Homepage

npm vulnerabilities

a package manager for JavaScript

  • latest version

    11.5.2

  • latest non vulnerable version

    11.5.2

  • first published

    12 years ago

  • latest version published

    25 days ago

  • licenses detected

    • Artistic-2.0
      >=1.2.8000 <1.3.0; >=1.3.6
    • MIT
      >=1.1.25 <1.2.8000; >=1.3.0 <1.3.6
  • View npm package health on Snyk Advisor  (opens in a new tab)
    • Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the npm package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Insertion of Sensitive Information into Log File

    <6.14.6
    • H
    Arbitrary File Write

    <6.13.3
    • L
    Unauthorized File Access

    <6.13.3
    • H
    Arbitrary File Overwrite

    <6.13.4
    • M
    Access Restriction Bypass

    <5.7.1
    • L
    Symlink attack due to predictable tmp folder names

    <1.3.4
    • M
    npm Token Leak

    <2.15.1>=3.0.0 <3.8.4

    Package versions

    100 VERSIONS IN TOTAL See all versions
    versionpublisheddirect vulnerabilities
    11.5.230 Jul, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    11.5.124 Jul, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    11.5.024 Jul, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    11.4.212 Jun, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    11.4.121 May, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    11.4.015 May, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    11.3.08 Apr, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    11.2.05 Mar, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    11.1.029 Jan, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    11.0.016 Dec, 2024
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L