npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-QH2F-99MV-MRCFMediumopenclaw: OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawnGHSA-XWW8-GQVH-92X9Highopenclaw: OpenClaw: Exec approval display truncation could hide the command being approvedCVE-2026-53815Highopenclaw: OpenClaw: Message read actions could skip channel allowlist checksGHSA-9C3V-684M-579CMediumopenclaw: OpenClaw MCP SSE redirects could forward Authorization headersCVE-2026-50143High@apify/actors-mcp-server: Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify tokenCVE-2026-53943Criticalghost: Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview headerCVE-2026-48819Medium@hey-api/openapi-ts: @hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` keyCVE-2026-48815Highsigstore: sigstore's `certificateOIDs` verification constraints are silently dropped and never enforcedCVE-2026-48816Medium@sigstore/verify: sigstore-js has Insufficient Verification of Data AuthenticityCVE-2026-49988Mediumrepomix: repomix: attach_packed_output can bypass file-read secret scanning for supported local filesCVE-2026-49987Highrepomix: repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument InjectionCVE-2026-49864Highwetty: wetty vulnerable to DOM XSS via file-download filenameCVE-2026-49857Highauth-fetch-mcp: auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 LoopbackCVE-2026-49856Medium@jshookmcp/jshook: @jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorizationCVE-2026-48795High@adonisjs/bodyparser: @adonisjs/bodyparser has an incomplete fix for CVE-2026-25754CVE-2026-49473High@cedar-policy/authorization-for-expressjs: @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulationGHSA-QRV3-253H-G69CHighpnpm: pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-configGHSA-72R4-9C5J-MJ57Highpnpm: pnpm: `patch-remove` could delete project-selected files outside the patches directoryGHSA-FR4H-3CPH-29XVHighpnpm: pnpm: Hoisted install imports lockfile alias outside node_modulesCVE-2026-55700Highpnpm: pnpm: `stage download` writes outside its destination directory via manifest name/version traversalCVE-2026-55699Mediumpnpm: pnpm: Reserved bin name deletes PNPM_HOME during global removeCVE-2026-55698Highpnpm: pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytesCVE-2026-55697Highpnpm: pnpm: Repository-controlled configDependencies can select a pacquet native install engineCVE-2026-55487Highpnpm: pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycleCVE-2026-55180Mediumpnpm: pnpm: Repository config can expand victim environment secrets into registry requests before scripts run

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo