npm
4,283 tracked vulnerabilities.
CVE-2020-11072
HIGH
SLP Validate <1.2.1 - Info Disclosure
May 12, 2020
CVSS 8.6
EPSS 0.01
CVE-2020-11071
HIGH
slpjs < 0.27.2 - Incorrect Comparison in MINT Transaction Validation
May 12, 2020
CVSS 8.6
EPSS 0.01
CVE-2020-7646
CRITICAL
curlrequest < 1.0.1 - Arbitrary File Read via File Parameter
May 07, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7645
CRITICAL
chrome-launcher < 0.13.2 - OS Command Injection via $HOME Environment Variable
May 02, 2020
CVSS 9.8
EPSS 0.01
CVE-2020-11022
MEDIUM
jQuery 1.12.0-3.4.1 - Cross-Site Scripting via DOM Manipulation Methods
Apr 29, 2020
CVSS 6.9
EPSS 0.99
CVE-2020-11023
MEDIUM
KEV
jQuery <3.5.0 - XSS
Apr 29, 2020
CVSS 6.9
EPSS 0.84
CVE-2020-7644
HIGH
fun-map < 3.3.1 - Prototype Pollution via assocInM Function
Apr 28, 2020
CVSS 8.1
EPSS 0.01
CVE-2020-7640
CRITICAL
pixl-class < 1.0.3 - OS Command Injection via Unsanitized Members Argument
Apr 27, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7609
CRITICAL
node-rules 3.0.0-5.0.0 - Remote Code Execution via fromJSON() Argument Injection
Apr 27, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-12265
CRITICAL
decompress < 4.2.1 - Arbitrary File Write via Symlink Path Traversal
Apr 26, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7643
MEDIUM
paypal-adaptive <= 0.4.2 - Prototype Pollution via __proto__ Payload
Apr 23, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-7642
MEDIUM
lazysizes < 5.2.0 - Cross-Site Scripting via Video Embed Plugin Parameters
Apr 22, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-11887
MEDIUM
svg2png 4.1.1 - Cross-Site Scripting via JavaScript in SVG Document
Apr 17, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-11883
MEDIUM
Divante vue-storefront-api and storefront-api - Information Disclosure via Error Stack Trace
Apr 17, 2020
CVSS 5.3
EPSS 0.15
CVE-2020-1026
CRITICAL
MSR JavaScript Cryptography Library - Info Disclosure
Apr 15, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-5263
MEDIUM
auth0.js 8.0.0-9.12.2 - Insufficiently Protected Credentials via Error Object Exposure
Apr 09, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-11611
MEDIUM
xdLocalStorage < 2.0.5 - Open Redirect via Wildcard TargetOrigin in postMessage
Apr 07, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-11610
HIGH
xdLocalStorage < 2.0.5 - Exposure of Sensitive Data via Wildcard TargetOrigin in postMessage
Apr 07, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-7618
MEDIUM
sds < 3.2.0 - Prototype Pollution via set Function
Apr 07, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-7616
MEDIUM
express-mock-middleware <= 0.0.6 - Prototype Pollution via Exported Functions
Apr 07, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-7615
HIGH
fsa < 0.5.1 - OS Command Injection via execGitCommand()
Apr 07, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-7614
CRITICAL
npm-programmatic < 0.0.12 - OS Command Injection via Unvalidated Package and Option Properties
Apr 07, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7613
HIGH
clamscan < 1.2.0 - OS Command Injection via _is_clamav_binary Function
Apr 07, 2020
CVSS 8.1
EPSS 0.02
CVE-2020-7638
MEDIUM
confinit < 0.3.0 - Prototype Pollution via setDeepProperty Function
Apr 06, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-7637
MEDIUM
class-transformer < 0.3.1 - Prototype Pollution via classToPlainFromExist
Apr 06, 2020
CVSS 5.3
EPSS 0.01
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 35
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters