Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects @user-interface-common/common-styles | Versions *
No fix available
npmPublished 14 Oct 2026
  • C
Malicious Package
Affects monkey-tags-ip | Versions *
No fix available
npmPublished 14 Oct 2026
  • C
Malicious Package
Affects @newspage/lib-ng-async-routes-ui | Versions *
No fix available
npmPublished 14 Oct 2026
  • C
Malicious Package
Affects @mntv-analysis/ui-components | Versions *
No fix available
npmPublished 14 Oct 2026
  • C
Malicious Package
Affects @mntv-analysis/workspaces-components | Versions *
No fix available
npmPublished 14 Oct 2026
  • C
Malicious Package
Affects @newspage/libx-amount | Versions *
No fix available
npmPublished 14 Oct 2026
  • C
Malicious Package
Affects @accenturecodefoundry/mfe-pot-shared-ui-scds-core | Versions =99.99.41=99.99.4=99.99.2
Has fix
npmPublished 14 Oct 2026
  • C
Malicious Package
Affects passwordcrackv2 | Versions *
No fix available
npmPublished 14 Oct 2026
  • C
Malicious Package
Affects @kre64/hello-npm-test | Versions =1.0.0
Has fix
npmPublished 14 Oct 2026
  • C
Malicious Package
Affects passwordcracker | Versions *
No fix available
npmPublished 14 Oct 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-61559
Affects @zereight/mcp-gitlab | Versions <2.1.27
Has fix
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects opencode2-windows-arm64 | Versions *
No fix available
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects opencode2-linux-x64-musl | Versions *
No fix available
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects opencode2-darwin-x64 | Versions *
No fix available
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects opencode2-linux-arm64-musl | Versions *
No fix available
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects opencode2 | Versions *
No fix available
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects opencode2-windows-x64 | Versions *
No fix available
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects opencode2-linux-x64 | Versions *
No fix available
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects opencode2-linux-arm64 | Versions *
No fix available
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects opencode2-darwin-arm64 | Versions *
No fix available
npmPublished 13 Oct 2026
  • M
Double Decoding of the Same DataCVE-2026-109955
Affects hono | Versions >=4.12.4 <4.13.11
Has fix
npmPublished 13 Oct 2026
  • M
Memory Allocation with Excessive Size ValueCVE-2026-109149
Affects js-beautify | Versions >=0.0.0
Has fix
npmPublished 13 Oct 2026
  • M
Improper Handling of Case SensitivityCVE-2026-107832
Affects fastify | Versions >=5.12.2 <5.12.6
Has fix
npmPublished 13 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-105864
Affects @payloadcms/plugin-multi-tenant | Versions <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 13 Oct 2026
  • H
Directory TraversalCVE-2026-107709
Affects decompress-zip | Versions >=0.0.0
Has fix
npmPublished 13 Oct 2026
  • C
Malicious Package
Affects yoodan-github-single-ver-pkg | Versions =1.0.1
Has fix
npmPublished 13 Oct 2026
  • H
Denial of Service (DoS)CVE-2026-45820
Affects fflate | Versions >=0.4.5 <0.4.9>=0.5.0 <0.5.4>=0.6.0 <0.6.11>=0.7.0 <0.7.5>=0.8.0 <0.8.3
Has fix
npmPublished 13 Oct 2026
  • M
Improper Encoding or Escaping of Output
Affects @vue/server-renderer | Versions <3.5.42>=3.6.0-rc.1 <3.6.0-rc.6
Has fix
npmPublished 13 Oct 2026
  • M
Improper Encoding or Escaping of Output
Affects @vue/server-renderer | Versions <3.5.42>=3.6.0-rc.1 <3.6.0-rc.6
Has fix
npmPublished 13 Oct 2026
  • H
SQL InjectionCVE-2026-107385
Affects mariadb | Versions <3.2.5>=3.3.0 <3.3.4>=3.4.0 <3.4.7>=3.5.1 <3.5.4
Has fix
npmPublished 13 Oct 2026