# Vulnerabilities published in 2024


- [CVE-2024-20023](https://insights.sbomify.com/CVE-2024-20023/): Memory corruption in MT2713, MT2737, MT6781, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8188, MT8188T, MT8370, MT8390, MT8673, MT8676, MT8678 (medium 6.7)
- [CVE-2024-20022](https://insights.sbomify.com/CVE-2024-20022/): Memory corruption in MT2737, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8321, MT8385, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8796, MT8797, MT8798 (medium 6.7)
- [CVE-2024-20021](https://insights.sbomify.com/CVE-2024-20021/): Privilege escalation in MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8781, MT8786, MT8788, MT8788T, MT8788, MT8788X, MT8788Z, MT8792, MT8795T, MT8796, MT8798 (medium 6.7)
- [CVE-2024-20020](https://insights.sbomify.com/CVE-2024-20020/): Memory corruption in MT2713, MT2715, MT8173, MT8188, MT8195, MT8390, MT8395 (medium 4.4)
- [CVE-2024-2002](https://insights.sbomify.com/CVE-2024-2002/): Libdwarf: crashes randomly on fuzzed object (high 7.5)
- [CVE-2024-20019](https://insights.sbomify.com/CVE-2024-20019/): Denial of service in MT7925, MT7927 (medium 5.9)
- [CVE-2024-20018](https://insights.sbomify.com/CVE-2024-20018/): Memory corruption in MT7615 (critical 9.8)
- [CVE-2024-20017](https://insights.sbomify.com/CVE-2024-20017/): Memory corruption in MT6890, MT7915, MT7916, MT7981, MT7986 (critical 9.8)
- [CVE-2024-20016](https://insights.sbomify.com/CVE-2024-20016/): Integer overflow in MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8183, MT8188, MT8195, MT8765, MT8766, MT8768, MT8791, MT8797, MT8798 (medium 4.4)
- [CVE-2024-20015](https://insights.sbomify.com/CVE-2024-20015/): Privilege escalation in MT6739, MT6753, MT6757, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6781, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8321, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 (high 7.4)
- [CVE-2024-20013](https://insights.sbomify.com/CVE-2024-20013/): Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797, MT8798 (medium 6.7)
- [CVE-2024-20012](https://insights.sbomify.com/CVE-2024-20012/): Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6895, MT6983, MT6985, MT8321, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 (medium 6.7)
- [CVE-2024-20011](https://insights.sbomify.com/CVE-2024-20011/): Memory corruption in MT6985, MT8127, MT8135, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8188, MT8188T, MT8195, MT8195Z, MT8312C, MT8312D (critical 9.8)
- [CVE-2024-20010](https://insights.sbomify.com/CVE-2024-20010/): Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797, MT8798 (medium 6.7)
- [CVE-2024-2001](https://insights.sbomify.com/CVE-2024-2001/): Cross-Site Scripting vulnerability in Cockpit CMS (medium 5.5)
- [CVE-2024-20009](https://insights.sbomify.com/CVE-2024-20009/): Memory corruption in MT6580, MT6739, MT6761, MT6762, MT6765, MT6779, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6895, MT6983, MT6985, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8185, MT8188, MT8188T (high 8.8)
- [CVE-2024-20007](https://insights.sbomify.com/CVE-2024-20007/): Race condition in MT6580, MT6739, MT6761, MT6762, MT6765, MT6779, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6895, MT6983, MT6985, MT8321, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT8798 (high 7.5)
- [CVE-2024-20006](https://insights.sbomify.com/CVE-2024-20006/): Memory corruption in MT2713, MT6781, MT6880, MT6890, MT8188T (medium 6.6)
- [CVE-2024-20005](https://insights.sbomify.com/CVE-2024-20005/): Missing authorization in MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8676, MT8678 (high 8.2)
- [CVE-2024-20004](https://insights.sbomify.com/CVE-2024-20004/): Denial of service in MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8791, MT8791T, MT8797 (high 7.5)
- [CVE-2024-20003](https://insights.sbomify.com/CVE-2024-20003/): Denial of service in MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8791, MT8791T, MT8797 (high 7.5)
- [CVE-2024-20002](https://insights.sbomify.com/CVE-2024-20002/): Memory corruption in MT5583, MT5586, MT5691, MT5695, MT5696, MT9010, MT9011, MT9012, MT9015, MT9016, MT9020, MT9021, MT9022, MT9025, MT9026, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9286, MT9288, MT9602, MT9603, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9618, MT9629, MT9630, MT9631, MT9632, MT9633, MT9636, MT9638, MT9639, MT9649, MT9650, MT9652, MT9653, MT9660, MT9666, MT9667, MT9669, MT9671, MT9675, MT9679, MT9685, MT9686, MT9688, MT9689 (medium 6.7)
- [CVE-2024-20001](https://insights.sbomify.com/CVE-2024-20001/): Memory corruption in MT5583, MT5586, MT5691, MT5695, MT5696, MT9010, MT9011, MT9012, MT9015, MT9016, MT9020, MT9021, MT9022, MT9025, MT9026, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9286, MT9288, MT9602, MT9603, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9618, MT9629, MT9630, MT9631, MT9632, MT9633, MT9636, MT9638, MT9639, MT9649, MT9650, MT9652, MT9653, MT9660, MT9666, MT9667, MT9669, MT9671, MT9675, MT9679, MT9685, MT9686, MT9688, MT9689 (medium 6.7)
- [CVE-2024-2000](https://insights.sbomify.com/CVE-2024-2000/): Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget (medium 6.4)
- [CVE-2024-1999](https://insights.sbomify.com/CVE-2024-1999/): Cross-site scripting in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor (medium 6.4)
- [CVE-2024-1997](https://insights.sbomify.com/CVE-2024-1997/): Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget (medium 6.4)
- [CVE-2024-1996](https://insights.sbomify.com/CVE-2024-1996/): Premium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link (medium 6.4)
- [CVE-2024-1995](https://insights.sbomify.com/CVE-2024-1995/): Smart Custom Fields <= 4.2.2 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure (medium 4.3)
- [CVE-2024-1994](https://insights.sbomify.com/CVE-2024-1994/): Image Watermark <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification (medium 4.3)
- [CVE-2024-1993](https://insights.sbomify.com/CVE-2024-1993/): Icon Widget <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode (medium 6.4)
- [CVE-2024-1991](https://insights.sbomify.com/CVE-2024-1991/): Missing authorization in RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (high 8.8)
- [CVE-2024-1990](https://insights.sbomify.com/CVE-2024-1990/): SQL injection in RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (high 8.8)
- [CVE-2024-1989](https://insights.sbomify.com/CVE-2024-1989/): Cross-site scripting in Social Sharing Plugin – Sassy Social Share (medium 6.4)
- [CVE-2024-1988](https://insights.sbomify.com/CVE-2024-1988/): Cross-site scripting in Post Grid (medium 6.4)
- [CVE-2024-1987](https://insights.sbomify.com/CVE-2024-1987/): WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2024-1986](https://insights.sbomify.com/CVE-2024-1986/): Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload (high 8.8)
- [CVE-2024-1985](https://insights.sbomify.com/CVE-2024-1985/): Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting (medium 4.7)
- [CVE-2024-1984](https://insights.sbomify.com/CVE-2024-1984/): Graphene <= 2.9.2 - Missing Authorization (medium 5.3)
- [CVE-2024-1983](https://insights.sbomify.com/CVE-2024-1983/): Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS (high 7.1)
- [CVE-2024-1982](https://insights.sbomify.com/CVE-2024-1982/): WPvivid Backup and Migration <= 0.9.68 - Missing Authorization (medium 6.5)
- [CVE-2024-1981](https://insights.sbomify.com/CVE-2024-1981/): SQL injection in Migration, Backup, Staging – WPvivid (critical 9.8)
- [CVE-2024-1979](https://insights.sbomify.com/CVE-2024-1979/): Quarkus: information leak in annotation (low 3.5)
- [CVE-2024-1978](https://insights.sbomify.com/CVE-2024-1978/): Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery (medium 5.5)
- [CVE-2024-1977](https://insights.sbomify.com/CVE-2024-1977/): Cross-site scripting in Restaurant Solutions – Checklist (medium 4.4)
- [CVE-2024-1976](https://insights.sbomify.com/CVE-2024-1976/): Marketing Optimizer <= 20200925 - Cross-Site Request Forgery to Stored Cross-Site Scripting (medium 4.3)
- [CVE-2024-1975](https://insights.sbomify.com/CVE-2024-1975/): SIG(0) can be used to exhaust CPU resources (high 7.5)
- [CVE-2024-1974](https://insights.sbomify.com/CVE-2024-1974/): HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal (high 8.8)
- [CVE-2024-1973](https://insights.sbomify.com/CVE-2024-1973/): Elevation of privileges vulnerability (high 8.5)
- [CVE-2024-1972](https://insights.sbomify.com/CVE-2024-1972/): SourceCodester Online Job Portal EditProfile.php cross site scripting (low 3.5)
- [CVE-2024-1971](https://insights.sbomify.com/CVE-2024-1971/): Surya2Developer Online Shopping System POST Parameter login.php sql injection (high 7.3)
- [CVE-2024-1970](https://insights.sbomify.com/CVE-2024-1970/): SourceCodester Online Learning System V2 index.php cross site scripting (medium 4.3)
- [CVE-2024-1969](https://insights.sbomify.com/CVE-2024-1969/): Heap buffer overflow (high 8.2)
- [CVE-2024-1968](https://insights.sbomify.com/CVE-2024-1968/): Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects (high 7.5)
- [CVE-2024-1965](https://insights.sbomify.com/CVE-2024-1965/): Server-Side Request Forgery Vulnerability in Haivision Products (medium 6.5)
- [CVE-2024-1963](https://insights.sbomify.com/CVE-2024-1963/): Uncontrolled Resource Consumption in GitLab (medium 6.5)
- [CVE-2024-1962](https://insights.sbomify.com/CVE-2024-1962/): CM Download and File Manager < 2.9.1 - Download Edit via CSRF (high 8.8)
- [CVE-2024-1961](https://insights.sbomify.com/CVE-2024-1961/): Path Traversal leading to Arbitrary File Write and RCE in vertaai/modeldb (high 8.8)
- [CVE-2024-1960](https://insights.sbomify.com/CVE-2024-1960/): ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link (medium 6.4)
- [CVE-2024-1959](https://insights.sbomify.com/CVE-2024-1959/): Cross-site scripting in Social Sharing Plugin – Social Warfare (medium 6.4)
- [CVE-2024-1958](https://insights.sbomify.com/CVE-2024-1958/): WPB Show Core < 2.7 - Reflected XSS (medium 4.8)
- [CVE-2024-1957](https://insights.sbomify.com/CVE-2024-1957/): Cross-site scripting in GiveWP – Donation Plugin and Fundraising Platform (medium 6.4)
- [CVE-2024-1956](https://insights.sbomify.com/CVE-2024-1956/): WPB Show Core < 2.7 - Reflected XSS (medium 6.1)
- [CVE-2024-1955](https://insights.sbomify.com/CVE-2024-1955/): Hide Dashboard Notifications <= 1.3 - Missing Authorization to Authenticated(Contributor+) Plugin Settings Modification (medium 4.3)
- [CVE-2024-1954](https://insights.sbomify.com/CVE-2024-1954/): Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.1.8 - Cross-Site Request Forgery (medium 6.3)
- [CVE-2024-1953](https://insights.sbomify.com/CVE-2024-1953/): Mattermost fails to limit the number of role names (medium 4.3)
- [CVE-2024-1952](https://insights.sbomify.com/CVE-2024-1952/): Mattermost incorrectly allows access individual posts (low 3.1)
- [CVE-2024-1951](https://insights.sbomify.com/CVE-2024-1951/): Deserialization in Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid (high 7.5)
- [CVE-2024-1950](https://insights.sbomify.com/CVE-2024-1950/): Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection (high 7.5)
- [CVE-2024-1949](https://insights.sbomify.com/CVE-2024-1949/): Mattermost race condition (low 2.6)
- [CVE-2024-1948](https://insights.sbomify.com/CVE-2024-1948/): Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content (medium 6.4)
- [CVE-2024-1947](https://insights.sbomify.com/CVE-2024-1947/): Improper Handling of Highly Compressed Data (Data Amplification) in GitLab (medium 4.3)
- [CVE-2024-1946](https://insights.sbomify.com/CVE-2024-1946/): Genesis Blocks <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Content (medium 6.4)
- [CVE-2024-1945](https://insights.sbomify.com/CVE-2024-1945/): ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion (high 7.1)
- [CVE-2024-1943](https://insights.sbomify.com/CVE-2024-1943/): Yuki <= 1.3.14 - Cross-Site Request Forgery to Theme Setting Reset (medium 4.3)
- [CVE-2024-1942](https://insights.sbomify.com/CVE-2024-1942/): Mattermost allows attackers access to posts in channels they are not a member of (medium 4.3)
- [CVE-2024-1941](https://insights.sbomify.com/CVE-2024-1941/): Delta Electronics CNCSoft-B Stack-based Buffer Overflow (high 7.8)
- [CVE-2024-1940](https://insights.sbomify.com/CVE-2024-1940/): Brizy – Page Builder <= 2.4.41 - Authenticated(Contributor+) Stored Cross-Site Scripting (high 7.1)
- [CVE-2024-1939](https://insights.sbomify.com/CVE-2024-1939/): Memory corruption in Chrome (high 8.8)
- [CVE-2024-1938](https://insights.sbomify.com/CVE-2024-1938/): Memory corruption in Chrome (high 7.1)
- [CVE-2024-1937](https://insights.sbomify.com/CVE-2024-1937/): Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification (high 7.1)
- [CVE-2024-1936](https://insights.sbomify.com/CVE-2024-1936/): Information disclosure in Thunderbird (high 7.5)
- [CVE-2024-1935](https://insights.sbomify.com/CVE-2024-1935/): Giveaways and Contests by RafflePress <= 1.12.5 - Unauthenticated Stored Cross-Site Scripting (high 7.2)
- [CVE-2024-1934](https://insights.sbomify.com/CVE-2024-1934/): WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification (high 7.5)
- [CVE-2024-1933](https://insights.sbomify.com/CVE-2024-1933/): Improper symlink resolution in TeamViewer Remote client for macOS (high 7.1)
- [CVE-2024-1932](https://insights.sbomify.com/CVE-2024-1932/): Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout (medium 6.1)
- [CVE-2024-1931](https://insights.sbomify.com/CVE-2024-1931/): Denial of service when trimming EDE text on positive replies (high 7.5)
- [CVE-2024-1930](https://insights.sbomify.com/CVE-2024-1930/): No Limit on Number of Open Sessions / Bad Session Close Behaviour (medium 6.5)
- [CVE-2024-1929](https://insights.sbomify.com/CVE-2024-1929/): Local Root Exploit via Configuration Dictionary (high 7.5)
- [CVE-2024-1928](https://insights.sbomify.com/CVE-2024-1928/): SourceCodester Web-Based Student Clearance System Edit User Profile Page edit-admin.php sql injection (medium 4.7)
- [CVE-2024-1927](https://insights.sbomify.com/CVE-2024-1927/): SourceCodester Web-Based Student Clearance System login.php sql injection (medium 6.3)
- [CVE-2024-1926](https://insights.sbomify.com/CVE-2024-1926/): SourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection (medium 6.3)
- [CVE-2024-1925](https://insights.sbomify.com/CVE-2024-1925/): Ctcms Upsys.php unrestricted upload (medium 5.0)
- [CVE-2024-1924](https://insights.sbomify.com/CVE-2024-1924/): CodeAstro Membership Management System get_membership_amount.php sql injection (medium 6.3)
- [CVE-2024-1923](https://insights.sbomify.com/CVE-2024-1923/): SourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection (medium 6.3)
- [CVE-2024-1922](https://insights.sbomify.com/CVE-2024-1922/): SourceCodester Online Job Portal Manage Job Page ManageJob.php cross site scripting (low 3.5)
- [CVE-2024-1921](https://insights.sbomify.com/CVE-2024-1921/): osuuu LightPicture Setup.php unrestricted upload (medium 4.7)
- [CVE-2024-1920](https://insights.sbomify.com/CVE-2024-1920/): osuuu LightPicture TokenVerify.php handle hard-coded key (medium 5.6)
- [CVE-2024-1919](https://insights.sbomify.com/CVE-2024-1919/): SourceCodester Online Job Portal Manage Walkin Page ManageWalkin.php cross site scripting (low 3.5)
- [CVE-2024-1918](https://insights.sbomify.com/CVE-2024-1918/): Byzoro Smart S42 Management Platform userattestation.php unrestricted upload (medium 4.7)
- [CVE-2024-1917](https://insights.sbomify.com/CVE-2024-1917/): Integer overflow in MELSEC-L Series L02CPU (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/465/