Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects chai-as-advanced | Versions *
No fix available
npmPublished 5 Feb 2026
  • H
Directory TraversalCVE-2026-25055
Affects n8n-workflow | Versions <1.120.5>=2.0.0 <2.3.2
Has fix
npmPublished 5 Feb 2026
  • H
Directory TraversalCVE-2026-25055
Affects n8n-nodes-base | Versions <1.121.7>=2.0.0 <2.3.2
Has fix
npmPublished 5 Feb 2026
  • C
Improper Control of Dynamically-Managed Code ResourcesCVE-2026-25049
Affects n8n-workflow | Versions <1.120.4>=2.0.0-rc.0 <2.3.1
Has fix
npmPublished 5 Feb 2026
  • C
Insecure Default Initialization of ResourceCVE-2026-25894
Affects fuxa-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Missing Authentication for Critical FunctionCVE-2026-25895
Affects fuxa-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Improper AuthenticationCVE-2026-25893
Affects fuxa-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Missing AuthorizationCVE-2026-25752
Affects fuxa-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Cleartext Storage of Sensitive InformationCVE-2026-25751
Affects fuxa-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Command InjectionCVE-2025-69983
Affects fuxa-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Use of Hard-coded CredentialsCVE-2025-69971
Affects fuxa-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Missing Authentication for Critical FunctionCVE-2025-69970
Affects fuxa-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Missing Authentication for Critical FunctionCVE-2025-69981
Affects fuxa-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects @helloflex/widget-next-sdk | Versions *
No fix available
npmPublished 5 Feb 2026
  • H
Race ConditionCVE-2026-25536
Affects @modelcontextprotocol/sdk | Versions >=1.10.0 <1.26.0
Has fix
npmPublished 5 Feb 2026
  • H
Missing Authentication for Critical FunctionCVE-2026-25593
Affects openclaw | Versions <2026.1.29-beta.1
Has fix
npmPublished 5 Feb 2026
  • H
Regular Expression Denial of Service (ReDoS)CVE-2026-23897
Affects apollo-server | Versions *
No fix available
npmPublished 5 Feb 2026
  • H
Regular Expression Denial of Service (ReDoS)CVE-2026-23897
Affects @apollo/server | Versions >=4.2.0 <4.13.0>=5.0.0 <5.4.0
Has fix
npmPublished 5 Feb 2026
  • C
Allocation of Resources Without Limits or ThrottlingCVE-2026-25547
Affects @isaacs/brace-expansion | Versions <5.0.1
Has fix
npmPublished 5 Feb 2026
  • H
Directory TraversalCVE-2026-25475
Affects openclaw | Versions <2026.1.30
Has fix
npmPublished 5 Feb 2026
  • C
Arbitrary Code InjectionCVE-2026-1615
Affects jsonpath | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects dspmobile | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects log-symbols_updated | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects cat-retail-app | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects tailwindcss-forms-starter | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects express_update | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects @purecore/rabbitmq | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects internallib_v157 | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects locate-path_updated | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects @jes4l/react-pkg | Versions *
No fix available
npmPublished 5 Feb 2026