matrix-qrcode (0.3.0), matrix-sdk-base (>=0.5.0, <=0.5.1) +5 more potentially affected by CVE-2024-40640 via vodozemac (>=0.2.0, <=0.3.0)

vodozemac CARGO version =0.2.0, =0.5.0, =0.3.0, =0.4.0 - matrix-sdk-sled 0.1.0 - matrix-sdk-sql 0.1.0-beta.2 Source cves: CVE-2024-40640 Source advisory: OSV:RUSTSEC-2024-0354...

@udecode/plate (>=36.0.0, <=36.0.9), @udecode/plate-serializer-docx (>=36.0.0, <=36.0.9) potentially affected by CVE-2024-40631 via @udecode/plate-media (36.0.0)

@udecode/plate-media NPM version 36.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @udecode/plate-media and may be impacted: - @udecode/plate =36.0.0, =36.0.0, =36.0.9 Source cves: CVE-2024-40631 Source advisory: OSV:GHSA-H3PQ-667X-R789...

@a-type/ui (>=0.8.17, <=1.2.3), @adminjs/design-system (>=3.0.0-beta.4, <=3.1.1) +427 more potentially affected by unknown CVE via prosemirror-model (>=1.0.1, <=1.21.3)

prosemirror-model NPM version =1.0.1, =0.8.17, =3.0.0-beta.4, =0.1.0, =0.0.1, =13.1.0, =10.4.0, =0.0.2, =3.0.0, =16.0.0, =0.0.1, =3.1.7, =11.0.6, =4.0.13, =73.4.4, =194.4.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-PROSEMIRRORMODEL-7838221...

01.webpack-study (1.0.0), 0226 (1.0.0) +3319 more potentially affected by CVE-2024-6485 via bootstrap (>=3.1.1, <=3.4.1)

bootstrap NPM version =3.1.1, =0.1.0, =4.13.7-rc4, =3.0.1, =3.0.4, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =0.0.2, =0.3.6, =0.4.35 and more Source cves: CVE-2024-6485 Source advisory: OSV:GHSA-VXMC-5X29-H64V...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58363 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58363 Source advisory: OSV:GHSA-GH9F-6XM2-C4J2...

24social-ui (>=1.0.0, <=1.0.5), @90pixel/okr (0.1.0) +2133 more potentially affected by CVE-2024-39693 via next (>=13.3.1, <=13.4.20-canary.40)

next NPM version =13.3.1, =1.0.0, =0.1.23, =0.0.2, =1.0.0, =0.0.1, =0.1.0, =0.1.1, =1.1.2, =1.0.0, =0.1.6, =0.1.22 and more Source cves: CVE-2024-39693 Source advisory: OSV:GHSA-FQ54-2J52-JC42...

3abn (>=1.0.0, <=2.1.11), @2003scape/rsc-sounds (>=1.0.0, <=1.0.1) +381 more potentially affected by CVE-2024-21526 via speaker (>=0.0.10, <=0.5.5)

speaker NPM version =0.0.10, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21526 Source advisory: OSV:GHSA-W5FC-GJ3H-26RX...

08cms (1.0.0), @artdotstyle/filepix (>=1.0.10, <=1.0.11) +327 more potentially affected by CVE-2024-21523 via images (>=3.0.0, <=3.2.4)

images NPM version =3.0.0, =1.0.10, =1.1.2, =0.0.1, =0.1.0, =1.0.1, =1.4.0, =1.1.2, =1.1.8, =0.4.0, =0.6.2 and more Source cves: CVE-2024-21523 Source advisory: OSV:GHSA-VJPV-X8P9-7P85...

@persistr/cli (>=2.7.1, <=2.9.1), spidersharkcli (>=0.0.4, <=0.0.8) potentially affected by CVE-2024-21524 via node-stringbuilder (2.2.7)

node-stringbuilder NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-stringbuilder and may be impacted: - @persistr/cli =2.7.1, =0.0.4, =0.0.8 Source cves: CVE-2024-21524 Source advisory: OSV:GHSA-G533-XQ5W-JMF3...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +151 more potentially affected by CVE-2024-21521 via @discordjs/opus (>=0.1.0, <=0.8.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-21521 Source advisory: OSV:GHSA-43WQ-XRCM-3VGR...

@ascua/app (>=0.1.0, <=0.4.6), @itsfe/electron-bootstrap (>=1.0.0, <=1.0.1) +7 more potentially affected by CVE-2024-39698 via electron-updater (>=6.0.2, <=6.2.1)

electron-updater NPM version =6.0.2, =0.1.0, =1.0.0, =0.11.11-dev.1, =0.0.0-snapshot-20240316121210, =2024.4.146, =2024.10.110 Source cves: CVE-2024-39698 Source advisory: OSV:GHSA-9JXC-QJR9-VJXQ...

@activeledger/activecontracts (>=4.3.3, <=4.5.7), @activeledger/activeoptions (>=4.3.3, <=4.5.7) +69 more potentially affected by CVE-2024-38372 via undici (>=6.14.1, <=6.19.1)

undici NPM version =6.14.1, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =4.3.3, =18.0.0-next.4, =18.0.0-next.3, =1.2.0, =0.1.0, =2.1.0, =2.3.0, =1.1.1, =19.1.0, =10.0.20, =10.0.23-rc.0 and more Source cves: CVE-2024-38372 Source advisory: OSV:GHSA-3G92-W8C5-73PQ...

@directus/api (>=15.0.0, <=19.3.1), @meta-factory/cms (0.1.1) +6 more potentially affected by CVE-2024-39896 via directus (>=9.21.2, <=10.12.1)

directus NPM version =9.21.2, =15.0.0, =0.1.0, =1.2.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2024-39896 Source advisory: OSV:GHSA-JGF4-VWC3-R46V...

@directus/api (>=16.0.0, <=19.2.0), directus (>=10.9.0, <=10.11.2) +3 more potentially affected by CVE-2024-39895 via @directus/env (>=1.0.0, <=1.1.5)

@directus/env NPM version =1.0.0, =16.0.0, =10.9.0, =1.2.0, =10.10.4, =18.2.1-q1, =19.0.3-quantum.3 Source cves: CVE-2024-39895 Source advisory: OSV:GHSA-7HMH-PFRP-VCX4...

ayaka-model (0.2.0), ayaka-runtime (0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0, <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob 1.0.0-beta1 - icusegmenter 1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-74R5-G7VC-J2V2...

@meta-factory/cms (0.1.1), @wep2/editor-dev (1.0.0) +4 more potentially affected by CVE-2024-39701 via directus (9.26.0)

directus NPM version 9.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on directus and may be impacted: - @meta-factory/cms 0.1.1 - @wep2/editor-dev 1.0.0 - dbaas =0.1.0, =1.0.1, =1.0.0, =1.0.75 - nuxtus-server 1.0.0 Source cves: CVE-2024-39701 Sourc...

ayaka-model (0.2.0), ayaka-runtime (0.2.0) +26 more potentially affected by unknown CVE via zerovec (>=0.2.3, <=0.8.1)

zerovec CARGO version =0.2.3, =0.3.0, =0.6.0, =1.0.0-beta1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XRV3-JMCP-374J...

directus (>=10.9.1, <=10.9.2) potentially affected by CVE-2024-39699 via @directus/api (>=17.0.0, <=17.0.1)

@directus/api NPM version =17.0.0, =10.9.1, =10.9.2 Source cves: CVE-2024-39699 Source advisory: OSV:GHSA-8P72-RCQ4-H6PW...

apikit (>=0.1.0, <=0.2.0), apisdk (>=0.0.1, <=0.0.5) +131 more potentially affected by unknown CVE via opentelemetry_api (>=0.1.0, <=0.20.0)

opentelemetryapi CARGO version =0.1.0, =0.1.0, =0.0.1, =0.8.1, =0.3.0, =4.0.15, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.4.0-rc.1, =0.5.0, =0.1.0, =6.6.4, =0.6.1, =0.8.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0387...

async-mongodb-session (2.1.0), chord-action (>=0.1.13, <=0.1.16) +7 more potentially affected by CVE-2024-6382 via mongodb (>=2.0.0-alpha, <=2.6.1)

mongodb CARGO version =2.0.0-alpha, =0.1.13, =0.1.13, =0.1.13, =0.2.1, =0.3.2 - mongodb-gridfs 0.2.0 - rocketauthifier 0.111.0 - sqlite2mongo 0.3.0 Source cves: CVE-2024-6382 Source advisory: OSV:GHSA-32JF-H775-G29H...

@nokecy/qc-ui (>=0.4.7, <=0.9.6), ag-grid-charts-enterprise (32.0.0) +3 more potentially affected by CVE-2024-39001 via ag-grid-community (32.0.0)

ag-grid-community NPM version 32.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ag-grid-community and may be impacted: - @nokecy/qc-ui =0.4.7, =0.9.6 - ag-grid-charts-enterprise 32.0.0 - ag-grid-enterprise 32.0.0 - ag-grid-react 32.0.0 -...

@ag-grid-enterprise/charts-enterprise (>=31.1.0, <=31.3.3) potentially affected by CVE-2024-39001 via @ag-grid-enterprise/charts (>=31.1.1, <=31.3.3)

@ag-grid-enterprise/charts NPM version =31.1.1, =31.1.0, =31.3.3 Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

@ag-grid-enterprise/charts-enterprise (32.0.0) potentially affected by CVE-2024-39001 via @ag-grid-enterprise/charts (32.0.0)

@ag-grid-enterprise/charts NPM version 32.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @ag-grid-enterprise/charts and may be impacted: - @ag-grid-enterprise/charts-enterprise 32.0.0 Source cves: CVE-2024-39001 Source advisory:...

@nokecy/qc-ui (>=0.4.7, <=0.9.6) potentially affected by CVE-2024-39001 via ag-grid-enterprise (32.0.0)

ag-grid-enterprise NPM version 32.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ag-grid-enterprise and may be impacted: - @nokecy/qc-ui =0.4.7, =0.9.6 Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

@crystaldesign/diva-backoffice (>=24.6.0-rc.1, <=24.7.3), @steedos-widgets/ag-grid (>=3.6.2-beta.9, <=6.3.11-beta.13) +4 more potentially affected by CVE-2024-39001 via ag-grid-enterprise (>=31.0.0, <=31.3.2)

ag-grid-enterprise NPM version =31.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =0.1.65, =31.0.0, =0.0.22, =0.0.38 - react-resuable-table 1.0.0 Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

@cdmx/wappler_ag_grid (>=1.2.5, <=1.7.8), @cosmotech/ui (>=8.0.0, <=9.0.0) +20 more potentially affected by CVE-2024-39001 via ag-grid-community (>=31.0.0, <=31.3.2)

ag-grid-community NPM version =31.0.0, =1.2.5, =8.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =2.7.9, =31.0.0, =31.1.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =0.1.65, =0.1.72 and more Source cves: CVE-2024-39001 Source advisory: OSV:GHSA-328P-362G-R48J...

3d-tiles-tools (>=0.1.0, <=0.1.2), @absolunet/nwayo-workflow (>=3.2.0, <=3.6.1) +756 more potentially affected by CVE-2024-38999 via requirejs (>=2.0.0, <=2.3.6)

requirejs NPM version =2.0.0, =0.1.0, =3.2.0, =0.1.0-beta.1, =1.0.0, =0.23.0, =0.1.1-alpha.0, =0.2.33, =0.1.28, =0.1.2, =1.2.6, =0.6.0, =1.0.0, =1.0.7 and more Source cves: CVE-2024-38999 Source advisory: OSV:GHSA-X3M3-4WPV-5VGC...

@cdmx/wappler_ag_grid (>=1.2.5, <=1.7.8), @cosmotech/ui (>=8.0.0, <=9.0.0) +20 more potentially affected by CVE-2024-38996 via ag-grid-community (>=31.0.0, <=31.3.2)

ag-grid-community NPM version =31.0.0, =1.2.5, =8.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =2.7.9, =31.0.0, =31.1.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =0.1.65, =0.1.72 and more Source cves: CVE-2024-38996 Source advisory: OSV:GHSA-876P-C77M-X2HC...

@crystaldesign/diva-backoffice (>=24.6.0-rc.1, <=24.7.3), @steedos-widgets/ag-grid (>=3.6.2-beta.9, <=6.3.11-beta.13) +4 more potentially affected by CVE-2024-38996 via ag-grid-enterprise (>=31.0.0, <=31.3.2)

ag-grid-enterprise NPM version =31.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =0.1.65, =31.0.0, =0.0.22, =0.0.38 - react-resuable-table 1.0.0 Source cves: CVE-2024-38996 Source advisory: OSV:GHSA-876P-C77M-X2HC...

@amoy/animate (>=0.1.0, <=0.1.8), @amoy/query (>=0.1.1, <=0.4.3) +4 more potentially affected by CVE-2024-38994 via @amoy/common (1.0.10)

@amoy/common NPM version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @amoy/common and may be impacted: - @amoy/animate =0.1.0, =0.1.1, =1.0.0, =0.1.0, =1.0.1, =1.0.42 - react-webgl.js 0.0.1 Source cves: CVE-2024-38994 Source advisory:...

org.webjars.bower:angularamd (0.2.1), org.webjars.bower:annodom (1.0.0) +11 more potentially affected by CVE-2024-38999 via org.webjars.bower:requirejs (>=2.1.22, <=2.3.6)

org.webjars.bower:requirejs MAVEN version =2.1.22, =0.0.2, =3.10.0, =2.1.4, =0.1.13, =0.0.2, =0.0.3 - org.webjars.bower:require-lazy 0.3.8 Source cves: CVE-2024-38999 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-7430220...

ayaka-model (0.2.0), ayaka-runtime (0.2.0) +26 more potentially affected by unknown CVE via zerovec (>=0.2.3, <=0.8.1)

zerovec CARGO version =0.2.3, =0.3.0, =0.6.0, =1.0.0-beta1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0347...

ayaka-model (0.2.0), ayaka-runtime (0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0, <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob 1.0.0-beta1 - icusegmenter 1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0346...

@adobe/helix-deploy (>=9.1.9, <=11.1.13), @adobe/helix-universal-devserver (>=1.0.0, <=1.0.1) potentially affected by CVE-2024-38375 via @fastly/js-compute (>=3.1.1, <=3.15.0)

@fastly/js-compute NPM version =3.1.1, =9.1.9, =1.0.0, =1.0.1 Source cves: CVE-2024-38375 Source advisory: OSV:GHSA-MP3G-VPM9-9VQV...

btctax-store (>=0.1.0, <=0.18.0), csaf-walker (0.1.0) +19 more potentially affected by CVE-2024-58261 via sequoia-openpgp (>=1.14.0, <=1.17.0)

sequoia-openpgp CARGO version =1.14.0, =0.1.0, =0.3.0, =0.25.0, =0.1.0, =0.30.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0 - sequoia-keystore-tpm 0.1.0 and more Source cves: CVE-2024-58261 Source advisory: OSV:GHSA-9344-P847-QM5C...

a2d (>=0.1.0, <=0.1.11), abstract-account-factory (>=0.13.0, <=0.18.0) +3620 more potentially affected by unknown CVE via derivative (>=1.0.4, <=2.2.0)

derivative CARGO version =1.0.4, =0.1.0, =0.13.0, =0.16.0, =0.1.0-rc.2, =0.0.1, =0.1.0-rc.2, =0.2.0-beta.4, =0.2.0-beta.4, =0.13.0, =0.16.5, =0.2.0-beta.4, =0.0.1, =0.19.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0388...

btctax-store (>=0.1.0, <=0.18.0), csaf-walker (0.1.0) +19 more potentially affected by CVE-2024-58261 via sequoia-openpgp (>=1.14.0, <=1.17.0)

sequoia-openpgp CARGO version =1.14.0, =0.1.0, =0.3.0, =0.25.0, =0.1.0, =0.30.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0 - sequoia-keystore-tpm 0.1.0 and more Source cves: CVE-2024-58261 Source advisory: OSV:RUSTSEC-2024-0345...

atuin (>=0.3.0, <=11.0.0), atuin-client (>=0.6.2, <=11.0.0) +27 more potentially affected by unknown CVE via chrono-english (0.1.8)

chrono-english CARGO version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on chrono-english and may be impacted: - atuin =0.3.0, =0.6.2, =0.6.2, =0.1.0, =1.9.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.2, =0.4.0, =0.7.0, =0.0.4, =1.0.0 and more Sourc...

@strapi/data-transfer (4.24.4), strapi-test-plugin (0.1.0) potentially affected by CVE-2024-37818 via @strapi/strapi (4.24.4)

@strapi/strapi NPM version 4.24.4 is affected by a known vulnerability. The following packages have a transitive dependency on @strapi/strapi and may be impacted: - @strapi/data-transfer 4.24.4 - strapi-test-plugin 0.1.0 Source cves: CVE-2024-37818 Source advisory: OSV:GHSA-P9FF-J98V-P435...

@arkxio/ark-ui (>=0.1.0, <=0.1.23), @arkxio/ark-ui-src (0.1.0) +39 more potentially affected by CVE-2024-38356 via tinymce (>=6.0.0, <=6.8.3)

tinymce NPM version =6.0.0, =0.1.0, =0.1.19, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

3h1-ui (>=2.14.41, <=3.0.0-next.266), @abt-desk/apm (>=0.0.1, <=0.33.12) +1878 more potentially affected by CVE-2024-38356 via tinymce (>=5.0.6, <=5.10.9)

tinymce NPM version =5.0.6, =2.14.41, =0.0.1, =0.1.0, =0.1.2, =0.3.7, =0.1.7, =0.1.0, =0.0.1, =0.2.0-0, =1.0.18-beta.8, =1.0.0, =1.2.3-beta.1, =0.1.1, =0.1.11 and more Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

@ifanrx/dashboard (>=0.1.1, <=1.3.0), @ithinkdt/editor (>=3.4.11, <=3.5.1) +1 more potentially affected by CVE-2024-38356 via tinymce (>=7.0.1, <=7.1.2)

tinymce NPM version =7.0.1, =0.1.1, =3.4.11, =3.0.7-9, =3.4.0 Source cves: CVE-2024-38356 Source advisory: OSV:GHSA-9HCV-J9PV-QMPH...

3h1-ui (>=2.14.41, <=3.0.0-next.266), @abt-desk/apm (>=0.0.1, <=0.33.12) +1878 more potentially affected by CVE-2024-38357 via tinymce (>=5.0.6, <=5.10.9)

tinymce NPM version =5.0.6, =2.14.41, =0.0.1, =0.1.0, =0.1.2, =0.3.7, =0.1.7, =0.1.0, =0.0.1, =0.2.0-0, =1.0.18-beta.8, =1.0.0, =1.2.3-beta.1, =0.1.1, =0.1.11 and more Source cves: CVE-2024-38357 Source advisory: OSV:GHSA-W9JX-4G6G-RP7X...

@ifanrx/dashboard (>=0.1.1, <=1.3.0), @ithinkdt/editor (>=3.4.11, <=3.5.1) +1 more potentially affected by CVE-2024-38357 via tinymce (>=7.0.1, <=7.1.2)

tinymce NPM version =7.0.1, =0.1.1, =3.4.11, =3.0.7-9, =3.4.0 Source cves: CVE-2024-38357 Source advisory: OSV:GHSA-W9JX-4G6G-RP7X...

@arkxio/ark-ui (>=0.1.0, <=0.1.23), @arkxio/ark-ui-src (0.1.0) +39 more potentially affected by CVE-2024-38357 via tinymce (>=6.0.0, <=6.8.3)

tinymce NPM version =6.0.0, =0.1.0, =0.1.19, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2024-38357 Source advisory: OSV:GHSA-W9JX-4G6G-RP7X...

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1260 more potentially affected by CVE-2024-38355 via socket.io (>=2.0.1, <=2.5.0)

socket.io NPM version =2.0.1, =4.11.25, =8.25.29, =0.1.53, =5.1.0, =5.1.0, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =0.0.1, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-38355 Source advisory: OSV:GHSA-25HC-QCG6-38WJ...

0.edsql (>=1.0.49, <=1.0.50), 10secondsofcode-custom (1.0.0) +1775 more potentially affected by CVE-2024-38355 via socket.io (>=3.0.0, <=4.6.1)

socket.io NPM version =3.0.0, =1.0.49, =1.0.0, =0.0.28, =1.0.1, =0.8.2, =1.0.0, =0.1.13, =0.0.4, =1.2.1, =15.0.0, =1.0.1, =1.0.2 - @aaronconway7/create-gatsby-app 1.0.0 - @accio-cms/gatsby-starter-accio 0.0.1 and more Source cves: CVE-2024-38355 Source advisory: OSV:GHSA-25HC-QCG6-38WJ...

adnl (1.0.0), aucpace (0.1.0) +23 more potentially affected by CVE-2024-58262 via curve25519-dalek (>=4.0.0-pre.1, <=4.1.0)

curve25519-dalek CARGO version =4.0.0-pre.1, =0.5.3, =0.5.0, =0.9.0-rc.0, =1.4.6, =2.0.0-pre.0, =0.1.0, =0.1.0, =0.1.0, =0.3.7, =2.0.0-pre.2, =3.0.0-pre.1 - opaquebind 0.3.6 and more Source cves: CVE-2024-58262 Source advisory: OSV:GHSA-X4GP-PQPJ-F43Q...

adnl (1.0.0), aucpace (0.1.0) +23 more potentially affected by CVE-2024-58262 via curve25519-dalek (>=4.0.0-pre.1, <=4.1.0)

curve25519-dalek CARGO version =4.0.0-pre.1, =0.5.3, =0.5.0, =0.9.0-rc.0, =1.4.6, =2.0.0-pre.0, =0.1.0, =0.1.0, =0.1.0, =0.3.7, =2.0.0-pre.2, =3.0.0-pre.1 - opaquebind 0.3.6 and more Source cves: CVE-2024-58262 Source advisory: OSV:RUSTSEC-2024-0344...

007putra-my-bot (1.1.1), 02strich-markdown (>=1.0.0, <=1.0.2) +11968 more potentially affected by CVE-2024-37890 via ws (>=8.0.0, <=8.17.0)

ws NPM version =8.0.0, =1.0.0, =0.0.31, =0.2.0, =1.0.53, =1.0.0, =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2024-37890 Source advisory: OSV:GHSA-3H5V-Q93C-6H6Q...