Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Incorrect Behavior Order: Early ValidationCVE-2026-84504
Affects fastify | Versions <5.12.2
Has fix
npmPublished 7 Sept 2026
  • M
Prototype PollutionCVE-2026-85063
Affects csv-parse | Versions <7.0.2
Has fix
npmPublished 7 Sept 2026
  • C
Improper Certificate ValidationCVE-2026-85525
Affects snowflake-sdk | Versions <3.3.0
Has fix
npmPublished 7 Sept 2026
  • H
Uncaught ExceptionCVE-2026-85024
Affects undici | Versions >=6.25.0 <6.28.1>=7.28.0 <7.29.1>=8.1.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • C
Origin Validation ErrorCVE-2026-85152
Affects undici | Versions >=8.10.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • H
Uncaught ExceptionCVE-2026-85014
Affects undici | Versions >=7.0.0 <7.29.1>=8.0.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • M
Insufficient Verification of Data AuthenticityCVE-2026-85008
Affects undici | Versions >=7.0.0 <7.29.1>=8.0.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • C
Improper Certificate ValidationCVE-2026-84961
Affects undici | Versions >=7.24.1 <7.29.1>=8.0.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • H
Use of Persistent Cookies Containing Sensitive InformationCVE-2026-84933
Affects undici | Versions >=7.0.0 <7.29.1>=8.0.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • M
Numeric Truncation ErrorCVE-2026-84947
Affects undici | Versions >=7.1.0 <7.29.1>=8.0.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • M
HTTP Request SmugglingCVE-2026-18540
Affects undici | Versions <6.28.1>=7.0.0 <7.29.1>=8.0.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • H
Uncaught ExceptionCVE-2026-19534
Affects undici | Versions >=6.7.0 <6.28.1>=7.0.0 <7.29.1>=8.0.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-84890
Affects undici | Versions >=7.15.0 <7.29.1>=8.0.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • H
Missing Release of Resource after Effective LifetimeCVE-2026-18149
Affects undici | Versions >=7.11.0 <7.29.1>=8.0.0 <8.10.2
Has fix
npmPublished 6 Sept 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-85393
Affects node-forge | Versions *
No fix available
npmPublished 6 Sept 2026
  • C
Remote Code Execution (RCE)
Affects vm2 | Versions <3.11.7
Has fix
npmPublished 3 Sept 2026
  • H
Data Amplification
Affects mysql2 | Versions <3.23.1
Has fix
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects google-internal-cloud-audit-security-check | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects frank-research-poc-apple | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects frank-apple-sync-service | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects apple-internal-test-utility | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects apple-cktool-internal-api-v9 | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects google-cloud-mono-repo-helper | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects google-cloud-internal-build-helper | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects frank-apple-utils | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects frank-bot-gogle-cloning | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects google-cloud-internal-core-utils | Versions *
No fix available
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects real-router-utils | Versions =1.0.0
Has fix
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects tailwindcss-fluid-styles | Versions =2.0.7
Has fix
npmPublished 3 Sept 2026
  • C
Malicious Package
Affects belmgr-plugins | Versions *
No fix available
npmPublished 3 Sept 2026