0.edsql (>=1.0.49, <=1.0.50), 0x-v4-nft (1.1.0) +8889 more potentially affected by CVE-2024-37890 via ws (>=7.0.0, <=7.5.9)

ws NPM version =7.0.0, =1.0.49, =0.0.11, =0.0.2, =1.0.0, =0.1.0, =0.0.12, =0.0.12, =0.1.0, =1.0.22, =3.10.1, =3.11.0 and more Source cves: CVE-2024-37890 Source advisory: OSV:GHSA-3H5V-Q93C-6H6Q...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +17047 more potentially affected by CVE-2024-37890 via ws (>=2.1.0, <=5.2.2)

ws NPM version =2.1.0, =1.0.0-3, =0.0.3, =1.1.0, =0.9.9, =0.7.41, =0.1.0-beta.1, =0.1.3, =0.0.3, =1.0.0, =2.0.7 and more Source cves: CVE-2024-37890 Source advisory: OSV:GHSA-3H5V-Q93C-6H6Q...

7ghost (>=4.11.25, <=4.11.46), @100mslive/hms-excalidraw (>=0.1.3, <=0.1.14) +1256 more potentially affected by CVE-2024-37890 via ws (>=6.0.0, <=6.2.2)

ws NPM version =6.0.0, =4.11.25, =0.1.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =7.0.0-rc1, =0.1.0, =4.4.0-rc.1, =4.2.2, =2.9.0, =0.0.1-alpha.95, =1.0.0-alpha.46, =1.2.0, =1.6.2 and more Source cves: CVE-2024-37890 Source advisory: OSV:GHSA-3H5V-Q93C-6H6Q...

@cdr0/active-development (1.0.0), @cdr0/config (>=1.0.1, <=1.0.2) +6 more potentially affected by CVE-2024-36580 via @cdr0/sg (1.0.10)

@cdr0/sg NPM version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @cdr0/sg and may be impacted: - @cdr0/active-development 1.0.0 - @cdr0/config =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-36580 Source advisory:...

checked-rs-macro-impl (1.0.0), raft-engine (>=0.2.0, <=0.2.2) +7 more potentially affected by CVE-2024-36760 via rhai (>=1.4.1, <=1.16.3)

rhai CARGO version =1.4.1, =0.2.0, =0.2.0, =0.2.1, =0.1.7, =0.1.2, =1.4.0, =0.1.6, =0.0.5, =0.1.1 Source cves: CVE-2024-36760 Source advisory: OSV:GHSA-67FV-9R7G-432H...

@chargeover/strapi (0.0.1-rc1.1), @code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3) +18 more potentially affected by CVE-2024-34065 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.19.0)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =0.0.1, =0.0.4 - devlaunchers-strapiv4 0.1.0 - easylaser-vn-cms 0.1.0 - sneakmax 0.1.0 - sneakmaxtesttemplate 0.1.0 - sneakmaxtesttemplatev2 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 -...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +85 more potentially affected by CVE-2024-31217 via @strapi/plugin-upload (>=4.0.0, <=4.21.1)

@strapi/plugin-upload NPM version =4.0.0, =4.12.2, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.1 - @cowprotocol/cms 0.1.0-rc.5 and more Source cves: CVE-2024-31217 Source advisory: OSV:GHSA-PM9Q-XJ9P-96PM...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +81 more potentially affected by CVE-2024-29181 via @strapi/plugin-content-manager (>=4.0.0, <=4.19.0)

@strapi/plugin-content-manager NPM version =4.0.0, =4.12.2, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.1 - @cowprotocol/cms 0.1.0-rc.5 and more Source cves: CVE-2024-29181 Source advisory: OSV:GHSA-6J89-FRXC-Q26M...

@activix/summernote-image-attributes (1.0.0), @beratkara/summernote-words-length (1.0.0) +133 more potentially affected by CVE-2024-37629 via summernote (>=0.5.9, <=0.8.20)

summernote NPM version =0.5.9, =0.0.3, =0.0.1, =1.0.2, =1.0.0, =2.1.4140, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =1.0.12, =2.0.0 and more Source cves: CVE-2024-37629 Source advisory: OSV:GHSA-CC55-MVQC-G9MG...

@artusx/init (>=1.2.0-beta.1, <=1.2.1), @artusx/rush-utils (>=0.0.1, <=0.0.11) +20 more potentially affected by CVE-2024-35255 via @azure/identity (>=4.0.0, <=4.2.0)

@azure/identity NPM version =4.0.0, =1.2.0-beta.1, =0.0.1, =1.0.0-alpha.20231026.4, =1.0.1-alpha.20231026.4, =2.0.1, =1.19.0-beta.0, =5.112.0, =5.112.0, =0.9.11, =1.0.0, =1.0.1 and more Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

@adinsure-ops/ops-cli (5.3.2), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)

@azure/msal-node NPM version =2.7.0, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

@a11ywatch/core (>=0.8.13, <=0.8.15), @a11ywatch/mav (>=0.7.17, <=0.7.27) +91 more potentially affected by CVE-2024-37168 via @grpc/grpc-js (>=1.9.0, <=1.9.14)

@grpc/grpc-js NPM version =1.9.0, =0.8.13, =0.7.17, =0.9.42, =3.1.3, =0.61.0, =1.61.0, =0.2.2, =0.1.1, =0.0.5, =0.0.6, =0.0.8, =0.0.11, =0.0.5, =1.0.1, =7.1.3 and more Source cves: CVE-2024-37168 Source advisory: OSV:GHSA-7V5V-9H63-CJ86...

-temp-electron-manager-somiibo (0.0.200), 0xpass (>=0.0.2, <=0.0.8) +4332 more potentially affected by CVE-2024-37168 via @grpc/grpc-js (>=1.0.0, <=1.8.21)

@grpc/grpc-js NPM version =1.0.0, =0.0.2, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =2.0.0, =0.3.30, =0.3.30, =0.4.16 and more Source cves: CVE-2024-37168 Source advisory: OSV:GHSA-7V5V-9H63-CJ86...

@1xtr/yc-log-client (>=1.0.6, <=1.1.1), @a11ywatch/a11ywatch (>=0.2.126, <=0.3.82) +82 more potentially affected by CVE-2024-37168 via @grpc/grpc-js (>=1.10.0, <=1.10.8)

@grpc/grpc-js NPM version =1.10.0, =1.0.6, =0.2.126, =0.8.16, =0.9.58, =3.1.9, =0.78.0, =1.68.0, =8.5.1-alpha.4, =3.5.2, =17.8.3, =0.0.1-hw-fix-code-nightly-gha.29105, =0.1.5-hw-fix-code-nightly-gha.29105, =0.1.5-pd-ent-755-gha.29158 and more Source cves: CVE-2024-37168 Source advisory:...

adder-codec-rs (0.1.15), assimp (>=0.0.4, <=0.0.6) +56 more potentially affected by unknown CVE via mmap (0.1.1)

mmap CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mmap and may be impacted: - adder-codec-rs 0.1.15 - assimp =0.0.4, =0.9.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.4.0 - cupi 0.1.0 - cupishift 0.1.0 - cylus 0.1.0 and...

cbqn (>=0.1.1, <=0.2.4), exers (0.2.0) +41 more potentially affected by CVE-2024-38358 via wasmer (>=4.0.0, <=4.3.0-beta.1)

wasmer CARGO version =4.0.0, =0.1.1, =0.3.0, =0.2.0, =0.6.0, =0.78.0, =0.3.0-beta-dev.35, =0.1.0, =0.1.0, =0.3.0-beta-dev.35, =0.3.0-beta-dev.35, =0.3.0, =0.5.0, =0.9.0, =0.0.1, =0.4.0-dev.7 and more Source cves: CVE-2024-38358 Source advisory: OSV:GHSA-55F3-3QVG-8PV5...

s2n-quic (>=1.18.0, <=1.34.0), s2n-quic-tls (>=0.18.2, <=0.34.0) +2 more potentially affected by unknown CVE via s2n-tls (>=0.0.6, <=0.2.6)

s2n-tls CARGO version =0.0.6, =1.18.0, =0.18.2, =0.18.2, =0.0.6, =0.2.6 Source cves: unknown CVE Source advisory: OSV:GHSA-52XF-5P2M-9WRV...

sessions (>=0.2.0, <=0.6.0), viz (>=0.1.0-alpha.3, <=0.1.0-alpha.10) +1 more potentially affected by CVE-2024-36400 via nano-id (>=0.1.1, <=0.3.3)

nano-id CARGO version =0.1.1, =0.2.0, =0.1.0-alpha.3, =0.1.0-alpha.5, =0.1.2 Source cves: CVE-2024-36400 Source advisory: OSV:GHSA-9HC7-6W9R-WJ94...

@directus/api (>=15.0.0, <=19.1.1), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-36128 via directus (>=10.8.3, <=10.11.1)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-36128 Source advisory: OSV:GHSA-632P-P495-25M5...

sessions (>=0.2.0, <=0.6.0), viz (>=0.1.0-alpha.3, <=0.1.0-alpha.10) +1 more potentially affected by CVE-2024-36400 via nano-id (>=0.1.1, <=0.3.3)

nano-id CARGO version =0.1.1, =0.2.0, =0.1.0-alpha.3, =0.1.0-alpha.5, =0.1.2 Source cves: CVE-2024-36400 Source advisory: OSV:RUSTSEC-2024-0343...

0me.sh (0.1.15), 0xrtest (1.0.0) +2392 more potentially affected by CVE-2024-29415 via ip (>=2.0.0, <=2.0.1)

ip NPM version =2.0.0, =1.0.1, =0.0.1, =1.0.3, =0.0.11, =0.0.0-experimental-827-react-checked-states, =0.0.0-experimental-827-react-checked-states, =3.5.0-rc.1 and more Source cves: CVE-2024-29415 Source advisory: OSV:GHSA-2P57-RM9W-GVFP...

@1px-no/img (>=4.2.3, <=4.2.50), @5minds/processcube_engine (>=15.0.0, <=18.0.0-renovate-aee2c3-lw4ddkx5) +148 more potentially affected by CVE-2024-21512 via mysql2 (>=3.0.0, <=3.9.7)

mysql2 NPM version =3.0.0, =4.2.3, =15.0.0, =1.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =0.62.20 and more Source cves: CVE-2024-21512 Source advisory: OSV:GHSA-PMH2-WPJM-FJ45...

@adber/adber-ui (>=0.4.0, <=0.4.21), @datalinkx/common (>=0.0.1, <=0.0.3) +57 more potentially affected by CVE-2023-1001 via vxe-table (>=3.0.11, <=3.7.9-beta.2)

vxe-table NPM version =3.0.11, =0.4.0, =0.0.1, =1.0.0-beta.1, =0.1.43-1, =1.0.11, =1.0.0, =1.0.0, =0.1.0, =0.2.18-beta.6, =1.0.5, =0.1.1, =1.0.8, =1.0.61 - arktos-next-dev 1.0.53 and more Source cves: CVE-2023-1001 Source advisory: OSV:GHSA-2QJP-FG8C-G878...

pug (>=3.0.0-canary-1, <=3.0.2-canary-10) potentially affected by CVE-2024-36361 via pug-code-gen (>=3.0.0-canary-1, <=3.0.2-canary-5)

pug-code-gen NPM version =3.0.0-canary-1, =3.0.0-canary-1, =3.0.2-canary-10 Source cves: CVE-2024-36361 Source advisory: OSV:GHSA-3965-HPX2-Q597...

@abhayb/code-push-server (>=1.0.0, <=1.0.3), @ahbbvc/invoice-generator (1.0.0) +114 more potentially affected by CVE-2024-36361 via pug (>=3.0.0, <=3.0.2)

pug NPM version =3.0.0, =1.0.0, =1.2.0, =2.0.0-17, =0.0.12, =1.0.0, =3.0.1, =18.4.0, =0.0.0-canary-0925da6f11e35cc712cc12337716f846a67c0e4c, =0.0.0-canary-0925da6f11e35cc712cc12337716f846a67c0e4c, =0.0.0-canary-0925da6f11e35cc712cc12337716f846a67c0e4c, =21.4.0 and more Source cves: CVE-2024-36361...

gitoxide (>=0.1.0, <=0.15.0) potentially affected by CVE-2024-35197 via gitoxide-core (>=0.1.0, <=0.17.0)

gitoxide-core CARGO version =0.1.0, =0.1.0, =0.15.0 Source cves: CVE-2024-35197 Source advisory: OSV:GHSA-49JC-R788-3FC9...

endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2024-35197 via gix (0.0.0)

gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2024-35197 Source advisory: OSV:GHSA-49JC-R788-3FC9...

gitoxide (>=0.1.0, <=0.15.0) potentially affected by CVE-2024-35186 via gitoxide-core (>=0.1.0, <=0.17.0)

gitoxide-core CARGO version =0.1.0, =0.1.0, =0.15.0 Source cves: CVE-2024-35186 Source advisory: OSV:GHSA-7W47-3WG8-547C...

endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2024-35186 via gix (0.0.0)

gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2024-35186 Source advisory: OSV:GHSA-7W47-3WG8-547C...

gix-lock (>=5.0.0, <=12.0.1), gix-tempfile (>=5.0.3, <=12.0.1) potentially affected by CVE-2024-35186 via gix-fs (>=0.1.1, <=0.9.1)

gix-fs CARGO version =0.1.1, =5.0.0, =5.0.3, =12.0.1 Source cves: CVE-2024-35186 Source advisory: OSV:GHSA-7W47-3WG8-547C...

gix-lock (>=5.0.0, <=12.0.1), gix-tempfile (>=5.0.3, <=12.0.1) potentially affected by CVE-2024-35186 via gix-fs (>=0.1.1, <=0.9.1)

gix-fs CARGO version =0.1.1, =5.0.0, =5.0.3, =12.0.1 Source cves: CVE-2024-35186 Source advisory: OSV:RUSTSEC-2024-0350...

@aipmorg/lint (1.23.4), @arietta-studio/lint (>=1.0.0, <=1.2.0) +28 more potentially affected by CVE-2024-29651 via @apidevtools/json-schema-ref-parser (11.1.0)

@apidevtools/json-schema-ref-parser NPM version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @apidevtools/json-schema-ref-parser and may be impacted: - @aipmorg/lint 1.23.4 - @arietta-studio/lint =1.0.0, =0.0.0-alpha.7, =0.0.0-alpha.7,...

@bit/bundler (>=12.0.0, <=12.1.3), pakit (>=2.0.0, <=2.3.0) potentially affected by CVE-2024-24293 via @bit/loader (10.0.3)

@bit/loader NPM version 10.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @bit/loader and may be impacted: - @bit/bundler =12.0.0, =2.0.0, =2.3.0 Source cves: CVE-2024-24293 Source advisory: OSV:GHSA-8VR4-H4RR-8PH6...

@okta/jwt-verifier (3.2.1) potentially affected by CVE-2024-34273 via njwt (2.0.0)

njwt NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on njwt and may be impacted: - @okta/jwt-verifier 3.2.1 Source cves: CVE-2024-34273 Source advisory: OSV:GHSA-3HVJ-2783-34X2...

@1px-no/img (>=4.2.3, <=4.2.50), @5minds/processcube_engine (>=15.0.0, <=18.0.0-renovate-aee2c3-lw4ddkx5) +148 more potentially affected by CVE-2024-21512 via mysql2 (>=3.0.0, <=3.9.7)

mysql2 NPM version =3.0.0, =4.2.3, =15.0.0, =1.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =0.62.20 and more Source cves: CVE-2024-21512 Source advisory: SNYK:JS-MYSQL2-6861580...

lavacord (>=2.0.0, <=2.1.4-v4), oceanic.js-interactions (>=0.0.9, <=0.0.11) potentially affected by CVE-2024-34712 via oceanic.js (>=1.6.1-dev.ecc3a90, <=1.9.0)

oceanic.js NPM version =1.6.1-dev.ecc3a90, =2.0.0, =0.0.9, =0.0.11 Source cves: CVE-2024-34712 Source advisory: OSV:GHSA-5H5V-HW44-F6GG...

@accordproject/concerto-ui-react-demo (>=0.82.10-20200221024018, <=0.83.1-20200224151908), @alfresco/adf-testing (6.0.0-A.2-8258) +25 more potentially affected by CVE-2024-4068 via braces (>=3.0.0, <=3.0.2)

braces NPM version =3.0.0, =0.82.10-20200221024018, =0.0.2, =1.0.1, =1.16.0, =0.4.1, =0.4.16, =0.4.17, =0.4.17, =0.4.1, =0.4.26 - @react-jsonschema-form-custom/material-ui-fy2ybeyiz 1.0.0 - @react-jsonschema-form-custom/material-ui-nd6dp3pzm 1.0.0 - @react-jsonschema-form/material-ui-bh9hzkrmk...

@1stg/app-config (>=4.0.0, <=9.0.1), @1stg/common-config (>=4.2.0, <=9.0.1) +1001 more potentially affected by CVE-2024-4067 via micromatch (>=4.0.2, <=4.0.7)

micromatch NPM version =4.0.2, =4.0.0, =4.2.0, =6.0.0, =1.0.1, =15.0.0, =14.4.0, =11.2.0, =0.2.0, =1.0.68, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2024-4067 Source advisory: OSV:GHSA-952P-6RRQ-RCJV...

@directus/api (>=18.0.0, <=19.0.2) potentially affected by CVE-2024-34709 via directus (>=10.10.0, <=10.10.7)

directus NPM version =10.10.0, =18.0.0, =19.0.2 Source cves: CVE-2024-34709 Source advisory: OSV:GHSA-G65H-35F3-X2W3...

@directus/api (>=15.0.0, <=19.0.2), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-34708 via directus (>=10.8.3, <=10.10.7)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-34708 Source advisory: OSV:GHSA-P8V3-M643-4XQX...

thelounge-plugin-shortcuts (1.0.13), thelounge-theme-flat-blue (>=1.4.3, <=1.5.9) +1 more potentially affected by unknown CVE via thelounge (4.2.0)

thelounge NPM version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on thelounge and may be impacted: - thelounge-plugin-shortcuts 1.0.13 - thelounge-theme-flat-blue =1.4.3, =1.4.2, =1.6.0 Source cves: unknown CVE Source advisory:...

0x0lob (0.1.0), 0xdariel (>=0.1.0, <=1.1.2) +7733 more potentially affected by CVE-2024-34351 via next (>=13.4.0, <=14.1.0)

next NPM version =13.4.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =2.0.0-beta.1, =2.0.0-beta.2 - @7c0de/ipmdcm 1.0.0 - @7c0de/moeera 1.0.0 - @90pixel/okr 0.1.0 and more Source cves: CVE-2024-34351 Source advisory: OSV:GHSA-FR5H-RQP8-MJ6G...

24social-ui (>=1.0.0, <=1.0.5), @90pixel/okr (0.1.0) +2105 more potentially affected by CVE-2024-34350 via next (>=13.4.0, <=13.4.20-canary.40)

next NPM version =13.4.0, =1.0.0, =0.1.23, =0.0.2, =1.0.0, =0.0.1, =0.1.0, =0.1.1, =1.1.2, =1.0.0, =0.1.6, =0.1.22 and more Source cves: CVE-2024-34350 Source advisory: OSV:GHSA-77R5-GW3J-2MPF...

leptos-spin-macro (0.1.0), leptos_reactive (>=0.5.5, <=0.7.0-preview2) +1 more potentially affected by CVE-2024-32980 via spin-sdk (2.2.0)

spin-sdk CARGO version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on spin-sdk and may be impacted: - leptos-spin-macro 0.1.0 - leptosreactive =0.5.5, =0.7.0-preview2 - libsql-client 0.33.3 Source cves: CVE-2024-32980 Source advisory:...

@caedman/arma (>=0.1.18, <=0.1.87), @caedman/armdda (>=0.1.85, <=1.1.89) +17 more potentially affected by CVE-2024-34341 +1 more via trix (>=0.9.1, <=1.3.1)

trix NPM version =0.9.1, =0.1.18, =0.1.85, =0.0.1, =0.1.0, =0.2.0, =0.1.7, =7.8.0, =0.1.0, =1.0.0, =0.0.2, =3.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-34341, CVE-2024-43368 Source advisory: OSV:GHSA-QJQP-XR96-CJ99...

lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2024-34341 +1 more via trix (>=2.0.8, <=2.0.10)

trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2024-34341, CVE-2024-43368 Source advisory: OSV:GHSA-QJQP-XR96-CJ99...

@boxwood-connor/react-doc-viewer (>=1.0.1, <=1.0.2), @bty/business-components (>=1.0.2, <=1.0.4) +65 more potentially affected by CVE-2024-34342 via react-pdf (>=7.1.2, <=7.7.1)

react-pdf NPM version =7.1.2, =1.0.1, =1.0.2, =0.2.70, =0.2.57, =0.1.2-1.beta-1, =0.0.8, =0.3.21, =0.0.1, =1.14.0, =1.0.13, =1.1.0, =0.1.10, =0.0.16-8.14204.alpha.1, =0.0.182-alpha.30184.1 and more Source cves: CVE-2024-34342 Source advisory: OSV:GHSA-87HQ-Q4GP-9WR4...

@aidc/chat-ui-plugin-knowledge (>=0.5.43-beta.0, <=0.5.44), @aidc/saas-ui (>=0.5.43-beta.0, <=0.5.44) +23 more potentially affected by CVE-2024-34342 +1 more via pdfjs-dist (>=4.0.189, <=4.1.392)

pdfjs-dist NPM version =4.0.189, =0.5.43-beta.0, =0.5.43-beta.0, =0.5.43-beta.0, =0.5.43-beta.0, =0.5.43-beta.0, =8.0.0, =0.0.0-test, =1.8.4-beta.1, =0.2.1, =1.0.4, =1.6.0-dev.0-update-pdfjs-dist, =1.4.0, =1.5.1 and more Source cves: CVE-2024-34342, CVE-2024-4367 Source advisory:...

@net7/boilerplate-arianna (>=5.6.0, <=5.6.11), myrta-ui (>=17.0.56, <=17.0.57) +1 more potentially affected by CVE-2024-4367 via ngx-extended-pdf-viewer (>=19.2.0, <=19.7.1)

ngx-extended-pdf-viewer NPM version =19.2.0, =5.6.0, =17.0.56, =18.0.0-next.0, =18.0.0-next.3 Source cves: CVE-2024-4367 Source advisory: SNYK:JS-NGXEXTENDEDPDFVIEWER-11790310...

3scale (>=0.3.2, <=0.6.2), 3scale-cm (0.5.1) +188 more potentially affected by CVE-2024-34391 via libxmljs (>=1.0.9, <=1.0.11)

libxmljs NPM version =1.0.9, =0.3.2, =0.3.2, =1.10.4, =1.8.1, =1.8.8, =1.0.0, =1.1.0, =0.1.0, =250.1010.0, =250.1018.0, =252.1021.0 and more Source cves: CVE-2024-34391 Source advisory: OSV:GHSA-6433-X5P4-8JC7...