ROOT-APP-NPM-CVE-2026-62682 CVE-2026-62682 in orval - Patched by Root

Root has patched CVE-2026-62682 in the orval package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-71867 CVE-2026-71867 in orval - Patched by Root

Root has patched CVE-2026-71867 in the orval package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-71869 CVE-2026-71869 in orval - Patched by Root

Root has patched CVE-2026-71869 in the orval package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-71866 CVE-2026-71866 in orval - Patched by Root

Root has patched CVE-2026-71866 in the orval package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-GV7W-RQVM-QJHR GHSA-gv7w-rqvm-qjhr in esbuild - Patched by Root

Root has patched GHSA-gv7w-rqvm-qjhr in the esbuild package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-4W3W-2RP5-G8JM GHSA-4w3w-2rp5-g8jm in @xmldom/xmldom - Patched by Root

Root has patched GHSA-4w3w-2rp5-g8jm in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41672 CVE-2026-41672 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-41672 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41674 CVE-2026-41674 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-41674 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

CVE-2022-24434_POC

CVE-2022-24434 – PoC for Dicer This repository contains a Proof-of-Concept PoC for CVE-2022-24434 , a vulnerability affecting the Dicer npm package. PoC target version: 0.3.1 ensure the dicer code used is exactly v0.3.1 📂 Project Structure Make sure the directory is structured like this: . ├──...

ROOT-APP-NPM-CVE-2026-71871 CVE-2026-71871 in orval - Patched by Root

Root has patched CVE-2026-71871 in the orval package for Root:npm. Multiple fixed versions available...

cve-2025-65099

Proof of Concept for CVE-2025-65099 Further details are provided in the published article. yarnPath Technique A vulnerable environment for yarnPath can be initialized as follows: root@kitploit: docker run --rm -v "$PWD":/poc -it --workdir /poc ubuntu bash -c 'apt-get update -qq &&...

ROOT-APP-NPM-CVE-2025-71330 CVE-2025-71330 in image-size - Patched by Root

Root has patched CVE-2025-71330 in the image-size package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-71329 CVE-2025-71329 in image-size - Patched by Root

Root has patched CVE-2025-71329 in the image-size package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-71319 CVE-2025-71319 in image-size - Patched by Root

Root has patched CVE-2025-71319 in the image-size package for Root:npm. Multiple fixed versions available...

Malicious code in otel-span-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e800a0d88fb9a757c0ca5ecc09f0217522e72575d3e570a87c167090740de7d The package presents itself as an OpenTelemetry span adapter but on module load schedules a bootstrap routine via setImmediate that reads...

ROOT-APP-NPM-CVE-2026-2359 CVE-2026-2359 in multer - Patched by Root

Root has patched CVE-2026-2359 in the multer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-3304 CVE-2026-3304 in multer - Patched by Root

Root has patched CVE-2026-3304 in the multer package for Root:npm. Multiple fixed versions available...

npm-cve-2026-26830-26833

npm CVE index, March 2026 This repository is only a directory page for four public advisory repositories covering command injection vulnerabilities in npm packages assigned CVE IDs by MITRE on 2026-02-25. As of 2026-03-24, the latest npm release for each package is still affected:...

CVE-2021-32804

CVE-2021-32804 This is a repository for building the Docker environment used in the yamory blog "CVE-2021-32804 Path Traversal Vulnerability in node-tar Affecting npm". Environment Setup root@kitploit: docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash Vulnerability...

Malicious code in kartykp-prod-oidc-test-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d19ade9fc52be37e965196e092b50a392993e063804a7c67e91edc9af51a4007 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...