Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects testrrrd | Versions =2.0.0=1.1.0=2.0.1=99.0.1=3.0.0=0.0.1=1.0.0
Has fix
npmPublished 9 Oct 2026
  • C
Malicious Package
Affects css-overscroll-contain | Versions =1.0.3=1.0.2=1.0.1
Has fix
npmPublished 9 Oct 2026
  • C
Malicious Package
Affects revine | Versions =2.4.0
Has fix
npmPublished 9 Oct 2026
  • H
Improper Handling of Syntactically Invalid StructureCVE-2026-107299
Affects msgpack5 | Versions <6.1.0
Has fix
npmPublished 8 Oct 2026
  • H
Uncontrolled RecursionCVE-2026-107300
Affects msgpack5 | Versions <6.1.0
Has fix
npmPublished 8 Oct 2026
  • M
Modification of Assumed-Immutable Data (MAID)CVE-2026-107296
Affects msgpack5 | Versions <6.1.0
Has fix
npmPublished 8 Oct 2026
  • M
Uncontrolled RecursionCVE-2026-107298
Affects msgpack5 | Versions <6.1.0
Has fix
npmPublished 8 Oct 2026
  • H
Prototype PollutionCVE-2026-107301
Affects msgpack5 | Versions <6.1.0
Has fix
npmPublished 8 Oct 2026
  • H
Out-of-bounds ReadCVE-2026-107302
Affects msgpack5 | Versions <6.1.0
Has fix
npmPublished 8 Oct 2026
  • H
Inefficient Algorithmic ComplexityCVE-2026-107297
Affects msgpack5 | Versions <6.1.0
Has fix
npmPublished 8 Oct 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-105800
Affects i18next-http-backend | Versions <4.0.2
Has fix
npmPublished 8 Oct 2026
  • H
Insufficiently Protected CredentialsCVE-2026-104850
Affects @modelcontextprotocol/server-legacy | Versions >=2.0.0 <2.2.0
Has fix
npmPublished 8 Oct 2026
  • H
Insufficiently Protected CredentialsCVE-2026-104850
Affects @modelcontextprotocol/core | Versions >=2.0.0 <2.2.0
Has fix
npmPublished 8 Oct 2026
  • H
Insufficiently Protected CredentialsCVE-2026-104850
Affects @modelcontextprotocol/sdk | Versions >=1.12.0 <1.31.0
Has fix
npmPublished 8 Oct 2026
  • H
Insufficiently Protected CredentialsCVE-2026-104850
Affects @modelcontextprotocol/client | Versions >=2.0.0 <2.2.0
Has fix
npmPublished 8 Oct 2026
  • C
Access of Resource Using Incompatible Type ('Type Confusion')CVE-2026-106446
Affects handlebars | Versions >=4.0.0 <4.7.10
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects dransay | Versions =99.0.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @dransay/secrets | Versions =99.0.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @dransay/phone-fix-test | Versions =99.0.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @bitwardne/cli | Versions =1.0.1
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @dransay/logger | Versions =99.0.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @dransay/db | Versions =99.0.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @dransay/feature-flags | Versions =99.0.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @bitwardne/jslib | Versions =1.1.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @kxafunc/xbails | Versions =0.0.8
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @galicia-toolkit/core | Versions *
No fix available
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @galicia-toolkit/spa-build-config | Versions *
No fix available
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @galicia-toolkit/tag-manager | Versions *
No fix available
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @galicia-toolkit/error-master | Versions *
No fix available
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects clickfix_npm_delivery | Versions =1.0.2=1.0.0
Has fix
npmPublished 8 Oct 2026