Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects hardhat-pack | Versions =2.0.1
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects hardhat-deep | Versions =2.0.1
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects @ziedzzz/demo-canary | Versions =1.0.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects abbishal-poc2 | Versions =1.2.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects hardhat-promised | Versions =2.21.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects mfasolver | Versions =1.0.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects css-reading-display-polyfill | Versions =1.0.0
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects internallib_v788 | Versions *
No fix available
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects imgbundle | Versions =1.0.2
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects cdn-img-fetch | Versions =1.0.3
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects function-flag | Versions =1.7.3
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects function-color | Versions =1.0.0=1.7.3
Has fix
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects tailwindcss-animatecss-keyframes | Versions *
No fix available
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects random-certs | Versions *
No fix available
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects vectorizers | Versions *
No fix available
npmPublished 8 Oct 2026
  • C
Malicious Package
Affects waie-crash-baileys | Versions *
No fix available
npmPublished 8 Oct 2026
  • M
Open RedirectCVE-2026-105846
Affects payload | Versions >=3.40.0 <3.88.0>=4.0.0-canary.0 <4.0.0-canary.27
Has fix
npmPublished 8 Oct 2026
  • M
Open RedirectCVE-2026-105846
Affects @payloadcms/next | Versions >=3.31.0 <3.88.0>=4.0.0-canary.0 <4.0.0-canary.27
Has fix
npmPublished 8 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-105805
Affects payload | Versions <3.88.0>=4.0.0-canary.0 <4.0.0-canary.27
Has fix
npmPublished 8 Oct 2026
  • C
SQL InjectionCVE-2026-105845
Affects payload | Versions >=3.0.0 <3.88.0>=4.0.0-canary.0 <4.0.0-canary.27
Has fix
npmPublished 8 Oct 2026
  • H
Access Control BypassCVE-2026-105855
Affects payload | Versions >=4.0.0-canary.0 <4.0.0-canary.34<3.90.0
Has fix
npmPublished 8 Oct 2026
  • M
Use of Password Hash With Insufficient Computational EffortCVE-2026-105804
Affects payload | Versions >=3.0.0 <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 8 Oct 2026
  • H
Regular Expression Denial of Service (ReDoS)CVE-2026-105854
Affects payload | Versions >=3.0.0 <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 8 Oct 2026
  • H
Improper AuthorizationCVE-2026-105853
Affects payload | Versions >=3.0.0 <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 8 Oct 2026
  • H
Missing AuthorizationCVE-2026-105849
Affects @payloadcms/ui | Versions >=3.0.0 <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 8 Oct 2026
  • H
Missing AuthorizationCVE-2026-105849
Affects payload | Versions >=3.0.0 <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 8 Oct 2026
  • C
Incorrect AuthorizationCVE-2026-105851
Affects payload | Versions >=3.0.0 <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 8 Oct 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-105847
Affects payload | Versions >=3.0.0 <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 8 Oct 2026
  • M
Missing AuthorizationCVE-2026-105852
Affects @payloadcms/drizzle | Versions <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 8 Oct 2026
  • M
Missing AuthorizationCVE-2026-105852
Affects @payloadcms/db-mongodb | Versions <3.90.0>=4.0.0-canary.0 <4.0.0-canary.34
Has fix
npmPublished 8 Oct 2026