Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Prototype PollutionCVE-2026-46625
Affects js-cookie | Versions >=2.0.0 <3.0.7
Has fix
npmPublished 4 Jul 2026
  • M
Permissive List of Allowed InputsCVE-2026-46341
Affects @apify/actors-mcp-server | Versions <0.9.21
Has fix
npmPublished 4 Jul 2026
  • H
Incorrect AuthorizationCVE-2026-49473
Affects @cedar-policy/authorization-for-expressjs | Versions <0.3.0
Has fix
npmPublished 4 Jul 2026
  • M
Insufficient Session ExpirationCVE-2026-55617
Affects hydrooj | Versions >=4.10.4 <5.0.2
Has fix
npmPublished 4 Jul 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-10690
Affects @wonderwhy-er/desktop-commander | Versions <0.2.38
Has fix
npmPublished 4 Jul 2026
  • M
Regular Expression Denial of Service (ReDoS)CVE-2026-10691
Affects @wonderwhy-er/desktop-commander | Versions <0.2.39
Has fix
npmPublished 4 Jul 2026
  • H
Server-side Request Forgery (SSRF)
Affects auth-fetch-mcp | Versions <3.0.1
Has fix
npmPublished 4 Jul 2026
  • H
Arbitrary File UploadCVE-2026-46426
Affects @budibase/server | Versions *
No fix available
npmPublished 4 Jul 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-53781
Affects @steipete/summarize-core | Versions <0.17.0
Has fix
npmPublished 4 Jul 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-53782
Affects @steipete/summarize | Versions <0.17.0
Has fix
npmPublished 4 Jul 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-53782
Affects @steipete/summarize-core | Versions <0.17.0
Has fix
npmPublished 4 Jul 2026
  • H
Command InjectionCVE-2026-49255
Affects electerm | Versions <3.11.11
Has fix
npmPublished 4 Jul 2026
  • H
Directory TraversalCVE-2026-49253
Affects electerm | Versions <3.11.11
Has fix
npmPublished 4 Jul 2026
  • H
Inefficient Algorithmic ComplexityCVE-2026-49250
Affects @conform-to/dom | Versions >=1.8.0 <1.19.4
Has fix
npmPublished 4 Jul 2026
  • M
Improper Input ValidationCVE-2026-14631
Affects webpack-dev-server | Versions <5.2.6
Has fix
npmPublished 4 Jul 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-14620
Affects webpack-dev-server | Versions <5.2.6
Has fix
npmPublished 4 Jul 2026
  • M
Server-side Request Forgery (SSRF)
Affects @asymmetric-effort/specifyjs | Versions <0.2.136
Has fix
npmPublished 4 Jul 2026
  • M
Server-side Request Forgery (SSRF)
Affects @asymmetric-effort/specifyjs | Versions <0.2.136
Has fix
npmPublished 4 Jul 2026
  • M
Cross-site Scripting (XSS)CVE-2026-50290
Affects @asymmetric-effort/specifyjs | Versions <0.2.136
Has fix
npmPublished 4 Jul 2026
  • M
Information Exposure
Affects @asymmetric-effort/specifyjs | Versions <0.2.140
Has fix
npmPublished 4 Jul 2026
  • M
Server-side Request Forgery (SSRF)
Affects @asymmetric-effort/specifyjs | Versions <0.2.136
Has fix
npmPublished 4 Jul 2026
  • M
Improper Neutralization of Special Elements in Data Query Logic
Affects @asymmetric-effort/specifyjs | Versions <0.2.136
Has fix
npmPublished 4 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-50288
Affects @asymmetric-effort/specifyjs | Versions <0.2.136
Has fix
npmPublished 4 Jul 2026
  • C
Malicious Package
Affects api-node-utils | Versions *
No fix available
npmPublished 3 Jul 2026
  • C
Malicious Package
Affects api-ts-utils | Versions *
No fix available
npmPublished 3 Jul 2026
  • C
Malicious Package
Affects ts-node-utils | Versions *
No fix available
npmPublished 3 Jul 2026
  • C
Malicious Package
Affects typescript-util-core | Versions *
No fix available
npmPublished 3 Jul 2026
  • C
Malicious Package
Affects web-api-node | Versions *
No fix available
npmPublished 3 Jul 2026
  • C
Malicious Package
Affects @sql-access/nodesql | Versions *
No fix available
npmPublished 3 Jul 2026
  • C
Malicious Package
Affects decode-sdks | Versions *
No fix available
npmPublished 3 Jul 2026