npm
4,315 tracked vulnerabilities.
CVE-2015-9235
CRITICAL
jsonwebtoken < 4.2.2 - Authentication Bypass via Algorithm Confusion
May 29, 2018
CVSS 9.8
EPSS 0.09
CVE-2015-9251
MEDIUM
jQuery < 3.0.0 - Cross-Site Scripting via Cross-Domain Ajax Request
Jan 18, 2018
CVSS 6.1
EPSS 0.30
CVE-2015-3296
MEDIUM
NodeBB < 0.7 - Cross-Site Scripting via JavaScript or Data URLs
Sep 21, 2017
CVSS 6.1
EPSS 0.01
CVE-2015-7294
HIGH
ldapauth-fork < 2.3.3 - LDAP Injection via Crafted Username
Sep 06, 2017
CVSS 7.5
EPSS 0.02
CVE-2015-8013
HIGH
OpenPGP.js - Auth Bypass
Jul 25, 2017
CVSS 7.5
EPSS 0.04
CVE-2015-8862
MEDIUM
mustache.js < 2.2.1 - Cross-Site Scripting via Unquoted Template Attribute
Jan 23, 2017
CVSS 6.1
EPSS 0.01
CVE-2015-8861
MEDIUM
handlebars.js < 4.0.0 - Cross-Site Scripting via Unquoted Template Attributes
Jan 23, 2017
CVSS 6.1
EPSS 0.03
CVE-2015-8860
HIGH
Nodejs Node.js < 1.8.4 - Symlink Following
Jan 23, 2017
CVSS 7.5
EPSS 0.05
CVE-2015-8859
MEDIUM
Node.js Send <0.11.1 - Info Disclosure
Jan 23, 2017
CVSS 5.3
EPSS 0.05
CVE-2015-8858
HIGH
Uglifyjs < 2.5.0 - Resource Management Error
Jan 23, 2017
CVSS 7.5
EPSS 0.02
CVE-2015-8857
CRITICAL
Uglifyjs < 2.4.24 - Security Feature Bypass
Jan 23, 2017
CVSS 9.8
EPSS 0.04
CVE-2015-8856
MEDIUM
serve-index < 1.6.3 - Cross-Site Scripting via Crafted File or Directory Name
Jan 23, 2017
CVSS 6.1
EPSS 0.02
CVE-2015-8855
HIGH
Nodejs Node.js < 4.3.1 - Resource Management Error
Jan 23, 2017
CVSS 7.5
EPSS 0.06
CVE-2015-8854
HIGH
marked < 0.3.4 - Denial of Service via Regular Expression Backtracking in Inline Rule
Jan 23, 2017
CVSS 7.5
EPSS 0.04
CVE-2015-8315
HIGH
vercel/ms < 0.7.1 - Denial of Service via Regular Expression Complexity
Jan 23, 2017
CVSS 7.5
EPSS 0.07
CVE-2015-5654
Dojo Toolkit < 1.2 - Cross-Site Scripting
Oct 11, 2015
EPSS 0.02
CVE-2015-6584
DataTables < 1.10.8 - Cross-Site Scripting via Scripts Parameter
Sep 11, 2015
EPSS 0.03
CVE-2015-5688
NUCLEI
geddy < 13.0.8 - Path Traversal via Dot Dot Encoded Slash in PATH_INFO
Sep 04, 2015
EPSS 0.09
CVE-2015-1370
marked < 0.3.2 - Cross-Site Scripting via VBScript Tag in Link
Jan 27, 2015
EPSS 0.02
CVE-2015-1369
Sequelize <2.0.0-rc7 - SQL Injection
Jan 27, 2015
EPSS 0.02
CVE-2015-1164
serve-static <1.7.2 - Open Redirect
Jan 21, 2015
EPSS 0.03
CVE-2014-3743
MEDIUM
marked < 0.3.1 - Cross-Site Scripting via GFM Codeblocks or JavaScript URLs
Jan 06, 2020
CVSS 6.1
EPSS 0.02
CVE-2014-10066
HIGH
fancy-server < 0.1.4 - Path Traversal via Directory Traversal Sequences
May 31, 2018
CVSS 7.5
EPSS 0.02
CVE-2014-10065
MEDIUM
remarkable < 1.4.1 - Cross-Site Scripting via JavaScript URL Injection
May 31, 2018
CVSS 6.1
EPSS 0.01
CVE-2014-10064
HIGH
QS < 1.0.0 - Denial of Service
May 31, 2018
CVSS 7.5
EPSS 0.01
Products
openclaw 433
n8n 110
parse-server 98
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters