Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
C Malicious Package	sd-pay-ts*	npm	12 Dec 2025
C Malicious Package	sdbao-content-report*	npm	12 Dec 2025
C Malicious Package	pp-js-lib*	npm	12 Dec 2025
C Malicious Package	cfruitmaliciousxmlparser*	npm	12 Dec 2025
C Malicious Package	bfruitmaliciousxmlparser*	npm	12 Dec 2025
C Malicious Package	gfruitmaliciousxmlparser*	npm	12 Dec 2025
C Malicious Package	dfruitmaliciousxmlparser*	npm	12 Dec 2025
C Malicious Package	browser-client-neptune*	npm	12 Dec 2025
C Malicious Package	efruitmaliciousxmlparser*	npm	12 Dec 2025
C Malicious Package	afruitmaliciousxmlparser*	npm	12 Dec 2025
C Malicious Package	fruit-malicious-xml-parser*	npm	12 Dec 2025
C Malicious Package	hfruitmaliciousxmlparser*	npm	12 Dec 2025
C Malicious Package	ffruitmaliciousxmlparser*	npm	12 Dec 2025
C Malicious Package	@cheqplease/structured-logger*	npm	12 Dec 2025
M Use of Non-Canonical URL Paths for Authorization Decisions	astro<5.16.3	npm	12 Dec 2025
M Incorrect Authorization	@auth0/nextjs-auth0>=4.11.0 <4.11.2>=4.12.0 <4.12.1	npm	11 Dec 2025
L Incomplete List of Disallowed Inputs	@auth0/nextjs-auth0>=4.9.0 <4.13.0	npm	11 Dec 2025
H Improper Handling of Case Sensitivity	formio<3.5.7-rc.1>=4.0.0-rc.1 <4.4.3-rc.1	npm	11 Dec 2025
H Inadequate Encryption Strength	altcha>=0.8.0	npm	10 Dec 2025
C Server-side Request Forgery (SSRF)	mcp-fetch-server*	npm	10 Dec 2025
M Cross-site Scripting (XSS)	qwc2-lts*	npm	10 Dec 2025
M Cross-site Scripting (XSS)	qwc2<2025.8.14	npm	10 Dec 2025
M Improper Protection for Out of Bounds Signal Level Alerts	@nocobase/auth<1.9.0-beta.18>=1.9.0 <1.9.22>=2.0.0-alpha.2 <2.0.0-alpha.52	npm	10 Dec 2025
H Arbitrary Code Injection	elysia<1.4.17	npm	10 Dec 2025
C Prototype Pollution	elysia>=1.4.0 <1.4.17	npm	10 Dec 2025
C Malicious Package	non-modular-buildable*	npm	10 Dec 2025
C Malicious Package	near-fast-auth-signer*	npm	10 Dec 2025
C Malicious Package	express-my-error-handler*	npm	10 Dec 2025
C Malicious Package	native-component-list*	npm	10 Dec 2025
C Malicious Package	real-time-tweet-streamer*	npm	10 Dec 2025

APPLICATION

OPERATING SYSTEM