npm
4,292 tracked vulnerabilities.
CVE-2019-10790
HIGH
taffydb <= 2.7.3 - Unauthenticated Data Access via Index Forgery
Feb 17, 2020
CVSS 7.5
EPSS 0.02
CVE-2019-10785
MEDIUM
dojox < 1.11.9 - Cross-Site Scripting via Incomplete XML Encoding
Feb 13, 2020
CVSS 6.1
EPSS 0.02
CVE-2019-10789
CRITICAL
curling < 1.1.0 - OS Command Injection via Run Function
Feb 06, 2020
CVSS 9.8
EPSS 0.05
CVE-2019-10788
CRITICAL
im-metadata < 3.0.1 - OS Command Injection via Exec Argument
Feb 04, 2020
CVSS 9.8
EPSS 0.02
CVE-2019-10787
CRITICAL
im-resize < 2.3.2 - OS Command Injection via Exec Argument
Feb 04, 2020
CVSS 9.8
EPSS 0.04
CVE-2019-10786
CRITICAL
network-manager < 1.0.2 - Remote Code Execution via execSync() Argument
Feb 04, 2020
CVSS 9.8
EPSS 0.02
CVE-2019-20174
MEDIUM
Auth0 Lock < 11.21.0 - Cross-Site Scripting via Additional Sign-Up Fields Placeholder
Feb 03, 2020
CVSS 6.1
EPSS 0.01
CVE-2019-10783
CRITICAL
Isof < 0.0.4 - OS Command Injection
Jan 29, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-15607
MEDIUM
Node-RED <= 0.20.7 - Stored Cross-Site Scripting
Jan 28, 2020
CVSS 5.4
EPSS 0.01
CVE-2019-10781
CRITICAL
schema-inspector < 1.6.9 - Validation Bypass via Malicious JavaScript Object
Jan 22, 2020
CVSS 9.8
EPSS 0.01
CVE-2019-0219
CRITICAL
Cordova InAppBrowser < 3.0.0 - Arbitrary JavaScript Execution via gap-iab URI
Jan 14, 2020
CVSS 9.8
EPSS 0.08
CVE-2019-10777
CRITICAL
aws-lambda < 1.0.5 - OS Command Injection via config.FunctionName
Jan 08, 2020
CVSS 9.8
EPSS 0.02
CVE-2019-10778
CRITICAL
devcert-sanscache < 0.4.7 - OS Command Injection via Exec Function
Jan 08, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-10776
CRITICAL
git-diff-apply < 0.22.2 - OS Command Injection via RemoteUrl Parameter
Jan 07, 2020
CVSS 9.8
EPSS 0.02
CVE-2019-15603
MEDIUM
seeftl 0.1.1 - Stored Cross-Site Scripting via Directory Listing Filename
Jan 06, 2020
CVSS 6.1
EPSS 0.01
CVE-2019-15602
MEDIUM
fileview 0.1.6 - Stored Cross-Site Scripting via Inadequate Output Encoding
Jan 06, 2020
CVSS 6.1
EPSS 0.01
CVE-2019-14863
MEDIUM
angularjs < 1.5.0-beta.0 - Cross-Site Scripting
Jan 02, 2020
CVSS 6.1
EPSS 0.01
CVE-2019-14862
MEDIUM
knockout < 3.5.0-beta - Cross-Site Scripting
Jan 02, 2020
CVSS 6.1
EPSS 0.02
CVE-2019-10775
HIGH
ecstatic < 4.1.3 - Denial of Service via Uncontrolled Resource Consumption
Jan 02, 2020
CVSS 7.5
EPSS 0.01
CVE-2019-20149
HIGH
kind-of 6.0.0-6.0.2 - Exposure of Resource to Wrong Sphere via ctorName Overwrite
Dec 30, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-10758
CRITICAL
KEVNUCLEI
mongo-express < 0.54.0 - Remote Code Execution via toBSON Method
Dec 24, 2019
CVSS 9.9
EPSS 0.85
CVE-2019-19919
CRITICAL
handlebars.js - Prototype Pollution leading to Remote Code Execution
Dec 20, 2019
CVSS 9.8
EPSS 0.07
CVE-2019-15600
HIGH
http_server - Path Traversal
Dec 18, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-15599
CRITICAL
tree-kill < 1.2.2 - Remote Code Execution via Command Injection
Dec 18, 2019
CVSS 9.8
EPSS 0.03
CVE-2019-15598
CRITICAL
treekill < 1.2.2 - OS Command Injection
Dec 18, 2019
CVSS 9.8
EPSS 0.03
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters