11219 matches found
@apollo/gateway (>=2.3.0-beta.2, <=2.8.4), @genesisx/graphql (>=3.0.0-beta.1, <=4.0.1) +8 more potentially affected by CVE-2024-43414 via @apollo/query-planner (>=2.3.0, <=2.8.4)
@apollo/query-planner NPM version =2.3.0, =2.3.0-beta.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.13.8-alpha-20230126151930-d229ec52b, =0.0.1, =9.2.0, =2.8.54, =0.0.0-preview-20230314213245, =1.3.3, =0.0.8, =1.0.48 Source cves: CVE-2024-43414 Source advisory: OSV:GHSA-FMJ9-77Q8-G6C4...
@genesisx/graphql (>=3.0.0-beta.1, <=4.0.1), @genesisx/graphql-utils (>=3.0.0-beta.0, <=3.0.1) +9 more potentially affected by CVE-2024-43414 via @apollo/gateway (>=2.0.0-preview.2, <=2.8.4)
@apollo/gateway NPM version =2.0.0-preview.2, =3.0.0-beta.1, =3.0.0-beta.0, =0.11.46-alpha-bad726532.0, =0.0.1, =8.6.7, =2.8.54, =0.0.0-preview-20220428090254, =0.0.0-preview-20221125005457, =1.3.3, =0.0.3, =1.0.48 - nestjs-registry 0.0.1 Source cves: CVE-2024-43414 Source advisory:...
@c8y/application (>=1019.0.3, <=1019.24.6), @c8y/cli (>=10.0.7, <=1018.510.4) +99 more potentially affected by unknown CVE via unzip-stream (>=0.1.2, <=0.3.1)
unzip-stream NPM version =0.1.2, =1019.0.3, =10.0.7, =1019.0.3, =1019.0.3, =1019.4.8, =1019.4.8, =0.1.0, =0.1.0, =0.6.0, =0.2.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6JRJ-VC65-C983...
anchor-token (>=0.0.1, <=0.3.0), astro4nit (0.0.1) +60 more potentially affected by unknown CVE via cw0 (>=0.2.3, <=0.10.3)
cw0 CARGO version =0.2.3, =0.0.1, =0.3.1, =2.5.2, =0.1.0, =0.3.0, =0.4.0, =0.4.0, =0.2.0, =0.2.0, =0.6.0-beta1, =0.6.0-beta1, =0.2.0, =0.2.1, =0.10.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0385...
aruna_policy (>=0.1.0, <=0.1.2), async-bb8-diesel (>=0.1.0, <=0.2.1) +103 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.1.6)
diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.0, =0.1.1 - crabrocketschema 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WQ9X-QWCQ-MMGF...
aruna_policy (>=0.1.0, <=0.1.2), async-bb8-diesel (>=0.1.0, <=0.2.1) +103 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.1.6)
diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.0, =0.1.1 - crabrocketschema 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0365...
gitoxide (>=0.1.0, <=0.15.0) potentially affected by CVE-2024-43785 via gitoxide-core (>=0.1.0, <=0.17.0)
gitoxide-core CARGO version =0.1.0, =0.1.0, =0.15.0 Source cves: CVE-2024-43785 Source advisory: OSV:GHSA-88G2-R9RW-G55H...
@backan/core (>=0.0.3, <=0.0.19), @bepp/api (>=1.3.2, <=1.3.17) +38 more potentially affected by CVE-2024-43787 via hono (>=4.0.0, <=4.5.7)
hono NPM version =4.0.0, =0.0.3, =1.3.2, =2.1.5, =0.1.0, =2.13.0, =1.2.0, =1.0.1, =0.0.1, =1.0.0-apm.0, =0.0.0-next-20240721155721, =0.1.0, =0.82.2-rc.1, =0.82.2-rc.1, =0.82.2-rc.1, =0.96.0 and more Source cves: CVE-2024-43787 Source advisory: OSV:GHSA-RPFR-3M35-5VX5...
gitoxide (>=0.1.0, <=0.15.0) potentially affected by CVE-2024-43785 via gitoxide-core (>=0.1.0, <=0.17.0)
gitoxide-core CARGO version =0.1.0, =0.1.0, =0.15.0 Source cves: CVE-2024-43785 Source advisory: OSV:RUSTSEC-2024-0364...
@miragon/miranum-cli (>=0.5.5, <=0.5.12) potentially affected by CVE-2024-40453 via squirrelly (9.0.0)
squirrelly NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on squirrelly and may be impacted: - @miragon/miranum-cli =0.5.5, =0.5.12 Source cves: CVE-2024-40453 Source advisory: OSV:GHSA-W5PW-GMCW-RFC8...
@dankolz/news-flash (>=1.0.1, <=1.0.2), @trikoder/trim (0.86.0) +8 more potentially affected by CVE-2024-43411 via ckeditor4 (4.22.1)
ckeditor4 NPM version 4.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - @dankolz/news-flash =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2024-43411 Source...
@amplicode/addon-email-templates (>=0.0.1-snapshot.8, <=0.1.0-snapshot.1.6), @dankolz/news-flash (>=1.0.1, <=1.0.2) +10 more potentially affected by CVE-2024-43407 via ckeditor4 (>=4.14.0, <=4.22.1)
ckeditor4 NPM version =4.14.0, =0.0.1-snapshot.8, =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2024-43407 Source advisory: OSV:GHSA-7R32-VFJ5-C2JV...
matrix-react-sdk (>=3.102.0-rc.0, <=3.106.0) potentially affected by CVE-2024-42369 via matrix-js-sdk (>=34.0.0, <=34.3.0-rc.1)
matrix-js-sdk NPM version =34.0.0, =3.102.0-rc.0, =3.106.0 Source cves: CVE-2024-42369 Source advisory: OSV:GHSA-VHR5-G3PM-49FM...
abacuz (0.1.1), acme-dns-rust (>=1.0.0, <=1.1.6) +309 more potentially affected by unknown CVE via sqlx (>=0.2.6, <=0.8.0)
sqlx CARGO version =0.2.6, =1.0.0, =0.0.2, =0.11.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0-beta.0, =0.3.0-beta.0, =0.4.3 - appenddbpostgres 0.2.0 - aquadoggo 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XMRP-424F-VFPX...
abacuz (0.1.1), acme-dns-rust (>=1.0.0, <=1.1.6) +309 more potentially affected by unknown CVE via sqlx (>=0.2.6, <=0.8.0)
sqlx CARGO version =0.2.6, =1.0.0, =0.0.2, =0.11.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0-beta.0, =0.3.0-beta.0, =0.4.3 - appenddbpostgres 0.2.0 - aquadoggo 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0363...
assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +7 more potentially affected by CVE-2024-43410 via russh (>=0.34.0, <=0.43.0)
russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - sshrpc 0.1.0 - tunnels 0.1.0 Source cves: CVE-2024-43410 Source advisory: OSV:GHSA-VGVV-X7XG-6CQG...
boa_cli (0.16.0), click_and_load (0.2.0) +1 more potentially affected by CVE-2024-43357 +1 more via boa_engine (0.16.0)
boaengine CARGO version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on boaengine and may be impacted: - boacli 0.16.0 - clickandload 0.2.0 - zippyst 5.0.0 Source cves: CVE-2024-43357, CVE-2024-43367 Source advisory: OSV:GHSA-F67Q-WR6W-23JQ...
lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2024-43368 via trix (>=2.0.8, <=2.0.10)
trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2024-43368 Source advisory: OSV:GHSA-QM2Q-9F3Q-2VCV...
@ivan-/concurrent-webcrack (>=1.0.3, <=1.0.4) potentially affected by CVE-2024-43373 via webcrack (2.6.2)
webcrack NPM version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on webcrack and may be impacted: - @ivan-/concurrent-webcrack =1.0.3, =1.0.4 Source cves: CVE-2024-43373 Source advisory: OSV:GHSA-CCQH-278P-XQ6W...
databend-common-ast (>=0.0.0, <=0.0.2), foyer-common (>=0.8.0, <=0.8.1) +12 more potentially affected by unknown CVE via minitrace (>=0.3.1, <=0.6.7)
minitrace CARGO version =0.3.1, =0.0.0, =0.8.0, =0.8.0, =0.1.7, =0.3.0, =0.6.4, =0.3.0, =0.5.0, =0.11.1, =0.11.1, =0.3.0, =0.1.0, =0.1.1 - risinglight 0.1.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0390...
boa_cli (0.16.0), click_and_load (0.2.0) +1 more potentially affected by CVE-2024-43357 +1 more via boa_engine (0.16.0)
boaengine CARGO version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on boaengine and may be impacted: - boacli 0.16.0 - clickandload 0.2.0 - zippyst 5.0.0 Source cves: CVE-2024-43357, CVE-2024-43367 Source advisory: OSV:RUSTSEC-2024-0444...
@bunt/cli (>=0.12.0, <=0.28.3), @bunt/project (>=0.12.0, <=0.25.0) +2 more potentially affected by CVE-2024-38989 via @bunt/app (>=0.12.0, <=0.28.3)
@bunt/app NPM version =0.12.0, =0.12.0, =0.12.0, =0.12.0, =0.14.0, =0.28.3 Source cves: CVE-2024-38989 Source advisory: OSV:GHSA-P734-XG27-8CFQ...
31g-form-parser (>=1.0.1, <=1.0.126), 5p-buyform (>=0.0.1, <=0.0.4) +5452 more potentially affected by CVE-2024-39338 via axios (>=1.3.2, <=1.7.3)
axios NPM version =1.3.2, =1.0.1, =0.0.1, =0.0.1, =0.1.2, =2.1.0, =3.0.0-beta.10, =0.2.1, =0.5.0, =0.0.74, =0.0.14, =2.5.4, =1.0.1, =1.14.5, =1.0.30, =1.0.36 and more Source cves: CVE-2024-39338 Source advisory: OSV:GHSA-8HC4-VH64-CXMJ...
byterag-core (0.3.0), byterag-ffi (0.3.0) +8 more potentially affected by unknown CVE via s2n-tls (>=0.0.6, <=0.2.11)
s2n-tls CARGO version =0.0.6, =0.2.0-beta, =0.2.0-beta, =0.1.0, =1.18.0, =0.18.2, =0.18.2, =0.0.6, =0.2.11 Source cves: unknown CVE Source advisory: OSV:GHSA-857Q-XMPH-P2V5...
cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)
cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RG2Q-2JH9-447Q...
cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)
cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0361...
@qwikui-org/ui (>=0.2.2, <=0.2.3), @react-portable/core (>=0.4.0, <=0.11.2) +1 more potentially affected by CVE-2024-41677 via @builder.io/qwik (>=1.2.6, <=1.4.5)
@builder.io/qwik NPM version =1.2.6, =0.2.2, =0.4.0, =0.11.2 - not-qwik-library-test1 0.0.3 Source cves: CVE-2024-41677 Source advisory: OSV:GHSA-2RWJ-7XQ8-4GX4...
@alfresco/adf-core (>=4.12.0-35591, <=6.0.0-A.1-github-run-3758819331), @bigbossstudio/strapi-plugin-editorjs (>=0.0.1, <=0.0.4) +44 more potentially affected by CVE-2022-23474 via @editorjs/editorjs (>=2.15.1, <=2.25.0)
@editorjs/editorjs NPM version =2.15.1, =4.12.0-35591, =0.0.1, =1.1.3, =1.1.7, =1.0.2, =0.0.0-ee-vpcs.549378cf03, =0.0.0-ee-vpcs.549378cf03, =0.0.0-ee-vpcs.549378cf03, =0.0.0-ee-vpcs.549378cf03, =0.0.0-ee-vpcs.549378cf03, =0.0.0-unstable.1e66d121db, =0.0.0-ee-vpcs.549378cf03,...
@bloggrify/bento (>=0.9.1, <=0.9.4), @bloggrify/core (>=1.1.1, <=1.4.5) +26 more potentially affected by CVE-2024-34344 via nuxt (>=3.4.2, <=3.12.3)
nuxt NPM version =3.4.2, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =4.0.3, =0.1.0, =0.0.1, =0.0.1, =0.5.0, =1.1.1-beta.3, =1.4.1-alpha.13, =1.0.1-alpha.1024, =1.4.0 and more Source cves: CVE-2024-34344 Source advisory: OSV:GHSA-V784-FJJH-F8R4...
@bloggrify/bento (>=0.9.1, <=0.9.4), @bloggrify/core (>=1.1.1, <=1.4.5) +62 more potentially affected by CVE-2024-34343 via nuxt (>=3.0.0, <=3.12.3)
nuxt NPM version =3.0.0, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =4.0.3, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.5.0, =1.0.0-beta.11, =1.2.0 and more Source cves: CVE-2024-34343 Source advisory: OSV:GHSA-VF6R-87Q4-2VJF...
@dargmuesli/nuxt-vio (>=8.3.3, <=13.1.14) potentially affected by CVE-2024-23657 via @nuxt/devtools (>=1.0.0, <=1.3.7)
@nuxt/devtools NPM version =1.0.0, =8.3.3, =13.1.14 Source cves: CVE-2024-23657 Source advisory: OSV:GHSA-RCVG-RGF7-PPPV...
0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8137 more potentially affected by CVE-2024-42459 via elliptic (>=4.1.0, <=6.5.6)
elliptic NPM version =4.1.0, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-42459 Source advisory: OSV:GHSA-F7Q4-PWC6-W24P...
0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8134 more potentially affected by CVE-2024-42461 via elliptic (>=5.2.1, <=6.5.6)
elliptic NPM version =5.2.1, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2024-42461 Source advisory: OSV:GHSA-49Q7-C7J4-3P7M...
0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8819 more potentially affected by CVE-2024-42460 via elliptic (>=2.0.2, <=6.5.6)
elliptic NPM version =2.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =1.0.0, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =6.2.4 and more Source cves: CVE-2024-42460 Source advisory: OSV:GHSA-977X-G7H5-7QGW...
biscuit-cli (>=0.4.1, <=0.4.2) potentially affected by CVE-2024-41949 +1 more via biscuit-auth (4.1.1)
biscuit-auth CARGO version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on biscuit-auth and may be impacted: - biscuit-cli =0.4.1, =0.4.2 Source cves: CVE-2024-41949, CVE-2024-42350 Source advisory: OSV:GHSA-P9W4-585H-G3C7...
@fractl-ui/fuel (>=0.3.4, <=0.3.5), @fuel-ts/contract (>=0.0.0-next-20240210135306, <=0.92.1) +15 more potentially affected by CVE-2024-41945 via @fuel-ts/account (>=0.0.0-next-20240210135306, <=0.92.1)
@fuel-ts/account NPM version =0.0.0-next-20240210135306, =0.3.4, =0.0.0-next-20240210135306, =0.0.0-next-20240210135306, =0.0.0-next-20241128172443, =0.0.0-next-20240210135306, =0.1.5, =0.1.0, =1.0.0, =2.35.1-rc.1, =0.1.0, =0.0.50, =0.0.0-next-20240210135306, =1.0.0, =1.0.5 and more Source cves:...
@appium/universal-xml-plugin (>=1.0.18, <=1.0.20), @cardscan.ai/cardscan-client (>=0.1.0, <=0.4.3) +103 more potentially affected by CVE-2024-41818 via fast-xml-parser (>=4.3.5, <=4.4.0)
fast-xml-parser NPM version =4.3.5, =1.0.18, =0.1.0, =1.1.0, =8.0.167, =11.49.0, =13.4.12, =11.49.0, =28.16.23, =11.49.0, =0.0.145, =1.0.0, =10.3.11, =0.1.11, =8.0.167, =5.0.167, =5.0.200 and more Source cves: CVE-2024-41818 Source advisory: OSV:GHSA-MPG4-RC92-VX8V...
c2pa (>=0.16.1, <=0.19.1), c2patool (>=0.3.9, <=0.5.1) potentially affected by unknown CVE via xmp_toolkit (1.7.3)
xmptoolkit CARGO version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on xmptoolkit and may be impacted: - c2pa =0.16.1, =0.3.9, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-66FW-43H8-F8P3...
c2pa (>=0.16.1, <=0.19.1), c2patool (>=0.3.9, <=0.5.1) potentially affected by unknown CVE via xmp_toolkit (1.7.3)
xmptoolkit CARGO version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on xmptoolkit and may be impacted: - c2pa =0.16.1, =0.3.9, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0360...
ballista (>=0.8.0, <=0.9.0), ballista-cli (0.9.0) +52 more potentially affected by CVE-2024-41178 via object_store (>=0.5.6, <=0.9.1)
objectstore CARGO version =0.5.6, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.4.0, =0.7.0, =0.0.1, =0.0.0, =12.0.0, =12.0.0, =12.0.0, =20.0.0, =38.0.0 - datafusion-expr 31.0.0 - datafusion-extra 0.0.2 and more Source cves: CVE-2024-41178 Source advisory: OSV:GHSA-C2HF-VCMR-QJRF...
0-1-project (0.0.1), 02vue_toast_demo (>=1.0.0, <=1.0.4) +9012 more potentially affected by CVE-2024-6783 via vue-template-compiler (>=2.0.0, <=2.7.16)
vue-template-compiler NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =2.0.0, =1.0.0, =0.3.11, =0.0.1, =0.8.0 and more Source cves: CVE-2024-6783 Source advisory: OSV:GHSA-G3CH-RX76-35FX...
@automatedtf/catalog (>=0.0.1, <=0.0.27), @automatedtf/reactor (>=0.0.1, <=0.0.9) +3 more potentially affected by CVE-2024-41655 via tf2-item-format (4.3.5)
tf2-item-format NPM version 4.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on tf2-item-format and may be impacted: - @automatedtf/catalog =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.25 - @vendortf/catalog 0.0.27 Source cves: CVE-2024-41655 Source advisory...
ballista (>=0.8.0, <=0.9.0), ballista-cli (0.9.0) +52 more potentially affected by CVE-2024-41178 via object_store (>=0.5.6, <=0.9.1)
objectstore CARGO version =0.5.6, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.4.0, =0.7.0, =0.0.1, =0.0.0, =12.0.0, =12.0.0, =12.0.0, =20.0.0, =38.0.0 - datafusion-expr 31.0.0 - datafusion-extra 0.0.2 and more Source cves: CVE-2024-41178 Source advisory: OSV:RUSTSEC-2024-0358...
acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +868 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.57)
openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q445-7M23-QRMW...
acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +868 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.57)
openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0357...
alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2024-40648 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)
matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-40648 Source advisory: OSV:GHSA-4QG4-CVH2-CRGG...
alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2024-40648 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)
matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-40648 Source advisory: OSV:RUSTSEC-2024-0356...
flowlang (>=0.1.6, <=0.1.8), lavendeux-parser (>=0.3.0, <=0.8.1) +2 more potentially affected by unknown CVE via js-sandbox (>=0.1.6, <=0.2.0-rc.1)
js-sandbox CARGO version =0.1.6, =0.1.6, =0.3.0, =0.1.0, =0.6.3 - wakflo-funx 0.0.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0403...
matrix-qrcode (0.3.0), matrix-sdk-base (>=0.5.0, <=0.5.1) +5 more potentially affected by CVE-2024-40640 via vodozemac (>=0.2.0, <=0.3.0)
vodozemac CARGO version =0.2.0, =0.5.0, =0.3.0, =0.4.0 - matrix-sdk-sled 0.1.0 - matrix-sdk-sql 0.1.0-beta.2 Source cves: CVE-2024-40640 Source advisory: OSV:GHSA-J8CM-G7R6-HFPQ...
@ibm/rse-api-for-zowe-cli (>=3.2.2, <=4.1.0), @zowe/zowe-explorer-api (>=2.13.0, <=2.15.0) potentially affected by CVE-2024-6833 via @zowe/cli (>=7.18.0, <=7.23.3)
@zowe/cli NPM version =7.18.0, =3.2.2, =2.13.0, =2.15.0 Source cves: CVE-2024-6833 Source advisory: OSV:GHSA-GHGQ-X6WC-6JR5...