npm
4,315 tracked vulnerabilities.
CVE-2017-12581
HIGH
Electron < 1.6.8 - Remote Code Execution via Node Integration Bypass
Aug 06, 2017
CVSS 8.1
EPSS 0.07
CVE-2017-1000048
HIGH
ljharb's qs module <6.3.2 - DoS
Jul 17, 2017
CVSS 7.5
EPSS 0.02
CVE-2017-1000043
MEDIUM
Mapbox.js 1.x < 1.6.6 and 2.x < 2.2.4 - Cross-Site Scripting via TileJSON Name and Map Share Control
Jul 17, 2017
CVSS 6.1
EPSS 0.01
CVE-2017-1000042
MEDIUM
Mapbox.js 1.x < 1.6.5 and 2.x < 2.1.7 - Cross-Site Scripting via TileJSON Name
Jul 17, 2017
CVSS 6.1
EPSS 0.01
CVE-2017-1000006
MEDIUM
Plotly, Inc. plotly.js <1.16.0 - XSS
Jul 17, 2017
CVSS 6.1
EPSS 0.01
CVE-2017-7474
CRITICAL
Keycloak Node.js adapter <3.0 - Auth Bypass
May 12, 2017
CVSS 9.8
EPSS 0.03
CVE-2017-6589
MEDIUM
EpicEditor < 0.2.3 - Cross-Site Scripting via Insecure marked.js Configuration
Mar 09, 2017
CVSS 6.1
EPSS 0.01
CVE-2017-5954
CRITICAL
serialize-to-js 0.5.0 - Remote Code Execution via Untrusted Data Deserialization
Feb 10, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-5858
MEDIUM
converse.js 0.8.0-1.0.6 2.0.0-2.0.4 - User Impersonation via XEP-0280 Message Carbons
Feb 09, 2017
CVSS 5.9
EPSS 0.01
CVE-2017-5941
CRITICAL
node-serialize < 0.0.4 - Remote Code Execution via Unserialize Function
Feb 09, 2017
CVSS 9.8
EPSS 0.61
CVE-2016-15025
LOW
generator-hottowel 0.0.11 - Cross-Site Scripting in 404 Error Handler
Feb 20, 2023
CVSS 3.5
EPSS 0.01
CVE-2016-20018
HIGH
knexjs/knex < 2.3.0 - SQL Injection via WHERE Clause Bypass
Dec 19, 2022
CVSS 7.5
EPSS 0.01
CVE-2016-1000237
MEDIUM
sanitize-html < 1.4.3 - Cross-Site Scripting
Jan 23, 2020
CVSS 6.1
EPSS 0.01
CVE-2016-1000229
MEDIUM
Swagger UI - Cross-Site Scripting via Key Names
Dec 20, 2019
CVSS 6.1
EPSS 0.04
CVE-2016-1000236
MEDIUM
Node-cookie-signature <1.0.6 - Info Disclosure
Nov 19, 2019
CVSS 4.4
EPSS 0.01
CVE-2016-10744
MEDIUM
Select2 < 4.0.5 - Cross-Site Scripting via HTML Templates in Ajax Remote Data Loading
Mar 27, 2019
CVSS 6.1
EPSS 0.02
CVE-2016-1000282
CRITICAL
Haraka < 2.8.8 - OS Command Injection via Attachment Processing Plugin
Feb 05, 2019
CVSS 9.8
EPSS 0.13
CVE-2016-10735
MEDIUM
Bootstrap 3.x < 3.4.0 and 4.x-beta < 4.0.0-beta.2 - Cross-Site Scripting via data-target Attribute
Jan 09, 2019
CVSS 6.1
EPSS 0.04
CVE-2016-1000232
MEDIUM
tough-cookie < 2.3.0 - Denial of Service via HTTP Cookie Header Parsing
Sep 05, 2018
CVSS 5.3
EPSS 0.02
CVE-2016-10697
HIGH
react-native-baidu-voice-synthesizer - Remote Code Execution via HTTP Resource Download
Jun 04, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10696
HIGH
windows-latestchromedriver - Remote Code Execution via HTTP Binary Download
Jun 04, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10695
HIGH
npm-test-sqlite3-trunk < 4.0.1 - Remote Code Execution via MITM Binary Download
Jun 04, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10694
HIGH
alto-saxophone < 2.25.1 - Remote Code Execution via HTTP Binary Download
Jun 04, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10693
HIGH
pm2-kafka - Remote Code Execution via MITM Binary Download
Jun 04, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10692
HIGH
haxeshim < 0.12.4 - Remote Code Execution via MITM HTTP Resource Download
Jun 04, 2018
CVSS 8.1
EPSS 0.03
Products
openclaw 433
n8n 110
parse-server 98
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters