@alfresco/adf-testing (6.0.0-A.2-8258), @aller/svelte-components (>=1.5.1, <=1.5.17) +207 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=2.0.0, <=2.0.6)

http-proxy-middleware NPM version =2.0.0, =1.5.1, =2.0.0, =17.0.0-next.0, =9.3.0, =2.3.1, =1.92.0, =1.0.1, =1.0.10, =1015.132.0, =0.0.1, =1.2.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21536 Source advisory: SNYK:JS-HTTPPROXYMIDDLEWARE-8229906...

@amazeelabs/publisher (>=2.4.28, <=2.5.8), @angular-devkit/build-angular (>=18.0.0-next.3, <=19.0.0-next.9) +65 more potentially affected by CVE-2024-21536 via http-proxy-middleware (>=3.0.0, <=3.0.2)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =18.0.0-next.3, =18.0.0-next.39, =18.0.0-next.39, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =8.10.0-nightly.20240906232837, =3.11.0-beta.6, =1.1.0, =0.0.26, =0.0.26, =8.0.0-canary.984, =9.0.0-canary.203 and more...

abraham3k (>=1.3.8, <=1.5.3), accutuning-helpers (>=1.0.32, <=1.0.33) +75 more potentially affected by CVE-2024-10073 via flair (>=0.4.5, <=0.15.1)

flair PYPI version =0.4.5, =1.3.8, =1.0.32, =0.0.1, =0.1.0, =0.0.6, =0.1.20, =0.1.0, =0.1.0, =0.0.1.1, =0.2.4, =0.1.1, =0.0.1rc2, =0.0.1rc3488056308109 and more Source cves: CVE-2024-10073 Source advisory: SNYK:PYTHON-FLAIR-8230414...

1k-tasks (>=0.0.1, <=1.0.5), 360-lib (1.0.0) +5501 more potentially affected by CVE-2026-9496 via pacote (>=11.2.7, <=21.5.0)

pacote NPM version =11.2.7, =0.0.1, =0.1.13, =52.3.0, =4.0.0, =4.2.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.2.17 and more Source cves: CVE-2026-9496 Source advisory: SNYK:JS-PACOTE-8225084...

0-1-project (0.0.1), 0.8.18-p11 (0.8.18-p12) +61272 more potentially affected by CVE-2024-9506 via vue (>=2.0.0, <=2.7.16)

vue NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.1.0, =1.1.0, =1.2.3 and more Source cves: CVE-2024-9506 Source advisory: OSV:GHSA-5J4C-8P2G-V4JX...

@dstny/scp-sdk (>=2.0.0, <=3.0.0-rc3), @elizaos/plugin-matrix (>=2.0.0-alpha.3, <=2.0.0-alpha.8) +33 more potentially affected by CVE-2024-47080 via matrix-js-sdk (>=9.11.0, <=34.7.0-rc.0)

matrix-js-sdk NPM version =9.11.0, =2.0.0, =2.0.0-alpha.3, =2.0.0-alpha.1, =1.4.1, =2.5.0, =0.2.0, =0.0.14, =0.0.1, =0.0.0-development, =0.17.0, =4.0.1, =1.2.0, =0.1.14, =0.1.18, =0.2.4 - @zqbflynn/kernel 6.4.2 and more Source cves: CVE-2024-47080 Source advisory: OSV:GHSA-4JF8-G8WP-CX7C...

@grupo-loja/vendure-banner-plugin (1.0.0), @grupo-loja/vendure-conect-envios-plugin (>=1.0.0, <=1.0.1) +51 more potentially affected by CVE-2024-48914 via @vendure/asset-server-plugin (>=2.0.3, <=2.2.7)

@vendure/asset-server-plugin NPM version =2.0.3, =1.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.2.4 and more Source cves: CVE-2024-48914 Source advisory: OSV:GHSA-R9MQ-3C9R-FMJQ...

@semic/testing (2.2.11) potentially affected by CVE-2024-48914 via @vendure/asset-server-plugin (3.0.0)

@vendure/asset-server-plugin NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @vendure/asset-server-plugin and may be impacted: - @semic/testing 2.2.11 Source cves: CVE-2024-48914 Source advisory: OSV:GHSA-R9MQ-3C9R-FMJQ...

@backan/core (>=0.0.3, <=0.1.0), @bepp/api (>=1.3.2, <=1.3.17) +49 more potentially affected by CVE-2024-48913 via hono (>=4.0.0, <=4.6.4)

hono NPM version =4.0.0, =0.0.3, =1.3.2, =0.75.0, =2.1.5, =0.1.0, =2.13.0, =1.2.0, =1.0.1, =0.0.1, =1.0.0-apm.0, =0.0.0-next-20240721155721, =0.1.0, =0.2.1-beta.1, =0.5.1 and more Source cves: CVE-2024-48913 Source advisory: OSV:GHSA-2234-FMW7-43WR...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8242 more potentially affected by CVE-2024-48948 via elliptic (>=6.0.2, <=6.5.7)

elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-48948 Source advisory: OSV:GHSA-FC9H-WHQ2-V747...

@apolitical/component-library (>=1.7.0-beta.1, <=10.5.2), @apolitical/styleguide2 (>=3.17.0-rc.1, <=7.8.1) +60 more potentially affected by CVE-2024-21535 via markdown-to-jsx (>=7.0.0, <=7.3.2)

markdown-to-jsx NPM version =7.0.0, =1.7.0-beta.1, =3.17.0-rc.1, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =6.1.1, =7.3.2, =0.1.0, =0.9.1, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =0.1.0-alpha.39, =1.1.1-beta.3, =1.2.2 and more Source cves: CVE-2024-21535 Source advisory:...

@astro-reactive/common (>=0.2.0, <=0.2.1), @bookshop/astro-engine (>=3.7.0, <=3.10.1) +68 more potentially affected by CVE-2024-47885 via astro (>=3.0.12, <=4.15.12)

astro NPM version =3.0.12, =0.2.0, =3.7.0, =0.40.5, =0.34.0, =0.34.0, =2.8.4, =0.0.2, =2.0.0-alpha.1, =0.0.0-test-20230907022505, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2024-47885 Source advisory: OSV:GHSA-M85W-3H95-HCF9...

@0xgg/echomd (>=1.0.0, <=1.0.4), @7nohe/vite-plugin-vue-marked (0.2.1) +1057 more potentially affected by CVE-2024-47875 via dompurify (>=2.0.0, <=2.4.9)

dompurify NPM version =2.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.13, =6.2.3, =6.4.3, =0.0.2-next.4, =0.3.0, =0.1.0, =0.1.0-a0, =1.0.0, =0.4.0, =0.0.18, =0.0.32 and more Source cves: CVE-2024-47875 Source advisory: OSV:GHSA-GX9M-WHJM-85JF...

@3t-transform/threeteeui (>=1.5.1, <=1.11.0), @accelbyte/sdk-legal (>=0.0.0-dev-20240828032938, <=6.0.2) +292 more potentially affected by CVE-2024-47875 via dompurify (>=3.0.0, <=3.1.2)

dompurify NPM version =3.0.0, =1.5.1, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =6.4.10, =5.1.1, =1.0.22, =1.0.12, =1.0.0, =1.0.22, =1.0.25, =0.0.1, =0.0.0-nightly-2021101222132, =0.9.4 and more Source cves: CVE-2024-47875 Source advisory: OSV:GHSA-GX9M-WHJM-85JF...

@appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11), @appknit-project/appknit-platform-sdk-v2 (>=1.3.65-alpha.0, <=1.3.65-alpha.10) +97 more potentially affected by CVE-2024-21534 via jsonpath-plus (>=10.0.0, <=10.1.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.12, =0.0.13 and more Source cves: CVE-2024-21534 Source advisory: OSV:GHSA-PPPG-CPFQ-H7WR...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +7970 more potentially affected by CVE-2024-48949 via elliptic (>=6.0.2, <=6.5.5)

elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-48949 Source advisory: OSV:GHSA-434G-2637-QMQR...

candid-extractor (>=0.1.0, <=0.1.2), purewasm (0.1.0) +12 more potentially affected by CVE-2024-47763 via wasmtime (12.0.2)

wasmtime CARGO version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - candid-extractor =0.1.0, =12.0.0, =12.0.0, =12.0.0, =0.1.2, =0.3.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.2 Source cves:...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @digitalnative/standard-protocol-sdk (>=0.0.190, <=0.0.195) +48 more potentially affected by CVE-2024-21533 via ggit (>=2.0.0, <=2.4.12)

ggit NPM version =2.0.0, =2.4.0-alpha.0, =0.0.190, =1.1.2, =0.1.0, =4.1.6, =0.1.0, =0.1.0, =0.0.1, =1.7.3, =1.0.0, =0.13.4, =1.9.1, =1.0.0, =1.21.0, =1.23.3 and more Source cves: CVE-2024-21533 Source advisory: OSV:GHSA-PR45-CG4X-FF4M...

@belym.a.2105/publish-please (>=2.4.0-alpha.0, <=2.4.1), @digitalnative/standard-protocol-sdk (>=0.0.190, <=0.0.195) +48 more potentially affected by CVE-2024-21532 via ggit (>=2.0.0, <=2.4.12)

ggit NPM version =2.0.0, =2.4.0-alpha.0, =0.0.190, =1.1.2, =0.1.0, =4.1.6, =0.1.0, =0.1.0, =0.0.1, =1.7.3, =1.0.0, =0.13.4, =1.9.1, =1.0.0, =1.21.0, =1.23.3 and more Source cves: CVE-2024-21532 Source advisory: OSV:GHSA-62CX-5XJ4-WFM4...

@antonovicha/hdbext-async (>=1.0.0, <=1.0.4), @christianwheeler/typeorm (>=0.2.23, <=0.2.27) +37 more potentially affected by CVE-2024-45277 via @sap/hana-client (>=2.3.119, <=2.21.28)

@sap/hana-client NPM version =2.3.119, =1.0.0, =0.2.23, =0.0.1-alpha.3, =0.1.2, =1.1.1, =0.1.0, =1.0.2, =6.2.0, =2.0.0, =1.0.0, =1.1.0, =2.4.3, =1.3.2, =1.26.1 and more Source cves: CVE-2024-45277 Source advisory: OSV:GHSA-6339-GV7W-G5F4...

aa2nucaln (0.1.1), aamp (>=0.1.0, <=0.1.6) +9510 more potentially affected by unknown CVE via paste (>=0.1.18, <=1.0.15)

paste CARGO version =0.1.18, =0.1.0, =0.1.0, =0.1.0, =0.11.2, =0.1.0, =0.1.0, =0.1.1, =0.10.3, =0.9.0, =0.2.0-beta.4, =0.15.1, =0.19.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0436...

-temp-electron-manager-somiibo (0.0.200), 0.edsql (>=1.0.49, <=1.0.50) +49186 more potentially affected by CVE-2024-47764 via cookie (>=0.0.2, <=0.6.0)

cookie NPM version =0.0.2, =1.0.49, =1.0.51, =1.0.0, =1.0.0, =0.0.1, =1.0.3, =1.0.1, =1.0.5 and more Source cves: CVE-2024-47764 Source advisory: OSV:GHSA-PXG6-PF52-XH8X...

20231122-npm (1.0.0), 3vot-salesforce-proxy (>=0.0.1, <=0.1.6) +2012 more potentially affected by CVE-2024-9266 via express (>=3.4.5, <=3.21.2)

express NPM version =3.4.5, =0.0.1, =2.0.0, =0.25.0, =1.0.4, =0.4.5-rc.0, =0.0.1, =0.12.0-edge9, =1.1.1, =1.0.2, =7.0.0, =1.0.0, =1.0.9 and more Source cves: CVE-2024-9266 Source advisory: OSV:GHSA-JJ78-5FMV-MV28...

activecube-rs (>=0.0.1, <=0.1.30), async-graphql-actix-web (>=7.0.0, <=7.0.3) +29 more potentially affected by CVE-2024-47614 via async-graphql (7.0.3)

async-graphql CARGO version 7.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on async-graphql and may be impacted: - activecube-rs =0.0.1, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =2.0.0, =0.1.0, =0.1.0, =0.4.0 - fcdb-api 0.1.0 - ferrox-datagrid 0.1.0 and mor...

@1d/analytics (>=3.0.1, <=3.0.4), @adamduren/sentry-remix (>=7.86.0-vercel-patch.1, <=7.86.0) +229 more potentially affected by unknown CVE via @sentry/browser (>=7.0.0, <=7.119.0)

@sentry/browser NPM version =7.0.0, =3.0.1, =7.86.0-vercel-patch.1, =1.16.23-1, =1.0.15, =0.0.0-dev.1739244769735, =1.0.0, =0.17.7-ludo.13, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.3.1-alpha.2 - @canva/app-ui-kit 4.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-593M-55HH-J8GV...

@gambalabs/sentry-nuxt (>=8.31.1, <=8.32.0), @globalbrain/sefirot (3.40.0) +31 more potentially affected by unknown CVE via @sentry/browser (>=8.0.0, <=8.32.0)

@sentry/browser NPM version =8.0.0, =8.31.1, =7.0.0, =8.9.0, =1.0.386-leo-ron-885-experimental.13, =0.0.1, =0.1.0, =8.0.0-alpha.2, =8.0.0-alpha.2, =8.0.0-alpha.2, =1.0.0-beta.1, =5.0.0-beta.0, =8.0.0-alpha.2, =8.0.0-alpha.2, =8.32.0 and more Source cves: unknown CVE Source advisory:...

typedb-protocol (>=3.0.0-alpha-2, <=3.0.0-alpha-7) potentially affected by CVE-2024-47609 via tonic (0.12.2)

tonic CARGO version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tonic and may be impacted: - typedb-protocol =3.0.0-alpha-2, =3.0.0-alpha-7 Source cves: CVE-2024-47609 Source advisory: OSV:GHSA-4JWC-W2HC-78QV...

typedb-protocol (>=3.0.0-alpha-2, <=3.0.0-alpha-7) potentially affected by CVE-2024-47609 via tonic (0.12.2)

tonic CARGO version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tonic and may be impacted: - typedb-protocol =3.0.0-alpha-2, =3.0.0-alpha-7 Source cves: CVE-2024-47609 Source advisory: OSV:RUSTSEC-2024-0376...

@unete/cli (>=1.0.0-13, <=1.0.0-17), bootcamp-cli (0.0.1) potentially affected by CVE-2024-21531 via git-shallow-clone (0.0.2)

git-shallow-clone NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on git-shallow-clone and may be impacted: - @unete/cli =1.0.0-13, =1.0.0-17 - bootcamp-cli 0.0.1 Source cves: CVE-2024-21531 Source advisory: OSV:GHSA-QWRQ-VXVW-537R...

@automattic/jetpack-ai-client (>=0.1.5, <=0.16.1), @automattic/jetpack-components (>=0.41.2, <=0.56.0) +45 more potentially affected by CVE-2024-21489 via uplot (>=1.1.2, <=1.6.30)

uplot NPM version =1.1.2, =0.1.5, =0.41.2, =0.29.8, =0.11.2, =5.0.1-beta.0, =1.0.0, =0.0.2, =8.3.0-beta.1, =10.2.0-nightly.0238db42, =0.0.1-beta.4, =0.8.0, =0.0.1-preview1, =0.1.10, =0.14.0 and more Source cves: CVE-2024-21489 Source advisory: OSV:GHSA-34Q8-JCQ6-MC37...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @bndynet/bbootstrap (>=1.1.0, <=2.2.1) +41 more potentially affected by CVE-2024-53391 via pace-js (>=1.0.2, <=1.2.4)

pace-js NPM version =1.0.2, =1.0.0, =1.1.0, =1.0.0, =1.0.1, =0.0.0, =0.0.1, =2.0.2, =14.0.1, =1.0.4, =1.0.4, =1.0.114, =0.1.0, =0.20.0 - freeman-admintheme 1.2.1 and more Source cves: CVE-2024-53391 Source advisory: SNYK:JS-PACEJS-8136829...

20231122-npm (1.0.0), @3dr/potree (1.6.0) +3220 more potentially affected by CVE-2024-47178 via basic-auth-connect (1.0.0)

basic-auth-connect NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on basic-auth-connect and may be impacted: - 20231122-npm 1.0.0 - @3dr/potree 1.6.0 - @inlimbo/nativeui =0.0.1, =0.0.0, =0.20.0, =0.0.1, =0.0.1, =0.0.1, =1.0.1, =0.0.1,...

repo-to-pdf (0.1.6) potentially affected by CVE-2024-9283 via relaxedjs (0.2.4)

relaxedjs NPM version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on relaxedjs and may be impacted: - repo-to-pdf 0.1.6 Source cves: CVE-2024-9283 Source advisory: OSV:GHSA-GJ3P-J74V-3X57...

i-form-base (1.0.0) potentially affected by CVE-2024-47075 via layui (2.7.6)

layui NPM version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on layui and may be impacted: - i-form-base 1.0.0 Source cves: CVE-2024-47075 Source advisory: OSV:GHSA-J827-6RGF-9629...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), @_mehrad/ckeditor5-build-mmr (>=41.3.1, <=42.0.3) +583 more potentially affected by CVE-2024-45613 via ckeditor5 (>=40.0.0, <=43.1.0-alpha.8)

ckeditor5 NPM version =40.0.0, =0.0.1, =41.3.1, =2.1.0, =1.0.1, =0.0.1, =0.0.1, =1.0.0, =0.0.0-Beta1, =0.0.17-Beta, =0.0.15-Beta100, =0.0.1, =1.0.0, =0.0.1, =0.0.3, =0.0.8 and more Source cves: CVE-2024-45613 Source advisory: OSV:GHSA-RGG8-G5X8-WR9V...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), @_mehrad/ckeditor5-build-mmr (>=41.3.1, <=42.0.3) +586 more potentially affected by CVE-2024-45613 via @ckeditor/ckeditor5-clipboard (>=40.0.0, <=43.1.0-alpha.8)

@ckeditor/ckeditor5-clipboard NPM version =40.0.0, =0.0.1, =41.3.1, =2.1.0, =1.0.1, =0.0.1, =0.0.1, =1.0.0, =0.0.0-Beta1, =0.0.17-Beta, =0.0.15-Beta100, =0.0.1, =1.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2024-45613 Source advisory: OSV:GHSA-RGG8-G5X8-WR9V...

a-bot (0.0.1), a-gpt (>=0.1.0, <=0.4.0) +24298 more potentially affected by unknown CVE via atty (>=0.1.2, <=0.2.14)

atty CARGO version =0.1.2, =0.1.0, =0.0.5, =0.2.0, =0.0.1, =0.0.2, =0.4.1, =0.9.0, =0.1.0, =0.2.1, =1.0.3, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0375...

@rocket.chat/core-typings (>=6.3.0-rc.7, <=6.3.13), @rocket.chat/rest-typings (>=6.3.0-rc.7, <=6.3.13) potentially affected by CVE-2024-46935 via @rocket.chat/message-parser (0.31.24)

@rocket.chat/message-parser NPM version 0.31.24 is affected by a known vulnerability. The following packages have a transitive dependency on @rocket.chat/message-parser and may be impacted: - @rocket.chat/core-typings =6.3.0-rc.7, =6.3.0-rc.7, =6.3.13 Source cves: CVE-2024-46935 Source advisory:...

1k-tasks (>=4.0.0, <=4.2.2), @adobe/helix-deploy (>=9.3.8, <=9.6.1) +227 more potentially affected by CVE-2024-47068 via rollup (>=4.0.2, <=4.22.2)

rollup NPM version =4.0.2, =4.0.0, =9.3.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =2.17.15, =1.9.12, =18.1.0-rc.1, =18.1.0-rc.1, =10.0.0-alpha.0, =10.0.0-alpha.0, =13.0.0 and more Source cves: CVE-2024-47068 Source advisory: OSV:GHSA-GCX4-MW62-G8WM...

0.2-ui (0.0.1), 1k-tasks (>=2.3.0, <=3.0.2) +2349 more potentially affected by CVE-2024-47068 via rollup (>=2.0.0, <=2.79.1)

rollup NPM version =2.0.0, =2.3.0, =1.0.17, =1.0.0-canary.1, =1.0.0, =0.0.10, =0.0.3, =1.0.1, =1.0.12, =1.0.0, =0.0.4, =3.1.0-next.7, =3.1.0-next.7, =3.1.0-rc.2 and more Source cves: CVE-2024-47068 Source advisory: OSV:GHSA-GCX4-MW62-G8WM...

10-javascriptlib (1.0.0), 1k-tasks (>=3.1.0, <=3.6.1) +391 more potentially affected by CVE-2024-47068 via rollup (>=3.0.0, <=3.29.4)

rollup NPM version =3.0.0, =3.1.0, =9.0.19, =0.0.2, =4.0.0-alpha.2, =0.6.0, =12.0.0, =0.0.3, =0.1.0, =0.0.4, =3.0.1-canary.8, =3.0.1-canary.12 - @clairview/api 23.1.0 and more Source cves: CVE-2024-47068 Source advisory: OSV:GHSA-GCX4-MW62-G8WM...

@chirper/mythiq (>=0.0.3, <=0.0.20), @cloudcommerce/storefront (>=0.10.0, <=0.11.0) +106 more potentially affected by CVE-2024-47061 via @udecode/plate-core (>=21.0.0, <=21.5.0)

@udecode/plate-core NPM version =21.0.0, =0.0.3, =0.10.0, =0.0.0-20240315110821, =12.0.0-beta.319, =0.28.0, =0.0.3, =0.6.9, =0.0.0-20230511135047, =0.0.0-20230511135047, =1.0.0, =0.0.4, =0.0.85, =0.0.89, =0.0.93 and more Source cves: CVE-2024-47061 Source advisory: OSV:GHSA-73RG-F94J-XVHX...

@teable/sdk (>=1.5.0, <=1.8.0), @udecode/plate (>=37.0.0, <=38.0.5) +3 more potentially affected by CVE-2024-47061 via @udecode/plate-core (>=37.0.0, <=38.0.4)

@udecode/plate-core NPM version =37.0.0, =1.5.0, =37.0.0, =37.0.0, =37.0.0, =0.2.62, =0.2.83 Source cves: CVE-2024-47061 Source advisory: OSV:GHSA-73RG-F94J-XVHX...

@baseline-ui/app (0.22.1), @baseline-ui/core (0.22.1) +109 more potentially affected by CVE-2024-47061 via @udecode/plate-core (>=22.0.0, <=36.3.9)

@udecode/plate-core NPM version =22.0.0, =3.11.0, =0.1.0, =5.1.1, =0.0.1, =0.0.1, =0.0.2, =12.0.0-beta.405, =0.34.0, =0.9.7, =0.0.23, =0.2.8, =0.3.45 and more Source cves: CVE-2024-47061 Source advisory: OSV:GHSA-73RG-F94J-XVHX...

@directus/api (>=20.0.0-rc.0, <=22.1.1) potentially affected by CVE-2024-46990 via directus (>=11.0.0, <=11.0.2)

directus NPM version =11.0.0, =20.0.0-rc.0, =22.1.1 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

directus (>=11.0.0, <=11.0.1) potentially affected by CVE-2024-46990 via @directus/api (>=22.0.0, <=22.1.0)

@directus/api NPM version =22.0.0, =11.0.0, =11.0.1 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

@directus/api (>=15.0.0, <=21.0.1), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-46990 via directus (>=10.8.3, <=10.13.2)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-46990 Source advisory: OSV:GHSA-68G8-C275-XF2M...

@667/restify (9.0.0-1), @aeppic/install-build-server (>=2.0.0, <=2.44.0) +862 more potentially affected by CVE-2024-45813 via find-my-way (>=5.6.0, <=8.2.0)

find-my-way NPM version =5.6.0, =2.0.0, =3.0.0, =1.0.1, =1.0.0-alpha1, =2.0.0, =0.0.0-dev.1739244769735, =0.0.0-dev.1739244769735, =2.0.0, =0.0.0-dev.1757040677030, =2.10.8, =0.0.0-dev.1739244769735, =0.0.1, =1.6.0, =1.6.4 and more Source cves: CVE-2024-45813 Source advisory: OSV:GHSA-RRR8-F88R-H...

1ocalendar (1.0.0), @alpaca-headless/alpaca-headless-nextjs (>=1.0.13, <=1.0.27) +152 more potentially affected by CVE-2024-46982 via next (>=13.5.1, <=13.5.6)

next NPM version =13.5.1, =1.0.13, =1.0.7, =1.0.0, =1.0.5, =0.1.0, =24.4.0, =0.2.7, =5.4.2, =1.0.0, =0.0.1, =0.0.14 and more Source cves: CVE-2024-46982 Source advisory: OSV:GHSA-GP8F-8M3G-QVJ9...

@janus-idp/backstage-plugin-keycloak-backend (1.0.0) potentially affected by CVE-2024-45815 via @backstage/plugin-catalog-backend (1.5.1)

@backstage/plugin-catalog-backend NPM version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-catalog-backend and may be impacted: - @janus-idp/backstage-plugin-keycloak-backend 1.0.0 Source cves: CVE-2024-45815 Source advisory:...