Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
C Malicious Package	prior-config*	npm	20 Jun 2025
C Malicious Package	vite-auditlog*	npm	20 Jun 2025
C Malicious Package	@cobalt-team/support-email*	npm	20 Jun 2025
C Malicious Package	@cobalt-team/multi-invite*	npm	20 Jun 2025
C Malicious Package	jsonwepjoken*	npm	20 Jun 2025
C Malicious Package	my_module_luckywater*	npm	20 Jun 2025
C SQL Injection	github.com/navidrome/navidrome/persistence>=0.55.0 <0.56.0	Go	20 Jun 2025
H Improper Control of Dynamically-Managed Code Resources	org.craftercms:crafter-studio[4.0.0,4.3.0)	Maven	20 Jun 2025
M Cross-site Scripting (XSS)	hurl*	Cargo	20 Jun 2025
M User Impersonation	matrix-sdk-crypto>=0.8.0 <0.11.1	Cargo	20 Jun 2025
L Race Condition	process_lock*	Cargo	20 Jun 2025
L Access of Resource Using Incompatible Type ('Type Confusion')	scsir*	Cargo	20 Jun 2025
L Use After Free	process-sync*	Cargo	20 Jun 2025
L Division by zero	memory_pages*	Cargo	20 Jun 2025
H Prototype Pollution	radashi<12.5.1	npm	20 Jun 2025
H Access Control Bypass	reflex[0.2.7,0.4.9.post1)[0.5.0a1,0.5.10.post1)[0.6.0a1,0.6.8.post1)[0.7.0a1,0.7.1.post1)[0.7.2.dev1,0.7.2.post1)[0.7.3a1,0.7.3.post1)[0.7.4a0,0.7.4.post1)[0.7.5a1,0.7.5.post1)[0.7.6a0,0.7.6.post1)[0.7.7a1,0.7.7.post1)[0.7.8a1,0.7.8.post1)[0.7.9a1,0.7.9.post1)[0.7.10a1,0.7.10.post1)[0.7.11a1,0.7.11)	pip	20 Jun 2025
H Information Exposure	oxid-esales/oxideshop-ce>=0.0.0	Composer	20 Jun 2025
M Cross-site Scripting (XSS)	@lumieducation/h5p-server<9.3.3	npm	20 Jun 2025
H XML External Entity (XXE) Injection	org.wso2.am:wso2am[,2.1.0)	Maven	20 Jun 2025
C Malicious Package	@com.att.vstb/vstb*	npm	20 Jun 2025
C Malicious Package	@com.att.dtventertainment/dfw-pm-yo-space-plugin*	npm	20 Jun 2025
C Malicious Package	azure-pipeline-filter*	npm	20 Jun 2025
C Malicious Package	odyssee_teams_api*	npm	20 Jun 2025
C Malicious Package	calculator-sse*	npm	20 Jun 2025
C Malicious Package	vscode-websearchforcopilot*	npm	20 Jun 2025
C Malicious Package	neuroglancer-rspack-project-source*	npm	20 Jun 2025
C Malicious Package	wasm-wasi-core*	npm	20 Jun 2025
C Malicious Package	envs-validator*	npm	20 Jun 2025
C Malicious Package	fwc-core*	npm	20 Jun 2025
C Malicious Package	prismicio-types*	npm	20 Jun 2025

APPLICATION

OPERATING SYSTEM