lillinput (>=0.2.1, <=0.3.0), lillinput-cli (0.3.0) potentially affected by CVE-2024-58266 via shlex (1.1.0)

shlex CARGO version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shlex and may be impacted: - lillinput =0.2.1, =0.3.0 - lillinput-cli 0.3.0 Source cves: CVE-2024-58266 Source advisory: OSV:RUSTSEC-2024-0006...

@aem-vite/import-rewriter (>=5.0.1, <=6.0.1), @aem-vite/vite-aem-plugin (>=1.0.0-alpha.1, <=2.3.1) +145 more potentially affected by CVE-2024-23331 via vite (>=2.7.0, <=2.9.16)

vite NPM version =2.7.0, =5.0.1, =1.0.0-alpha.1, =3.0.0-beta.5, =3.0.0-beta.2, =0.9.1, =1.1.0-next.4, =0.0.0-experimental-17c6886-20220324, =0.0.0-canary-20220428124037, =0.1.5, =0.0.11, =0.0.12, =0.0.1, =0.1.5, =0.0.11, =0.0.37, =0.0.42 and more Source cves: CVE-2024-23331 Source advisory:...

@aklesky/vite-config (>=0.7.9, <=0.9.0), @angular-devkit/build-angular (>=17.1.0-next.0, <=17.1.0) +91 more potentially affected by CVE-2024-23331 via vite (>=5.0.0, <=5.0.11)

vite NPM version =5.0.0, =0.7.9, =17.1.0-next.0, =1.0.25-beta.0, =0.5.0, =0.22.0, =1.0.0-rc.12, =4.20.4, =1.0.0-dev.74fcb60, =1.0.274, =0.40.2, =0.0.7, =0.0.1, =11.12.0-beta.0, =11.13.0 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

@akrc/vidocs (>=0.0.0, <=0.0.2), @alexzzz/npms (>=0.0.5, <=0.2.0) +136 more potentially affected by CVE-2024-23331 via vite (>=3.0.0, <=3.2.7)

vite NPM version =3.0.0, =0.0.0, =0.0.5, =1.0.1, =1.0.1, =3.2.0, =1.11.2, =0.0.37, =0.0.35, =0.2.3, =0.0.0-canary-20220718083044, =0.0.6, =0.1.0, =0.0.3, =6.24.0, =7.12.2 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +415 more potentially affected by CVE-2024-23331 via vite (>=4.0.0, <=4.5.1)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by unknown CVE via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-58J9-J2FJ-V8F4...

a2 (>=0.2.0, <=0.5.3), abacuz (>=0.1.0, <=0.1.1) +4574 more potentially affected by unknown CVE via h2 (>=0.1.26, <=0.3.21)

h2 CARGO version =0.1.26, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8R5V-VM4M-4G25...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58370 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58370 Source advisory: OSV:GHSA-6R8P-HPG7-825G...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58368 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58368 Source advisory: OSV:GHSA-M24X-R6Q3-2VP9...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2024-58369 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-58369 Source advisory: OSV:GHSA-JM4V-58R5-66HJ...

arcon_compiler (>=0.1.0, <=0.1.1), astrology (>=0.1.0, <=0.1.55) +18 more potentially affected by unknown CVE via ferris-says (>=0.1.2, <=0.2.1)

ferris-says CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =10.10.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V363-RRF2-5FMJ...

a2 (>=0.2.0, <=0.5.3), abacuz (>=0.1.0, <=0.1.1) +4574 more potentially affected by CVE-2019-9514 via h2 (>=0.1.26, <=0.3.21)

h2 CARGO version =0.1.26, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: CVE-2019-9514 Source advisory: OSV:RUSTSEC-2024-0003...

accountpro (>=1.0.0, <=2.1.9) potentially affected by unknown CVE via dicsord.js-selfbot-v13 (0.0.1-security)

dicsord.js-selfbot-v13 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on dicsord.js-selfbot-v13 and may be impacted: - accountpro =1.0.0, =2.1.9 Source cves: unknown CVE Source advisory: OSV:MAL-2024-114...

aries-askar (0.1.2), indy-credx (>=0.2.0, <=0.3.1) +5 more potentially affected by CVE-2024-21670 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.0.6, =0.0.8 Source cves: CVE-2024-21670 Source advisory: OSV:GHSA-R78F-4Q2Q-HVV4...

aries-askar (0.1.2), indy-credx (>=0.2.0, <=0.3.1) +5 more potentially affected by CVE-2024-22192 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.0.6, =0.0.8 Source cves: CVE-2024-22192 Source advisory: OSV:GHSA-6698-MHXX-R84G...

indy-data-types (0.6.0) potentially affected by CVE-2022-31021 via anoncreds-clsignatures (0.1.0)

anoncreds-clsignatures CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on anoncreds-clsignatures and may be impacted: - indy-data-types 0.6.0 Source cves: CVE-2022-31021 Source advisory: OSV:GHSA-2Q6J-GQC4-4GW3...

aries-askar (0.1.2), indy-credx (>=0.2.0, <=0.3.1) +5 more potentially affected by CVE-2022-31021 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.0.6, =0.0.8 Source cves: CVE-2022-31021 Source advisory: OSV:GHSA-2Q6J-GQC4-4GW3...

crabsay (>=0.1.0, <=0.1.1), craterfinder (>=0.1.0, <=0.1.1) +11 more potentially affected by unknown CVE via ferris-says (0.2.1)

ferris-says CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on ferris-says and may be impacted: - crabsay =0.1.0, =0.1.0, =0.1.0, =0.1.1 - rs-lean 0.1.0 - rust-study 0.1.0 - rustbyexample 0.2.0 - rusty-grep 0.1.0 - rusty-redis 0.1.0...

@coinbase/wallet-mobile-sdk (>=0.1.1, <=1.0.10), @getvolume/react-native (>=0.3.2, <=2.2.3) +44 more potentially affected by CVE-2024-21668 via react-native-mmkv (>=2.1.0, <=2.10.2)

react-native-mmkv NPM version =2.1.0, =0.1.1, =0.3.2, =0.66.4-beta.18, =1.0.0, =1.0.0, =6.0.0, =1.0.0, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.89 and more Source cves: CVE-2024-21668 Source advisory: OSV:GHSA-4JH3-6JHV-2MGP...

http-proxy-with-cors (>=1.2.2, <=1.2.4) potentially affected by CVE-2023-51701 via @fastify/reply-from (9.1.0)

@fastify/reply-from NPM version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/reply-from and may be impacted: - http-proxy-with-cors =1.2.2, =1.2.4 Source cves: CVE-2023-51701 Source advisory: OSV:GHSA-V2V2-HPH8-Q5XP...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2024-52813 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-52813 Source advisory: OSV:RUSTSEC-2024-0434...

@backstage/backend-common (>=0.0.0-nightly-20230111022819, <=0.0.0-nightly-20240612021718), @backstage/backend-defaults (>=0.0.0-nightly-20220811024336, <=0.0.0-nightly-20260904022803) +27 more potentially affected by CVE-2023-6944 via @backstage/backend-app-api (>=0.0.0-nightly-20220811024336, <=0.0.0-nightly-20260904022803)

@backstage/backend-app-api NPM version =0.0.0-nightly-20220811024336, =0.0.0-nightly-20230111022819, =0.0.0-nightly-20220811024336, =0.0.0-nightly-20240214021031, =0.0.0-nightly-20220813024304, =0.0.0-nightly-2021101222132, =0.0.0-nightly-20240816021916, =0.0.0-nightly-20240929023448,...

etclient (0.3.0), eth-utils (>=0.1.1, <=0.2.0) +32 more potentially affected by CVE-2024-21629 via evm (>=0.7.1, <=0.33.1)

evm CARGO version =0.7.1, =0.1.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2024-21629 Source advisory: OSV:GHSA-27WG-99G8-2V4V...

managed-component-to-cloudflare-worker (1.5.2) potentially affected by CVE-2023-7080 via wrangler (2.0.23)

wrangler NPM version 2.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on wrangler and may be impacted: - managed-component-to-cloudflare-worker 1.5.2 Source cves: CVE-2023-7080 Source advisory: OSV:GHSA-F8MP-X433-5WPF...

@clevercanyon/dev-deps (>=1.0.274, <=1.0.287), @flare-city/test (>=0.2.0, <=0.4.3) potentially affected by CVE-2023-7080 via wrangler (>=3.15.0, <=3.18.0)

wrangler NPM version =3.15.0, =1.0.274, =0.2.0, =0.4.3 Source cves: CVE-2023-7080 Source advisory: OSV:GHSA-F8MP-X433-5WPF...

@clevercanyon/dev-deps (>=1.0.274, <=1.0.287), @flare-city/test (>=0.2.0, <=0.4.3) potentially affected by CVE-2023-7079 via wrangler (>=3.15.0, <=3.18.0)

wrangler NPM version =3.15.0, =1.0.274, =0.2.0, =0.4.3 Source cves: CVE-2023-7079 Source advisory: OSV:GHSA-CFPH-4QQH-W828...

@darajs/components (>=1.0.0-a.1, <=1.5.1), @datalayer-jupyter/widgets (>=0.0.5, <=0.0.6) +14 more potentially affected by CVE-2023-46308 via plotly.js (>=2.0.0, <=2.23.2)

plotly.js NPM version =2.0.0, =1.0.0-a.1, =0.0.5, =0.0.1, =0.47.0, =0.50.3, =1.0.0, =0.0.23, =1.33.0-rc.1, =1.0.0, =1.17.1, =0.1.3, =0.23.0, =1.0.0, =0.40.38, =0.40.80 and more Source cves: CVE-2023-46308 Source advisory: OSV:GHSA-WJC4-73Q6-GV3M...

dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +25 more potentially affected by CVE-2023-50711 via vmm-sys-util (>=0.7.0, <=0.11.2)

vmm-sys-util CARGO version =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.5.0, =0.1.0, =0.9.3, =0.3.1, =0.6.1, =0.1.1, =0.4.0, =0.4.1 and more Source cves: CVE-2023-50711 Source advisory: OSV:GHSA-875G-MFP6-G7F9...

dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +25 more potentially affected by CVE-2023-50711 via vmm-sys-util (>=0.7.0, <=0.11.2)

vmm-sys-util CARGO version =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.5.0, =0.1.0, =0.9.3, =0.3.1, =0.6.1, =0.1.1, =0.4.0, =0.4.1 and more Source cves: CVE-2023-50711 Source advisory: OSV:RUSTSEC-2024-0002...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42481 more potentially affected by CVE-2023-26159 via follow-redirects (>=1.0.0, <=1.15.3)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2023-26159 Source advisory: OSV:GHSA-JCHW-25XP-JWWC...

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42481 more potentially affected by CVE-2023-26159 via follow-redirects (>=1.0.0, <=1.15.3)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2023-26159 Source advisory: SNYK:JS-FOLLOWREDIRECTS-6141137...

@askcodebase/wrangler (>=3.15.0, <=3.15.8), @astrojs/cloudflare (>=0.0.0-404-fix-20231115224256, <=8.0.1) +17 more potentially affected by CVE-2023-7078 via miniflare (>=3.20230904.0, <=3.20231030.1)

miniflare NPM version =3.20230904.0, =3.15.0, =0.0.0-404-fix-20231115224256, =1.0.274, =0.0.0-1e516e3, =0.9.0, =0.0.5, =0.2.0, =0.0.1, =0.0.6, =0.0.0-next-00210fa-20230928143646, =0.0.0-next-00210fa-20230928143646, =0.0.1, =0.0.1, =1.0.6, =2.0.7 and more Source cves: CVE-2023-7078 Source advisory...

@58860ed6ffd9e897/gold-finger-extension (1.0.2), @airfleet/wordpress-dev (>=2.2.0, <=2.2.4) +256 more potentially affected by CVE-2023-52079 via msgpackr (>=1.2.9, <=1.10.0)

msgpackr NPM version =1.2.9, =2.2.0, =1.2.0, =0.3.0, =2.9.3, =2.3.0, =1.9.13, =0.84.3, =1.0.73, =1.0.73, =4.0.2-cmmn, =3.0.5, =1.0.55, =2.0.10 and more Source cves: CVE-2023-52079 Source advisory: OSV:GHSA-7HPJ-7HHX-2FGX...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +17232 more potentially affected by unknown CVE via lodash (>=4.0.0, <=4.17.16)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =0.0.1, =0.0.3 and more Source cves: unknown CVE Source advisory: SNYK:JS-LODASH-6139239...

blinksocks-gui (>=0.1.0, <=0.2.1) potentially affected by CVE-2023-50481 via blinksocks (3.3.8)

blinksocks NPM version 3.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on blinksocks and may be impacted: - blinksocks-gui =0.1.0, =0.2.1 Source cves: CVE-2023-50481 Source advisory: OSV:GHSA-PQJ5-37XF-X5GC...

@abcpros/xpicash (>=1.1.1, <=1.1.2), @alakipalaki/handshake (>=0.1.0-305766c0, <=3.1.0) +71 more potentially affected by CVE-2023-50475 via bsock (>=0.0.2, <=0.1.11)

bsock NPM version =0.0.2, =1.1.1, =0.1.0-305766c0, =0.1.0-305766c0, =0.0.12, =1.0.0, =1.0.0, =0.0.12, =0.0.1, =1.0.1, =1.3.0 - adeps 4.99.0 - aliasing 0.1.0 - atomicagent 0.1.0 and more Source cves: CVE-2023-50475 Source advisory: OSV:GHSA-JJ93-39PF-7MCF...

async-ssh2-tokio (>=0.2.0, <=0.8.4), dev-tunnels (0.1.0) +5 more potentially affected by CVE-2023-48795 via russh (>=0.34.0, <=0.39.0)

russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - tunnels 0.1.0 Source cves: CVE-2023-48795 Source advisory: OSV:GHSA-45X7-PX36-X8W8...

at51 (>=0.1.1, <=0.4.1), atrac3p-decoder (>=0.1.0, <=0.1.2) +51 more potentially affected by CVE-2023-53156 via transpose (0.1.0)

transpose CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transpose and may be impacted: - at51 =0.1.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =2.6.2, =0.6.0, =0.1.0, =0.1.0, =0.1.1 and more Source...

@octokit/app (14.0.0-beta.1) potentially affected by CVE-2023-50728 via @octokit/webhooks (11.0.0-beta.1)

@octokit/webhooks NPM version 11.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on @octokit/webhooks and may be impacted: - @octokit/app 14.0.0-beta.1 Source cves: CVE-2023-50728 Source advisory: OSV:GHSA-PWFR-8PQ7-X9QV...

@graphql-inspector/action (>=3.4.2, <=5.0.4), release-drafter-github-app (>=5.16.0, <=6.4.0) potentially affected by CVE-2023-50728 via probot (>=12.2.0, <=12.3.1)

probot NPM version =12.2.0, =3.4.2, =5.16.0, =6.4.0 Source cves: CVE-2023-50728 Source advisory: OSV:GHSA-PWFR-8PQ7-X9QV...

@git-filesystem/github (>=0.0.0, <=0.0.1), git-filesystem (>=0.0.0, <=0.0.1) potentially affected by CVE-2023-50728 via @octokit/webhooks (10.1.3)

@octokit/webhooks NPM version 10.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @octokit/webhooks and may be impacted: - @git-filesystem/github =0.0.0, =0.0.0, =0.0.1 Source cves: CVE-2023-50728 Source advisory: OSV:GHSA-PWFR-8PQ7-X9QV...

@fdm-monster/server (>=1.5.0-rc1, <=1.5.3), @inlang/paraglide-js (>=1.0.0-prerelease.23, <=1.0.0-prerelease.25) +21 more potentially affected by CVE-2023-50728 via octokit (>=3.1.0, <=3.1.1)

octokit NPM version =3.1.0, =1.5.0-rc1, =1.0.0-prerelease.23, =0.1.0, =1.1.3, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2023-50728 Source advisory: OSV:GHSA-PWFR-8PQ7-X9QV...

actix-session-surrealdb (>=0.1.0, <=0.1.5), bb8-surrealdb (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2023-54366 via surrealdb (1.0.0-beta.9)

surrealdb CARGO version 1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2023-54366 Source advisory: OSV:GHSA-X5FR-7HHJ-34J3...

@arakoodev/edgechains.js (>=0.1.24, <=0.30.1), @hono/zod-validator (0.0.2) +20 more potentially affected by CVE-2023-50710 via hono (>=3.0.0-rc.7, <=3.10.1)

hono NPM version =3.0.0-rc.7, =0.1.24, =0.0.1-alpha.1, =0.0.1-alpha.10, =0.0.1-alpha.10, =0.0.1-alpha.10, =0.0.1-alpha.0, =0.0.1, =0.0.2-alpha.15, =0.0.1-alpha.4, =0.0.1-alpha.6, =0.0.2-alpha.20, =0.0.1-alpha.0, =0.0.1-alpha.4, =0.0.2-alpha.23 and more Source cves: CVE-2023-50710 Source advisory:...

@codefresh-io/cubejs-backend-server-core (>=0.30.77, <=0.30.83), @cubejs-backend-json-clone/server (1.0.0) +17 more potentially affected by CVE-2023-50709 via @cubejs-backend/api-gateway (>=0.0.2, <=0.33.65)

@cubejs-backend/api-gateway NPM version =0.0.2, =0.30.77, =0.0.8, =0.0.7, =0.0.24, =0.8.0, =0.8.0, =0.32.28, =0.29.4, =1.0.0, =0.27.30, =0.30.61, =0.32.0, =0.33.8 and more Source cves: CVE-2023-50709 Source advisory: OSV:GHSA-9759-3276-G2PM...

masquerade-proxy (0.1.0), monoio-quiche (0.0.1) +2 more potentially affected by CVE-2023-6193 via quiche (>=0.16.0, <=0.18.0)

quiche CARGO version =0.16.0, =0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on quiche and may be impacted: - masquerade-proxy 0.1.0 - monoio-quiche 0.0.1 - quiche-tokio 0.1.0 - quiver-h3 0.1.0 Source cves: CVE-2023-6193 Source advisory:...

@sap-cloud-sdk/core (>=1.48.2-20210910061518.0, <=1.49.1-20210922143656.0), @sap/approuter (>=8.0.0, <=14.4.1) +6 more potentially affected by CVE-2023-49583 via @sap/xssec (>=3.0.3, <=3.5.0)

@sap/xssec NPM version =3.0.3, =1.48.2-20210910061518.0, =8.0.0, =3.2.0, =1.9.38, =6.0.2, =7.4.2, =0.1.92, =0.2.1, =0.4.1 Source cves: CVE-2023-49583 Source advisory: OSV:GHSA-P2VX-QJ66-88Q3...

@offchainlabs/l1-l3-teleport-contracts (>=0.1.0-alpha.1, <=1.0.1) potentially affected by CVE-2023-49798 via @openzeppelin/contracts (4.9.4)

@openzeppelin/contracts NPM version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/contracts and may be impacted: - @offchainlabs/l1-l3-teleport-contracts =0.1.0-alpha.1, =1.0.1 Source cves: CVE-2023-49798 Source advisory:...

@bbtfe/core (1.0.5), @inceptiongt/yapi-vendor (1.9.3) +79 more potentially affected by CVE-2023-26158 via mockjs (>=1.0.0, <=1.0.1-beta3)

mockjs NPM version =1.0.0, =0.0.1, =1.0.0-alpha.0, =0.1.0, =1.0.5, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =1.0.5, =0.1.7, =1.5.2 and more Source cves: CVE-2023-26158 Source advisory: OSV:GHSA-MH8J-9JVH-GJF6...

@leapdev/auth-agent (>=2.2.6-beta.0, <=2.2.11), @pubnub/chat (>=0.1.0, <=0.2.0) +2 more potentially affected by CVE-2023-26154 via pubnub (>=7.0.1, <=7.3.0)

pubnub NPM version =7.0.1, =2.2.6-beta.0, =0.1.0, =0.13.9, =2.29.0, =2.64.1 Source cves: CVE-2023-26154 Source advisory: OSV:GHSA-5844-Q3FC-56RH...