npm vulnerabilities

Known vulnerabilities in the npm package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M CVE-2025-23085	<1:10.8.2-1.18.20.6.1.module+el8.10.0+1934+a521c41f
H CVE-2025-23083	<1:10.9.2-1.22.13.1.1.module+el8.10.0+1935+d3cbe60f
M Use of Insufficiently Random Values	<1:10.8.2-1.18.20.6.1.module+el8.10.0+1934+a521c41f
M CVE-2024-36137	<1:10.8.1-1.20.16.0.1.module+el8.10.0+1856+4cdb8df5
M CVE-2024-28863	<1:10.7.0-1.18.20.4.1.module+el8.10.0+1865+67d146ca
M CVE-2024-22020	<1:10.7.0-1.18.20.4.1.module+el8.10.0+1865+67d146ca
M CVE-2024-22018	<1:10.8.1-1.20.16.0.1.module+el8.10.0+1856+4cdb8df5
H CVE-2024-28182	<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21
H CVE-2024-27983	<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21
H CVE-2024-27982	<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21
H Out-of-bounds Read	<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21
H CVE-2024-22025	<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21
H CVE-2024-22017	<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
H CVE-2024-21896	<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
H Directory Traversal	<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
H CVE-2024-21890	<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
H CVE-2024-22019	<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
H Arbitrary Code Injection	<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
H CVE-2023-46809	<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec
H CVE-2023-44487	<1:8.19.4-1.16.20.2.4.module+el8.9.0+1760+903d54b9
M CVE-2023-30590	<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7
M CVE-2023-30589	<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7
M CVE-2023-30588	<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7
M CVE-2023-30581	<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7
H Use of Insufficiently Random Values	<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57
H Out-of-bounds Write	<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57
H Use of Insufficiently Random Values	<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57
H CVE-2023-32067	<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57
H Improper Input Validation	<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a
M Inefficient Regular Expression Complexity	<1:9.5.0-1.18.14.2.2.module+el8.7.0+1177+510ae886
M Arbitrary Code Injection	<1:9.5.0-1.18.14.2.2.module+el8.7.0+1177+510ae886
H Untrusted Search Path	<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a
M CVE-2023-23919	<1:8.19.3-1.16.19.1.1.module+el8.7.0+1178+d52dba78
H Incorrect Authorization	<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a
H Improper Validation of Specified Quantity in Input	<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57
H Inefficient Regular Expression Complexity	<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a
H Inefficient Regular Expression Complexity	<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a
H CVE-2021-22884	<1:6.14.11-1.10.24.0.1.module+el8.3.0+101+f84c7154
H Missing Release of Resource after Effective Lifetime	<1:6.14.11-1.10.24.0.1.module+el8.3.0+101+f84c7154
M Directory Traversal	<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
M Directory Traversal	<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4
M Information Exposure	<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8
M Improper Certificate Validation	<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8
M Improper Certificate Validation	<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8
M Improper Certificate Validation	<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8
M OS Command Injection	<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4
H Inefficient Regular Expression Complexity	<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a
M CVE-2021-27290	<1:6.14.13-1.12.22.3.2.module+el8.4.0+638+5344c6f7
M Inefficient Regular Expression Complexity	<1:6.14.13-1.12.22.3.2.module+el8.4.0+638+5344c6f7
M Out-of-bounds Read	<1:6.14.13-1.12.22.3.2.module+el8.4.0+638+5344c6f7
H Directory Traversal	<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
H Link Following	<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
H CVE-2021-23343	<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
H Use After Free	<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
H Improper Certificate Validation	<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
H Improper Input Validation	<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
H Use After Free	<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
H Cross-site Scripting (XSS)	<1:6.14.14-1.14.17.5.1.module+el8.4.0+654+17ff1d38
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1:8.1.2-1.16.13.1.3.module+el8.5.0+721+4c107270
M Inefficient Regular Expression Complexity	<1:8.1.2-1.16.13.1.3.module+el8.5.0+721+4c107270
M Inefficient Regular Expression Complexity	<1:8.1.2-1.16.13.1.3.module+el8.5.0+721+4c107270
M HTTP Request Smuggling	<1:8.1.2-1.16.13.1.3.module+el8.5.0+721+4c107270
M HTTP Request Smuggling	<1:8.1.2-1.16.13.1.3.module+el8.5.0+721+4c107270
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1:8.1.2-1.16.13.1.3.module+el8.5.0+721+4c107270
M Resource Exhaustion	<1:8.1.2-1.16.13.1.3.module+el8.5.0+721+4c107270
H Insufficient Verification of Data Authenticity	<1:8.3.1-1.16.14.0.4.module+el8.6.0+978+59f26232
M CVE-2022-33987	<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
M HTTP Request Smuggling	<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
M HTTP Request Smuggling	<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
M HTTP Request Smuggling	<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
H HTTP Request Smuggling	<1:8.15.0-1.16.17.1.1.module+el8.6.0+1046+80feca58
M OS Command Injection	<1:6.14.17-1.14.20.0.2.module+el8.6.0+1004+df064614
H Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	<1:8.15.0-1.16.17.1.1.module+el8.6.0+1046+80feca58
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4

Vulnerability

Vulnerable Version

CVE-2025-23085

<1:10.8.2-1.18.20.6.1.module+el8.10.0+1934+a521c41f

CVE-2025-23083

<1:10.9.2-1.22.13.1.1.module+el8.10.0+1935+d3cbe60f

Use of Insufficiently Random Values

<1:10.8.2-1.18.20.6.1.module+el8.10.0+1934+a521c41f

CVE-2024-36137

<1:10.8.1-1.20.16.0.1.module+el8.10.0+1856+4cdb8df5

CVE-2024-28863

<1:10.7.0-1.18.20.4.1.module+el8.10.0+1865+67d146ca

CVE-2024-22020

<1:10.7.0-1.18.20.4.1.module+el8.10.0+1865+67d146ca

CVE-2024-22018

<1:10.8.1-1.20.16.0.1.module+el8.10.0+1856+4cdb8df5

CVE-2024-28182

<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21

CVE-2024-27983

<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21

CVE-2024-27982

<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21

Out-of-bounds Read

<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21

CVE-2024-22025

<1:10.5.0-1.20.12.2.2.module+el8.9.0+1804+2708cc21

CVE-2024-22017

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec

CVE-2024-21896

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec

Directory Traversal

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec

CVE-2024-21890

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec

CVE-2024-22019

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec

Arbitrary Code Injection

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec

CVE-2023-46809

<1:10.2.4-1.20.11.1.1.module+el8.9.0+1776+addd4aec

CVE-2023-44487

<1:8.19.4-1.16.20.2.4.module+el8.9.0+1760+903d54b9

CVE-2023-30590

<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7

CVE-2023-30589

<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7

CVE-2023-30588

<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7

CVE-2023-30581

<1:9.5.1-1.18.16.1.1.module+el8.8.0+1413+a47876c7

Use of Insufficiently Random Values

<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57

Out-of-bounds Write

<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57

Use of Insufficiently Random Values

<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57

CVE-2023-32067

<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57

Improper Input Validation

<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a

Inefficient Regular Expression Complexity

<1:9.5.0-1.18.14.2.2.module+el8.7.0+1177+510ae886

Arbitrary Code Injection

<1:9.5.0-1.18.14.2.2.module+el8.7.0+1177+510ae886

Untrusted Search Path

<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a

CVE-2023-23919

<1:8.19.3-1.16.19.1.1.module+el8.7.0+1178+d52dba78

Incorrect Authorization

<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a

Improper Validation of Specified Quantity in Input

<1:9.5.0-1.18.14.2.3.module+el8.8.0+1337+7ea46b57

Inefficient Regular Expression Complexity

<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a

Inefficient Regular Expression Complexity

<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a

CVE-2021-22884

<1:6.14.11-1.10.24.0.1.module+el8.3.0+101+f84c7154

Missing Release of Resource after Effective Lifetime

<1:6.14.11-1.10.24.0.1.module+el8.3.0+101+f84c7154

Directory Traversal

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c

Directory Traversal

<1:6.14.15-1.14.18.2.2.module+el8.5.0+733+de4fee6c

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4

Information Exposure

<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8

Improper Certificate Validation

<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8

Improper Certificate Validation

<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8

Improper Certificate Validation

<1:6.14.17-1.14.20.1.2.module+el8.7.0+1071+4bdda2a8

OS Command Injection

<1:6.14.17-1.14.21.1.2.module+el8.7.0+1116+bd2a84b4

Inefficient Regular Expression Complexity

<1:6.14.18-1.14.21.3.1.module+el8.7.0+1183+c2c35f0a

CVE-2021-27290

<1:6.14.13-1.12.22.3.2.module+el8.4.0+638+5344c6f7

Inefficient Regular Expression Complexity

<1:6.14.13-1.12.22.3.2.module+el8.4.0+638+5344c6f7

Out-of-bounds Read

<1:6.14.13-1.12.22.3.2.module+el8.4.0+638+5344c6f7

Directory Traversal