npm
4,292 tracked vulnerabilities.
CVE-2019-15597
CRITICAL
node-df 0.1.4 - Remote Code Execution via Unsanitized Input
Dec 18, 2019
CVSS 9.8
EPSS 0.03
CVE-2019-15596
HIGH
statics-server < 0.0.9 - Path Traversal via Symlink
Dec 18, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-10773
HIGH
Yarn < 1.21.1 - Arbitrary Symlink Creation via Bin Key
Dec 16, 2019
CVSS 7.8
EPSS 0.02
CVE-2019-16777
HIGH
npm < 6.13.4 - Arbitrary File Overwrite via Global Binary Installation
Dec 13, 2019
CVSS 7.7
EPSS 0.02
CVE-2019-16776
HIGH
npm < 6.13.3 - Arbitrary File Write via package.json bin Field
Dec 13, 2019
CVSS 7.7
EPSS 0.03
CVE-2019-16775
HIGH
npm CLI <6.13.3 - Arbitrary File Write
Dec 13, 2019
CVSS 7.7
EPSS 0.03
CVE-2019-19771
HIGH
lodahs 0.0.1 - Cryptocurrency Wallet Data Exfiltration
Dec 12, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-19729
HIGH
BSON ObjectID 1.3.0 - Info Disclosure
Dec 11, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-16772
LOW
serialize-to-js < 3.0.1 - Cross-Site Scripting via Regular Expression Serialization
Dec 07, 2019
CVSS 3.1
EPSS 0.01
CVE-2019-10769
CRITICAL
safer-eval - Remote Code Execution via RangeError
Dec 06, 2019
CVSS 9.8
EPSS 0.03
CVE-2019-19609
HIGH
Strapi < 3.0.0-beta.17.8 - Remote Code Execution via Plugin Install/Uninstall
Dec 05, 2019
CVSS 7.2
EPSS 0.54
CVE-2019-16769
MEDIUM
serialize-javascript < 2.1.1 - Cross-Site Scripting via Regular Expression Serialization
Dec 05, 2019
CVSS 4.2
EPSS 0.01
CVE-2019-19596
MEDIUM
GitBook < 2.6.9 - Stored Cross-Site Scripting via Local Markdown File
Dec 05, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-19507
MEDIUM
Json Pattern Validator < 2.1.1 - Authentication Bypass via Constructor Attribute Overwrite
Dec 02, 2019
CVSS 5.3
EPSS 0.01
CVE-2019-10771
MEDIUM
iobroker.web < 2.4.10 - Cross-Site Scripting via GET URL Path
Nov 25, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-16763
MEDIUM
Pannellum 2.5.0-2.5.4 - Cross-Site Scripting via Data URI in Hot Spot Configuration
Nov 22, 2019
CVSS 4.8
EPSS 0.01
CVE-2019-10767
HIGH
iobroker.js-controller < 2.0.25 - Path Traversal via Adapter File Request
Nov 21, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-10765
CRITICAL
iobroker.admin < 3.6.12 - Path Traversal
Nov 20, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-10768
HIGH
AngularJS < 1.7.9 - Prototype Pollution via merge() Function
Nov 19, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-16762
MEDIUM
slpjs < 0.21.4 - Bitcoin Script Validation Bypass via Crafted Script
Nov 15, 2019
CVSS 5.7
EPSS 0.01
CVE-2019-16761
MEDIUM
slp-validate @1.0.0 - Code Injection
Nov 15, 2019
CVSS 5.7
EPSS 0.01
CVE-2019-18954
MEDIUM
Pomelo < 2.2.7 - Critical State Data Manipulation via User Input
Nov 14, 2019
CVSS 5.3
EPSS 0.01
CVE-2019-18841
HIGH
Chartkick.js <3.1.4 - Info Disclosure
Nov 11, 2019
CVSS 7.3
EPSS 0.01
CVE-2019-18818
CRITICAL
NUCLEI
Strapi CMS Unauthenticated Password Reset
Nov 07, 2019
CVSS 9.8
EPSS 0.98
CVE-2019-17221
HIGH
PhantomJS < 2.1.1 - Arbitrary File Read via XMLHttpRequest for file:// URI
Nov 05, 2019
CVSS 7.5
EPSS 0.03
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters