pm2 vulnerabilities

Production process manager for Node.JS applications with a built-in load balancer.

  • latest version

    6.0.10

  • latest non vulnerable version

  • first published

    12 years ago

  • latest version published

    5 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the pm2 package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Regular Expression Denial of Service (ReDoS)

    <6.0.9
    • M
    Command Injection

    <4.3.0
    • M
    Command Injection

    <4.3.0

    Package versions

    286 VERSIONS IN TOTAL See all versions
    versionpublisheddirect vulnerabilities
    6.0.102 Sep, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    6.0.91 Sep, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    6.0.85 Jun, 2025
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    6.0.75 Jun, 2025
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    6.0.613 May, 2025
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    6.0.515 Mar, 2025
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    6.0.0-beta.013 Nov, 2024
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    5.4.313 Nov, 2024
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    5.4.28 Jul, 2024
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L
    5.4.118 Jun, 2024
    • 0
      C
    • 0
      H
    • 1
      M
    • 0
      L