Vulnersosv - Page 44 of Vulnersosv Most Viewed Vulnerabilities List

VulnersosvMost viewed

11668 matches found

vulnersOsv•added 2026/02/18 12:57 a.m.•12 views

org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by CVE-2026-26960 via org.webjars.npm:tar (>=0.1.20, <=4.4.19)

org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: CVE-2026-26960 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15307073...

7.1CVSS6.3AI score0.00202EPSS

SaveExploits1

vulnersOsv•added 2026/02/13 8:05 p.m.•12 views

openmls (>=0.4.0-pre.1, <=0.4.0-pre.2), openmls_evercrypt (>=0.1.0-pre.1, <=0.1.0-pre.2) +2 more potentially affected by unknown CVE via hpke-rs (0.1.2)

hpke-rs CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on hpke-rs and may be impacted: - openmls =0.4.0-pre.1, =0.1.0-pre.1, =0.1.0-pre.1, =0.4.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-G433-PQ76-6CMF...

5.7AI score

SaveExploits0

vulnersOsv•added 2026/02/12 5:20 a.m.•12 views

1k-utils (>=2.1.0, <=2.2.3), 20190403-utils (1.0.0) +13354 more potentially affected by CVE-2026-2391 via qs (>=6.7.0, <=6.14.1)

qs NPM version =6.7.0, =2.1.0, =2.0.0, =1.0.0, =0.0.28, =1.0.8, =4.11.0, =2.0.1, =0.0.1, =3.10.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-2391 Source advisory: SNYK:JS-QS-15268416...

7.5CVSS5.6AI score0.00507EPSS

SaveExploits1

vulnersOsv•added 2026/02/11 12:00 p.m.•12 views

openmls (>=0.4.0-pre.1, <=0.4.0-pre.2), openmls_evercrypt (>=0.1.0-pre.1, <=0.1.0-pre.2) +2 more potentially affected by unknown CVE via hpke-rs (0.1.2)

5.7AI score

SaveExploits0

vulnersOsv•added 2026/02/11 12:00 p.m.•12 views

openmls (>=0.4.0-pre.1, <=0.4.0-pre.2), openmls_evercrypt (>=0.1.0-pre.1, <=0.1.0-pre.2) +2 more potentially affected by unknown CVE via hpke-rs (0.1.2)

5.7AI score

SaveExploits0

vulnersOsv•added 2026/02/06 6:54 p.m.•12 views

@nelluriramu/oegesbot (1.0.0) potentially affected by CVE-2026-25651 via client-certificate-auth (0.3.0)

client-certificate-auth NPM version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on client-certificate-auth and may be impacted: - @nelluriramu/oegesbot 1.0.0 Source cves: CVE-2026-25651 Source advisory: OSV:GHSA-M4W9-GCH5-C2G4...

6.1CVSS5.4AI score0.00228EPSS

SaveExploits1

vulnersOsv•added 2026/02/05 5:49 p.m.•12 views

@enclave-vm/broker (>=2.8.0, <=2.10.0), @enclave-vm/runtime (>=2.8.0, <=2.10.0) potentially affected by CVE-2026-25533 via @enclave-vm/core (>=2.8.0, <=2.10.0)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.10.0 Source cves: CVE-2026-25533 Source advisory: SNYK:JS-ENCLAVEVMCORE-15248347...

8.8CVSS5.4AI score0.00233EPSS

SaveExploits1

vulnersOsv•added 2026/02/04 12:00 p.m.•12 views

hpke-rs (>=0.1.0-pre.1, <=0.1.0-pre.2), openmls (>=0.4.0-pre.1, <=0.4.0-pre.2) +2 more potentially affected by unknown CVE via hpke-rs-rust-crypto (0.1.1)

hpke-rs-rust-crypto CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on hpke-rs-rust-crypto and may be impacted: - hpke-rs =0.1.0-pre.1, =0.4.0-pre.1, =0.1.0-pre.1, =0.4.0, =0.9.0 Source cves: unknown CVE Source advisory:...

5.7AI score

SaveExploits0

vulnersOsv•added 2026/02/03 10:04 p.m.•12 views

@react-portable/core (>=0.4.0, <=0.11.2), storybook-framework-qwik (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-25149 via @builder.io/qwik-city (>=1.2.6, <=1.4.1)

@builder.io/qwik-city NPM version =1.2.6, =0.4.0, =0.3.0, =0.4.0 Source cves: CVE-2026-25149 Source advisory: SNYK:JS-BUILDERIOQWIKCITY-15202232...

6.9CVSS5.8AI score0.00274EPSS

SaveExploits0

vulnersOsv•added 2026/02/03 7:32 p.m.•12 views

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.0.0-broken, <=1.58.3) +15 more potentially affected by CVE-2026-24053 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.69)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.0.0-broken, =0.0.1-rc.1, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =1.2.1 and more Source cves: CVE-2026-24053 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15202063...

7.7CVSS5.3AI score0.00522EPSS

SaveExploits0

vulnersOsv•added 2026/02/03 7:15 p.m.•12 views

@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2026-24052 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)

@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2026-24052 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15202062...

7.4CVSS5.3AI score0.00439EPSS

SaveExploits0

vulnersOsv•added 2026/02/02 10:23 p.m.•12 views

@amedia/brick-mcp (>=0.0.0-vEXPORT-20260113150210, <=0.1.5), @andesite-lab/andesite-core (>=1.60.2, <=1.62.0) +263 more potentially affected by CVE-2026-25223 via fastify (>=5.0.0, <=5.7.1)

fastify NPM version =5.0.0, =0.0.0-vEXPORT-20260113150210, =1.60.2, =2.0.1, =1.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.22 and more Source cves: CVE-2026-25223 Source advisory: OSV:GHSA-JX2C-RXCM-JVMQ...

7.5CVSS7.8AI score0.00875EPSS

SaveExploits0

vulnersOsv•added 2026/01/30 8:10 p.m.•12 views

@activepieces/piece-amazon-s3 (>=0.5.8, <=0.6.4), @activepieces/piece-amazon-ses (>=0.0.1, <=0.1.4) +1006 more potentially affected by CVE-2026-25128 via fast-xml-parser (>=5.0.9, <=5.3.3)

fast-xml-parser NPM version =5.0.9, =0.5.8, =0.0.1, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.0.0, =1.7.16, =2.33.6, =1.4.37, =1.6.3 and more Source cves: CVE-2026-25128 Source advisory: OSV:GHSA-37QJ-FRW5-HHJH...

7.5CVSS5.6AI score0.00621EPSS

SaveExploits1

vulnersOsv•added 2026/01/28 7:47 p.m.•12 views

flowflops (>=0.0.1.post2211140919, <=0.0.1.post2211151211) potentially affected by CVE-2025-71002 via oneflow (0.9.0)

oneflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oneflow and may be impacted: - flowflops =0.0.1.post2211140919, =0.0.1.post2211151211 Source cves: CVE-2025-71002 Source advisory: SNYK:PYTHON-ONEFLOW-15162572...

6.5CVSS5.4AI score0.0032EPSS

SaveExploits1

vulnersOsv•added 2026/01/27 8:47 p.m.•12 views

@agentforce/adk (>=0.9.0, <=0.12.1), @agentkit-ai/bff-hono (1.0.0) +356 more potentially affected by CVE-2026-24771 via hono (>=4.0.0, <=4.11.6)

hono NPM version =4.0.0, =0.9.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.0.1, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =0.0.1, =0.0.1, =0.0.1-experimental.1, =1.7.2, =1.8.0 and more Source cves: CVE-2026-24771 Source advisory: SNYK:JS-HONO-15123927...

4.7CVSS5.8AI score0.00351EPSS

SaveExploits0

vulnersOsv•added 2026/01/27 7:04 p.m.•12 views

@agentforce/adk (>=0.9.0, <=0.12.1), @agentkit-ai/bff-hono (1.0.0) +356 more potentially affected by CVE-2026-24472 via hono (>=4.0.0, <=4.11.6)

5.3CVSS5.8AI score0.00508EPSS

SaveExploits0

vulnersOsv•added 2026/01/26 9:02 p.m.•12 views

@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +12 more potentially affected by CVE-2026-24056 via pnpm (>=10.0.0, <=10.18.3)

pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =2.7.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-24056 Source advisory: OSV:GHSA-M733-5W8F-5GGW...

6.7CVSS6AI score0.00535EPSS

SaveExploits1

vulnersOsv•added 2026/01/26 7:49 p.m.•12 views

3llm (0.0.1), @3bitmt/3bit-sidebar-dashboard (1.1.4) +306 more potentially affected by CVE-2025-55184 +1 more via next (>=15.1.0, <=15.1.11)

next NPM version =15.1.0, =0.0.3-alpha-20241210234548-01b7322d940b7c913e95222127be2373f0f996cf, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.1, =0.1.1, =0.1.0, =0.1.22 and more Source cves: CVE-2025-55184, CVE-2026-23864 Source advisory: SNYK:JS-NEXT-15921797...

7.5CVSS7.6AI score0.66882EPSS

SaveExploits10

vulnersOsv•added 2026/01/21 11:01 p.m.•12 views

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +4567 more potentially affected by CVE-2025-13465 +1 more via lodash-es (>=4.0.0, <=4.17.22)

lodash-es NPM version =4.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1-alpha.23, =1.0.0, =2.14.1, =41.3.1, =2.1.0, =0.7.0, =1.0.0, =0.1.3, =0.0.4, =0.1.0, =0.0.1-alpha.4, =1.0.1, =1.0.23 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: OSV:GHSA-XXJR-MMJV-4GPG...

8.2CVSS6.5AI score0.0185EPSS

SaveExploits0

vulnersOsv•added 2026/01/21 11:01 p.m.•12 views

@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +250 more potentially affected by CVE-2025-13465 +1 more via lodash.unset (>=4.0.2, <=4.5.2)

lodash.unset NPM version =4.0.2, =2.16.49, =1.8.28, =1.2.1, =1.8.4, =8.0.0, =1.0.75, =0.0.2, =0.1.0, =1.31.9, =0.0.4, =0.6.0 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: OSV:GHSA-XXJR-MMJV-4GPG...

8.2CVSS6.5AI score0.0185EPSS

SaveExploits0

vulnersOsv•added 2026/01/21 1:00 a.m.•12 views

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.58.1-alpha) +14 more potentially affected by CVE-2026-21852 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.64)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.31.0-alpha, =0.0.1-rc.1, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =0.10.2, =0.11.5 and more Source cves: CVE-2026-21852 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15046268...

7.5CVSS6AI score0.27868EPSS

SaveExploits2

vulnersOsv•added 2026/01/20 8:45 p.m.•12 views

aegis-game (>=2.0.0, <=2.9.11), auditnlg (0.0.1) +29 more potentially affected by CVE-2025-66902 via websocket-server (>=0.4.0, <=0.6.4)

websocket-server PYPI version =0.4.0, =2.0.0, =0.2.3, =0.1.7, =0.2.0, =0.1.0, =0.1.1, =0.1.0, =0.7.0, =0.0.11, =0.2.16 and more Source cves: CVE-2025-66902 Source advisory: SNYK:PYTHON-WEBSOCKETSERVER-15046798...

7.5CVSS5.7AI score0.00422EPSS

SaveExploits1

vulnersOsv•added 2026/01/20 1:45 a.m.•12 views

@adenta/cms (>=0.0.6, <=1.1.1-0), @adobe/helix-deploy (>=11.0.19, <=11.1.15) +319 more potentially affected by CVE-2026-23950 via tar (>=7.0.0, <=7.5.3)

tar NPM version =7.0.0, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =0.1.1, =0.1.1, =2.17.11, =1.9.5, =8.8.3, =0.0.2, =0.0.22 and more Source cves: CVE-2026-23950 Source advisory: SNYK:JS-TAR-15038581...

8.8CVSS6.4AI score0.00257EPSS

SaveExploits1

vulnersOsv•added 2026/01/17 6:30 p.m.•12 views

net.risesoft:risenet-y9boot-support-platform-web (9.7.0-rc3) potentially affected by CVE-2026-1050 via net.risesoft:risenet-y9boot-support-platform-service (9.7.0-rc3)

net.risesoft:risenet-y9boot-support-platform-service MAVEN version 9.7.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on net.risesoft:risenet-y9boot-support-platform-service and may be impacted: - net.risesoft:risenet-y9boot-support-platform-web...

7.5CVSS7.3AI score0.00402EPSS

SaveExploits0

vulnersOsv•added 2026/01/08 8:54 p.m.•12 views

@1023-ventures/merope2 (>=0.2.1, <=0.2.9), @1023-ventures/vega-core (>=0.5.0, <=0.6.2) +1410 more potentially affected by CVE-2026-22029 via @remix-run/router (>=1.0.0, <=1.23.1-pre-v6.0)

@remix-run/router NPM version =1.0.0, =0.2.1, =0.5.0, =0.0.1, =0.0.1, =3.0.0, =0.0.0-beta-20260120211922, =1.0.0, =1.0.0, =1.0.0, =2.7.0, =0.0.1, =0.1.0, =0.0.0, =6.24.1, =8.19.1 and more Source cves: CVE-2026-22029 Source advisory: OSV:GHSA-2W69-QVJG-HVJX...

8CVSS6.6AI score0.00866EPSS

SaveExploits0

vulnersOsv•added 2026/01/05 10:58 p.m.•12 views

@0xgg/echomd (>=1.0.0, <=1.0.4), @adobe/react-spectrum-charts (>=1.16.0-alpha.3, <=1.28.0) +300 more potentially affected by CVE-2025-66648 via vega-functions (>=5.8.0, <=6.0.0)

vega-functions NPM version =5.8.0, =1.0.0, =1.16.0-alpha.3, =0.2.0, =1.1.5, =0.4.3, =0.1.0, =0.0.1, =0.4.1-canary.195, =0.0.0, =0.2.0-beta.0, =0.1.0, =2.0.0-next.2 - @datatitian/vega 5.17.0 and more Source cves: CVE-2025-66648 Source advisory: SNYK:JS-VEGAFUNCTIONS-14872001...

7.2CVSS5.8AI score0.00226EPSS

SaveExploits1

vulnersOsv•added 2025/12/17 10:47 p.m.•12 views

@storybook/angular (>=9.0.0-alpha.0, <=9.1.16), @storybook/ember (>=9.0.0-alpha.0, <=9.1.16) +49 more potentially affected by CVE-2025-68429 via @storybook/builder-webpack5 (>=9.0.0, <=9.1.16)

@storybook/builder-webpack5 NPM version =9.0.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =1.7.54, =1.7.48, =1.7.56, =1.11.1, =1.8.58, =1.14.15 and more Source cves: CVE-2025-6842...

7.3CVSS7.3AI score0.00257EPSS

SaveExploits0

vulnersOsv•added 2025/12/04 4:54 p.m.•12 views

@bigchaindb/jwt (>=0.0.18, <=0.0.20), @compas/store (>=0.0.172, <=0.20.0) +34 more potentially affected by CVE-2025-65945 via jws (4.0.0)

jws NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jws and may be impacted: - @bigchaindb/jwt =0.0.18, =0.0.172, =11.8.0, =1.0.0-beta.2, =1.1.0, =15.2.0, =17.1.6, =13.0.0, =10.1.0, =10.4.0, =10.1.0, =10.3.0-snapshot, =0.1.11, =2.5.5,...

7.5CVSS5.9AI score0.00215EPSS

SaveExploits1

vulnersOsv•added 2025/12/03 4:39 p.m.•12 views

3llm (0.0.1), @3bitmt/3bit-sidebar-dashboard (1.1.4) +299 more potentially affected by CVE-2025-55182 +1 more via next (>=15.1.0, <=15.1.8)

next NPM version =15.1.0, =0.0.3-alpha-20241210234548-01b7322d940b7c913e95222127be2373f0f996cf, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.1, =0.1.1, =0.1.0, =0.1.22 and more Source cves: CVE-2025-55182, CVE-2025-66478 Source advisory: SNYK:JS-NEXT-14173355...

10CVSS7.3AI score0.99802EPSS

SaveExploits410

vulnersOsv•added 2025/12/02 1:20 a.m.•12 views

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +39 more potentially affected by CVE-2025-66412 via @angular/compiler (>=19.0.0, <=19.2.16)

@angular/compiler NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.346.0, =0.0.1-canary.0.0, =1.0.0-canary.1 - @ismailadekambi/shared 1.0.0 and more Source cves: CVE-2025-66412 Source advisory:...

8.5CVSS7AI score0.00413EPSS

SaveExploits1

vulnersOsv•added 2025/12/02 1:20 a.m.•12 views

@eui/deps-base (>=21.0.0-alpha.10, <=21.0.0-next.38), @eui/deps-base-light (>=21.0.0-alpha.10, <=21.0.0-next.38) potentially affected by CVE-2025-66412 via @angular/compiler (>=21.0.0, <=21.0.1)

@angular/compiler NPM version =21.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =21.0.0-next.38 Source cves: CVE-2025-66412 Source advisory: SNYK:JS-ANGULARCOMPILER-14157154...

8.5CVSS6.9AI score0.00413EPSS

SaveExploits1

vulnersOsv•added 2025/12/02 12:29 a.m.•12 views

actix-web-location (>=0.1.0, <=0.7.0), bext-waf (0.2.0) +19 more potentially affected by unknown CVE via maxminddb (>=0.12.0, <=0.26.0)

maxminddb CARGO version =0.12.0, =0.1.0, =0.1.3, =1.5.1, =0.1.0, =0.7.0, =0.4.0, =0.0.1, =0.1.8, =0.3.0, =0.5.0, =0.1.0, =0.1.0, =0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MJ73-J457-8X9Q...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/11/19 8:33 p.m.•12 views

ai-sdk-provider-claude-code (>=0.2.0, <=1.0.0-beta.1), locadex (0.0.2-alpha.1) potentially affected by CVE-2025-65099 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =1.0.0-beta.1 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-65099 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-14073012...

9.8CVSS5.3AI score0.00508EPSS

SaveExploits0

vulnersOsv•added 2025/11/12 9:45 p.m.•12 views

@akunsansan0/geulis94 (1.1.4), bata1 (1.0.0) +41 more potentially affected by unknown CVE via geulis94 (>=2.2.2, <=3.1.1)

geulis94 NPM version =2.2.2, =3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on geulis94 and may be impacted: - @akunsansan0/geulis94 1.1.4 - bata1 1.0.0 - bata10 1.0.0 - bata11 1.0.0 - bata2 1.0.0 - bata3 1.0.0 - bata4 1.0.0 - bata5 1.0.0 - bata6...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/11/12 9:45 p.m.•12 views

@akunsansan0/pucuk5000 (1.1.6) potentially affected by unknown CVE via @akunsansan0/pucuk5000 (1.1.7)

@akunsansan0/pucuk5000 NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @akunsansan0/pucuk5000 and may be impacted: - @akunsansan0/pucuk5000 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181329...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/11/11 7:31 a.m.•12 views

able_quail_z3n (1.1.2), able_tarsier_z3n (3.4.1) +826 more potentially affected by unknown CVE via jonitea (1.1.5)

jonitea NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on jonitea and may be impacted: - ablequailz3n 1.1.2 - abletarsierz3n 3.4.1 - abstractostrichz3n 3.2.3 - acutequailz3n 4.4.4 - addedsharkz3n 2.2.4 - additionalcoralz3n 1.3.3 -...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/10/23 8:31 p.m.•12 views

@afif_hh/composable (1.0.2), @afif_hh/ui_components (>=1.0.5, <=1.0.30) +67 more potentially affected by CVE-2025-62517 via rollbar (>=2.1.0, <=2.26.4)

rollbar NPM version =2.1.0, =1.0.5, =1.0.0, =0.0.2, =0.0.5, =0.0.2-beta.1, =1.0.0-alpha.1, =1.0.5, =1.1.12, =1.3.10, =1.1.11, =1.0.3, =2.1.0-alpha.3, =2.1.0-alpha.3, =2.1.3 and more Source cves: CVE-2025-62517 Source advisory: OSV:GHSA-XCG2-9PP4-J82X...

5.9CVSS5.3AI score0.00393EPSS

SaveExploits0

vulnersOsv•added 2025/10/15 8:29 p.m.•12 views

nuxt-spec (>=0.1.10, <=0.1.11) potentially affected by CVE-2025-62410 via happy-dom (20.0.0)

happy-dom NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on happy-dom and may be impacted: - nuxt-spec =0.1.10, =0.1.11 Source cves: CVE-2025-62410 Source advisory: SNYK:JS-HAPPYDOM-13559227...

9.4CVSS5.8AI score0.00352EPSS

SaveExploits0

vulnersOsv•added 2025/09/24 6:57 p.m.•12 views

ai-sdk-provider-claude-code (>=0.2.0, <=1.0.0-beta.1), locadex (0.0.2-alpha.1) potentially affected by CVE-2025-59828 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.24)

@anthropic-ai/claude-code NPM version =1.0.8, =0.2.0, =1.0.0-beta.1 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59828 Source advisory: OSV:GHSA-2JJV-QF24-VFM4...

9.8CVSS5.3AI score0.00363EPSS

SaveExploits0

vulnersOsv•added 2025/09/10 5:13 p.m.•12 views

@cllu/awp-sw (0.4.4) potentially affected by CVE-2025-58765 via @webrecorder/wabac (2.17.3)

@webrecorder/wabac NPM version 2.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on @webrecorder/wabac and may be impacted: - @cllu/awp-sw 0.4.4 Source cves: CVE-2025-58765 Source advisory: OSV:GHSA-W765-JM6W-4HHJ...

7.1CVSS5.4AI score0.00254EPSS

SaveExploits0

vulnersOsv•added 2025/09/03 9:27 p.m.•12 views

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.9.4-iocd.1), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.9.4-iocd.1) +17 more potentially affected by CVE-2025-55305 via electron (>=37.0.0, <=37.2.6)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.0, =0.0.29, =0.0.38 and more Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

6.1CVSS6AI score0.00274EPSS

SaveExploits0

vulnersOsv•added 2025/09/03 6:03 p.m.•12 views

@_sh/strapi-plugin-ckeditor (>=5.0.0, <=6.0.1), @abcxyz123321555/ckeditor5-build-test-version (>=0.7.0, <=0.10.2) +132 more potentially affected by CVE-2025-58064 via ckeditor5 (>=44.2.0, <=45.2.1-alpha.10)

ckeditor5 NPM version =44.2.0, =5.0.0, =0.7.0, =0.0.2, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.2.0-alpha.0, =44.3.0 and more Source cves: CVE-2025-58064 Source...

2.3CVSS5.3AI score0.00417EPSS

SaveExploits0

vulnersOsv•added 2025/08/20 8:51 p.m.•12 views

x402-native-token-payment-demo (>=0.0.0-alpha, <=0.0.1) potentially affected by unknown CVE via x402-hono (0.3.4)

x402-hono NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on x402-hono and may be impacted: - x402-native-token-payment-demo =0.0.0-alpha, =0.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-X402HONO-12239901...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/08/14 6:52 p.m.•12 views

luis-reddit-cli (1.0.0), md-links-larissadepaula (>=0.2.0, <=0.2.1) +1 more potentially affected by unknown CVE via node-fecth (0.0.1-security)

node-fecth NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-fecth and may be impacted: - luis-reddit-cli 1.0.0 - md-links-larissadepaula =0.2.0, =0.0.37, =0.0.40 Source cves: unknown CVE Source advisory: OSV:MAL-2025-2761...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/08/14 6:52 p.m.•12 views

gulu-ui (>=0.0.6, <=0.0.7) potentially affected by unknown CVE via dev-test (0.0.1-security)

dev-test NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on dev-test and may be impacted: - gulu-ui =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-18345...

5.4AI score

SaveExploits0

vulnersOsv•added 2025/08/13 9:52 a.m.•12 views

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30604 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789705...

6.3CVSS6.7AI score0.00461EPSS

SaveExploits0

vulnersOsv•added 2025/08/07 4:41 p.m.•12 views

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +18 more potentially affected by CVE-2025-54793 via astro (>=5.2.1, <=5.12.6)

astro NPM version =5.2.1, =0.0.1, =1.0.0, =1.25.426-4, =0.6.2, =0.0.0-dev-20250414184926, =0.0.1, =0.0.1, =2.1.22, =1.0.3, =0.1.0, =0.3.19, =0.2.1, =0.4.0 and more Source cves: CVE-2025-54793 Source advisory: OSV:GHSA-CQ8C-XV66-36GW...

6.9CVSS6.2AI score0.00645EPSS

SaveExploits0

vulnersOsv•added 2025/06/22 10:40 p.m.•12 views

com.gitblit.fathom:fathom-integration-test (>=0.5.0, <=1.0.1), com.github.dreampie:jfinal-dreampie (1.0) +30 more potentially affected by CVE-2025-6493 via org.webjars:codemirror (>=3.15, <=5.62.2)

org.webjars:codemirror MAVEN version =3.15, =0.5.0, =1.0.0, =1.0.1, =2.3.0.cr1, =2.1.8.0, =2.1.8.0, =2.1.8.0, =2.1.8.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =1.7.0, =1.7.5 and more Source cves: CVE-2025-6493 Source advisory: SNYK:JAVA-ORGWEBJARS-10494095...

6.9CVSS5.5AI score0.00535EPSS

SaveExploits0

vulnersOsv•added 2025/06/16 12:00 p.m.•12 views

allyaudio (>=0.1.0, <=0.4.0), ambisonic (>=0.4.0, <=0.4.1) +135 more potentially affected by unknown CVE via slice-ring-buffer (0.3.4)

slice-ring-buffer CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio 0.4.0 and mo...

5.5AI score

SaveExploits0

vulnersOsv•added 2025/05/27 6:00 p.m.•12 views

@acedempire/piece-supabase-v2 (>=0.0.7, <=0.0.10), @activeboxes/piece-supabase (0.0.7) +74 more potentially affected by CVE-2025-48370 via @supabase/auth-js (>=2.58.1-canary.0, <=2.69.1)

@supabase/auth-js NPM version =2.58.1-canary.0, =0.0.7, =0.0.7, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.1, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.0, =0.1.4-alpha.3 and more Source cves: CVE-2025-483...

6.9CVSS5.8AI score0.00865EPSS

SaveExploits0

Total number of security vulnerabilities5000