Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
External Control of File Name or PathCVE-2026-106494
Affects @backstage/backend-defaults | Versions <0.17.8
Has fix
npmPublished 11 Oct 2026
  • L
Directory TraversalCVE-2026-106493
Affects @backstage/plugin-catalog-backend-module-azure | Versions <0.3.21
Has fix
npmPublished 11 Oct 2026
  • L
Directory TraversalCVE-2026-106493
Affects @backstage/plugin-catalog-backend-module-aws | Versions <0.4.27
Has fix
npmPublished 11 Oct 2026
  • L
Directory TraversalCVE-2026-106493
Affects @backstage/backend-defaults | Versions <0.17.8
Has fix
npmPublished 11 Oct 2026
  • H
Incorrect AuthorizationCVE-2026-106492
Affects @backstage/backend-defaults | Versions <0.16.1>=0.17.0 <0.17.8
Has fix
npmPublished 11 Oct 2026
  • H
Insufficient Session ExpirationCVE-2026-107721
Affects fast-jwt | Versions <6.3.0
Has fix
npmPublished 11 Oct 2026
  • H
Improper Validation of Specified Type of InputCVE-2026-107723
Affects fast-jwt | Versions <6.3.0
Has fix
npmPublished 11 Oct 2026
  • L
Insufficient Session ExpirationCVE-2026-107719
Affects fast-jwt | Versions <6.3.4
Has fix
npmPublished 11 Oct 2026
  • C
Improper Verification of Cryptographic SignatureCVE-2026-107720
Affects fast-jwt | Versions <6.3.1
Has fix
npmPublished 11 Oct 2026
  • C
Improper Verification of Cryptographic SignatureCVE-2026-107724
Affects fast-jwt | Versions >=6.2.4 <6.3.0
Has fix
npmPublished 11 Oct 2026
  • C
Improper Verification of Cryptographic SignatureCVE-2026-107722
Affects fast-jwt | Versions >=6.2.0 <6.3.0
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects react-dropzone-v4 | Versions =99.0.0
Has fix
npmPublished 11 Oct 2026
  • M
Open RedirectCVE-2026-107718
Affects @adonisjs/http-server | Versions <8.2.3>=9.0.0 <9.3.0
Has fix
npmPublished 11 Oct 2026
  • H
Uncaught ExceptionCVE-2026-96294
Affects thrift | Versions <0.25.0
Has fix
npmPublished 11 Oct 2026
  • C
Malicious Package
Affects @library-wide/library-shell | Versions =99.9.1
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects kmf-bootstrap | Versions =100.100.103=100.100.102
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects kmf-i18n | Versions =100.100.102
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects @myorder-frontend-commons/analytics | Versions =3.0.0=10.0.0=99.0.0
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects test-account-portal-fe | Versions =100.100.102
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects arsya-baileys | Versions =9.2.2=9.2.4=9.2.1=9.2.3
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects cloud-baileys | Versions =1.1.42=1.1.41=1.1.40=1.1.39=1.1.38=1.1.37=1.1.36=1.1.35=1.1.34=1.1.33=1.1.3=1.1.2=1.1.1=1.1.0=1.0.5=1.0.4=1.0.3=1.0.2=1.0.1=1.0.0
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects @fer2809fl/baileys | Versions =7.0.7=7.0.6=7.0.5=7.0.4=7.0.2=7.0.1=7.0.0=7.0.0-rc13=1.4.9=1.4.7=1.4.6=1.4.5
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects @tunstock/remact-dom | Versions =19.2.0
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects kmf-vendor-pack | Versions =99.0.0
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects @galicia-toolkit-cheques-nc/front | Versions =999.0.2=999.0.3=999.0.1
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects @tvg-mar/tvg-promos-atomic-ui | Versions *
No fix available
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects @brick-v2/brand | Versions =999.0.2=999.0.3=999.0.1
Has fix
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects @tvg-mar/utils | Versions *
No fix available
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects @tvg-mar/promos-context | Versions *
No fix available
npmPublished 10 Oct 2026
  • C
Malicious Package
Affects @brick-v2/table | Versions =999.0.1=999.0.2=999.0.3
Has fix
npmPublished 10 Oct 2026