Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects svelte-dim-kit | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects @sdgdfgdfhhhfd/chainvista | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects totp-utils | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects @sdgdfgdfhhhfd/multiviewr | Versions *
No fix available
npmPublished 26 Aug 2026
  • H
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-80192
Affects @better-auth/sso | Versions >=1.4.8-beta.1 <1.4.8>=1.4.8 <1.6.27>=1.7.0-rc.0 <1.7.0-rc.5
Has fix
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects tinkoff-boxy-desktop-features-banner | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects statist-browser-typed-client-sme.platform.web.teasers | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects statist-browser-typed-client-nfs.grocery.mobile.events | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects supersig | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects sso-tramvai-module-context-auth | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects sotqa-test | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects specials-obid-webpack | Versions *
No fix available
npmPublished 26 Aug 2026
  • C
Malicious Package
Affects totp-utils | Versions *
No fix available
npmPublished 26 Aug 2026
  • H
Cross-site Scripting (XSS)CVE-2026-16231
Affects hbs | Versions >=2.1.0 <4.3.0
Has fix
npmPublished 25 Aug 2026
  • H
Double Decoding of the Same DataCVE-2026-75899
Affects fast-uri | Versions >=2.4.1 <2.4.5>=3.1.2 <3.1.6>=4.0.0 <4.1.3
Has fix
npmPublished 25 Aug 2026
  • H
Improper Validation of Syntactic Correctness of InputCVE-2026-75975
Affects fast-uri | Versions >=2.3.1 <2.4.5>=3.0.0 <3.1.6>=4.0.0 <4.1.3
Has fix
npmPublished 25 Aug 2026
  • H
Improper Handling of URL Encoding (Hex Encoding)CVE-2026-76172
Affects fast-uri | Versions >=2.3.1 <2.4.5>=3.0.0 <3.1.6>=4.0.0 <4.1.3
Has fix
npmPublished 25 Aug 2026
  • H
Interpretation ConflictCVE-2026-75931
Affects fast-uri | Versions >=2.4.2 <2.4.5>=3.1.3 <3.1.6>=4.0.1 <4.1.3
Has fix
npmPublished 25 Aug 2026
  • H
Missing Release of Resource after Effective LifetimeCVE-2026-77384
Affects @libp2p/circuit-relay-v2 | Versions >=2.1.5 <4.2.9
Has fix
npmPublished 25 Aug 2026
  • H
Improper Handling of Highly Compressed Data (Data Amplification)CVE-2026-78206
Affects exceljs | Versions <5.0.0
Has fix
npmPublished 24 Aug 2026
  • C
Prototype PollutionCVE-2026-78207
Affects exceljs | Versions <5.0.0
Has fix
npmPublished 24 Aug 2026
  • M
CSV InjectionCVE-2026-78209
Affects exceljs | Versions <5.0.0
Has fix
npmPublished 24 Aug 2026
  • H
External Control of File Name or PathCVE-2026-78208
Affects exceljs | Versions <5.0.0
Has fix
npmPublished 24 Aug 2026
  • M
Prototype PollutionCVE-2026-78180
Affects @alifd/next | Versions *
No fix available
npmPublished 24 Aug 2026
  • C
Improper Verification of Source of a Communication ChannelCVE-2026-77087
Affects @paperclipai/server | Versions *
No fix available
npmPublished 24 Aug 2026
  • C
Malicious Package
Affects fund-portfolio | Versions *
No fix available
npmPublished 23 Aug 2026
  • C
Malicious Package
Affects fund-list-filter | Versions *
No fix available
npmPublished 23 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-68921
Affects @dicebear/initials | Versions <9.4.3
Has fix
npmPublished 23 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-68921
Affects @dicebear/core | Versions <9.4.3
Has fix
npmPublished 23 Aug 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-65842
Affects @platejs/docx-io | Versions <53.3.2
Has fix
npmPublished 23 Aug 2026