Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects @dtc-campaign-wizard/campaign-wizard | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects @spoonflower/ui | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects @sports-api/api-sdk | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects upstart-loan-status | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects @spreadjs/js-calc | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects walmart-internal | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects upstartadmindashboard- | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects upstartautoretailadmin | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects paysafe-google-pay | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects wm-plugin-visions-recorder | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects mdb-react-sortable | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects @mx-shared/utils | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects @zgny/onboarding-consumer | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects upstartloans | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects upstartportal | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects paysafe-card-payments | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects upstart.previewcss | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects @kucoin-gbiz-next/tools | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects upstart-offer-container | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects @hrb-web/nuxt | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects upstartapplicationstatus | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
Malicious Package
Affects upstart-lending-status | Versions *
No fix available
npmPublished 13 Apr 2026
  • C
SQL InjectionCVE-2026-39356
Affects drizzle-orm | Versions >=1.0.0-beta.2-e93475f <1.0.0-beta.20-91f355e>=0.37.0 <0.45.2
Has fix
npmPublished 13 Apr 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-39371
Affects rwsdk | Versions >=1.0.0-beta.50 <1.0.6
Has fix
npmPublished 12 Apr 2026
  • M
Directory TraversalCVE-2026-35613
Affects coursevault-preview | Versions <0.1.1
Has fix
npmPublished 12 Apr 2026
  • M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-5327
Affects fast-filesystem-mcp | Versions *
No fix available
npmPublished 12 Apr 2026
  • H
Missing Authentication for Critical Function
Affects n8n-mcp | Versions <2.47.6
Has fix
npmPublished 12 Apr 2026
  • M
Arbitrary Command InjectionCVE-2026-5831
Affects taskflow-ai | Versions <2.1.9
Has fix
npmPublished 12 Apr 2026
  • M
Regular Expression Denial of Service (ReDoS)CVE-2026-5986
Affects js-video-url-parser | Versions *
No fix available
npmPublished 12 Apr 2026
  • M
Open RedirectCVE-2026-40299
Affects next-intl | Versions <4.9.1
Has fix
npmPublished 12 Apr 2026