npm
4,297 tracked vulnerabilities.
CVE-2017-16137
MEDIUM
debug < 2.6.9 - Regular Expression Denial of Service via o Formatter
Jun 07, 2018
CVSS 5.3
EPSS 0.03
CVE-2017-16136
HIGH
expressjs method-override < 2.3.10 - Denial of Service via X-HTTP-Method-Override Header
Jun 07, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16135
HIGH
serverzyy - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16134
HIGH
http_static_simple - Path Traversal
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16133
HIGH
goserv - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16132
HIGH
simple-npm-registry - Path Traversal
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16131
HIGH
unicorn-list < 1.0.4 - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16130
HIGH
exxxxxxxxxxx - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16129
MEDIUM
superagent < 3.7.0 - Denial of Service via ZIP Bomb Response
Jun 07, 2018
CVSS 5.9
EPSS 0.02
CVE-2017-16128
CRITICAL
npm-script-demo - Command Injection
Jun 07, 2018
CVSS 9.8
EPSS 0.01
CVE-2017-16127
CRITICAL
pandora-doomsday - Replicating Malicious Code
Jun 07, 2018
CVSS 9.8
EPSS 0.01
CVE-2017-16126
MEDIUM
botbait < 2.0.0 - Unauthorized Exposure of Sensitive User Information
Jun 07, 2018
CVSS 5.3
EPSS 0.01
CVE-2017-16125
HIGH
rtcmulticonnection-client - Path Traversal
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16124
HIGH
node-server-forfront - Path Traversal
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16123
HIGH
welcomyzt < 1.1.0 - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16122
HIGH
cuciuci - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16121
HIGH
datachannel-client - Path Traversal
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16120
HIGH
liyujing - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16119
HIGH
fresh < 0.5.2 - Denial of Service via Regular Expression
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16118
HIGH
forwarded < 0.1.2 - Denial of Service via Regular Expression
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16117
HIGH
slug < 0.9.1 - Regular Expression Denial of Service via Crafted Unicode Input
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16116
HIGH
string < 0.2.1 - Denial of Service via Regular Expression in underscore or unescapeHTML
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16115
HIGH
timespan - Regular Expression Denial of Service via Untrusted User Input
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16114
HIGH
marked < 0.3.9 - Regular Expression Denial of Service
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16113
HIGH
parsejson < 0.0.3 - Regular Expression Denial of Service via Untrusted Input
Jun 07, 2018
CVSS 7.5
EPSS 0.02
Products
openclaw 433
parse-server 98
n8n 92
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters