5g-fe-components (>=1.0.6, <=1.1.0), @0xgg/echomd (>=1.0.0, <=1.0.4) +1316 more potentially affected by CVE-2024-28245 via katex (>=0.11.0, <=0.16.9)

katex NPM version =0.11.0, =1.0.6, =1.0.0, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.53.0, =0.48.0, =0.53.0, =0.16.0, =0.49.0, =0.76.0, =1.0.7, =1.2.1 and more Source cves: CVE-2024-28245 Source advisory: OSV:GHSA-F98W-7CXR-FF2H...

@autoanki/plugin-content-markdown (>=0.0.3, <=0.1.9), @awesome-myst/myst-awesome (>=0.0.1, <=0.0.7) +341 more potentially affected by CVE-2024-28244 via katex (>=0.15.4, <=0.16.9)

katex NPM version =0.15.4, =0.0.3, =0.0.1, =1.0.12, =1.0.1, =1.2.0, =1.0.8, =1.6.254, =1.0.8, =0.0.2, =0.1.0, =0.1.0, =1.12.1, =1.1.1-alpha.0, =1.12.0, =1.65.0 and more Source cves: CVE-2024-28244 Source advisory: OSV:GHSA-CVR6-37GX-V8WC...

@0xgg/echomd (>=1.0.0, <=1.0.4), @21st-night/analytics-web (>=0.65.0, <=0.73.8) +1158 more potentially affected by CVE-2024-28243 via katex (>=0.12.0, <=0.16.9)

katex NPM version =0.12.0, =1.0.0, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.53.0, =0.48.0, =0.53.0, =0.16.0, =0.49.0, =0.76.0, =1.0.7, =0.3.0, =0.6.2 and more Source cves: CVE-2024-28243 Source advisory: OSV:GHSA-64FM-8HW2-V72W...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +2100 more potentially affected by CVE-2024-28863 via tar (>=6.0.0, <=6.2.0)

tar NPM version =6.0.0, =1.0.0, =0.0.1, =1.4.0-beta, =0.0.9, =0.0.1, =1.6.0, =4.14.0, =1.0.0, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.7, =0.4.0-next.28 and more Source cves: CVE-2024-28863 Source advisory: OSV:GHSA-F5X3-32G6-XQ36...

@alex91ivanov/ngx-run-builder (1.0.0), @alfresco/adf-testing (6.0.0-A.2-8258) +137 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (>=5.0.0, <=5.3.3)

webpack-dev-middleware NPM version =5.0.0, =2.0.70, =0.12.0, =13.0.0, =0.9.2, =12.0.0-beta.0, =12.1.0-next.5, =1.0.0-alpha.32, =0.0.15, =6.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2024-29180, CVE-2026-76844 Source advisory: OSV:GHSA-WR3J-PWJ9-HQQ6...

@angular-architects/build-angular (16.2.0-next.2), @angular-devkit/build-angular (>=15.1.0-next.0, <=17.3.1) +165 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (>=6.0.0, <=6.1.1)

webpack-dev-middleware NPM version =6.0.0, =15.1.0-next.0, =9.3.0, =1.12.3, =4.20.4, =0.1.0, =3.1.0-0, =3.0.0-alpha.14, =15.1.0-snapshot-1674521814202, =16.0.0-next.6, =2.6.0, =8.4.0-rc.2, =7.0.0-rc.11, =7.0.0-rc.16 and more Source cves: CVE-2024-29180, CVE-2026-76844 Source advisory:...

@moneko/core (>=3.9.17-beta.25, <=3.11.1-beta.2), @proteinjs/server (>=1.0.1, <=2.1.10) +2 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (7.0.0)

webpack-dev-middleware NPM version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on webpack-dev-middleware and may be impacted: - @moneko/core =3.9.17-beta.25, =1.0.1, =1.1.0, =0.0.101, =0.0.113 Source cves: CVE-2024-29180, CVE-2026-76844 Source...

a-gpt (>=0.1.0, <=0.4.0), aa2 (>=0.9.0, <=0.9.1) +3700 more potentially affected by unknown CVE via yaml-rust (>=0.2.2, <=0.4.5)

yaml-rust CARGO version =0.2.2, =0.1.0, =0.9.0, =1.0.0, =0.1.13, =0.0.9, =0.0.1, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.1.1-alpha.0, =0.1.0, =0.1.27, =0.2.2, =0.2.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0320...

aliyundrive-webdav (>=1.2.0, <=1.10.1), simple-hyper-server-tls (>=0.1.0, <=0.3.2) +1 more potentially affected by CVE-2024-28854 via tls-listener (>=0.3.0, <=0.5.1)

tls-listener CARGO version =0.3.0, =1.2.0, =0.1.0, =0.3.2 - yahf 0.0.2 Source cves: CVE-2024-28854 Source advisory: OSV:GHSA-2QPH-QPVM-2QF7...

aliyundrive-webdav (>=1.2.0, <=1.10.1), simple-hyper-server-tls (>=0.1.0, <=0.3.2) +1 more potentially affected by CVE-2024-28854 via tls-listener (>=0.3.0, <=0.5.1)

tls-listener CARGO version =0.3.0, =1.2.0, =0.1.0, =0.3.2 - yahf 0.0.2 Source cves: CVE-2024-28854 Source advisory: OSV:RUSTSEC-2024-0341...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42489 more potentially affected by CVE-2024-28849 via follow-redirects (>=1.0.0, <=1.15.5)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2024-28849 Source advisory: OSV:GHSA-CXJH-PQWP-8MFP...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +3 more potentially affected by CVE-2024-1765 via quiche (>=0.10.0, <=0.18.0)

quiche CARGO version =0.10.0, =0.1.0, =0.6.9 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2024-1765 Source advisory: OSV:GHSA-78WX-JG4J-5J6G...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +3 more potentially affected by CVE-2024-1410 via quiche (>=0.10.0, <=0.18.0)

quiche CARGO version =0.10.0, =0.1.0, =0.6.9 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2024-1410 Source advisory: OSV:GHSA-XHG9-XWCH-VR7X...

@directus/api (>=15.0.0, <=17.1.0), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-28239 via directus (>=10.8.3, <=10.9.3)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-28239 Source advisory: OSV:GHSA-FR3W-2P22-6W7P...

@directus/api (>=15.0.0, <=17.1.0), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-28238 via directus (>=10.8.3, <=10.9.3)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-28238 Source advisory: OSV:GHSA-2CCR-G2RV-H677...

cortex-cli (>=2.0.8, <=2.1.1) potentially affected by CVE-2024-28176 via jose-node-cjs-runtime (>=4.6.0, <=4.10.0)

jose-node-cjs-runtime NPM version =4.6.0, =2.0.8, =2.1.1 Source cves: CVE-2024-28176 Source advisory: OSV:GHSA-HHHV-Q57G-882Q...

@decentralized-identity/ion-sdk (>=0.1.0, <=0.4.1), @tadashi/jwt (>=6.0.0, <=7.0.0) +21 more potentially affected by CVE-2024-28176 via jose (>=2.0.1, <=2.0.5)

jose NPM version =2.0.1, =0.1.0, =6.0.0, =3.0.4, =3.0.4, =3.0.5, =3.0.4, =3.0.5, =3.0.4, =3.0.6, =3.0.3, =3.0.5, =3.1.0, =2.3.2, =0.1.0, =1.2.4 and more Source cves: CVE-2024-28176 Source advisory: OSV:GHSA-HHHV-Q57G-882Q...

@adobe/helix-google-support (>=1.3.4, <=3.0.8), @adobe/helix-html-pipeline (>=3.0.0, <=5.0.11) +454 more potentially affected by CVE-2024-28176 via jose (>=3.7.0, <=4.15.4)

jose NPM version =3.7.0, =1.3.4, =3.0.0, =1.11.39, =8.0.0, =2.1.2, =1.6.0, =2.1.1, =1.5.3, =7.1.0, =0.1.0, =1.23.2, =0.1.1, =0.1.4 and more Source cves: CVE-2024-28176 Source advisory: OSV:GHSA-HHHV-Q57G-882Q...

ardaku (0.1.0), ayaka-model (0.2.0) +6 more potentially affected by CVE-2024-28123 via wasmi (>=0.19.0, <=0.30.0)

wasmi CARGO version =0.19.0, =0.4.0, =0.1.0, =0.30.0 Source cves: CVE-2024-28123 Source advisory: OSV:GHSA-75JP-VQ8X-H4CQ...

inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2024-28101 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2024-28101 Source advisory: OSV:GHSA-CGQF-3CQ5-WVCJ...

vl-convert-rs (0.8.0) potentially affected by CVE-2024-27936 via deno_runtime (0.105.0)

denoruntime CARGO version 0.105.0 is affected by a known vulnerability. The following packages have a transitive dependency on denoruntime and may be impacted: - vl-convert-rs 0.8.0 Source cves: CVE-2024-27936 Source advisory: OSV:GHSA-M4PQ-FV2W-6HRW...

aide (>=0.1.0, <=0.4.3), bpxe (>=0.1.0, <=0.1.2) +66 more potentially affected by unknown CVE via linkme (>=0.1.6, <=0.2.10)

linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0407...

aaa (>=0.1.0, <=1.1.1), abbegm (0.5.0) +1501 more potentially affected by CVE-2024-27308 via mio (>=0.7.14, <=0.8.8)

mio CARGO version =0.7.14, =0.1.0, =2.0.0-beta.1, =0.9.0, =0.9.0, =0.1.0, =0.1.0, =1.0.9, =1.0.11 - aminograph 0.0.1 and more Source cves: CVE-2024-27308 Source advisory: OSV:GHSA-R8W9-5WCG-VFJ7...

@3c-node-red/runtime (3.1.6), @adeunis/node-red-contrib-adeunis-codecs (1.0.0) +244 more potentially affected by CVE-2024-27307 via jsonata (>=1.5.0, <=1.8.6)

jsonata NPM version =1.5.0, =20.2.3, =5.0.0-aws-sdk-v3.2, =0.8.0, =0.0.1, =1.0.0, =1.0.1, =2.0.0, =2.0.4 - @elastic.io/batching-library 2.0.1-dev.4 and more Source cves: CVE-2024-27307 Source advisory: OSV:GHSA-FQG8-VFV7-8FJ8...

@activepieces/piece-json (0.1.7), @bifravst/muninn-proto (>=5.0.0, <=5.2.0) +10 more potentially affected by CVE-2024-27307 via jsonata (>=2.0.0, <=2.0.3)

jsonata NPM version =2.0.0, =5.0.0, =2.3.132, =1.0.0, =1.0.0, =0.14.0, =5.1.0, =4.0.0, =1.0.7, =1.0.17 - renovate 36.109.4 Source cves: CVE-2024-27307 Source advisory: OSV:GHSA-FQG8-VFV7-8FJ8...

@attq/blackboox (>=0.4.0, <=0.5.5), @overwolf/ow-electron-builder (>=24.7.0-beta.0, <=24.7.0) +11 more potentially affected by CVE-2024-27303 via app-builder-lib (>=24.0.0-alpha.1, <=24.13.1)

app-builder-lib NPM version =24.0.0-alpha.1, =0.4.0, =24.7.0-beta.0, =1.0.0-canary.0, =24.6.3, =24.0.0-alpha.1, =24.0.0-alpha.1, =24.0.0-alpha.1, =1.0.0, =24.0.0-alpha.1, =24.0.0-alpha.1, =24.0.0-alpha.1, =24.0.0-alpha.1, =24.13.1 Source cves: CVE-2024-27303 Source advisory: OSV:GHSA-R4PF-3V7R-HH...

aaa (>=0.1.0, <=1.1.1), abbegm (0.5.0) +1501 more potentially affected by CVE-2024-27308 via mio (>=0.7.14, <=0.8.8)

mio CARGO version =0.7.14, =0.1.0, =2.0.0-beta.1, =0.9.0, =0.9.0, =0.1.0, =0.1.0, =1.0.9, =1.0.11 - aminograph 0.0.1 and more Source cves: CVE-2024-27308 Source advisory: OSV:RUSTSEC-2024-0019...

minibili (>=0.3.0, <=0.3.1), perf-hook (>=1.0.1, <=1.0.4) +2 more potentially affected by unknown CVE via @sentry/react-native (>=5.16.0, <=5.17.0)

@sentry/react-native NPM version =5.16.0, =0.3.0, =1.0.1, =1.2.3, =1.2.7 - sentry-expo 7.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-68C2-4MPX-QH95...

sn-cicd (>=4.6.12, <=4.6.17) potentially affected by CVE-2023-52555 via mongo-express (1.0.0-alpha.1)

mongo-express NPM version 1.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongo-express and may be impacted: - sn-cicd =4.6.12, =4.6.17 Source cves: CVE-2023-52555 Source advisory: OSV:GHSA-FFFG-CWC9-XVJ7...

4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1505 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts (>=4.5.0, <=4.9.5)

@openzeppelin/contracts NPM version =4.5.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2024-27094 Source advisory: OSV:GHSA-9VX6-7XXF-X967...

@1inch/calldata-compressor (>=0.0.6, <=0.0.7), @1inch/delegating (>=1.1.0, <=2.0.0) +29 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts (>=5.0.0, <=5.0.1)

@openzeppelin/contracts NPM version =5.0.0, =0.0.6, =1.1.0, =3.2.0, =4.0.0-prerelease-16, =4.0.1, =2.0.0-prerelease, =3.3.0, =1.2.0, =2.0.0-rc.0, =0.0.2-00080dc-272, =1.0.0, =2.5.5, =2.7.0-3 and more Source cves: CVE-2024-27094 Source advisory: OSV:GHSA-9VX6-7XXF-X967...

@etherisc/gif-next (>=0.0.2-00080dc-272, <=0.0.2-ff8087d-237), @ethsign/sign-protocol-evm (>=1.0.0, <=1.1.3) +9 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts-upgradeable (>=5.0.0, <=5.0.1)

@openzeppelin/contracts-upgradeable NPM version =5.0.0, =0.0.2-00080dc-272, =1.0.0, =2.5.5, =1.0.0, =1.0.0-beta-rc1, =0.0.1, =1.0.1, =0.1.0-alpha.8, =0.1.0 Source cves: CVE-2024-27094 Source advisory: OSV:GHSA-9VX6-7XXF-X967...

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +432 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts-upgradeable (>=4.5.0, <=4.9.5)

@openzeppelin/contracts-upgradeable NPM version =4.5.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =0.2.1-alpha, =0.2.1-beta2 and more Source cves: CVE-2024-27094 Source advisory:...

acme-dns-rust (>=1.0.0, <=1.0.6), asfa (>=0.1.0, <=0.5.2) +72 more potentially affected by unknown CVE via whoami (>=0.5.3, <=1.2.3)

whoami CARGO version =0.5.3, =1.0.0, =0.1.0, =3.0.0, =0.60.0, =0.60.0, =0.1.0, =0.27.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.1, =0.0.0, =0.0.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0020...

@rocketmakers/prettier-config (>=1.0.1, <=2.1.0), @rocketmakers/stylelint-config (>=1.0.1, <=2.1.0) potentially affected by CVE-2024-1899 via showdown (2.0.1)

showdown NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on showdown and may be impacted: - @rocketmakers/prettier-config =1.0.1, =1.0.1, =2.1.0 Source cves: CVE-2024-1899 Source advisory: OSV:GHSA-RMMH-P597-PPVV...

@alfresco/adf-testing (6.0.0-A.2-8258), @avnet-iotc/iotc-demo (1.0.0-beta-2) +121 more potentially affected by CVE-2024-27088 via es5-ext (>=0.10.53, <=0.10.62)

es5-ext NPM version =0.10.53, =0.30.77, =0.30.77, =0.29.0, =0.29.0, =0.29.0, =0.30.46, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.30.66 and more Source cves: CVE-2024-27088 Source advisory: OSV:GHSA-4GMJ-3P3H-GM8H...

org.webjars:angular-markdown-directive (0.3.0) potentially affected by CVE-2024-1899 via org.webjars:showdown (0.3.1)

org.webjars:showdown MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:showdown and may be impacted: - org.webjars:angular-markdown-directive 0.3.0 Source cves: CVE-2024-1899 Source advisory: SNYK:JAVA-ORGWEBJARS-8685134...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), org.webjars.npm:github-com-showdownjs-ng-showdown (1.1.0) +3 more potentially affected by CVE-2024-1899 via org.webjars.npm:showdown (>=1.9.1, <=2.1.0)

org.webjars.npm:showdown MAVEN version =1.9.1, =2.0.0, =1.0.2, =1.0.3 - org.webjars.npm:showdown-prism 0.2.0 Source cves: CVE-2024-1899 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-8685132...

org.webjars.bower:ng-swagger-ui (0.0.4) potentially affected by CVE-2024-1899 via org.webjars.bower:showdown (1.7.6)

org.webjars.bower:showdown MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bower:showdown and may be impacted: - org.webjars.bower:ng-swagger-ui 0.0.4 Source cves: CVE-2024-1899 Source advisory:...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +1094 more potentially affected by CVE-2024-21501 via sanitize-html (>=2.1.0, <=2.12.0)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =3.0.0, =1.3.0, =0.2.0-a0, =1.0.0, =3.7.0, =0.2.47, =0.4.37, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.8.21 and more Source cves: CVE-2024-21501 Source advisory: OSV:GHSA-RM97-X556-Q36H...

@adamlonsdale/backstage-plugin-armorcode-backend (>=0.0.1-alpha, <=0.0.4), @austin-garrard/backstage-plugin-backend (>=0.0.1-alpha.22, <=0.0.1) +194 more potentially affected by CVE-2024-26150 via @backstage/backend-common (>=0.0.0-nightly-20220708025041, <=0.17.0)

@backstage/backend-common NPM version =0.0.0-nightly-20220708025041, =0.0.1-alpha, =0.0.1-alpha.22, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-20220709024234, =0.0.0-nightly-20220811024336, =0.0.0-nightly-20240116021644, =0.0.0-nightly-20220709024234, =0.0.0-nightly-2021101322257,...

@bundly/ic-core-js (>=0.1.0, <=0.4.2-rc.4), @bundly/ic-react (>=0.1.0, <=0.4.2-rc.4) +8 more potentially affected by CVE-2024-1631 via @dfinity/auth-client (>=0.20.2, <=0.21.4)

@dfinity/auth-client NPM version =0.20.2, =0.1.0, =0.1.0, =0.1.1, =0.0.1, =0.0.1, =0.0.3, =0.0.2, =0.0.38-next-2023-12-19, =0.0.1, =0.0.7 Source cves: CVE-2024-1631 Source advisory: OSV:GHSA-C9VV-FHGV-CJC3...

@bundly/ic-core-js (>=0.1.0, <=0.4.2-rc.4), @bundly/ic-react (>=0.1.0, <=0.4.2-rc.4) +10 more potentially affected by CVE-2024-1631 via @dfinity/identity (>=0.20.2, <=0.21.4)

@dfinity/identity NPM version =0.20.2, =0.1.0, =0.1.0, =0.1.1, =0.0.1, =0.0.1, =0.0.44, =0.0.38-next-2023-12-19, =1.0.0, =0.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-1631 Source advisory: OSV:GHSA-C9VV-FHGV-CJC3...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58366 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58366 Source advisory: OSV:GHSA-Q3GG-M8HR-H4X4...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58365 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58365 Source advisory: OSV:GHSA-6WR5-JMPR-MJCX...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58364 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58364 Source advisory: OSV:GHSA-8XFF-473H-F863...

@apolitical/component-library (>=1.7.0-beta.1, <=10.5.2), @apolitical/styleguide2 (>=3.17.0-rc.1, <=7.8.1) +60 more potentially affected by CVE-2024-21535 via markdown-to-jsx (>=7.0.0, <=7.3.2)

markdown-to-jsx NPM version =7.0.0, =1.7.0-beta.1, =3.17.0-rc.1, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =6.1.1, =7.3.2, =0.1.0, =0.9.1, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =0.1.0-alpha.39, =1.1.1-beta.3, =1.2.2 and more Source cves: CVE-2024-21535 Source advisory:...

7ghost (>=4.11.0, <=4.11.46), @21epub/text-block (>=0.0.1, <=1.2.1) +1094 more potentially affected by CVE-2024-21501 via sanitize-html (>=2.1.0, <=2.12.0)

sanitize-html NPM version =2.1.0, =4.11.0, =0.0.1, =3.0.0, =1.3.0, =0.2.0-a0, =1.0.0, =3.7.0, =0.2.47, =0.4.37, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.8.21 and more Source cves: CVE-2024-21501 Source advisory: SNYK:JS-SANITIZEHTML-6256334...

@persistr/cli (>=2.7.1, <=2.9.1), spidersharkcli (>=0.0.4, <=0.0.8) potentially affected by CVE-2024-21524 via node-stringbuilder (2.2.7)

node-stringbuilder NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-stringbuilder and may be impacted: - @persistr/cli =2.7.1, =0.0.4, =0.0.8 Source cves: CVE-2024-21524 Source advisory: SNYK:JS-NODESTRINGBUILDER-6421617...

@openwebrx-js/cli (>=0.1.0, <=0.1.7), @thrashplay/music (0.3.5) +2 more potentially affected by CVE-2024-21522 via audify (1.10.1)

audify NPM version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on audify and may be impacted: - @openwebrx-js/cli =0.1.0, =0.1.7 - @thrashplay/music 0.3.5 - emoemu 0.2.0 - kitty-media-player 0.3.0 Source cves: CVE-2024-21522 Source advisory:...