiocdev =0.4.3, =0.16.0, =0.16.3 Source cves: CVE-2024-51756 Source advisory: OSV:GHSA-HXF5-99XG-86HW...

gpiocdev (>=0.4.3, <=0.7.0), gpiocdev-embedded-hal (0.1.0) +1 more potentially affected by CVE-2024-51756 via cap-primitives (3.0.0)

cap-primitives CARGO version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cap-primitives and may be impacted: - gpiocdev =0.4.3, =0.16.0, =0.16.3 Source cves: CVE-2024-51756 Source advisory: OSV:RUSTSEC-2024-0445...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-48050 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-48050 Source advisory: SNYK:PYTHON-AGENTSCOPE-8344260...

@0xgg/echomd (>=1.0.0, <=1.0.4), @accelbyte/widgets (>=0.2.0-beta.9, <=0.2.10) +858 more potentially affected by CVE-2024-48910 via dompurify (>=2.0.0, <=2.4.1)

dompurify NPM version =2.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.13, =6.2.3, =6.4.3, =0.0.2-next.4, =0.1.0, =1.0.0, =0.0.18, =6.8.0, =9.3.14, =9.5.4 and more Source cves: CVE-2024-48910 Source advisory: OSV:GHSA-P3VF-V8QC-CWCR...

arci-urdf-viz (>=0.0.7, <=0.1.0), asp_lib (>=0.1.0, <=0.1.1) +97 more potentially affected by unknown CVE via fast-float (0.2.0)

fast-float CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - arci-urdf-viz =0.0.7, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.13.0, =0.19.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.3.2, =0.20.2 and more...

bounded-prescience (0.0.3), chainer-chemistry (0.7.1) +21 more potentially affected by CVE-2024-48206 via chainer (>=6.0.0, <=7.8.1)

chainer PYPI version =6.0.0, =0.1.0, =0.2.0, =0.3.0, =0.0.1, =0.1.0, =0.6.1, =0.2.0, =0.6.0.post1, =1.3.1rc2, =2024.0.0, =2024.0.1 and more Source cves: CVE-2024-48206 Source advisory: SNYK:PYTHON-CHAINER-8340635...

10minions-engine (>=0.0.1, <=0.0.4), @0xd541ecb3/byte-babe (>=1.0.0, <=1.2.1) +509 more potentially affected by CVE-2024-7774 via langchain (>=0.0.11, <=0.2.10)

langchain NPM version =0.0.11, =0.0.1, =1.0.0, =0.1.4, =0.0.11, =0.0.0, =0.0.2-alpha, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =2.0.68, =0.0.2, =0.1.0, =0.1.4 - @builderbot-plugins/free-gpt 0.0.6-alpha.0 and more Source cves: CVE-2024-7774 Source advisory: OSV:GHSA-HC5W-C9F8-9CC4...

@aerocorp/cli (7.0.5), @aj-archipelago/cortex (>=1.1.7, <=1.3.16) +365 more potentially affected by CVE-2024-7042 via @langchain/community (>=0.0.15, <=0.3.2)

@langchain/community NPM version =0.0.15, =1.1.7, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =0.0.1, =0.0.2, =0.1.0, =2.0.0-next.2, =1.0.0-alpha.0, =0.2.13-alpha.0, =0.0.28, =0.0.11, =0.0.18 and more Source cves: CVE-2024-7042 Source advisory: OSV:GHSA-6M59-8FMV-M5F9...

@augmt/request-header-parser-microservice (0.2.4), @bb-cli/bb (>=2.3.0, <=2.11.0) +265 more potentially affected by CVE-2020-26311 via useragent (>=2.0.0, <=2.2.1)

useragent NPM version =2.0.0, =2.3.0, =2.9.0, =8.0.0-beta.0, =1.0.0, =0.0.1, =1.0.0, =3.1.0, =10.3.3, =0.0.2, =0.0.0, =1.0.4, =1.0.6, =1.0.24 - @criollapp/config 1.0.23 and more Source cves: CVE-2020-26311 Source advisory: OSV:GHSA-MGFV-M47X-4WQP...

asksuite-core (>=1.0.93, <=2.32.83), machinepack-knwl (1.0.0) potentially affected by CVE-2020-26306 via knwl.js (1.0.2)

knwl.js NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on knwl.js and may be impacted: - asksuite-core =1.0.93, =2.32.83 - machinepack-knwl 1.0.0 Source cves: CVE-2020-26306 Source advisory: OSV:GHSA-68QG-G787-3RP5...

7ghost (>=4.11.16, <=4.11.46), @abhilashgoswami/block-text (>=0.0.6, <=0.0.7) +231 more potentially affected by CVE-2020-26303 via insane (>=2.4.0, <=2.6.2)

insane NPM version =2.4.0, =4.11.16, =0.0.6, =0.0.8, =8.3.28-ST.0, =0.2.0-beta.0, =0.0.2-canary.1.10.0, =2.35.0, =14.42.1-canary.1016.19978.0, =0.1.0, =22.0.0-rc.1, =0.1.0, =1.9.3, =0.1.0, =0.13.85 and more Source cves: CVE-2020-26303 Source advisory: OSV:GHSA-W455-MFQ9-HF74...

@greenhousegames/firebase-reporting-jquery (0.1.0), @maxdome/component-common-styles (2.26.0) +22 more potentially affected by CVE-2020-26304 via foundation-sites (>=6.2.0, <=6.3.1)

foundation-sites NPM version =6.2.0, =4.0.0-beta.2, =0.0.1, =1.0.0-dev.20161219T192728Z.df3de96, =0.0.1, =0.0.0-semantically-released, =0.5010.0, =1.0.0, =0.8.0, =0.14.0, =0.0.12, =1.3.3 and more Source cves: CVE-2020-26304 Source advisory: OSV:GHSA-P8PC-3F7W-JR5Q...

nope-env (1.0.0) potentially affected by CVE-2020-26309 via nope-validator (0.11.3)

nope-validator NPM version 0.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on nope-validator and may be impacted: - nope-env 1.0.0 Source cves: CVE-2020-26309 Source advisory: OSV:GHSA-3PHV-83CJ-P8P7...

1game-texas-holdem (>=1.2.0, <=1.11.1), @1studio/ui (>=1.0.0-beta.1, <=3.9.0) +1088 more potentially affected by CVE-2020-26308 via validate.js (>=0.1.3, <=0.13.1)

validate.js NPM version =0.1.3, =1.2.0, =1.0.0-beta.1, =5.0.1, =0.1.0, =1.0.6, =3.3.20, =2.0.0-alpha.1, =0.3.9, =1.3.0, =1.2.1, =0.3.12, =1.3.12, =0.1.1, =0.1.26 and more Source cves: CVE-2020-26308 Source advisory: OSV:GHSA-RV73-9C8W-JP4C...

b4ae (>=2.0.0, <=2.1.3), clatter (>=0.1.2-alpha, <=2.0.0-rc.1) +28 more potentially affected by unknown CVE via pqcrypto-kyber (>=0.1.2, <=0.8.1)

pqcrypto-kyber CARGO version =0.1.2, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - qudag-exchange 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0381...

b4ae (>=2.0.0, <=2.1.3), crypt_guard (>=0.1.4, <=1.3.6) +25 more potentially affected by unknown CVE via pqcrypto-dilithium (>=0.1.1, <=0.5.0)

pqcrypto-dilithium CARGO version =0.1.1, =2.0.0, =0.1.4, =0.1.1, =0.1.0, =0.1.1, =0.0.1, =0.6.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0380...

@2digits/eslint-config (>=2.6.0, <=2.7.0), @2digits/eslint-plugin (>=2.2.9, <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (0.1.0)

@eslint/plugin-kit NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

1uphealth-provider-search (>=0.1.0, <=0.3.0), 20190403-utils (1.0.0) +6905 more potentially affected by CVE-2024-21538 via cross-spawn (>=6.0.0, <=6.0.5)

cross-spawn NPM version =6.0.0, =0.1.0, =0.1.0, =0.1.4, =0.1.0, =1.0.0-beta.1, =0.1.1, =0.1.72, =9.0.0, =3.0.0, =1.0.0, =1.0.3 - @352inc/react-scripts 2.0.5-custom-6 and more Source cves: CVE-2024-21538 Source advisory: SNYK:JS-CROSSSPAWN-8303230...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +14298 more potentially affected by CVE-2024-21538 via cross-spawn (>=7.0.0, <=7.0.3)

cross-spawn NPM version =7.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0....

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +67 more potentially affected by CVE-2024-48963 via snyk-php-plugin (>=1.1.2, <=1.9.2)

snyk-php-plugin NPM version =1.1.2, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 and more Source cves: CVE-2024-48963 Source advisory: OSV:GHSA-69F9-H8F9-7VJF...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +67 more potentially affected by CVE-2024-48963 via snyk-php-plugin (>=1.1.2, <=1.9.2)

snyk-php-plugin NPM version =1.1.2, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 and more Source cves: CVE-2024-48963 Source advisory: SNYK:JS-SNYKPHPPLUGIN-8248485...

@alkemio/excalidraw (>=0.17.0-alkemio-1, <=0.17.6-alkemio-4), @betternotion/excalidraw (>=0.0.1-BETA, <=1.1.1) +140 more potentially affected by unknown CVE via mermaid (>=10.0.0, <=10.9.2)

mermaid NPM version =10.0.0, =0.17.0-alkemio-1, =0.0.1-BETA, =0.17.1, =0.0.19, =3.0.0, =0.0.12, =0.114.3, =0.4.0-1437953, =0.17.1, =18.0.3, =18.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M4GQ-X24J-JPMF...

@0xcleon/dain-bridge-sdk (>=1.0.0, <=1.0.17), @0xcleon/wormhole-sdk (>=0.1.0, <=0.10.19) +997 more potentially affected by CVE-2024-48930 via secp256k1 (>=3.0.1, <=3.8.0)

secp256k1 NPM version =3.0.1, =1.0.0, =0.1.0, =0.0.1, =1.0.2, =0.1.0, =0.0.1, =0.0.3, =1.0.2, =1.1.0, =0.0.3, =0.0.1, =1.35.0, =0.13.3, =0.13.2, =7.16.1 and more Source cves: CVE-2024-48930 Source advisory: OSV:GHSA-584Q-6J8J-R5PM...

@0xvitto/context (>=0.1.0, <=0.1.1), @1001-digital/components.evm (>=1.3.0, <=4.2.1) +726 more potentially affected by CVE-2024-48930 via secp256k1 (5.0.0)

secp256k1 NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on secp256k1 and may be impacted: - @0xvitto/context =0.1.0, =1.3.0, =0.1.0, =1.2.2, =0.0.3, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.3, =0.1.0-alpha.20260610213851.5857f96, =1.0.5 an...

@0day-network/mod-renderer (>=0.1.0, <=0.1.1), @0day-network/react-sdk (>=0.0.1, <=0.2.1) +791 more potentially affected by CVE-2024-48930 via secp256k1 (>=4.0.0, <=4.0.3)

secp256k1 NPM version =4.0.0, =0.1.0, =0.0.1, =1.0.21, =1.0.6, =1.0.2, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.4.1 - @aloe2/abstract-eth 1.0.20228282226 - @aloe2/account-lib 2.20.20228282226 - @aloe2/bitgo 14.2.20228282226 - @aloe2/sdk-coin-avaxc 1.1.20228282226 - @aloe2/sdk-coin-bsc 1.0.20228282226 a...

@amazeelabs/publisher (>=2.4.28, <=2.5.8), @angular-devkit/build-angular (>=18.0.0-next.3, <=19.0.0-next.9) +65 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=3.0.0, <=3.0.2)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =18.0.0-next.3, =18.0.0-next.39, =18.0.0-next.39, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =8.10.0-nightly.20240906232837, =3.11.0-beta.6, =1.1.0, =0.0.26, =0.0.26, =8.0.0-canary.984, =9.0.0-canary.203 and more...

@alfresco/adf-testing (6.0.0-A.2-8258), @aller/svelte-components (>=1.5.1, <=1.5.17) +207 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=2.0.0, <=2.0.6)

http-proxy-middleware NPM version =2.0.0, =1.5.1, =2.0.0, =17.0.0-next.0, =9.3.0, =2.3.1, =1.92.0, =1.0.1, =1.0.10, =1015.132.0, =0.0.1, =1.2.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21536 Source advisory: OSV:GHSA-C7QV-Q95Q-8V27...