Developer Tools
Snyk Learn
Snyk Advisor
Code Checker
About Snyk
Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
Expand this section
APPLICATION
Cargo
cocoapods
Composer
Go
hex
Maven
npm
NuGet
pip
pub
RubyGems
Swift
Unmanaged (C/C++)
Expand this section
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
VULNERABILITY
AFFECTS
TYPE
PUBLISHED
C
Improper Verification of Cryptographic Signature
xml-crypto
>=4.0.0 <6.0.0
npm
2 May 2024
C
Malicious Package
clistsy-node
*
npm
2 May 2024
C
Malicious Package
npm-package-shirley
*
npm
2 May 2024
C
Malicious Package
agencyportal-web
*
npm
2 May 2024
C
Malicious Package
grylls
*
npm
2 May 2024
H
Cross-site Scripting
yapi-vendor
*
npm
1 May 2024
C
Improper Control of Generation of Code ('Code Injection')
flowise
*
npm
30 Apr 2024
C
Malicious Package
vue2-amis-custom-widget-k
*
npm
30 Apr 2024
C
Malicious Package
vue2-amis-custom-widget-kk
*
npm
30 Apr 2024
C
Malicious Package
discord.js-red
*
npm
29 Apr 2024
C
Malicious Package
ethers-transactions
*
npm
29 Apr 2024
C
Malicious Package
ethutility
*
npm
29 Apr 2024
M
Improper Control of Dynamically-Managed Code Resources
ejs
<3.1.10
npm
29 Apr 2024
H
Type Confusion
electron
>=26.0.0 <26.6.4
>=27.0.0 <27.2.1
npm
26 Apr 2024
H
Use After Free
electron
>=26.0.0 <26.6.4
>=27.0.0 <27.2.1
npm
26 Apr 2024
H
Use After Free
electron
>=26.0.0 <26.6.4
>=27.0.0 <27.2.1
npm
26 Apr 2024
H
Use After Free
electron
>=26.0.0 <26.6.4
>=27.0.0 <27.2.1
npm
26 Apr 2024
H
Access of Resource Using Incompatible Type ('Type Confusion')
electron
>=20.0.0 <20.3.10
>=21.0.0 <21.3.4
npm
26 Apr 2024
M
Improper Control of Generation of Code ('Code Injection')
hono
<3.11.7
npm
26 Apr 2024
M
Cross-site Scripting (XSS)
angular-translate
*
npm
26 Apr 2024
C
Malicious Package
hardhat-daemon
*
npm
24 Apr 2024
C
Malicious Package
react-dom-production-script
*
npm
24 Apr 2024
H
Prototype Pollution
@conform-to/zod
<1.1.1
npm
24 Apr 2024
H
Prototype Pollution
@conform-to/yup
<1.1.1
npm
24 Apr 2024
H
Prototype Pollution
@conform-to/dom
<1.1.1
npm
24 Apr 2024
H
Arbitrary Command Injection
@hoppscotch/cli
<0.8.0
npm
24 Apr 2024
C
Malicious Package
relinquishsecurecontinuous
*
npm
24 Apr 2024
C
Malicious Package
rollremainsweet
*
npm
24 Apr 2024
C
Malicious Package
pardonbeefconfession
*
npm
24 Apr 2024
C
Malicious Package
pleadappointmentat
*
npm
24 Apr 2024