Vulnersosv - Page 65 of Vulnersosv Most Viewed Vulnerabilities List

VulnersosvMost viewed

11668 matches found

vulnersOsv•added 2026/02/17 12:03 p.m.•10 views

org.webjars.npm:github-com-aws-amazon-cognito-identity-js (1.12.0) potentially affected by CVE-2026-4258 via org.webjars.npm:sjcl (1.0.8)

org.webjars.npm:sjcl MAVEN version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sjcl and may be impacted: - org.webjars.npm:github-com-aws-amazon-cognito-identity-js 1.12.0 Source cves: CVE-2026-4258 Source advisory:...

8.7CVSS7.4AI score0.00343EPSS

SaveExploits1

vulnersOsv•added 2026/02/13 8:53 p.m.•10 views

@jamietanna/renovate-graph (0.36.0), @secustor/backstage-plugin-renovate-backend-module-runtime-direct (3.1.1) potentially affected by CVE-2026-76227 via renovate (>=42.92.4, <=42.92.5)

renovate NPM version =42.92.4, =42.92.5 is affected by a known vulnerability. The following packages have a transitive dependency on renovate and may be impacted: - @jamietanna/renovate-graph 0.36.0 - @secustor/backstage-plugin-renovate-backend-module-runtime-direct 3.1.1 Source cves:...

6.8CVSS5.4AI score0.00154EPSS

SaveExploits0

vulnersOsv•added 2026/02/13 8:05 p.m.•10 views

hpke-rs (>=0.1.0-pre.1, <=0.1.0-pre.2), openmls (>=0.4.0-pre.1, <=0.4.0-pre.2) +2 more potentially affected by unknown CVE via hpke-rs-rust-crypto (0.1.1)

hpke-rs-rust-crypto CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on hpke-rs-rust-crypto and may be impacted: - hpke-rs =0.1.0-pre.1, =0.4.0-pre.1, =0.1.0-pre.1, =0.4.0, =0.9.0 Source cves: unknown CVE Source advisory:...

5.7AI score

SaveExploits0

vulnersOsv•added 2026/02/12 6:30 p.m.•10 views

modern-web-swiss-army-knife (>=2.7.0, <=2.7.2) potentially affected by CVE-2025-56647 via @farmfe/core (1.6.6)

@farmfe/core NPM version 1.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on @farmfe/core and may be impacted: - modern-web-swiss-army-knife =2.7.0, =2.7.2 Source cves: CVE-2025-56647 Source advisory: OSV:GHSA-P773-8MF4-RJM5...

6.5CVSS5.4AI score0.002EPSS

SaveExploits0

vulnersOsv•added 2026/02/11 9:30 p.m.•10 views

0.edsql (>=1.0.49, <=1.0.50), 360-lib (1.0.0) +10621 more potentially affected by CVE-2025-69873 via ajv (>=7.0.0, <=8.17.1)

ajv NPM version =7.0.0, =1.0.49, =10.0.2-0, =4.11.2, =0.1.0, =0.1.1, =0.0.1-251008.90016, =0.3.0-rc.3, =1.0.0, =1.4.0, =1.0.0, =0.0.2, =2.0.0, =3.0.0 and more Source cves: CVE-2025-69873 Source advisory: OSV:GHSA-2G4F-4PWH-QVX6...

7.5CVSS6.4AI score0.00547EPSS

SaveExploits1

vulnersOsv•added 2026/02/09 11:21 p.m.•10 views

@cubejs-backend/server (>=1.1.0, <=1.4.0), @cubejs-backend/server-core (>=1.1.0, <=1.4.0) +2 more potentially affected by CVE-2026-25958 via @cubejs-backend/api-gateway (>=1.1.0, <=1.4.0)

@cubejs-backend/api-gateway NPM version =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.4.0 - cubejs-backend-server-core-fork 1.1.3 Source cves: CVE-2026-25958 Source advisory: SNYK:JS-CUBEJSBACKENDAPIGATEWAY-15265447...

7.7CVSS5.3AI score0.00441EPSS

SaveExploits0

vulnersOsv•added 2026/02/06 7:08 p.m.•10 views

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @machina.at/cli (>=19.24.1, <=19.43.0) +20 more potentially affected by CVE-2026-25724 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.76)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =19.24.1, =1.0.0-broken, =0.0.1-rc.1, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =1.9.1, =1.9.1, =1.9.6 and more Source cves: CVE-2026-25724 Source advisory: OSV:GHSA-4Q92-RFM6-2CQX...

7.5CVSS5.3AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/02/06 7:02 p.m.•10 views

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.57.0) +14 more potentially affected by CVE-2026-25722 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.55)

@anthropic-ai/claude-code NPM version =2.0.0, =0.4.2-beta.2, =1.31.0-alpha, =0.0.1-rc.1, =0.12.0, =0.5.2, =0.12.1, =0.0.0, =0.1.2, =0.11.1, =0.11.0, =1.0.0, =0.10.2, =0.11.5 and more Source cves: CVE-2026-25722 Source advisory: SNYK:JS-ANTHROPICAICLAUDECODE-15248352...

9.1CVSS5.3AI score0.00696EPSS

SaveExploits0

vulnersOsv•added 2026/02/06 7:00 p.m.•10 views

abacuz (>=0.1.0, <=0.1.1), acceptxmr (>=0.1.0, <=0.13.0) +168 more potentially affected by CVE-2026-72813 via actix-files (>=0.1.0-alpha.6, <=0.6.6)

actix-files CARGO version =0.1.0-alpha.6, =0.1.0, =0.1.0, =1.0.0-alpha.6, =0.3.0, =0.9.0, =0.1.0, =0.1.0, =3.6.0, =0.6.0, =0.34.0 - bassment 0.1.0 - boltserver 0.11.11 and more Source cves: CVE-2026-72813 Source advisory: OSV:GHSA-GCQF-3G44-VC9P...

6.9CVSS5.8AI score0.00491EPSS

SaveExploits0

vulnersOsv•added 2026/02/04 8:04 p.m.•10 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +1801 more potentially affected by CVE-2026-25536 via @modelcontextprotocol/sdk (>=1.10.0, <=1.25.3)

@modelcontextprotocol/sdk NPM version =1.10.0, =0.3.3, =1.0.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.0.1, =0.0.1, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =10.1.0-rc.1, =10.2.1 and more Source cves: CVE-2026-25536 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSDK-15208843...

7.1CVSS7.1AI score0.00384EPSS

SaveExploits0

vulnersOsv•added 2026/02/04 6:02 p.m.•10 views

@24hr/rawb-search (>=0.5.0, <=0.29.10), @a11ywatch/a11ywatch (>=0.0.1, <=0.3.82) +574 more potentially affected by CVE-2026-23897 via apollo-server (>=2.0.0, <=3.12.0)

apollo-server NPM version =2.0.0, =0.5.0, =0.0.1, =0.1.1, =0.4.0-alpha.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.3.0-SNAPSHOT1, =0.3.0-SNAPSHOT1, =0.4.3, =2018.8.29-0, =2018.8.28-0, =2018.10.8-2 and more Source cves: CVE-2026-23897 Source advisory: OSV:GHSA-MP6Q-XF9X-FWF7...

7.5CVSS5.3AI score0.00699EPSS

SaveExploits0

vulnersOsv•added 2026/02/03 10:04 p.m.•10 views

@react-portable/core (>=0.4.0, <=0.11.2), storybook-framework-qwik (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-25151 via @builder.io/qwik-city (>=1.2.6, <=1.4.1)

@builder.io/qwik-city NPM version =1.2.6, =0.4.0, =0.3.0, =0.4.0 Source cves: CVE-2026-25151 Source advisory: SNYK:JS-BUILDERIOQWIKCITY-15202302...

5.9CVSS5.4AI score0.00184EPSS

SaveExploits0

vulnersOsv•added 2026/02/02 10:25 p.m.•10 views

@amedia/brick-mcp (>=0.0.0-vEXPORT-20260113150210, <=0.1.5), @andesite-lab/andesite-core (>=1.60.2, <=1.62.0) +264 more potentially affected by CVE-2026-25224 via fastify (>=5.0.0, <=5.7.2)

fastify NPM version =5.0.0, =0.0.0-vEXPORT-20260113150210, =1.60.2, =2.0.1, =1.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.22 and more Source cves: CVE-2026-25224 Source advisory: SNYK:JS-FASTIFY-15182641...

3.7CVSS5.8AI score0.00554EPSS

SaveExploits0

vulnersOsv•added 2026/02/02 8:19 p.m.•10 views

@backstage/plugin-search-backend-module-techdocs (>=0.4.2-next.0, <=0.4.9-next.1), @backstage/plugin-techdocs-backend (>=0.0.0-nightly-2021111822616, <=2.1.4-next.0) +2 more potentially affected by CVE-2026-25153 via @backstage/plugin-techdocs-node (>=1.0.0, <=1.13.10-next.1)

@backstage/plugin-techdocs-node NPM version =1.0.0, =0.4.2-next.0, =0.0.0-nightly-2021111822616, =0.11.13, =0.0.0-nightly-2021111822616, =1.10.4-next.0 Source cves: CVE-2026-25153 Source advisory: OSV:GHSA-6JR7-99PF-8VGF...

8.8CVSS5.3AI score0.00615EPSS

SaveExploits0

vulnersOsv•added 2026/02/02 6:29 p.m.•10 views

@firedesktop/react-portal-base (2.1.2), @imaginario27/air-ui-utils (>=1.0.8, <=1.0.9) +4 more potentially affected by CVE-2026-24737 via jspdf (4.0.0)

jspdf NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jspdf and may be impacted: - @firedesktop/react-portal-base 2.1.2 - @imaginario27/air-ui-utils =1.0.8, =1.4.0-I18n-QM, =0.5.129, =4.4.0, =4.4.1 - svgedit 7.4.1 Source cves:...

8.3CVSS7.6AI score0.00598EPSS

SaveExploits1

vulnersOsv•added 2026/01/30 9:31 p.m.•10 views

8.8CVSS5.3AI score0.00615EPSS

SaveExploits0

vulnersOsv•added 2026/01/30 9:17 p.m.•10 views

@beshkenadze/orval-mcp (7.11.2-fix.2), @orval/angular (>=7.10.0, <=7.20.0) +11 more potentially affected by CVE-2026-23947 +1 more via @orval/core (>=7.10.0, <=7.20.0)

@orval/core NPM version =7.10.0, =7.10.0, =7.10.0, =7.10.0, =7.10.0, =7.10.0, =7.10.0, =7.10.0, =7.10.0, =7.10.0, =1.0.1, =7.10.0, =7.10.0, =7.13.2 Source cves: CVE-2026-23947, CVE-2026-25141 Source advisory: SNYK:JS-ORVALCORE-15166600...

9.8CVSS5.3AI score0.00845EPSS

SaveExploits1

vulnersOsv•added 2026/01/29 3:18 p.m.•10 views

@applica-software-guru/cnc-bit-configurator (>=1.0.2, <=1.1.29), @damsenviet/keybits (>=0.0.0, <=0.0.2) +34 more potentially affected by CVE-2026-24888 via makerjs (>=0.1.5, <=0.18.2)

makerjs NPM version =0.1.5, =1.0.2, =0.0.0, =1.0.0, =1.1.0, =0.0.1, =0.0.1, =1.1.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-24888 Source advisory: OSV:GHSA-2CP6-34R9-54XX...

9.8CVSS5.3AI score0.01012EPSS

SaveExploits1

vulnersOsv•added 2026/01/28 6:30 p.m.•10 views

7ghost (>=4.11.0, <=4.11.46), @accordproject/concerto-ui-react (>=0.6.0-alpha.1, <=0.83.1-20200224151908) +271 more potentially affected by CVE-2025-61140 via jsonpath (>=1.0.0, <=1.1.1)

jsonpath NPM version =1.0.0, =4.11.0, =0.6.0-alpha.1, =0.82.10-20200221024018, =1.0.0, =1.1.0-dev.2, =3.0.6371, =4.0.2, =2.0.4, =0.2.0-dev.1, =4.0.149, =3.0.129, =4.0.174, =0.11.8, =1.2.5, =1.4.0 and more Source cves: CVE-2025-61140 Source advisory: OSV:GHSA-6C59-MWGH-R2X6...

9.8CVSS5.8AI score0.00514EPSS

SaveExploits1

vulnersOsv•added 2026/01/28 2:03 p.m.•10 views

@antora/cli (>=2.3.2, <=3.0.0-alpha.9), @antora/playbook-builder (>=2.3.2, <=3.0.0-alpha.9) +54 more potentially affected by CVE-2026-33864 via convict (>=6.0.0, <=6.2.2)

convict NPM version =6.0.0, =2.3.2, =2.3.2, =2.3.2, =1.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-33864 Source advisory: SNYK:JS-CONVICT-15182994...

5.3AI score0.0084EPSS

SaveExploits0

vulnersOsv•added 2026/01/27 9:30 a.m.•10 views

com.github.liuyueyi.media:svg-core (>=2.5, <=3.0.0) potentially affected by CVE-2026-24806 via com.github.liuyueyi.media:batik-codec-fix (>=2.5, <=3.0.0)

com.github.liuyueyi.media:batik-codec-fix MAVEN version =2.5, =2.5, =3.0.0 Source cves: CVE-2026-24806 Source advisory: SNYK:JAVA-COMGITHUBLIUYUEYIMEDIA-15127912...

5.3CVSS5.3AI score0.00466EPSS

SaveExploits0

vulnersOsv•added 2026/01/26 10:49 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @alecpapierniak/mcp-manager (>=0.1.0, <=0.1.2) +105 more potentially affected by CVE-2025-59471 +1 more via next (>=16.1.1, <=16.1.4)

next NPM version =16.1.1, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.0.0-canary-20260113162409, =1.53.0 and more Source cves: CVE-2025-59471, CVE-2025-59472 Source advisory: SNYK:JS-NEXT-15104645...

7.5CVSS5.8AI score0.00495EPSS

SaveExploits0

vulnersOsv•added 2026/01/26 9:02 p.m.•10 views

@directus/release-notes-generator (>=2.0.2, <=3.0.0), @eclipse-scout/releng (>=26.2.0, <=26.2.1) +68 more potentially affected by CVE-2026-23890 via @pnpm/package-bins (>=1000.0.0, <=1000.0.15)

@pnpm/package-bins NPM version =1000.0.0, =2.0.2, =26.2.0, =0.1.0-beta.0, =1000.3.2, =1000.0.21, =1000.1.1, =1000.0.0, =1002.2.0, =1002.0.11, =1003.0.26 and more Source cves: CVE-2026-23890 Source advisory: SNYK:JS-PNPMPACKAGEBINS-15103738...

6.5CVSS6.4AI score0.0051EPSS

SaveExploits1

vulnersOsv•added 2026/01/26 7:49 p.m.•10 views

@aandyw/ybf (>=0.1.0, <=0.1.29), @accounter/client (>=0.0.4-alpha-20250227014300-bbaee6f285ce9d54b581b115d444233911983665, <=0.0.5-alpha-20250410150030-25fea893fb3523b55c835620f6692430d5bc9bee) +212 more potentially affected by CVE-2025-55184 +1 more via next (>=15.2.0, <=15.2.8)

next NPM version =15.2.0, =0.1.0, =0.0.4-alpha-20250227014300-bbaee6f285ce9d54b581b115d444233911983665, =0.0.1-alpha, =0.1.0, =3.2.0, =0.1.0, =1.1.0-canary.0, =1.1.0-canary.0, =1.2.0-canary.0, =1.2.2-canary-20250514183211, =1.2.0-canary.8, =1.6.0 and more Source cves: CVE-2025-55184, CVE-2026-238...

7.5CVSS7.6AI score0.66882EPSS

SaveExploits10

vulnersOsv•added 2026/01/23 12:49 a.m.•10 views

d2m-apigen (>=1.0.1, <=2.1.7), dm-apigen (>=0.0.0, <=1.0.0) +3 more potentially affected by CVE-2026-24132 via @orval/mock (>=7.0.0, <=7.19.0)

@orval/mock NPM version =7.0.0, =1.0.1, =0.0.0, =1.2.0, =7.0.0, =7.1.0, =7.13.2 Source cves: CVE-2026-24132 Source advisory: SNYK:JS-ORVALMOCK-15091570...

9.8CVSS5.3AI score0.00747EPSS

SaveExploits0

vulnersOsv•added 2026/01/22 6:09 p.m.•10 views

d2m-apigen (>=1.0.1, <=2.1.7), dm-apigen (>=0.0.0, <=1.0.0) +3 more potentially affected by CVE-2026-24132 via @orval/mock (>=7.0.0, <=7.19.0)

@orval/mock NPM version =7.0.0, =1.0.1, =0.0.0, =1.2.0, =7.0.0, =7.1.0, =7.13.2 Source cves: CVE-2026-24132 Source advisory: OSV:GHSA-F456-RF33-4626...

9.8CVSS5.3AI score0.00747EPSS

SaveExploits0

vulnersOsv•added 2026/01/22 3:46 a.m.•10 views

org.webjars.npm:solid-js (1.9.5) potentially affected by CVE-2026-24006 via org.webjars.npm:seroval (1.2.1)

org.webjars.npm:seroval MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:seroval and may be impacted: - org.webjars.npm:solid-js 1.9.5 Source cves: CVE-2026-24006 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15054528...

7.5CVSS5.8AI score0.00445EPSS

SaveExploits0

vulnersOsv•added 2026/01/21 11:00 p.m.•10 views

@astrojs/cloudflare (0.4.0), @bookinghub/widget (>=0.1.0, <=0.4.0) +29 more potentially affected by CVE-2026-0933 via wrangler (>=2.0.23, <=3.114.1)

wrangler NPM version =2.0.23, =0.1.0, =0.0.1, =1.0.274, =0.1.0, =0.2.0, =2.1.0, =0.0.0-pre.2, =0.0.0-next-20230221055802, =0.1.0, =1.0.0, =0.1.1, =0.0.3, =1.0.0, =1.0.2 and more Source cves: CVE-2026-0933 Source advisory: OSV:GHSA-36P8-MVP6-CV38...

9.9CVSS5.3AI score0.01536EPSS

SaveExploits0

vulnersOsv•added 2026/01/21 10:36 p.m.•10 views

@backstage/backend-dynamic-feature-service (>=0.0.0-nightly-20251122024148, <=0.7.8-next.0), @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20251123025211, <=3.1.1-next.0) +16 more potentially affected by CVE-2026-24046 via @backstage/plugin-scaffolder-node (>=0.12.0-next.0, <=0.12.2-next.1)

@backstage/plugin-scaffolder-node NPM version =0.12.0-next.0, =0.0.0-nightly-20251122024148, =0.0.0-nightly-20251123025211, =0.2.14-next.1, =0.3.15-next.1, =0.2.14-next.1, =0.2.14-next.1, =0.3.14-next.1, =0.0.0-nightly-20251123025211, =0.2.14-next.1, =0.2.14-next.1, =0.2.14-next.1, =0.9.1-next.1,...

9.1CVSS5.3AI score0.00532EPSS

SaveExploits0

vulnersOsv•added 2026/01/21 3:41 p.m.•10 views

org.webjars.npm:solid-js (1.9.5) potentially affected by CVE-2026-23737 via org.webjars.npm:seroval (1.2.1)

org.webjars.npm:seroval MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:seroval and may be impacted: - org.webjars.npm:solid-js 1.9.5 Source cves: CVE-2026-23737 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15054507...

7.5CVSS5.3AI score0.0059EPSS

SaveExploits0

vulnersOsv•added 2026/01/21 1:00 a.m.•10 views

@kimuson/claude-code-viewer (>=0.4.2-beta.2, <=0.5.9), @netlify/agent-runner-cli (>=1.31.0-alpha, <=1.58.1-alpha) +14 more potentially affected by CVE-2026-21852 via @anthropic-ai/claude-code (>=2.0.0, <=2.0.64)

7.5CVSS6AI score0.27868EPSS

SaveExploits2

vulnersOsv•added 2026/01/20 11:45 p.m.•10 views

@abuiles/vite-plugin (>=1.8.0, <=1.10.0), @anyauth/design-system (>=0.5.0, <=0.5.1) +20 more potentially affected by CVE-2026-0933 via wrangler (>=4.0.0, <=4.59.0)

wrangler NPM version =4.0.0, =1.8.0, =0.5.0, =12.6.6, =0.1.11, =0.8.0, =0.2.0, =0.0.0, =0.0.0-snapshot-001db2706f44e8ac35b9064bbbc2b6f14b577447, =1.0.6, =0.0.0-5788407, =0.0.25, =0.16.0, =1.0.0, =1.1.3 and more Source cves: CVE-2026-0933 Source advisory: SNYK:JS-WRANGLER-15046269...

9.9CVSS5.8AI score0.01536EPSS

SaveExploits0

vulnersOsv•added 2026/01/20 1:46 a.m.•10 views

@beshkenadze/orval-mcp (7.11.2-fix.2), @orval/angular (>=7.10.0, <=7.18.0) +11 more potentially affected by CVE-2026-23947 via @orval/core (>=7.10.0, <=7.18.0)

9.8CVSS5.3AI score0.00845EPSS

SaveExploits1

vulnersOsv•added 2026/01/16 9:04 p.m.•10 views

@veramo/kv-store (>=6.0.0, <=6.0.1) potentially affected by unknown CVE via @veramo/core-types (>=6.0.0, <=6.0.1-next.54)

@veramo/core-types NPM version =6.0.0, =6.0.0, =6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-VERAMOCORETYPES-15032936...

5.4AI score

SaveExploits0

vulnersOsv•added 2026/01/15 10:15 p.m.•10 views

@deno/sandbox (>=0.0.9, <=0.6.0), @ekairos/dataset (>=1.21.56-beta.0, <=1.22.22-beta.development.0) +47 more potentially affected by CVE-2026-22775 via devalue (>=5.1.1, <=5.6.0)

devalue NPM version =5.1.1, =0.0.9, =1.21.56-beta.0, =1.22.4-beta.development.0, =1.21.56-beta.0, =1.21.67-beta.0, =1.21.88-beta.0, =2.3.97, =1.1.53, =2.0.0, =1.2.263, =3.1.3, =0.0.1, =0.1.0, =0.1.0, =0.36.0, =0.38.16 and more Source cves: CVE-2026-22775 Source advisory: SNYK:JS-DEVALUE-14982189...

7.5CVSS7.2AI score0.00635EPSS

SaveExploits0

vulnersOsv•added 2026/01/15 7:24 p.m.•10 views

@adpush/start (>=1.87.14, <=1.87.16), @akkuma/vinxi (0.3.12) +215 more potentially affected by CVE-2026-23527 via h3 (>=1.0.1, <=1.15.4)

h3 NPM version =1.0.1, =1.87.14, =1.0.7, =1.0.0, =1.5.0, =1.0.0, =0.8.16-canary.v20250123185645, =8.3.3, =3.1.0, =0.0.11, =3.1.0-0, =3.2.0 - @enrypase/solidstart-endpoint 0.1.0 and more Source cves: CVE-2026-23527 Source advisory: SNYK:JS-H3-15010914...

9.8CVSS5.8AI score0.00635EPSS

SaveExploits1

vulnersOsv•added 2026/01/15 6:09 p.m.•10 views

@alexaegis/svelte-config (>=0.14.0, <=0.14.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=1.2.0, <=2.1.0) +5 more potentially affected by CVE-2025-67647 via @sveltejs/kit (>=2.20.7, <=2.49.3)

@sveltejs/kit NPM version =2.20.7, =0.14.0, =1.2.0, =0.0.137, =0.0.1, =1.0.1-next.0, =0.0.1, =1.3.0, =1.12.3 Source cves: CVE-2025-67647 Source advisory: SNYK:JS-SVELTEJSKIT-14996725...

9.1CVSS5.3AI score0.00529EPSS

SaveExploits0

vulnersOsv•added 2026/01/05 10:58 p.m.•10 views

arakawa (0.1.0-alpha.1), vega (>=6.0.0, <=6.1.2) +1 more potentially affected by CVE-2025-66648 via vega-functions (6.0.0)

vega-functions NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vega-functions and may be impacted: - arakawa 0.1.0-alpha.1 - vega =6.0.0, =6.0.0, =6.1.2 Source cves: CVE-2025-66648 Source advisory: OSV:GHSA-M9RG-MR6G-75GM...

7.2CVSS5.8AI score0.00226EPSS

SaveExploits1

vulnersOsv•added 2025/12/12 4:32 p.m.•10 views

@cedarjs/api-server (>=1.0.0-canary.12879, <=1.0.0-canary.12881), @cedarjs/cli (>=1.0.0-canary.12879, <=1.0.0-canary.12881) +10 more potentially affected by CVE-2025-67779 via react-server-dom-webpack (19.2.2)

react-server-dom-webpack NPM version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @cedarjs/api-server =1.0.0-canary.12879, =1.0.0-canary.12879, =1.0.0-canary.12879, =1.0.0-canary.12879,...

7.5CVSS7.5AI score0.19986EPSS

SaveExploits3

vulnersOsv•added 2025/12/12 12:03 a.m.•10 views

7.5CVSS6.8AI score0.66882EPSS

SaveExploits13

vulnersOsv•added 2025/12/12 12:03 a.m.•10 views

@atomos_tech/katerpillar (1.0.0), katalyst-riya-test (>=1.0.0, <=1.0.3) potentially affected by CVE-2025-55183 +2 more via next (15.4.9)

next NPM version 15.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @atomostech/katerpillar 1.0.0 - katalyst-riya-test =1.0.0, =1.0.3 Source cves: CVE-2025-55183, CVE-2025-55184, CVE-2025-67779 Source advisory:...

7.5CVSS6.8AI score0.66882EPSS

SaveExploits13

vulnersOsv•added 2025/12/11 10:49 p.m.•10 views

47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +178 more potentially affected by unknown CVE via next (>=15.5.1, <=15.5.7)

next NPM version =15.5.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MWV6-3258-Q52C...

5.7AI score

SaveExploits0

vulnersOsv•added 2025/12/10 9:35 p.m.•10 views

@smg-automotive/auth (>=6.8.0-auth0-update-access-token-endpoint.1, <=8.3.0-lschuerch-FED-782-sync-tenant.7) potentially affected by CVE-2025-67716 via @auth0/nextjs-auth0 (>=4.9.0, <=4.12.1)

@auth0/nextjs-auth0 NPM version =4.9.0, =6.8.0-auth0-update-access-token-endpoint.1, =8.3.0-lschuerch-FED-782-sync-tenant.7 Source cves: CVE-2025-67716 Source advisory: OSV:GHSA-MR6F-H57V-RPJ5...

5.7CVSS5.3AI score0.00262EPSS

SaveExploits0

vulnersOsv•added 2025/12/09 6:30 p.m.•10 views

@10play/tentap-editor (>=0.5.27, <=0.7.5-alpha.0), @adminjs/design-system (>=3.0.0-beta.4, <=4.1.1) +227 more potentially affected by CVE-2025-14284 via @tiptap/extension-link (>=2.0.0, <=2.10.3)

@tiptap/extension-link NPM version =2.0.0, =0.5.27, =3.0.0-beta.4, =1.0.0-beta.1, =0.4.1, =1.4.8, =2.0.6, =3.1.65, =3.0.0-alpha.1, =0.0.1, =0.2.1-alpha.0, =0.2.0, =0.0.1, =1.2.39, =1.2.277 - @chirpy-dev/analytics 0.0.1 and more Source cves: CVE-2025-14284 Source advisory: OSV:GHSA-VHRC-HGRQ-X75R...

6.1CVSS5.3AI score0.00368EPSS

SaveExploits1

vulnersOsv•added 2025/12/08 10:07 p.m.•10 views

alerter (>=0.3.0, <=0.3.2), crate_glitch (0.2.0) +14 more potentially affected by CVE-2025-66622 via matrix-sdk-base (>=0.1.0, <=0.5.1)

matrix-sdk-base CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 and more Source cves: CVE-2025-66622 Source advisory: OSV:GHSA-JJ6P-3M75-G2P3...

7.5CVSS5.3AI score0.00413EPSS

SaveExploits0

vulnersOsv•added 2025/12/04 4:54 p.m.•10 views

00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +3708 more potentially affected by CVE-2025-65945 via jws (>=3.0.0, <=3.2.2)

jws NPM version =3.0.0, =3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on jws and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su...

7.5CVSS5.9AI score0.00215EPSS

SaveExploits1

vulnersOsv•added 2025/12/03 4:39 p.m.•10 views

@aandyw/ybf (>=0.1.0, <=0.1.29), @accounter/client (>=0.0.4-alpha-20250227014300-bbaee6f285ce9d54b581b115d444233911983665, <=0.0.5-alpha-20250410150030-25fea893fb3523b55c835620f6692430d5bc9bee) +210 more potentially affected by CVE-2025-55182 +1 more via next (>=15.2.0, <=15.2.5)

10CVSS7.3AI score0.99802EPSS

SaveExploits410

vulnersOsv•added 2025/12/03 4:39 p.m.•10 views

@accounter/client (>=0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, <=0.0.3-alpha-20241210194047-ed4829d58a27c1aa9634b834f5d56d78ce8c68fd), @admiral.nelson/smart-catalyst (>=1.0.19, <=1.0.24) +254 more potentially affected by CVE-2025-55182 +1 more via next (>=14.3.0-canary.24, <=15.0.4-canary.39)

next NPM version =14.3.0-canary.24, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =1.0.19, =0.1.0, =0.0.4, =0.1.0, =0.1.11, =0.0.1-alpha, =0.0.1, =0.0.1, =3.0.0, =1.0.0, =1.0.30 - @benimaru/ahgas 1.1.4 - @benimaru/asduq 1.1.4 and more Source cves: CVE-2025-55182,...

10CVSS7.3AI score0.99802EPSS

SaveExploits410

vulnersOsv•added 2025/12/03 4:39 p.m.•10 views

@redwoodjs/sdk (>=0.0.63-test.2, <=0.0.79), @storybook/experimental-nextjs-rsc (>=0.0.0-pr-31893-sha-392fa9a5, <=0.0.0-pr-31893-sha-f0bf2189) +1 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.2.0-canary-39cad7af-20250411)

react-server-dom-webpack NPM version 19.2.0-canary-39cad7af-20250411 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @redwoodjs/sdk =0.0.63-test.2, =0.0.0-pr-31893-sha-392fa9a5, =0.0.79-test.2025050614455...

10CVSS7.3AI score0.99802EPSS

SaveExploits396

vulnersOsv•added 2025/12/03 4:39 p.m.•10 views

@4399ywkf/router (>=0.0.1, <=0.0.4), @akash-aw/aw-wizard-forms (4.14.0) +125 more potentially affected by CVE-2025-55182 via @modern-js/utils (>=2.65.2, <=2.69.2)

@modern-js/utils NPM version =2.65.2, =0.0.1, =1.0.0, =1.0.0, =0.44.0, =2.23.0, =0.3.53, =1.0.1, =0.30.0, =0.3.0-alpha.1, =0.4.3, =1.3.0, =2.0.0 and more Source cves: CVE-2025-55182 Source advisory: SNYK:JS-MODERNJSUTILS-14723360...

10CVSS7.3AI score0.99802EPSS

SaveExploits396

Total number of security vulnerabilities5000