npm
4,292 tracked vulnerabilities.
CVE-2020-11611
MEDIUM
xdLocalStorage < 2.0.5 - Open Redirect via Wildcard TargetOrigin in postMessage
Apr 07, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-11610
HIGH
xdLocalStorage < 2.0.5 - Exposure of Sensitive Data via Wildcard TargetOrigin in postMessage
Apr 07, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-7618
MEDIUM
sds < 3.2.0 - Prototype Pollution via set Function
Apr 07, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-7616
MEDIUM
express-mock-middleware <= 0.0.6 - Prototype Pollution via Exported Functions
Apr 07, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-7615
HIGH
fsa < 0.5.1 - OS Command Injection via execGitCommand()
Apr 07, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-7614
CRITICAL
npm-programmatic < 0.0.12 - OS Command Injection via Unvalidated Package and Option Properties
Apr 07, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7613
HIGH
clamscan < 1.2.0 - OS Command Injection via _is_clamav_binary Function
Apr 07, 2020
CVSS 8.1
EPSS 0.02
CVE-2020-7638
MEDIUM
confinit < 0.3.0 - Prototype Pollution via setDeepProperty Function
Apr 06, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-7637
MEDIUM
class-transformer < 0.3.1 - Prototype Pollution via classToPlainFromExist
Apr 06, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-7636
CRITICAL
adb-driver < 0.1.8 - OS Command Injection via Command Function
Apr 06, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7635
CRITICAL
compass-compile <= 0.0.1 - OS Command Injection via Options Argument
Apr 06, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7634
CRITICAL
heroku-addonpool < 0.1.15 - OS Command Injection
Apr 06, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7633
CRITICAL
apiconnect-cli-plugins < 6.0.1 - OS Command Injection via pluginUri Argument
Apr 06, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7632
CRITICAL
node-mpv <= 1.4.3 - OS Command Injection via Options Argument
Apr 06, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7631
CRITICAL
diskusage-ng < 0.2.4 - OS Command Injection via Path Argument
Apr 06, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-8147
CRITICAL
utils-extend < 1.0.8 - Prototype Pollution leading to Remote Code Execution or Denial of Service
Apr 03, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7630
CRITICAL
git-add-remote < 1.0.0 - OS Command Injection via Name Argument
Apr 02, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7629
CRITICAL
install-package < 0.4.0 - OS Command Injection via Options Argument
Apr 02, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7628
CRITICAL
Install-package < 1.1.6 - OS Command Injection
Apr 02, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-7627
CRITICAL
node-key-sender <= 1.0.11 - OS Command Injection via arrParams Argument
Apr 02, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7626
CRITICAL
karma-mojo < 1.0.1 - OS Command Injection via Config Argument
Apr 02, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7625
CRITICAL
op-browser < 1.0.6 - OS Command Injection via URL Function
Apr 02, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7624
CRITICAL
effect_project/effect < 1.0.4 - OS Command Injection via Options Argument
Apr 02, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7623
CRITICAL
jscover < 1.0.0 - OS Command Injection via Source Argument
Apr 02, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-7621
CRITICAL
IBM StrongLoop Nginx Controller < 1.0.2 - OS Command Injection via _nginxCmd Function
Apr 02, 2020
CVSS 9.8
EPSS 0.03
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters