Vulnerability DB

Detailed information and remediation guidance for known vulnerabilities.
Find out if you have vulnerabilities that put you at risk Test your code
Show:
Report a new vulnerability
Vulnerability Affects Type Published
  • M
Arbitrary Code Injection 		dot * npm 07 Apr, 2019
  • H
Hash Injection 		sequelize <4.12.0 npm 07 Apr, 2019
  • M
Denial of Service (DoS) 		js-yaml <1.5.0 npm 05 Apr, 2019
  • M
Regular Expression Denial of Service (ReDoS) 		lodash <4.17.11 npm 05 Apr, 2019
  • M
Insecure Default Configuration 		tesseract.js * npm 02 Apr, 2019
  • H
Use After Free 		electron <2.0.18,>=3.0.0 <3.0.16,>=3.0.0 <3.1.6,>=4.0.0 <4.0.8 npm 31 Mar, 2019
  • H
Arbitrary Code Injection 		open <6.0.0 npm 31 Mar, 2019
  • M
Prototype Pollution 		jquery <3.4.0 npm 27 Mar, 2019
  • H
Arbitrary Command Injection 		opencv <6.1.0 npm 26 Mar, 2019
  • M
Denial of Service (DoS) 		js-yaml <3.13.0 npm 24 Mar, 2019
  • M
Arbitrary Command Injection 		kill-port <1.3.2 npm 18 Mar, 2019
  • M
Cross-site Scripting (XSS) 		simple-markdown <0.4.4 npm 17 Mar, 2019
  • M
Cross-site Scripting (XSS) 		editor.md * npm 13 Mar, 2019
  • H
Arbitrary File Write via Archive Extraction (Zip Slip) 		react-native-code-push >=1.7.0 npm 11 Mar, 2019
  • H
Arbitrary Code Execution 		safer-eval <1.3.2 npm 11 Mar, 2019
  • M
Cross-site Scripting (XSS) 		react-json-pretty <2.0.1 npm 06 Mar, 2019
  • H
Cross-site Scripting (XSS) 		embark <4.0.0 npm 03 Mar, 2019
  • M
Cross-site Scripting (XSS) 		eslint-plugin-no-unsanitized >=3.0.1 npm 01 Mar, 2019
  • L
Timing Attack 		safe-compare >=1.0.4 <1.1.4 npm 01 Mar, 2019
  • H
Cross-site Scripting (XSS) 		bootstrap-select <1.13.6 npm 28 Feb, 2019
  • M
Cross-site Scripting (XSS) 		summernote * npm 28 Feb, 2019
  • M
Content Injection 		embark <4.0.0 npm 27 Feb, 2019
  • M
Insufficient Entropy 		cryptr * npm 26 Feb, 2019
  • M
Insecure Randomness 		reveal.js * npm 26 Feb, 2019
  • H
Directory Traversal 		total.js >=2.1.0 <2.1.1,>=2.2.0 <2.2.1,>=2.3.0 <2.3.1,>=2.4.0 <2.4.1,>=2.5.0 <2.5.1,>=2.6.0 <2.6.3,>=2.7.0 <2.7.1,>=2.8.0 <2.8.1,>=2.9.0 <2.9.5,>=3.0.0 <3.0.1,>=3.1.0 <3.1.1,>=3.2.0 <3.2.4 npm 20 Feb, 2019
  • M
Improper Access Control 		thrift >=0.9.2 <0.11.0 npm 17 Feb, 2019
  • M
Cross-site Scripting (XSS) 		bootstrap <3.4.1,>=4.0.0 <4.3.1 npm 15 Feb, 2019
  • H
Remote Code Execution (RCE) 		office-converter * npm 14 Feb, 2019
  • H
Arbitrary Code Execution 		static-eval <2.0.2 npm 14 Feb, 2019
  • H
Prototype Pollution 		handlebars <4.0.13 npm 14 Feb, 2019
Subscribe to RSS feed