npm
4,292 tracked vulnerabilities.
CVE-2018-1000620
CRITICAL
Eran Hammer cryptiles <4.1.1 - Insufficient Entropy
Jul 09, 2018
CVSS 9.8
EPSS 0.02
CVE-2018-13339
MEDIUM
Angular Redactor 1.1.6 - Stored Cross-Site Scripting via IMG onerror Attribute
Jul 05, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-3767
CRITICAL
memjs <= 1.1.0 - Denial of Service via Uncontrolled Resource Consumption
Jul 05, 2018
CVSS 9.1
EPSS 0.01
CVE-2018-3766
HIGH
buttle <= 0.2.0 - Path Traversal
Jul 05, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-3754
HIGH
query-mysql 0.0.0-0.0.2 - SQL Injection
Jul 03, 2018
CVSS 8.8
EPSS 0.01
CVE-2018-3753
CRITICAL
merge-object < 1.0.0 - Prototype Pollution via Utilities Function
Jul 03, 2018
CVSS 9.8
EPSS 0.01
CVE-2018-3752
CRITICAL
merge-options <= 1.0.0 - Prototype Pollution via Utilities Function
Jul 03, 2018
CVSS 9.8
EPSS 0.01
CVE-2018-3751
CRITICAL
merge-recursive <= 0.3.0 - Prototype Pollution via Utilities Function
Jul 03, 2018
CVSS 9.8
EPSS 0.01
CVE-2018-3750
CRITICAL
deep-extend < 0.5.0 - Prototype Pollution via Utilities Function
Jul 03, 2018
CVSS 9.8
EPSS 0.02
CVE-2018-3749
CRITICAL
deap < 1.0.1 - Prototype Pollution via Utilities Function
Jul 03, 2018
CVSS 9.8
EPSS 0.01
CVE-2018-3748
MEDIUM
glance <= 3.0.5 - Stored Cross-Site Scripting via Crafted File Name
Jul 03, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-3747
MEDIUM
public.js < 0.1.3 - Cross-Site Scripting via HTML in Filename
Jul 03, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-1000534
MEDIUM
Joplin < 1.0.90 - Stored Cross-Site Scripting in Note Content Field
Jun 26, 2018
CVSS 6.1
EPSS 0.02
CVE-2018-11537
MEDIUM
Auth0 angular-jwt < 0.1.10 - Domain Whitelist Bypass via Regex Interpretation
Jun 19, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-11647
MEDIUM
oauth2orize-fprm < 0.2.1 - Cross-Site Scripting via Crafted URL
Jun 17, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-12457
HIGH
expresscart < 1.1.6 - Unauthenticated Admin User Creation via Referer Header
Jun 15, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-5158
HIGH
Firefox ESR < 52.8-Firefox < 60 - Code Injection
Jun 11, 2018
CVSS 8.8
EPSS 0.11
CVE-2018-3758
HIGH
express-cart < 1.1.7 - Authenticated Path Traversal and Remote Code Execution
Jun 07, 2018
CVSS 8.8
EPSS 0.27
CVE-2018-3739
CRITICAL
https-proxy-agent < 2.1.1 - Denial of Service via Auth Parameter Buffer Handling
Jun 07, 2018
CVSS 9.1
EPSS 0.02
CVE-2018-3738
MEDIUM
protobufjs < 6.8.5 - Denial of Service via ReDoS in .proto File Parsing
Jun 07, 2018
CVSS 5.5
EPSS 0.01
CVE-2018-3737
HIGH
sshpk < 1.13.1 - Regular Expression Denial of Service via Crafted Public Key Parsing
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-3735
MEDIUM
bracket-template < 1.1.5 - Reflected Cross-Site Scripting via GET Parameter
Jun 07, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-3732
HIGH
resolve-path < 1.4.0 - Path Traversal via Special Character Bypass
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-3731
HIGH
public.js < 0.1.3 - Path Traversal via filePath Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-3730
HIGH
mcstatic - Path Traversal via filePath Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters