Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Cross-site Scripting (XSS)CVE-2026-116675
Affects tinymce | Versions >=7.9.3 <8.9.3
Has fix
npmPublished 27 Oct 2026
  • H
Allocation of Resources Without Limits or Throttling
Affects @modelcontextprotocol/sdk | Versions >=1.10.0 <1.30.1
Has fix
npmPublished 27 Oct 2026
  • H
Allocation of Resources Without Limits or Throttling
Affects @modelcontextprotocol/server | Versions >=2.0.0 <2.1.0
Has fix
npmPublished 27 Oct 2026
  • H
Allocation of Resources Without Limits or Throttling
Affects @modelcontextprotocol/node | Versions >=2.0.0 <2.1.0
Has fix
npmPublished 27 Oct 2026
  • H
Allocation of Resources Without Limits or Throttling
Affects @modelcontextprotocol/hono | Versions >=2.0.0 <2.0.1
Has fix
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects dsh-vm-tester | Versions =0.1.3=0.1.2=0.1.4
Has fix
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects @tableau__catalog-messages/database_lower | Versions *
No fix available
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects buttoncontent | Versions *
No fix available
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects adyen-web-v6 | Versions *
No fix available
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects 6161test1234 | Versions *
No fix available
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects fetch-hash-cache-atomic | Versions *
No fix available
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects macro-kernel-record-reader | Versions *
No fix available
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects string-target-mapper-hash | Versions *
No fix available
npmPublished 27 Oct 2026
  • H
SQL InjectionCVE-2026-115418
Affects @aws-cdk/aws-redshift-alpha | Versions <2.274.0-alpha.0
Has fix
npmPublished 27 Oct 2026
  • H
Infinite loopCVE-2026-116581
Affects seroval | Versions <1.6.8
Has fix
npmPublished 27 Oct 2026
  • H
Improper Handling of Length Parameter InconsistencyCVE-2026-116584
Affects seroval | Versions >=1.4.1 <1.6.8
Has fix
npmPublished 27 Oct 2026
  • L
Cross-site Scripting (XSS)CVE-2026-116582
Affects seroval | Versions <1.0.0>=1.5.5 <1.6.10
Has fix
npmPublished 27 Oct 2026
  • M
Deserialization of Untrusted DataCVE-2026-116580
Affects seroval | Versions <1.6.8
Has fix
npmPublished 27 Oct 2026
  • M
Arbitrary Code InjectionCVE-2026-116583
Affects seroval | Versions >=1.6.0 <1.6.11
Has fix
npmPublished 27 Oct 2026
  • C
Interpretation ConflictCVE-2026-112362
Affects @fastify/express | Versions >=4.0.5 <4.0.9
Has fix
npmPublished 27 Oct 2026
  • L
Race ConditionCVE-2026-117499
Affects @fastify/session | Versions <11.1.6
Has fix
npmPublished 27 Oct 2026
  • M
Cross-site Scripting (XSS)CVE-2026-116802
Affects dompurify | Versions <3.4.17
Has fix
npmPublished 27 Oct 2026
  • H
Cross-site Scripting (XSS)CVE-2026-116803
Affects dompurify | Versions <3.4.17
Has fix
npmPublished 27 Oct 2026
  • C
Cross-site Scripting (XSS)CVE-2026-116804
Affects dompurify | Versions >=3.4.4 <3.4.17
Has fix
npmPublished 27 Oct 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-110910
Affects qs | Versions >=6.12.0 <6.16.2
Has fix
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects @azure-growth/signup-ux-components | Versions =1.2.3=1.2.2
Has fix
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects @camera.ui/camera-ui-nvr-windows-amd64 | Versions =1.6.1
Has fix
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects ctf-agent | Versions =0.1.0
Has fix
npmPublished 27 Oct 2026
  • C
Malicious Package
Affects postcss-semantic-themes | Versions *
No fix available
npmPublished 26 Oct 2026
  • C
Malicious Package
Affects harlow-css-mixer | Versions *
No fix available
npmPublished 26 Oct 2026