npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-52746Highjsonata: jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustionGHSA-F9FF-5X35-7GFWHigh@grackle-ai/mcp: Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)CVE-2026-49255Highelecterm: electerm has Command Injection in File System Operations (rmrf, mv, cp)CVE-2026-49253Highelecterm: electerm has Path Traversal in Zmodem and Trzsz Download Filename HandlingCVE-2026-49250High@conform-to/dom: @conform-to/dom parseSubmission vulnerable to CPU exhaustion when parsing many unique form fieldsGHSA-VV65-F55V-XM6GHigh@grackle-ai/runtime-sdk: Grackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch…CVE-2026-50290Medium@asymmetric-effort/specifyjs: @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToStringGHSA-J5QP-P44G-2M49Medium@asymmetric-effort/specifyjs: @asymmetric-effort/specifyjs: No redirect target validation in secureFetchGHSA-2944-57XV-2682Medium@asymmetric-effort/specifyjs: @asymmetric-effort/specifyjs: `data:` URI allowed without size restrictionGHSA-XW57-23P8-9WC5Medium@asymmetric-effort/specifyjs: @asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range)GHSA-QCR8-X557-7CP3Medium@asymmetric-effort/specifyjs: @asymmetric-effort/specifyjs: Production console warnings may leak internal framework stateGHSA-5C7W-4WM3-85VWMedium@asymmetric-effort/specifyjs: @asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injectionCVE-2026-50288High@asymmetric-effort/specifyjs: @asymmetric-effort/specifyjs: URL parse failure silently allows requestGHSA-P73F-W79W-JQR5Highopenclaw: OpenClaw: Native command authorization could skip owner-command enforcementCVE-2026-53836Highopenclaw: OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checksGHSA-77Q5-RR5V-X43QHighopenclaw: OpenClaw: Trusted retry endpoint checks could match hostname prefixesGHSA-W5WW-7CHG-MXCQHighopenclaw: OpenClaw: Telegram interactive callbacks could skip commands.allowFromCVE-2026-53811Highopenclaw: OpenClaw: Matrix allowFrom could bind to mutable display namesGHSA-4M3V-Q747-PC6HMediumopenclaw: OpenClaw: Mattermost slash token revocation could lag until monitor refreshCVE-2026-53816Highopenclaw: OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenanceCVE-2026-53806Highopenclaw: OpenClaw: Combined POSIX shell options could confuse exec revalidationCVE-2026-53818Mediumopenclaw: OpenClaw: MCP loopback could skip owner-only tool policy for non-owner callersCVE-2026-53830Mediumopenclaw: OpenClaw: Slack and Zalo webhook secrets could remain active after secrets.reloadGHSA-3WQP-PRF6-2M72Lowopenclaw: OpenClaw: Feishu dynamic-agent bindings could miss configWrites enforcementGHSA-6C4R-G249-WV3CMediumopenclaw: OpenClaw: Sandboxed session spawn could expose the real workspace path to child prompts

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo