CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

EUVD•added 2026/03/16 3:30 p.m.•27 views

EUVD-2026-12107

In Bun before 1.3.5, the default trusted dependencies list aka trust allow list can be spoofed by a non-npm package in the case of a matching name for file, link, git, or github...

7.1CVSS6.6AI score0.00492EPSS

SaveExploits0References14

attackerkb•added 2026/01/27 10:26 p.m.•14 views

CVE-2026-24910

In Bun before 1.3.5, the default trusted dependencies list aka trust allow list can be spoofed by a non-npm package in the case of a matching name for file, link, git, or github...

5.9CVSS6.6AI score0.00123EPSS

SaveExploits0References4

Cvelist•added 2026/01/27 10:26 p.m.•45 views

CVE-2026-24910

In Bun before 1.3.5, the default trusted dependencies list aka trust allow list can be spoofed by a non-npm package in the case of a matching name for file, link, git, or github...

5.9CVSS0.00123EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by