Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Symlink AttackCVE-2026-55607
Affects @anthropic-ai/claude-code | Versions >=2.1.38 <2.1.163
Has fix
npmPublished 5 Jul 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-14209
Affects @keycloakify/keycloak-admin-ui | Versions *
No fix available
npmPublished 5 Jul 2026
  • H
Missing Authorization
Affects @grackle-ai/mcp | Versions <0.132.2
Has fix
npmPublished 5 Jul 2026
  • H
Missing Authorization
Affects @grackle-ai/plugin-core | Versions <0.132.2
Has fix
npmPublished 5 Jul 2026
  • H
Missing Authorization
Affects @grackle-ai/auth | Versions <0.132.2
Has fix
npmPublished 5 Jul 2026
  • M
Insertion of Sensitive Information into Externally-Accessible File or Directory
Affects @bitbonsai/mcpvault | Versions <0.11.5
Has fix
npmPublished 5 Jul 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-58485
Affects mcp-searxng | Versions <1.7.1
Has fix
npmPublished 5 Jul 2026
  • M
Unsafe Dependency ResolutionCVE-2026-54325
Affects @earendil-works/pi-coding-agent | Versions <0.79.0
Has fix
npmPublished 5 Jul 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-57583
Affects @openzeppelin/wizard | Versions <0.10.11
Has fix
npmPublished 5 Jul 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-57583
Affects @openzeppelin/wizard-cairo | Versions <3.0.1
Has fix
npmPublished 5 Jul 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-57583
Affects @openzeppelin/wizard-stellar | Versions <0.6.2
Has fix
npmPublished 5 Jul 2026
  • M
Improper Encoding or Escaping of OutputCVE-2026-57583
Affects @openzeppelin/wizard-stylus | Versions <0.3.1
Has fix
npmPublished 5 Jul 2026
  • H
Creation of Temporary File in Directory with Insecure PermissionsCVE-2026-54328
Affects @mariozechner/pi-coding-agent | Versions >=0.50.0
Has fix
npmPublished 5 Jul 2026
  • H
Creation of Temporary File in Directory with Insecure PermissionsCVE-2026-54328
Affects @earendil-works/pi-coding-agent | Versions >=0.74.0 <0.78.1
Has fix
npmPublished 5 Jul 2026
  • H
Prototype PollutionCVE-2026-55091
Affects flat-to-nested | Versions <1.1.2
Has fix
npmPublished 5 Jul 2026
  • H
Command InjectionCVE-2026-55849
Affects @cyclonedx/cyclonedx-npm | Versions >=2.1.0 <5.0.0
Has fix
npmPublished 5 Jul 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-55591
Affects signalk-server | Versions <2.28.0
Has fix
npmPublished 5 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-54157
Affects @lobehub/lobehub | Versions >=0.0.0
Has fix
npmPublished 5 Jul 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-58483
Affects mcp-searxng | Versions <1.7.1
Has fix
npmPublished 5 Jul 2026
  • M
Cross-site Scripting (XSS)
Affects @sveltia/cms | Versions <0.167.3
Has fix
npmPublished 5 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-58500
Affects appium-mcp | Versions <1.85.10
Has fix
npmPublished 5 Jul 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-58200
Affects @jhb.software/payload-cloudinary-plugin | Versions >=0.3.0 <0.4.0
Has fix
npmPublished 5 Jul 2026
  • C
Malicious Package
Affects vps-maintenance-paperclip-adapter | Versions *
No fix available
npmPublished 5 Jul 2026
  • C
Malicious Package
Affects vps-maintenance | Versions *
No fix available
npmPublished 5 Jul 2026
  • C
Malicious Package
Affects paperclip2 | Versions *
No fix available
npmPublished 5 Jul 2026
  • C
Embedded Malicious Code
Affects tailwindcss-style-animate | Versions =1.1.6
Has fix
npmPublished 5 Jul 2026
  • C
Embedded Malicious Code
Affects tailwindcss-animate-style | Versions =1.2.5
Has fix
npmPublished 5 Jul 2026
  • C
Malicious Package
Affects @zynkit/probe | Versions =0.0.1
Has fix
npmPublished 5 Jul 2026
  • C
Malicious Package
Affects @zynkit/jwtbytes | Versions =0.4.3=0.5.1=0.5.2=0.5.3=0.5.4
Has fix
npmPublished 5 Jul 2026
  • C
Malicious Package
Affects @tinyfox/shapecheck | Versions =0.7.4=0.8.5=0.8.6=0.8.7=0.8.8
Has fix
npmPublished 5 Jul 2026