Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
C Malicious Package	slf4j-api-js*	npm	7 May 2025
C Malicious Package	amazon-seller-central*	npm	7 May 2025
C Malicious Package	adp-workforce-now*	npm	7 May 2025
C Malicious Package	cordova-plugin-permissions*	npm	7 May 2025
C Malicious Package	reactotron-mobx*	npm	7 May 2025
C Malicious Package	swagger2-postman2*	npm	7 May 2025
C Malicious Package	flush-plugins*	npm	7 May 2025
C Malicious Package	arena-plm*	npm	7 May 2025
C Malicious Package	adobe-commerce-magento*	npm	7 May 2025
C Malicious Package	josson*	npm	7 May 2025
C Malicious Package	toloka-tb*	npm	7 May 2025
C Malicious Package	@adsk-forks/jsonpath*	npm	7 May 2025
C Malicious Package	orvyn*	npm	7 May 2025
C Malicious Package	graphalgo*	npm	7 May 2025
C Malicious Package	glance-design*	npm	7 May 2025
M Cross-site Scripting (XSS)	com.liferay:com.liferay.marketplace.app.manager.web[,5.0.50)	Maven	7 May 2025
C Malicious Package	express-cronjs*	npm	7 May 2025
C Malicious Package	rose-bn*	npm	7 May 2025
C Malicious Package	feather-provider-filter*	npm	7 May 2025
C Malicious Package	pixel-percent*	npm	7 May 2025
M Cross-site Scripting (XSS)	org.jboss.hal:hal-dmr[,3.7.11.Final)	Maven	7 May 2025
M Cross-site Scripting (XSS)	org.jboss.hal:hal-core[,3.7.11.Final)	Maven	7 May 2025
M Cross-site Scripting (XSS)	org.jboss.hal:hal-console[,3.7.11.Final)	Maven	7 May 2025
H External Control of File Name or Path	org.apache.parquet:parquet-avro[,1.15.2)	Maven	7 May 2025
C Deserialization of Untrusted Data	vllm[0.6.5,0.8.5)	pip	7 May 2025
M Binding to an Unrestricted IP Address	vllm[0.5.2,0.8.5)	pip	7 May 2025
C Malicious Package	slimdx*	npm	6 May 2025
M Regular Expression Denial of Service (ReDoS)	@babel/runtime<7.26.10>=8.0.0-alpha.0 <8.0.0-alpha.17	npm	6 May 2025
M Double Free	github.com/ibireme/yyjson<0.9.0	Swift	6 May 2025
C Malicious Package	beautifulsoup4*	npm	6 May 2025

APPLICATION

OPERATING SYSTEM