Homepage

npm

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the npm package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:10.9.8-1.22.23.1.2.module+el8.10.0+40261+cde646a4
  • H
Allocation of Resources Without Limits or Throttling

<1:10.9.8-1.22.23.1.2.module+el8.10.0+40261+cde646a4
  • H
CVE-2026-13149

<1:10.9.8-1.22.23.1.2.module+el8.10.0+40261+cde646a4
  • H
CVE-2026-9697

<1:11.16.0-1.24.18.0.1.module+el8.10.0+40252+a58646bc
  • H
CVE-2026-9678

<1:10.9.8-1.22.23.1.1.module+el8.10.0+40256+2fd2ac14
  • H
CVE-2026-6734

<1:11.16.0-1.24.18.0.1.module+el8.10.0+40252+a58646bc
  • H
CVE-2026-6733

<1:10.9.8-1.22.23.1.1.module+el8.10.0+40256+2fd2ac14
  • H
CVE-2026-48935

<1:10.9.8-1.22.23.1.1.module+el8.10.0+40256+2fd2ac14
  • H
CVE-2026-48934

<1:10.9.8-1.22.23.1.1.module+el8.10.0+40256+2fd2ac14
  • H
CVE-2026-48933

<1:10.9.8-1.22.23.1.1.module+el8.10.0+40256+2fd2ac14
  • H
CVE-2026-48930

<1:10.9.8-1.22.23.1.1.module+el8.10.0+40256+2fd2ac14
  • H
CVE-2026-48928

<1:10.9.8-1.22.23.1.1.module+el8.10.0+40256+2fd2ac14
  • H
CVE-2026-48619

<1:11.16.0-1.24.18.0.1.module+el8.10.0+40252+a58646bc
  • H
CVE-2026-48618

<1:11.16.0-1.24.18.0.1.module+el8.10.0+40252+a58646bc
  • H
CVE-2026-48615

<1:11.16.0-1.24.18.0.1.module+el8.10.0+40252+a58646bc
  • H
Cross-site Scripting (XSS)

<1:11.16.0-1.24.18.0.1.module+el8.10.0+40252+a58646bc
  • H
CVE-2026-12151

<1:11.16.0-1.24.18.0.1.module+el8.10.0+40252+a58646bc
  • H
CVE-2026-11525

<1:11.16.0-1.24.18.0.1.module+el8.10.0+40252+a58646bc
  • H
CVE-2026-2581

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
CVE-2026-21717

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
CVE-2026-21716

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
CVE-2026-21715

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
CVE-2026-21714

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
CVE-2026-21713

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
CVE-2026-21712

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
CVE-2026-21711

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
CVE-2026-1527

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
Inefficient Regular Expression Complexity

<1:10.9.7-1.22.22.2.1.module+el8.10.0+40148+e9f9162c
  • H
Reachable Assertion

<1:10.9.7-1.22.22.2.1.module+el8.10.0+40148+e9f9162c
  • H
Inefficient Regular Expression Complexity

<1:10.9.7-1.22.22.2.1.module+el8.10.0+40148+e9f9162c
  • H
Inefficient Regular Expression Complexity

<1:10.9.7-1.22.22.2.1.module+el8.10.0+40148+e9f9162c
  • H
CVE-2026-2229

<1:10.9.7-1.22.22.2.1.module+el8.10.0+40148+e9f9162c
  • H
CVE-2026-21710

<1:10.9.7-1.22.22.2.1.module+el8.10.0+40148+e9f9162c
  • H
CVE-2026-1528

<1:10.9.7-1.22.22.2.1.module+el8.10.0+40148+e9f9162c
  • H
CVE-2026-1526

<1:10.9.7-1.22.22.2.1.module+el8.10.0+40148+e9f9162c
  • H
CVE-2026-1525

<1:10.9.7-1.22.22.2.1.module+el8.10.0+40148+e9f9162c
  • H
CVE-2026-21637

<1:11.11.0-1.24.14.1.2.module+el8.10.0+40152+064e9ddb
  • H
CVE-2025-59466

<1:10.8.2-1.20.20.0.1.module+el8.10.0+40077+29236b21
  • H
CVE-2025-59465

<1:10.8.2-1.20.20.0.1.module+el8.10.0+40077+29236b21
  • H
CVE-2025-55132

<1:10.8.2-1.20.20.0.1.module+el8.10.0+40077+29236b21
  • H
CVE-2025-55131

<1:10.8.2-1.20.20.0.1.module+el8.10.0+40077+29236b21
  • H
CVE-2025-55130

<1:10.8.2-1.20.20.0.1.module+el8.10.0+40077+29236b21
  • H
CVE-2025-23167

<1:10.8.2-1.20.19.2.1.module+el8.10.0+1988+437f3d23
  • H
CVE-2025-6965

<1:10.9.2-1.22.16.0.2.module+el8.10.0+2012+fb8b67c7
  • H
Integer Overflow or Wraparound

<1:10.9.2-1.22.15.0.1.module+el8.10.0+1971+0bb08ece
  • M
Use After Free

<1:10.8.2-1.20.19.1.1.module+el8.10.0+1972+57cf735f
  • H
CVE-2025-23166

<1:10.9.2-1.22.16.0.1.module+el8.10.0+1989+e60144d9
  • H
CVE-2025-23165

<1:10.9.2-1.22.16.0.1.module+el8.10.0+1989+e60144d9
  • H
CVE-2025-23085

<1:10.8.2-1.20.18.2.1.module+el8.10.0+1932+2f13f218
  • H
CVE-2025-23083

<1:10.8.2-1.20.18.2.1.module+el8.10.0+1932+2f13f218
  • H
Use of Insufficiently Random Values

<1:10.8.2-1.20.18.2.1.module+el8.10.0+1932+2f13f218
  • M
CVE-2024-36137

<1:10.8.1-1.20.16.0.1.module+el8.10.0+1856+4cdb8df5
  • M
CVE-2024-28863

<1:10.8.1-1.20.16.0.1.module+el8.10.0+1856+4cdb8df5
  • M
CVE-2024-22020

<1:10.8.1-1.20.16.0.1.module+el8.10.0+1856+4cdb8df5
  • M
CVE-2024-22018

<1:10.8.1-1.20.16.0.1.module+el8.10.0+1856+4cdb8df5
  • H
CVE-2024-28182

<1:10.5.0-1.18.20.2.1.module+el8.9.0+1803+9ac8b495
  • H
CVE-2024-27983

<1:10.5.0-1.18.20.2.1.module+el8.9.0+1803+9ac8b495
  • H
CVE-2024-27982

<1:10.5.0-1.18.20.2.1.module+el8.9.0+1803+9ac8b495
  • H
Out-of-bounds Read

<1:10.5.0-1.18.20.2.1.module+el8.9.0+1803+9ac8b495
  • H
CVE-2024-22025

<1:10.5.0-1.18.20.2.1.module+el8.9.0+1803+9ac8b495
  • H
CVE-2024-22017

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
  • H
CVE-2024-21896

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
  • H
Directory Traversal

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
  • H
CVE-2024-21890

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
  • H
CVE-2024-22019

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
  • H
Arbitrary Code Injection

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
  • H
CVE-2023-46809

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
  • H
CVE-2023-44487

<1:8.19.4-1.16.20.2.4.module+el8.9.0+1760+903d54b9
  • M
CVE-2023-30590

<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7
  • M
CVE-2023-30589

<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7
  • M
CVE-2023-30588

<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7
  • M
CVE-2023-30581

<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7
  • H
Use of Insufficiently Random Values

<1:8.19.3-1.16.19.1.2.module+el8.8.0+1338+00a07a77
  • H
Out-of-bounds Write

<1:8.19.3-1.16.19.1.2.module+el8.8.0+1338+00a07a77
  • H
Use of Insufficiently Random Values

<1:8.19.3-1.16.19.1.2.module+el8.8.0+1338+00a07a77
  • H
CVE-2023-32067

<1:8.19.3-1.16.19.1.2.module+el8.8.0+1338+00a07a77
  • H
Improper Input Validation

<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a
  • M
Inefficient Regular Expression Complexity

<1:8.19.3-1.16.19.1.1.module+el8.7.0+1178+d52dba78
  • M
Arbitrary Code Injection

<1:8.19.3-1.16.19.1.1.module+el8.7.0+1178+d52dba78
  • M
Untrusted Search Path

<1:8.19.3-1.16.19.1.1.module+el8.7.0+1178+d52dba78
  • M
CVE-2023-23919

<1:8.19.3-1.16.19.1.1.module+el8.7.0+1178+d52dba78
  • M
Incorrect Authorization

<1:8.19.3-1.16.19.1.1.module+el8.7.0+1178+d52dba78
  • H
Improper Validation of Specified Quantity in Input

<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57
  • M
Inefficient Regular Expression Complexity

<1:8.19.3-1.16.19.1.1.module+el8.7.0+1178+d52dba78
  • M
Inefficient Regular Expression Complexity

<1:8.19.3-1.16.19.1.1.module+el8.7.0+1178+d52dba78
  • H
CVE-2021-22884

<1:6.14.11-1.14.16.0.2.module+el8.3.0+100+234774f7
  • H
Missing Release of Resource after Effective Lifetime

<1:6.14.11-1.14.16.0.2.module+el8.3.0+100+234774f7
  • M
Link Following

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
  • M
Link Following

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4
  • M
Information Exposure

<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8
  • M
Improper Certificate Validation

<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8
  • M
Improper Certificate Validation

<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8
  • M
Improper Certificate Validation

<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8
  • M
OS Command Injection

<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4
  • M
Inefficient Regular Expression Complexity

<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4
  • M
CVE-2021-27290

<1:6.14.13-1.14.17.3.2.module+el8.4.0+639+18660d0d
  • M
Inefficient Regular Expression Complexity

<1:6.14.13-1.14.17.3.2.module+el8.4.0+639+18660d0d
  • M
Out-of-bounds Read

<1:6.14.13-1.14.17.3.2.module+el8.4.0+639+18660d0d
  • H
Directory Traversal

<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
  • H
Link Following

<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
  • H
CVE-2021-23343

<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
  • H
Use After Free

<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
  • H
Improper Certificate Validation

<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
  • H
Improper Input Validation

<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
  • H
Use After Free

<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
  • H
Cross-site Scripting (XSS)

<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
  • M
Inefficient Regular Expression Complexity

<1:8.11.0-1.16.16.0.3.module+el8.6.0+1003+ae94235a
  • M
Inefficient Regular Expression Complexity

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
  • M
HTTP Request Smuggling

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
  • M
HTTP Request Smuggling

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
  • M
Resource Exhaustion

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
  • H
Insufficient Verification of Data Authenticity

<1:8.3.1-1.16.14.0.4.module+el8.6.0+978+59f26232
  • M
CVE-2022-33987

<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
  • M
HTTP Request Smuggling

<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
  • M
HTTP Request Smuggling

<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
  • M
HTTP Request Smuggling

<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
  • M
HTTP Request Smuggling

<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8
  • M
OS Command Injection

<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
  • H
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

<1:8.19.1-1.18.9.1.1.module+el8.7.0+1072+5b168780
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4