Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Regular Expression Denial of Service (ReDoS)CVE-2026-23897
Affects apollo-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • H
Regular Expression Denial of Service (ReDoS)CVE-2026-23897
Affects @apollo/server | Versions >=4.2.0 <4.13.0>=5.0.0 <5.4.0
Has fix
npmPublished 5 Feb 2026
  • C
Allocation of Resources Without Limits or ThrottlingCVE-2026-25547
Affects @isaacs/brace-expansion | Versions <5.0.1
Has fix
npmPublished 5 Feb 2026
  • H
Directory TraversalCVE-2026-25475
Affects openclaw | Versions <2026.1.30
Has fix
npmPublished 5 Feb 2026
  • C
Arbitrary Code InjectionCVE-2026-1615
Affects jsonpath | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects dspmobile | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects log-symbols_updated | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects cat-retail-app | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects tailwindcss-forms-starter | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects express_update | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects @purecore/rabbitmq | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects internallib_v157 | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects locate-path_updated | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects @jes4l/react-pkg | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects tailwindcss-animation-modern | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects react-count-sync | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects react-vite-sync | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects web3-chain-sync | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects banquet-runtime-modules | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects @msecscc/gaia | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects dcf-commons | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects confluence-analytics-support | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects mdp-client-web | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects internationalized | Versions *
No fix available
npmPublished 4 Feb 2026
  • H
Prototype PollutionCVE-2025-61140
Affects jsonpath | Versions <1.2.0
Has fix
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects @casaverso/frontend-core | Versions *
No fix available
npmPublished 4 Feb 2026
  • M
Information Exposure
Affects promptfoo | Versions <0.119.11
Has fix
npmPublished 4 Feb 2026
  • H
Prototype PollutionCVE-2026-25521
Affects locutus | Versions >=2.0.12 <2.0.39
Has fix
npmPublished 4 Feb 2026
  • H
Credential ExposureCVE-2026-25253
Affects openclaw | Versions <2026.1.29-beta.1
Has fix
npmPublished 4 Feb 2026
  • H
Command InjectionCVE-2026-24763
Affects openclaw | Versions <2026.1.29-beta.1
Has fix
npmPublished 4 Feb 2026