Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
Affects @bitbonsai/mcpvault | Versions <0.11.4
Has fix
npmPublished 4 Jul 2026
- C
User ImpersonationCVE-2026-58399
Affects @acastellon/auth | Versions <2.3.0
Has fix
npmPublished 4 Jul 2026
Affects @agenticmail/core | Versions <0.9.43
Has fix
npmPublished 4 Jul 2026
Affects @agenticmail/claudecode | Versions <0.2.39
Has fix
npmPublished 4 Jul 2026
Affects @agenticmail/codex | Versions <0.1.33
Has fix
npmPublished 4 Jul 2026
Affects @agenticmail/openclaw | Versions <0.5.71
Has fix
npmPublished 4 Jul 2026
- C
Prototype PollutionCVE-2026-55388
Affects piscina | Versions <4.9.3>=5.0.0-alpha.0 <5.2.0>=6.0.0-rc.1 <6.0.0-rc.2
Has fix
npmPublished 4 Jul 2026
Affects @cardano402/mcp-server | Versions <0.1.2
Has fix
npmPublished 4 Jul 2026
- M
Cross-site Scripting (XSS)CVE-2026-46492
Affects md-fileserver | Versions <1.10.3
Has fix
npmPublished 4 Jul 2026
- H
Regular Expression Denial of Service (ReDoS)CVE-2026-48801
Affects linkify-it | Versions <5.0.1
Has fix
npmPublished 4 Jul 2026
- M
Improper Verification of Cryptographic SignatureCVE-2026-48758
Affects @sigstore/core | Versions <3.2.1
Has fix
npmPublished 4 Jul 2026
- M
Missing Authentication for Critical FunctionCVE-2026-45577
Affects neotoma | Versions >=0.6.0 <0.11.1
Has fix
npmPublished 4 Jul 2026
- M
Prototype PollutionCVE-2026-48819
Affects @hey-api/openapi-ts | Versions <0.97.3
Has fix
npmPublished 4 Jul 2026
- H
Use of Cache Containing Sensitive InformationCVE-2026-53943
Affects ghost | Versions >=4.0.0 <6.37.0
Has fix
npmPublished 4 Jul 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-50143
Affects @apify/actors-mcp-server | Versions <0.10.11
Has fix
npmPublished 4 Jul 2026
- H
Insufficient Verification of Data AuthenticityCVE-2026-48816
Affects @sigstore/verify | Versions >=3.1.0 <3.1.1
Has fix
npmPublished 4 Jul 2026
- H
Improper Verification of Cryptographic SignatureCVE-2026-48815
Affects sigstore | Versions <4.1.1
Has fix
npmPublished 4 Jul 2026
- H
Improper Verification of Cryptographic SignatureCVE-2026-48815
Affects @sigstore/cli | Versions <0.10.0
Has fix
npmPublished 4 Jul 2026
- H
Improper Verification of Cryptographic SignatureCVE-2026-48815
Affects @sigstore/verify | Versions <3.1.1
Has fix
npmPublished 4 Jul 2026
- M
Unprotected Alternate ChannelCVE-2026-49988
Affects repomix | Versions <1.14.1
Has fix
npmPublished 4 Jul 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-49857
Affects auth-fetch-mcp | Versions <3.0.2
Has fix
npmPublished 4 Jul 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-49856
Affects @jshookmcp/jshook | Versions >=0.3.1 <0.3.2
Has fix
npmPublished 4 Jul 2026
- H
Arbitrary Argument InjectionCVE-2026-49987
Affects repomix | Versions <1.14.1
Has fix
npmPublished 4 Jul 2026
- C
Insecure Default Initialization of ResourceCVE-2026-47668
Affects dbgate-api | Versions <7.1.9
Has fix
npmPublished 4 Jul 2026
- H
Cross-site Scripting (XSS)CVE-2026-49864
Affects wetty | Versions <3.0.4
Has fix
npmPublished 4 Jul 2026
- C
Directory TraversalCVE-2026-47669
Affects dbgate-api | Versions <7.1.9
Has fix
npmPublished 4 Jul 2026
- H
Prototype PollutionCVE-2026-46625
Affects js-cookie | Versions >=2.0.0 <3.0.7
Has fix
npmPublished 4 Jul 2026
- M
Permissive List of Allowed InputsCVE-2026-46341
Affects @apify/actors-mcp-server | Versions <0.9.21
Has fix
npmPublished 4 Jul 2026
- H
Incorrect AuthorizationCVE-2026-49473
Affects @cedar-policy/authorization-for-expressjs | Versions <0.3.0
Has fix
npmPublished 4 Jul 2026
- M
Insufficient Session ExpirationCVE-2026-55617
Affects hydrooj | Versions >=4.10.4 <5.0.2
Has fix
npmPublished 4 Jul 2026