npm
4,283 tracked vulnerabilities.
CVE-2020-4059
HIGH
mversion < 2.0.0 - Remote Code Execution via Git Commit Message Injection
Jun 18, 2020
CVSS 7.3
EPSS 0.03
CVE-2020-12827
HIGH
mjml < 4.6.3 - Path Traversal via mj-include Directive
Jun 17, 2020
CVSS 7.2
EPSS 0.03
CVE-2020-4051
LOW
Dijit < 1.11.11, 1.12.0-1.12.8, 1.13.0-1.13.7, 1.14.0-1.14.6, 1.15.0-1.15.3, 1.16.0-1.16.2 - XSS in Editor LinkDialog
Jun 15, 2020
CVSS 3.7
EPSS 0.01
CVE-2020-4045
HIGH
ssb-db 20.0.0 - Unauthenticated Exposure of Sensitive Information via get() Method
Jun 11, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-7675
CRITICAL
cd-messenger <= 2.7.26 - Remote Code Execution via Color Argument Eval Injection
Jun 10, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7674
CRITICAL
access-policy < 3.1.0 - Remote Code Execution via Template Function
Jun 10, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7673
CRITICAL
node-extend < 0.2.0 - Remote Code Execution via Unsafe Eval in extend Function
Jun 10, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7672
HIGH
mosc < 1.0.0 - Remote Code Execution via Eval Injection in Properties Argument
Jun 10, 2020
CVSS 8.6
EPSS 0.02
CVE-2020-4038
HIGH
GraphQL Playground < 1.6.22 - Reflected Cross-Site Scripting via renderPlaygroundPage()
Jun 08, 2020
CVSS 7.4
EPSS 0.07
CVE-2020-7676
MEDIUM
Angularjs < 1.8.0 - XSS
Jun 08, 2020
CVSS 5.4
EPSS 0.02
CVE-2020-7661
HIGH
url-regex - Regular Expression Denial of Service via String.test
Jun 04, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-13822
HIGH
elliptic < 6.5.3 - ECDSA Signature Malleability via Encoding Variations
Jun 04, 2020
CVSS 7.7
EPSS 0.03
CVE-2020-7662
HIGH
websocket-extensions < 0.1.4 - Denial of Service via Regex Backtracking in Extension Parser
Jun 02, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-7660
HIGH
serialize-javascript < 3.1.0 - Remote Code Execution via deleteFunctions
Jun 01, 2020
CVSS 8.1
EPSS 0.03
CVE-2020-7654
HIGH
Snyk Broker < 4.73.1 - Sensitive Information Exposure in Debug Logs
May 29, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-7650
MEDIUM
Snyk Broker 4.72.0-4.73.1 - Arbitrary File Read via YAML/JSON File Extension Handling
May 29, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-7648
MEDIUM
Snyk Broker < 4.72.2 - Arbitrary File Read via Fragment Identifier
May 29, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-7653
MEDIUM
Snyk Broker < 4.80.0 - Arbitrary File Read via Symlink
May 29, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-7652
MEDIUM
Snyk Broker < 4.80.0 - Arbitrary File Read via Directory Traversal
May 29, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-7651
MEDIUM
Snyk Broker < 4.79.0 - Arbitrary File Read via GitHub Commits API
May 29, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-11079
HIGH
node-dns-sync <0.2.1 - Command Injection
May 28, 2020
CVSS 8.6
EPSS 0.03
CVE-2020-11059
CRITICAL
AEgir >=21.7.0-<21.10.1 - Info Disclosure
May 27, 2020
CVSS 9.6
EPSS 0.01
CVE-2020-7656
MEDIUM
jQuery < 1.9.0 - Cross-Site Scripting via Load Method
May 19, 2020
CVSS 6.1
EPSS 0.06
CVE-2020-13110
HIGH
kerberos < 1.0.0 - Uncontrolled Search Path Element via LoadLibrary()
May 16, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-8149
CRITICAL
logkitty < 0.7.1 - Remote Code Execution via Unsanitized Output
May 15, 2020
CVSS 9.8
EPSS 0.02
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 35
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters