See the full list of npm packages compromised in the "TanStack Supply Chain Compromise - May 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- C
Improper Isolation or CompartmentalizationCVE-2026-44007
Affects vm2 | Versions >=3.9.6 <3.11.0
Has fix
npmPublished 8 May 2026
- M
Open RedirectCVE-2026-44437
Affects @angular/ssr | Versions >=19.0.0-next.0 <19.2.25>=20.0.0-next.0 <20.3.25>=21.0.0-next.0 <21.2.9>=22.0.0-next.0 <22.0.0-next.7
Has fix
npmPublished 8 May 2026
- C
Improper AuthenticationCVE-2026-44351
Affects fast-jwt | Versions <6.2.4
Has fix
npmPublished 7 May 2026
Affects mathjs | Versions >=13.1.0 <15.2.0
Has fix
npmPublished 7 May 2026
- M
Improper Isolation or CompartmentalizationCVE-2026-44003
Affects vm2 | Versions <3.11.0
Has fix
npmPublished 7 May 2026
- M
Improper Isolation or CompartmentalizationCVE-2026-44000
Affects vm2 | Versions <3.11.0
Has fix
npmPublished 7 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-42557
Affects @jupyterlab/markdownviewer-extension | Versions <4.5.7>=4.6.0-alpha.0 <4.6.0-alpha.5
Has fix
npmPublished 7 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-42557
Affects @jupyterlab/help-extension | Versions <4.5.7>=4.6.0-alpha.0 <4.6.0-alpha.5
Has fix
npmPublished 7 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-42557
Affects @jupyterlab/rendermime | Versions <4.5.7>=4.6.0-alpha.0 <4.6.0-alpha.5
Has fix
npmPublished 7 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-42557
Affects @jupyterlab/rendermime-interfaces | Versions <3.13.7>=3.14.0-alpha.0 <3.14.0-alpha.5
Has fix
npmPublished 7 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-42557
Affects @jupyterlab/rendermime-extension | Versions <4.5.7>=4.6.0-alpha.0 <4.6.0-alpha.5
Has fix
npmPublished 7 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-42557
Affects @jupyterlab/notebook | Versions <4.5.7>=4.6.0-alpha.0 <4.6.0-alpha.5
Has fix
npmPublished 7 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-42557
Affects @jupyterlab/notebook-extension | Versions <4.5.7>=4.6.0-alpha.0 <4.6.0-alpha.5
Has fix
npmPublished 7 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-42557
Affects @jupyterlab/apputils | Versions <4.6.7>=4.7.0-alpha.0 <4.7.0-alpha.5
Has fix
npmPublished 7 May 2026
- M
Cross-site Scripting (XSS)CVE-2026-42557
Affects @jupyterlab/apputils-extension | Versions <4.5.7>=4.6.0-alpha.0 <4.6.0-alpha.5
Has fix
npmPublished 7 May 2026
- M
Incorrect AuthorizationCVE-2026-44374
Affects @backstage/plugin-catalog-backend-module-unprocessed | Versions <0.6.11
Has fix
npmPublished 7 May 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-44004
Affects vm2 | Versions <3.11.0
Has fix
npmPublished 7 May 2026
- C
Arbitrary Code InjectionCVE-2026-43999
Affects vm2 | Versions >=3.9.18 <3.11.0
Has fix
npmPublished 7 May 2026
- C
Arbitrary Code InjectionCVE-2026-44005
Affects vm2 | Versions >=3.9.6 <3.11.0
Has fix
npmPublished 7 May 2026
- M
Incorrect AuthorizationCVE-2026-42280
Affects auth0-js | Versions >=8.11.0 <10.0.0
Has fix
npmPublished 7 May 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-44456
Affects hono | Versions <4.12.16
Has fix
npmPublished 7 May 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-23870
Affects react-server-dom-turbopack | Versions >=19.0.0 <19.0.6>=19.1.0 <19.1.7>=19.2.0 <19.2.6
Has fix
npmPublished 7 May 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-23870
Affects react-server-dom-parcel | Versions >=19.1.0 <19.1.7>=19.2.0 <19.2.6
Has fix
npmPublished 7 May 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-23870
Affects react-server-dom-webpack | Versions >=19.0.0 <19.0.6>=19.1.0 <19.1.7>=19.2.0 <19.2.6
Has fix
npmPublished 7 May 2026