npm
4,292 tracked vulnerabilities.
CVE-2018-17145
HIGH
Bitcoin Core <0.16.2 & Bitcoin Knots <0.16.2 - DoS
Sep 10, 2020
CVSS 7.5
EPSS 0.03
CVE-2018-21036
HIGH
Sails.js < 1.0.0-46 - Denial of Service via Empty WebSocket Pathname
Jul 21, 2020
CVSS 7.5
EPSS 0.02
CVE-2018-21268
CRITICAL
traceroute < 1.0.0 - Remote Command Injection via Host Parameter
Jun 25, 2020
CVSS 10.0
EPSS 0.04
CVE-2018-19048
MEDIUM
Simditor < 2.3.21 - DOM Cross-Site Scripting via Malformed SVG Element
May 13, 2019
CVSS 6.1
EPSS 0.02
CVE-2018-20835
HIGH
tar-fs < 1.16.2 - Arbitrary File Overwrite via Hardlink and Plain File Extraction
Apr 30, 2019
CVSS 7.5
EPSS 0.02
CVE-2018-20834
HIGH
node-tar < 2.2.2 and 3.0.0-4.4.2 - Arbitrary File Overwrite via Hardlink Extraction
Apr 30, 2019
CVSS 7.5
EPSS 0.03
CVE-2018-20801
HIGH
Highcharts < 6.1.0 - Denial of Service via ReDoS in SVGRenderer
Mar 14, 2019
CVSS 7.5
EPSS 0.03
CVE-2018-20164
MEDIUM
uaparser/user_agent_parser-core < 0.6.0 - Regular Expression Denial of Service via User-Agent Header
Feb 13, 2019
CVSS 5.3
EPSS 0.03
CVE-2018-16493
HIGH
static-resource-server 1.7.2 - Unauthenticated Path Traversal via URL Slash Injection
Feb 01, 2019
CVSS 7.5
EPSS 0.02
CVE-2018-16492
CRITICAL
extend <2.0.2, 3.0.0-3.0.2 - Prototype Pollution
Feb 01, 2019
CVSS 9.8
EPSS 0.03
CVE-2018-16491
CRITICAL
node.extend <1.1.7 - Prototype Pollution
Feb 01, 2019
CVSS 9.8
EPSS 0.02
CVE-2018-16490
HIGH
mpath < 0.5.1 - Prototype Pollution
Feb 01, 2019
CVSS 7.5
EPSS 0.01
CVE-2018-16489
CRITICAL
just-extend < 4.0.0 - Prototype Pollution via Function Property Injection
Feb 01, 2019
CVSS 9.8
EPSS 0.02
CVE-2018-16487
MEDIUM
lodash < 4.17.11 - Prototype Pollution via merge, mergeWith, and defaultsDeep Functions
Feb 01, 2019
CVSS 5.6
EPSS 0.02
CVE-2018-16486
CRITICAL
defaults-deep <=0.2.4 - Prototype Pollution
Feb 01, 2019
CVSS 9.8
EPSS 0.01
CVE-2018-16485
MEDIUM
m-server < 1.4.1 - Path Traversal via URL Slash Manipulation
Feb 01, 2019
CVSS 6.5
EPSS 0.01
CVE-2018-16484
MEDIUM
m-server < 1.4.2 - Stored Cross-Site Scripting via Folder Name
Feb 01, 2019
CVSS 5.4
EPSS 0.01
CVE-2018-16483
HIGH
express-cart <=1.1.5 - Unauthenticated Privilege Escalation via User Addition
Feb 01, 2019
CVSS 8.8
EPSS 0.01
CVE-2018-16482
HIGH
mcstatic <=0.0.20 - Path Traversal via URL Path Slash Injection
Feb 01, 2019
CVSS 7.5
EPSS 0.02
CVE-2018-16481
MEDIUM
html-pages <=2.1.1 - Cross-Site Scripting via Unsanitized Path Rendering
Feb 01, 2019
CVSS 6.1
EPSS 0.01
CVE-2018-16480
MEDIUM
public < 0.1.4 - Stored Cross-Site Scripting via Unsanitized File/Folder Names
Feb 01, 2019
CVSS 6.1
EPSS 0.01
CVE-2018-16479
HIGH
http-live-simulator < 1.0.7 - Path Traversal via Extra Slashes in URL
Feb 01, 2019
CVSS 7.5
EPSS 0.02
CVE-2018-16202
HIGH
cordova-plugin-ionic-webview < 2.2.0 - Path Traversal
Jan 09, 2019
CVSS 8.6
EPSS 0.03
CVE-2018-20677
MEDIUM
Bootstrap < 3.4.0 - Cross-Site Scripting via Affix Configuration Target Property
Jan 09, 2019
CVSS 6.1
EPSS 0.04
CVE-2018-20676
MEDIUM
Bootstrap < 3.4.0 - Cross-Site Scripting via Tooltip data-viewport Attribute
Jan 09, 2019
CVSS 6.1
EPSS 0.04
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters