npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-50015Highpnpm: pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)CVE-2026-50017Mediumpnpm: pnpm binds unscoped user-level npm auth credentials to a repository-selected registryCVE-2026-50016Highpnpm: pnpm: Transitive dependency alias path traversal allows project path override via symlink replacementCVE-2026-50014Mediumpnpm: pnpm: Git Fetch Argument Injection via Lockfile resolution.commitCVE-2026-50021Mediumpnpm: pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity FieldCVE-2026-50573Mediumpnpm: pnpm: Unsafe default behavior breaks integrity checkCVE-2026-50029Mediumjs-toml: js-toml has silent type confusion via falsy-primitive duplicate-key bypassCVE-2026-49336Medium@microsoft/kiota-http-fetchlibrary: @microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in…CVE-2026-49293Highjs-toml: js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literalsCVE-2026-49357Highline-desktop-mcp: Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authenticationCVE-2026-48995Mediumpnpm: pnpm: Tarball hash of GitHub git dependencies is not stored in lockfileGHSA-RP72-5V5Q-2446Low@cardano402/mcp-server: @cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.urlCVE-2026-49252Critical@deepstream/server: deepstream is vulnerable to prototype pollutionGHSA-3P34-W4F6-5XH2Highbetter-helperjs: better-helperjs Vulnerable to Directory Traversal via String Prefix Bypass in Static ServerGHSA-FHP4-PR5J-46M5Highmuhammara: Muhammara has a NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange keyCVE-2026-48801Highlinkify-it: LinkifyIt#match scan loop has quadratic algorithmic complexityCVE-2026-48797Criticalbackpropagate: Backpropagate: backprop ui --auth and backprop ui --share do not enforce authenticationGHSA-5VWR-QCHF-Q4PFMedium@cyclonedx/cdxgen: @cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module pathsCVE-2026-48758Medium@sigstore/core: @sigstore/core has DSSE payloadType type-binding failureCVE-2026-56876Highextract-zip: extract-zip unvalidated symlink path traversalCVE-2026-11779Mediumpayload: Payload CMS default account-unlock access allows authenticated users to reset other accounts' lockoutsGHSA-WRR4-782V-JHWHLowneotoma: neotoma has tenant isolation gap in relationship query endpointsCVE-2026-48713Criticali18next-fs-backend: i18next-fs-backend vulnerable to prototype pollution via crafted missing-key stringCVE-2026-48714Criticali18next-http-middleware: i18next-http-middleware: MissingKeyHandler does not reject keys whose segments contain prototype-polluting namesCVE-2026-46406Medium@anthropic-ai/claude-code: @anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo