npm
4,292 tracked vulnerabilities.
CVE-2019-10062
MEDIUM
Aurelia Framework < 1.3.1 - Cross-Site Scripting via HTMLSanitizer Bypass
May 13, 2021
CVSS 6.1
EPSS 0.01
CVE-2019-10196
CRITICAL
http-proxy-agent < 2.1.0 - Denial of Service and Data Exposure via Auth Parameter
Mar 19, 2021
CVSS 9.8
EPSS 0.01
CVE-2019-20922
HIGH
Handlebars 4.0.0-4.4.4 - Regular Expression Denial of Service via Eager Matching
Sep 30, 2020
CVSS 7.5
EPSS 0.04
CVE-2019-20921
MEDIUM
bootstrap-select < 1.13.6 - Cross-Site Scripting via OPTION Element Title Attribute
Sep 30, 2020
CVSS 6.1
EPSS 0.02
CVE-2019-20920
HIGH
Handlebars <3.0.8 & 4.x <4.5.3 - RCE
Sep 30, 2020
CVSS 8.1
EPSS 0.03
CVE-2019-19935
MEDIUM
Froala Editor < 3.2.3 - Cross-Site Scripting
Jul 07, 2020
CVSS 6.1
EPSS 0.02
CVE-2019-2391
MEDIUM
MongoDB Inc. js-bson <1.1.3 - Info Disclosure
Mar 31, 2020
CVSS 4.2
EPSS 0.01
CVE-2019-15608
MEDIUM
yarn < 1.19.0 - TOCTOU Race Condition in Package Integrity Validation
Mar 15, 2020
CVSS 5.9
EPSS 0.02
CVE-2019-10808
HIGH
utilitify < 1.0.3 - Prototype Pollution via Merge Method
Mar 11, 2020
CVSS 8.8
EPSS 0.02
CVE-2019-10807
CRITICAL
blamer < 1.0.1 - OS Command Injection via Argument Injection
Mar 11, 2020
CVSS 9.8
EPSS 0.02
CVE-2019-10806
MEDIUM
vega < 1.13.1 - Prototype Pollution via vega.mergeConfig
Mar 09, 2020
CVSS 4.3
EPSS 0.01
CVE-2019-10805
HIGH
valib.js < 2.0.0 - Internal Property Tampering via hasOwnProperty Override
Feb 28, 2020
CVSS 7.5
EPSS 0.01
CVE-2019-10804
CRITICAL
serial-number < 1.3.0 - OS Command Injection via cmdPrefix Argument
Feb 28, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-10803
CRITICAL
push-dir < 0.4.1 - OS Command Injection via opt.branch Argument
Feb 28, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-10802
CRITICAL
giting < 0.0.8 - OS Command Injection via Pull Function Repo Argument
Feb 28, 2020
CVSS 9.8
EPSS 0.02
CVE-2019-10801
CRITICAL
enpeem < 2.2.0 - OS Command Injection via options.dir Argument
Feb 28, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-15609
CRITICAL
kill-port-process < 2.2.0 - OS Command Injection
Feb 28, 2020
CVSS 9.8
EPSS 0.04
CVE-2019-10799
HIGH
compile-sass < 1.0.5 - OS Command Injection via setupCleanupOnExit Function
Feb 24, 2020
CVSS 8.2
EPSS 0.02
CVE-2019-10798
MEDIUM
rdf-graph-array <= 0.3.0-rc6 - Prototype Pollution via Graph Add Method
Feb 24, 2020
CVSS 5.3
EPSS 0.01
CVE-2019-10796
CRITICAL
rpi < 0.0.3 - OS Command Injection via GPIO Function
Feb 24, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-10791
CRITICAL
promise-probe < 0.10.0 - OS Command Injection via File and OutputFile Functions
Feb 18, 2020
CVSS 9.8
EPSS 0.02
CVE-2019-10795
MEDIUM
undefsafe < 2.0.3 - Prototype Pollution via __proto__ Payload
Feb 18, 2020
CVSS 6.3
EPSS 0.01
CVE-2019-10794
MEDIUM
component-flatten - Prototype Pollution via __proto__ Payload
Feb 18, 2020
CVSS 6.3
EPSS 0.01
CVE-2019-10793
MEDIUM
dot-object < 2.1.3 - Prototype Pollution via __proto__ Payload
Feb 18, 2020
CVSS 6.3
EPSS 0.01
CVE-2019-10792
MEDIUM
bodymen < 1.1.1 - Prototype Pollution via __proto__ Payload
Feb 18, 2020
CVSS 6.3
EPSS 0.01
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters