npm

4,297 tracked vulnerabilities.

CVE-2017-16111 HIGH
content < 3.0.5, npm/content < 3.0.7 - Denial of Service via Crafted Content-Type or Content-Disposition Header
Jun 07, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16110 HIGH
weather.swlyons - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16109 MEDIUM
easyquick < 0.1.1 - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 5.3
EPSS 0.02
CVE-2017-16108 HIGH
gaoxiaotingtingting - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16107 HIGH
pooledwebsocket < 0.0.18 (npm < 0.0.19) - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16106 HIGH
tmock - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16105 HIGH
serverwzl - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16104 HIGH
citypredict.whauwiller - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16103 HIGH
serveryztyzt - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16102 HIGH
serverhuwenhui - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16101 HIGH
serverwg - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16100 CRITICAL
dns-sync < 0.1.1 - OS Command Injection via resolve() Method
Jun 07, 2018
CVSS 9.8
EPSS 0.05
CVE-2017-16099 HIGH
no-case < 2.3.2 - Denial of Service via Regular Expression
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16098 HIGH
charset < 1.0.1 - Regular Expression Denial of Service
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16097 HIGH
tiny-http - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16096 HIGH
serveryaozeyan - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16095 HIGH
serverliujiayi1 - Path Traversal via URL
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16094 HIGH
iter-http - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16093 HIGH
cyber-js - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16092 HIGH
sencisho - Path Traversal via URL
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16091 HIGH
xtalk >= 0.0.2 - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16090 HIGH
fsk-server - Path Traversal via URL Parameter
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16089 HIGH
serverlyr - Path Traversal via URL Manipulation
Jun 07, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16088 CRITICAL
safe-eval - Sandbox Escape via Object Constructor Access
Jun 07, 2018
CVSS 10.0
EPSS 0.03
CVE-2017-16086 HIGH
ua-parser - Regular Expression Denial of Service via UserAgent Header
Jun 07, 2018
CVSS 7.5
EPSS 0.09