npm
4,297 tracked vulnerabilities.
CVE-2018-6184
HIGH
NUCLEI
ZEIT Next.js <4.2.3 - Path Traversal
Jan 24, 2018
CVSS 7.5
EPSS 0.09
CVE-2018-0114
HIGH
Cisco node-jose < 0.11.0 - Unauthenticated Token Re-signing via Embedded Public Key
Jan 04, 2018
CVSS 7.5
EPSS 0.43
CVE-2017-20165
LOW
debug < 3.1.0 - Inefficient Regular Expression Complexity in useColors Function
Jan 09, 2023
CVSS 3.5
EPSS 0.02
CVE-2017-20162
MEDIUM
Vercel MS <2.0.0 - Regular Expression Complexity
Jan 05, 2023
CVSS 4.3
EPSS 0.01
CVE-2017-20160
MEDIUM
flitto express-param <1.0.0 - Improper Parameter Handling
Dec 31, 2022
CVSS 6.3
EPSS 0.01
CVE-2017-18924
HIGH
oauth2-server <3.1.1 - Command Injection
Oct 04, 2020
CVSS 7.5
EPSS 0.02
CVE-2017-18869
LOW
chownr < 1.1.0 - Time-of-check Time-of-use Race Condition via Symlink Attack
Jun 15, 2020
CVSS 2.5
EPSS 0.00
CVE-2017-11429
HIGH
saml2-js < 2.0 - Authentication Bypass via SAML Signature Validation Flaw
Apr 17, 2019
CVSS 7.7
EPSS 0.02
CVE-2017-18355
HIGH
Rendertron 1.0.0 - Exposure of Sensitive Information via node_modules Package Paths
Dec 17, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-18354
HIGH
Rendertron 1.0.0 - Local File Inclusion via File Protocol Handler
Dec 17, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-18353
HIGH
Rendertron 1.0.0 - Unauthenticated Denial of Service via _ah/stop Route
Dec 17, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-18352
MEDIUM
Rendertron 1.0.0 - Reflected Cross-Site Scripting via Error Reporting
Dec 17, 2018
CVSS 6.1
EPSS 0.01
CVE-2017-16226
CRITICAL
static-eval < 2.0.0 - Remote Code Execution via Global Function Constructor Access
Jun 07, 2018
CVSS 9.8
EPSS 0.04
CVE-2017-16225
HIGH
aegir 12.0.0-12.0.7 - GitHub Token Exposure
Jun 07, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16224
MEDIUM
st_project/st < 1.2.1 and npm/st < 1.2.2 - Open Redirect via URL-Encoded Path Traversal
Jun 07, 2018
CVSS 6.1
EPSS 0.01
CVE-2017-16223
HIGH
nodeaaaaa 1.0.0-1.2.9 - Path Traversal via URL
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16222
MEDIUM
elding - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 5.3
EPSS 0.02
CVE-2017-16221
HIGH
yzt - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16220
HIGH
wind-mvc - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16219
HIGH
yttivy - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16218
HIGH
dgard8.lab6 - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16217
HIGH
fbr-client - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16216
HIGH
tencent-server - Path Traversal via URL
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16215
HIGH
sgqserve - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16214
HIGH
peiserver - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
Products
openclaw 433
parse-server 98
n8n 92
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters