npm
4,283 tracked vulnerabilities.
CVE-2020-17479
CRITICAL
jpv <2.2.2 - Info Disclosure
Aug 10, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-15138
HIGH
PrismJS Previewers 1.1.0-1.20.0 - Cross-Site Scripting in Easing Preview
Aug 07, 2020
CVSS 7.1
EPSS 0.02
CVE-2020-15135
MEDIUM
save-server < 1.0.7 - Cross-Site Request Forgery
Aug 04, 2020
CVSS 6.7
EPSS 0.01
CVE-2020-15131
HIGH
SLP Validate <1.2.2 - Info Disclosure
Jul 30, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-15130
HIGH
slpjs < 0.27.4 - Incorrect NFT1 Child Genesis Transaction Validation
Jul 30, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-8192
MEDIUM
Fastify 2.14.1 and 3.0.0-rc.4 - Denial of Service via Schema Validation
Jul 30, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-7699
HIGH
express-fileupload < 1.1.8 - Denial of Service and Remote Code Execution via Corrupt HTTP Request
Jul 30, 2020
CVSS 7.5
EPSS 0.05
CVE-2020-15125
HIGH
auth0.js < 2.27.1 - Sensitive Information Exposure via Authorization Header Logging
Jul 29, 2020
CVSS 7.7
EPSS 0.02
CVE-2020-7697
CRITICAL
mock2easy - OS Command Injection via _data Variable
Jul 29, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7687
HIGH
fast-http - Path Traversal via fs.readFile in index.js
Jul 25, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-7686
HIGH
rollup-plugin-dev-server - Path Traversal via readFileFromContentBase Function
Jul 25, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-7683
HIGH
rollup-plugin-server - Path Traversal via readFileFromContentBase Function
Jul 25, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-7682
HIGH
marked-tree - Path Traversal via fs.readFile in index.js
Jul 25, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-7681
HIGH
marscode - Path Traversal via fs.readFile in index.js
Jul 25, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-8175
MEDIUM
jpeg-js < 0.4.0 - Denial of Service via Crafted JPEG Image
Jul 24, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-15126
MEDIUM
Parser-Server <4.3.0 - Privilege Escalation
Jul 22, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-6506
MEDIUM
Google Chrome <83.0.4103.106 - Auth Bypass
Jul 22, 2020
CVSS 6.5
EPSS 0.04
CVE-2020-15123
CRITICAL
codecov < 3.7.1 - OS Command Injection via Backtick Bypass
Jul 20, 2020
CVSS 9.3
EPSS 0.04
CVE-2020-8214
HIGH
servey < 3 - Path Traversal
Jul 20, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-7680
MEDIUM
docsify < 4.11.4 - Cross-Site Scripting via Fragment Identifier
Jul 20, 2020
CVSS 6.1
EPSS 0.04
CVE-2020-8215
HIGH
canvas <= 1.6.9 - Buffer Overflow via Image Processing
Jul 20, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-7696
MEDIUM
react-native-fast-image < 8.3.0 - Exposure of Sensitive Information via Reused Headers
Jul 17, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-7684
HIGH
rollup-plugin-serve - Path Traversal via Unsanitized File Read Operation
Jul 17, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-14000
CRITICAL
MIT Scratch scratch-vm < 0.2.0-prerelease.20200714185213 - RCE via Untrusted Project JSON Extension URL
Jul 16, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-15779
HIGH
socket.io-file < 2.0.31 - Path Traversal via Name Option in createFile Message
Jul 15, 2020
CVSS 7.5
EPSS 0.02
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 35
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters