npm
4,292 tracked vulnerabilities.
CVE-2018-3729
HIGH
localhost-now < 1.0.2 - Path Traversal via File Path Validation Bypass
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-3727
HIGH
626 - Path Traversal via File Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-3726
MEDIUM
crud-file-server < 0.8.0 - Cross-Site Scripting via File Name
Jun 07, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-3725
HIGH
hekto < 0.2.3 - Path Traversal via File Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-3724
HIGH
general-file-server - Path Traversal via currpath Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-3723
HIGH
defaults-deep <0.2.4 - Use After Free
Jun 07, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-3722
HIGH
merge-deep < 3.0.1 - Prototype Pollution via __proto__
Jun 07, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-3721
MEDIUM
lodash < 4.17.5 - Prototype Pollution via __proto__ in defaultsDeep, merge, and mergeWith
Jun 07, 2018
CVSS 6.5
EPSS 0.02
CVE-2018-3720
HIGH
assign-deep <0.4.7 - Use After Free
Jun 07, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-3719
HIGH
mixin-deep < 1.3.1 - Prototype Pollution via __proto__
Jun 07, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-3718
MEDIUM
Serve Node Module - Info Disclosure
Jun 07, 2018
CVSS 5.3
EPSS 0.01
CVE-2018-3717
MEDIUM
Sencha Connect < 2.14.0 - Cross-Site Scripting in Directory Middleware
Jun 07, 2018
CVSS 5.4
EPSS 0.01
CVE-2018-3716
MEDIUM
simplehttpserver < 0.1.0 - Cross-Site Scripting via Unvalidated Filename
Jun 07, 2018
CVSS 5.4
EPSS 0.01
CVE-2018-3715
MEDIUM
glance < 3.0.4 - Path Traversal via Unvalidated Path Input
Jun 07, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-3714
MEDIUM
NUCLEI
node-srv < 2.1.1 - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 6.5
EPSS 0.09
CVE-2018-3713
MEDIUM
angular-http-server < 1.6.0 - Path Traversal via possibleFilename
Jun 07, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-3712
MEDIUM
serve < 6.4.9 - Path Traversal via URL-Encoded Dot-Slash Sequences
Jun 07, 2018
CVSS 6.5
EPSS 0.02
CVE-2018-3711
HIGH
fastify < 0.38.0 - Denial of Service via Large JSON Payload
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-3809
MEDIUM
serve < 7.0.0 - Unauthenticated Exposure of Sensitive Information via Directory Listing
Jun 01, 2018
CVSS 5.3
EPSS 0.01
CVE-2018-3757
CRITICAL
pdf-image < 2.0.0 - OS Command Injection via Unescaped String Parameter
Jun 01, 2018
CVSS 9.8
EPSS 0.05
CVE-2018-3755
MEDIUM
sexstatic <= 0.6.2 - Stored Cross-Site Scripting via Directory Name
Jun 01, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-3746
CRITICAL
pdfinfojs <= 0.3.6 - OS Command Injection
Jun 01, 2018
CVSS 9.8
EPSS 0.05
CVE-2018-3743
MEDIUM
hekto <=0.2.3 - Open Redirect via HTML Filename
Jun 01, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-3745
CRITICAL
atob < 2.0.3 - Out-of-bounds Read via Uninitialized Buffer Allocation
May 29, 2018
CVSS 9.1
EPSS 0.02
CVE-2018-3744
CRITICAL
html-pages - Path Traversal via cURL
May 29, 2018
CVSS 9.8
EPSS 0.02
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters