npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-MXJX-28VX-XJJJMediumnetwork-ai: Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions GHSA-JVCM-F35G-W78PMediumnetwork-ai: Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directoryGHSA-2FMP-9RVW-HC96Highnetwork-ai: Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruningCVE-2026-57442Medium@bitbonsai/mcpvault: MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nestedGHSA-H5JC-78HR-3PC9Low@sveltia/cms: Sveltia CMS: Stored XSS in Markdown/RichText preview via unsandboxed same-origin iframeCVE-2026-55650Medium@outerbase/studio: Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token ExposureCVE-2026-55660Hightinacms: TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeoverCVE-2026-54074High@tinacms/cli: @tinacms/cli: Remote Code Execution in @tinacms/cli via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML…CVE-2026-55091Highflat-to-nested: flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id keyCVE-2026-55849High@cyclonedx/cyclonedx-npm: @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace ArgumentGHSA-V52W-28XH-V562Highkozou: Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default…CVE-2026-55778Lowparse-server: parse-server: Stored XSS via non-standard file extension bypassing file upload extension blocklistCVE-2026-54527Highjupyterlab-git: jupyterlab-git extension: Stored XSS leading to RCECVE-2026-53726Mediumparse-server: parse-server: Relation `$relatedTo` query bypasses `protectedFields` and owning-object ACLCVE-2026-53725Mediumparse-server: parse-server: Endpoints `/login` and `/verifyPassword` disclose MFA secrets and protected fields when `_User` get is deniedCVE-2026-53724Lowparse-server: parse-server: Stored XSS via trailing-dot filename bypassing file upload extension blocklistCVE-2026-50008Mediumparse-server: parse-server: Server option routeAllowList is bypassable through batch sub-requestsGHSA-9GGV-8W38-R7PMMediumtypeorm: TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)GHSA-9WXG-VF3R-56HCLow@openzeppelin/wizard: OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated sourceGHSA-VCV2-R9JH-99M5Highagentic-flow: Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSyncGHSA-CGXM-VR2F-6FJ8Highparse-server: parse-server: Denial of service via exponential-time processing of deeply nested query operatorsCVE-2026-11525Lowundici: undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matchingCVE-2026-12151Highundici: undici WebSocket client vulnerable to denial of service via fragment count bypassCVE-2026-9679Mediumundici: undici vulnerable to HTTP header injection via Set-Cookie percent-decodingCVE-2026-6734Highundici: undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo