npm
4,203 tracked vulnerabilities.
CVE-2020-7714
CRITICAL
confucious - Prototype Pollution via set Function
Sep 01, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7713
CRITICAL
arr-flatten-unflatten - Prototype Pollution via Constructor
Sep 01, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-8244
MEDIUM
bufferlist <1.2.3 - Out-of-bounds Read via Negative consume() Argument
Aug 30, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-7712
HIGH
json < 10.0.0 - OS Command Injection via parseLookup Function
Aug 30, 2020
CVSS 7.2
EPSS 0.04
CVE-2020-15156
MEDIUM
nodebb-plugin-blog-comments <0.7.0 - XSS
Aug 26, 2020
CVSS 6.8
EPSS 0.01
CVE-2020-13410
HIGH
MoscaJS Aedes <0.42.0 - Info Disclosure
Aug 26, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-24653
CRITICAL
secure-store in Expo <2.16.1 - Info Disclosure
Aug 26, 2020
CVSS 9.8
EPSS 0.01
CVE-2020-7710
HIGH
safe-eval - Remote Code Execution
Aug 21, 2020
CVSS 8.1
EPSS 0.01
CVE-2020-15119
MEDIUM
auth0-lock <= 11.25.1 - Cross-Site Scripting via dangerouslySetInnerHTML
Aug 20, 2020
CVSS 6.4
EPSS 0.01
CVE-2020-7708
CRITICAL
irrelon-path < 4.7.0 - Prototype Pollution via set, unSet, pushVal, and pullVal Functions
Aug 18, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7707
CRITICAL
property-expr < 2.0.3 - Prototype Pollution via Setter Function
Aug 18, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7706
CRITICAL
connie-lang < 0.1.1 - Prototype Pollution
Aug 18, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-15152
CRITICAL
ftp-srv <2.19.6/3.1.2/4.3.4 - Server-Side Request Forgery via PORT Command
Aug 17, 2020
CVSS 9.1
EPSS 0.02
CVE-2020-7704
CRITICAL
linux-cmdline < 1.0.1 - Prototype Pollution via Constructor
Aug 17, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7703
CRITICAL
nis-utils - Prototype Pollution via setValue Function
Aug 17, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7702
CRITICAL
templ8 - Prototype Pollution via Parse Function
Aug 17, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7701
CRITICAL
madlib-object-utils < 0.1.7 - Prototype Pollution via setValue
Aug 14, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7700
CRITICAL
php.js - Prototype Pollution via parse_str
Aug 14, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-12648
MEDIUM
TinyMCE < 4.9.11 - Cross-Site Scripting in Classic Editing Mode
Aug 14, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-17480
MEDIUM
TinyMCE < 4.9.7 and 5.x < 5.1.4 - Cross-Site Scripting via Core Parser and Paste Plugin
Aug 10, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-17479
CRITICAL
jpv <2.2.2 - Info Disclosure
Aug 10, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-15138
HIGH
PrismJS Previewers 1.1.0-1.20.0 - Cross-Site Scripting in Easing Preview
Aug 07, 2020
CVSS 7.1
EPSS 0.02
CVE-2020-15135
MEDIUM
save-server < 1.0.7 - Cross-Site Request Forgery
Aug 04, 2020
CVSS 6.7
EPSS 0.01
CVE-2020-15131
HIGH
SLP Validate <1.2.2 - Info Disclosure
Jul 30, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-15130
HIGH
slpjs < 0.27.4 - Incorrect NFT1 Child Genesis Transaction Validation
Jul 30, 2020
CVSS 7.5
EPSS 0.01
Products
openclaw 433
parse-server 98
flowise 67
n8n 67
directus 53
electron 48
next 47
vm2 41
axios 33
hono 30
undici 30
nocodb 25
pnpm 25
ghost 22
vite 21
astro 18
tinymce 18
ckeditor4 15
fuxa-server 15
jspdf 15
tar 15
joplin 14
liquidjs 14
nodebb 14
protobufjs 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters