See the full list of npm packages compromised in the "Node-gyp Supply Chain Compromise - June 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- C
Deserialization of Untrusted DataCVE-2026-7301
Affects sglang | Versions [0.5.5,]
Has fix
pipPublished 31 May 2026
- H
Directory TraversalCVE-2026-7302
Affects sglang | Versions [0.5.5,]
Has fix
pipPublished 31 May 2026
- H
Out-of-bounds WriteCVE-2026-8915
Affects Samsung/escargot | Versions [0,]
Has fix
Unmanaged (C/C++)Published 31 May 2026
- H
Improper Validation of Array IndexCVE-2026-45104
Affects mapserver | Versions [6.4.0,8.6.3)
Has fix
Unmanaged (C/C++)Published 31 May 2026
- M
Numeric Range Comparison Without Minimum CheckCVE-2026-48840
Affects exim/exim | Versions [4.88.0,4.99.4)
Has fix
Unmanaged (C/C++)Published 31 May 2026
- C
Deserialization of Untrusted DataCVE-2026-7304
Affects sglang | Versions [0.4.1.post7,]
Has fix
pipPublished 31 May 2026
- M
NULL Pointer DereferenceCVE-2026-9759
Affects wireshark | Versions [4.4.0,4.4.16)[4.6.0,4.6.6)
Has fix
Unmanaged (C/C++)Published 31 May 2026
- M
Inefficient Algorithmic ComplexityCVE-2026-44378
Affects botan | Versions [,3.12.0)
Has fix
ConanPublished 31 May 2026
- M
Inefficient Algorithmic ComplexityCVE-2026-44378
Affects botan | Versions [,3.12.0)
Has fix
Unmanaged (C/C++)Published 31 May 2026
- H
Missing AuthorizationCVE-2026-32905
Affects openclaw | Versions <2026.5.4-beta.2
Has fix
npmPublished 31 May 2026
- H
Missing AuthorizationCVE-2026-32905
Affects @openclaw/discord | Versions <2026.5.4-beta.2
Has fix
npmPublished 31 May 2026
- M
Authorization Bypass Through User-Controlled KeyCVE-2026-47266
Affects verbb/formie | Versions <2.2.21>=3.0.0-beta.1, <3.1.26
Has fix
ComposerPublished 31 May 2026
- M
Heap-based Buffer OverflowCVE-2025-70103
Affects libjxl | Versions [0,]
Has fix
ConanPublished 31 May 2026
- M
Heap-based Buffer OverflowCVE-2025-70103
Affects libjxl/libjxl | Versions [0,]
Has fix
Unmanaged (C/C++)Published 31 May 2026
- H
Out-of-bounds WriteCVE-2026-44988
Affects libvnc/libvncserver | Versions [0,]
Has fix
Unmanaged (C/C++)Published 31 May 2026
- L
Improperly Implemented Security Check for StandardCVE-2026-44474
Affects github.com/ellanetworks/core/internal/amf/ngap | Versions <1.10.0
Has fix
GoPublished 31 May 2026
- L
Improperly Implemented Security Check for StandardCVE-2026-44474
Affects github.com/ellanetworks/core/internal/amf/nas/gmm | Versions <1.10.0
Has fix
GoPublished 31 May 2026
- L
Improperly Implemented Security Check for StandardCVE-2026-44474
Affects github.com/ellanetworks/core/internal/amf/nas | Versions <1.10.0
Has fix
GoPublished 31 May 2026
- L
Improperly Implemented Security Check for StandardCVE-2026-44474
Affects github.com/ellanetworks/core/internal/amf | Versions <1.10.0
Has fix
GoPublished 31 May 2026
Affects nerdbank.messagepack | Versions [,1.2.4)
Has fix
NuGetPublished 31 May 2026
Affects nerdbank.messagepack | Versions [,1.1.78)
Has fix
NuGetPublished 31 May 2026
- M
Out-of-bounds ReadCVE-2026-47104
Affects libusb/libusb | Versions [,1.0.30-rc2)
Has fix
Unmanaged (C/C++)Published 31 May 2026
- M
Out-of-bounds ReadCVE-2026-23679
Affects libusb/libusb | Versions [,1.0.30-rc2)
Has fix
Unmanaged (C/C++)Published 31 May 2026
- M
Heap-based Buffer OverflowCVE-2026-38427
Affects arendst/tasmota | Versions [0,]
Has fix
Unmanaged (C/C++)Published 31 May 2026
- M
Information ExposureCVE-2026-47248
Affects parse-server | Versions <8.6.78>=9.0.0-alpha.1 <9.9.1-alpha.2
Has fix
npmPublished 31 May 2026
- M
Buffer OverflowCVE-2026-38422
Affects arendst/tasmota | Versions [0,]
Has fix
Unmanaged (C/C++)Published 31 May 2026
- M
Buffer OverflowCVE-2026-38426
Affects arendst/tasmota | Versions [0,]
Has fix
Unmanaged (C/C++)Published 31 May 2026
- M
Incorrect AuthorizationCVE-2026-46636
Affects twig/twig | Versions <3.27.0
Has fix
ComposerPublished 31 May 2026
- M
Heap-based Buffer OverflowCVE-2026-9605
Affects libredwg | Versions [,0.13.4.8166)
Has fix
Unmanaged (C/C++)Published 31 May 2026