CLEANSTART-2026-EQ34829 Security fixes in npm 11.10.0-r2

Package npm version 11.10.0-r2 fixes 2 vulnerabilities: ghsa-3ppc-4f35-3m26, ghsa-83g3-92jg-28cx...

CLEANSTART-2026-IT14584 Security fixes in npm 11.11.0-r2

Package npm version 11.11.0-r2 fixes 1 vulnerabilities: CVE-2026-31802...

CLEANSTART-2026-CD42505 Security fixes in npm 11.8.0-r0

Package npm version 11.8.0-r0 fixes 1 vulnerabilities: CVE-2026-25547...

CLEANSTART-2026-GJ99967 Security fixes in npm 11.14.0-r3

Package npm version 11.14.0-r3 fixes 2 vulnerabilities: CVE-2026-53655, CVE-2026-9358...

CVE-2025-63706

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

GHSA-2XX6-QF7X-GRQH next-npm-version is vulnerable to Command injection

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

Arbitrary Code Injection

Overview @jswork/next-npm-version is a Get npm package version. Affected versions of this package are vulnerable to Arbitrary Code Injection via the process that handles user-supplied input. An attacker can execute arbitrary system commands by supplying crafted input that is improperly sanitized...

next-npm-version is vulnerable to Command injection

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

CVE-2025-63706

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

next-npm-version 1.0.1 security vulnerability

next-npm-version is a tool developed by Aric, a personal developer, for retrieving npm package versions. The version 1.0.1 of next-npm-version contains a security vulnerability, which stems from command injection...

PT-2026-38439

Name of the Vulnerable Software and Affected Versions next-npm-version version 1.0.1 Description NPM package next-npm-version is subject to command injection, a flaw that allows an attacker to execute arbitrary operating system commands on the server. Recommendations At the moment, there is no...

CVE-2025-63706: Improper Control of Generation of Code

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

Remote Code Execution (RCE)

Signal K Server is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsanitized npm version specifiers in the appstore install API, where attacker-controlled URLs or git sources can be passed to npm, allowing execution of malicious postinstall scripts when an administrator...

CVE-2025-68619 Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the appstore interface allow administrators to install npm packages through a REST API endpoint. While the endpoint validates that the package name exists in the npm registry as a known plugi...

EUVD-2018-0238

Malware in sbrugna...

CVE-2025-59039

Prebid Universal Creative PUC is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related malware. This includes the extremely popular jsdelivr hosting of this file. The maintainers of PUC unpublished version 1.17.3. Users should s...

CVE-2023-46498

An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code via the /deleteCustomer/route.json file...

CVE-2023-46495

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the sortBy parameter...

SUSE-SU-2023:1942-1 Security update for nodejs16

This update for nodejs16 fixes the following issues: Update to nodejs LTS version 16.20.0: Security fixes: - CVE-2022-25881: Fixed ReDoS vulnerability in http-cache-semantics bsc1208744. Other changes: - update undici to 5.20.0 - update c-ares to 1.19.0 - update npm to 8.19.4...

nodejs:16 security, bug fix, and enhancement update

nodejs 16.13.1-3.0.1 - Libraries must not be group-writeable. Change node-gyp permission to 0755 Orabug: 28451433 1:16.13.1-3 - Resolves: RHBZ2027610 - Add corepack to spec 1:16.13.1-2 - Resolves: RHBZ2027610 - Update npm version test 1:16.13.1-1 - Resolves: RHBZ2027644, RHBZ2027643, RHBZ2027638,...