npm
4,292 tracked vulnerabilities.
CVE-2018-6333
CRITICAL
Nuclide < 0.290.0 - Cross-Site Scripting via hhvm-attach Deep Link Hostname Parameter
Dec 31, 2018
CVSS 9.8
EPSS 0.02
CVE-2018-6342
CRITICAL
react-dev-utils <1.0.4, <2.0.2, <3.1.2, <4.2.2, <5.0.2 - OS Command Injection
Dec 31, 2018
CVSS 9.8
EPSS 0.03
CVE-2018-6341
MEDIUM
React 16.0.0-16.4.2 - Cross-Site Scripting via Unescaped Attribute Names
Dec 31, 2018
CVSS 6.1
EPSS 0.03
CVE-2018-16478
MEDIUM
simplehttpserver <= 0.2.1 - Path Traversal
Dec 04, 2018
CVSS 5.3
EPSS 0.01
CVE-2018-9207
CRITICAL
jQuery Upload File <= 4.0.2 - Arbitrary File Upload
Nov 19, 2018
CVSS 9.8
EPSS 0.03
CVE-2018-19289
MEDIUM
Valine < 1.3.4 - Stored Cross-Site Scripting via EMBED Element
Nov 15, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-17960
MEDIUM
CKEditor 4.0-4.10.1 - Stored Cross-Site Scripting via Source-Mode Paste
Nov 14, 2018
CVSS 6.1
EPSS 0.02
CVE-2018-19183
HIGH
ethereumjs-vm 2.4.0 - Denial of Service via Code Buffer Handling
Nov 12, 2018
CVSS 7.5
EPSS 0.03
CVE-2018-19057
MEDIUM
SimpleMDE 1.11.2 - Cross-Site Scripting via IMG onerror Attribute or A Element Construction
Nov 07, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-19056
MEDIUM
pandao Editor.md 1.5.0 - DOM-Based Cross-Site Scripting via A Element Construction
Nov 07, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-16475
HIGH
Knightjs <= 0.0.1 - Path Traversal
Nov 06, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-16474
MEDIUM
tianma-static <=1.0.4 - Stored Cross-Site Scripting
Nov 06, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-16473
MEDIUM
takeapeek <= 0.2.2 - Path Traversal
Nov 06, 2018
CVSS 5.3
EPSS 0.01
CVE-2018-16472
HIGH
cached-path-relative <=1.0.1 - Prototype Pollution via Input Validation Bypass
Nov 06, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-16469
HIGH
merge < 1.2.1 - Denial of Service via Prototype Pollution
Oct 30, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-16462
CRITICAL
apex-publish-static-files < 2.0.1 - OS Command Injection via Maliciously Crafted Argument
Oct 30, 2018
CVSS 10.0
EPSS 0.07
CVE-2018-16461
CRITICAL
libnmap < 0.4.16 - OS Command Injection via Range Options
Oct 30, 2018
CVSS 9.8
EPSS 0.04
CVE-2018-18282
MEDIUM
Next.js 7.0.0-7.0.1 - Cross-Site Scripting via Error Page
Oct 12, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-9206
CRITICAL
NUCLEI
Blueimp jQuery-File-Upload <=9.22.0 - File Upload
Oct 11, 2018
CVSS 9.8
EPSS 0.97
CVE-2018-17574
MEDIUM
YMFE YApi < 1.3.23 - Stored Cross-Site Scripting in Project Name Field
Sep 28, 2018
CVSS 5.4
EPSS 0.01
CVE-2018-14732
HIGH
webpack-dev-server <3.1.6 - Info Disclosure
Sep 21, 2018
CVSS 7.5
EPSS 0.03
CVE-2018-14731
HIGH
Parcel parcel-bundler - Info Disclosure
Sep 21, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-14730
HIGH
browserify-hmr < 0.4.0 - Unauthenticated Exposure of Sensitive Information via WebSocket Server
Sep 21, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-16982
MEDIUM
Open Chinese Convert 1.0.5 - Denial of Service via Crafted .ocd File
Sep 13, 2018
CVSS 5.5
EPSS 0.01
CVE-2018-16460
CRITICAL
Umbraengineering PS < 1.0.0 - Command Injection
Sep 07, 2018
CVSS 9.8
EPSS 0.03
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters