Critical npm package vulnerabilities

CVE-2026-77363 · npm

obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback

CVE-2026-77366 · npm

obsidian-tc tokens can access arbitrary configured vaults

CVE-2026-114139 · npm

Sentry-Javascript: Middleware Bypass when using Tunnel route

GHSA-2464-fhr4-w9xw · npm

Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

GHSA-673q-mjm6-r5xr · npm

Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays

GHSA-cg2g-xh64-v4q7 · npm

DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes

CVE-2026-102989 · npm

TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses

CVE-2026-108261 · npm

TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

CVE-2026-106445 · npm

Handlebars: JavaScript Injection via Own Property Check Bypass

CVE-2026-106446 · npm

Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

CVE-2026-107722 · npm

fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

CVE-2026-105857 · npm

Payload Form Builder has an RCE issue

CVE-2026-105859 · npm

Payload: Unauthorized update to collection documents

CVE-2026-105863 · npm

Payload authentication token field handling issue

CVE-2026-106102 · npm

Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()

CVE-2026-106501 · npm

Backstage: Sensitive information exposure in Scaffolder

CVE-2026-93605 · npm

vm2 contains a sandbox escape vulnerability

CVE-2026-102422 · npm

shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token

CVE-2026-105844 · npm

Payload: Prototype pollution in Payload Import Export plugin

CVE-2026-105845 · npm

Payload: SQL Injection in SQLite and Postgres

CVE-2026-105851 · npm

Payload: Field access control bypass on auth collections

CVE-2026-100721 · npm

vm2: NodeVM custom resolution bypasses external path boundaries

CVE-2026-102828 · npm

simple-git unsafe-operation guard does not block trailer command configuration

CVE-2026-102829 · npm

simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

CVE-2026-103922 · npm

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

CVE-2026-104846 · npm

Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)

CVE-2026-104848 · npm

Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution

CVE-2026-104849 · npm

Tinypool: Prototype Pollution Gadget to RCE in run() options

CVE-2026-90711 · npm

proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

CVE-2026-92934 · npm

vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit

CVE-2026-92946 · npm

vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE

CVE-2026-92947 · npm

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

CVE-2026-92953 · npm

vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix

CVE-2026-92954 · npm

vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process

CVE-2026-92955 · npm

vm2: Sandbox Escape (NodeVM)

CVE-2026-92956 · npm

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass

CVE-2026-10032 · npm

@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

GHSA-gg6r-gp4c-89hp · npm

Trigger.dev: V1 coordinator default-secret unauth Socket.IO

CVE-2026-102992 · npm

piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

CVE-2026-92935 · npm

vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

CVE-2026-92937 · npm

vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

CVE-2026-92938 · npm

vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

CVE-2026-92939 · npm

vm2 crypto builtin loads attacker native code through setEngine

CVE-2026-92940 · npm

vm2 exposes host HTTPS credentials and TLS traffic through globalAgent

CVE-2026-92941 · npm

vm2 NodeVM can replace the host process TLS trust store

CVE-2026-92944 · npm

vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

CVE-2026-92948 · npm

vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape

CVE-2026-92951 · npm

vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package

CVE-2026-92957 · npm

vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process

GHSA-vcvr-r3jv-pc5j · npm

Next.js: Remote Code Execution in next/og ImageResponse

CVE-2026-101894 · npm

@xhmikosr/decompress: Path traversal via symlink chain

CVE-2026-59167 · npm

SunEditor: Critical XSS vulnerability - sanitizer bypass

CVE-2026-63472 · npm

Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification

CVE-2026-61534 · npm

yayson: Prototype pollution in Store/LegacyStore deserialization

CVE-2026-88062 · npm

OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

CVE-2026-75604 · npm

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

CVE-2026-76969 · npm

@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

CVE-2026-82533 · npm

DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API

CVE-2026-85061 · npm

MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

GHSA-26w7-cxv4-gfx2 · npm

Astro: Remote code execution through AVIF image optimization

GHSA-2xp9-vwfh-vxw4 · npm

Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

CVE-2026-75856 · Rust (crates.io)

CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning

CVE-2026-62682 · npm

Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

CVE-2026-71864 · npm

Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client

CVE-2026-71865 · npm

Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli

CVE-2026-71867 · npm

Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator

CVE-2026-71868 · npm

Orval: Import-time RCE via enum-typed default -> zod module-level template literal

CVE-2026-71869 · npm

Orval: Import-time RCE via array-items default -> zod module-level template literal

CVE-2026-71871 · npm

Orval: Import-time RCE via header-parameter default -> zod module-level template literal

CVE-2026-72717 · npm

Orval: Import-time RCE via schema default -> zod module-level template literal

CVE-2026-71866 · npm

Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

CVE-2026-72716 · npm

Orval: Import-time RCE via query-parameter default -> zod module-level template literal

CVE-2026-77413 · npm

JSONata: Arbitrary Code Execution via crafted JSONata expressions

CVE-2026-77414 · npm

JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions

CVE-2026-77415 · npm

JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions

CVE-2026-55445 · npm

Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication

CVE-2026-47686 · npm

VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE

CVE-2026-47698 · npm

vm2: Sandbox Breakout Using Dangerous Host Proto Mutators

GHSA-m5w8-4gq2-6f8x · npm

vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)

CVE-2026-71851 · npm

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

CVE-2026-71319 · npm

Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host

CVE-2026-69240 · npm

Sequelize: SQL Injection (Oracle DB)

CVE-2026-52887 · npm

NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE

CVE-2026-53609 · npm

Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass

CVE-2025-4318 · npm

AWS Amplify Studio UI Component Properties Has an Input Validation Issue

CVE-2026-54658 · npm

@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution

CVE-2026-59940 · npm

seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization

CVE-2026-73300 · npm

Budibase: SQL Injection via `multipleStatements: true`

CVE-2026-73302 · npm

Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified

CVE-2026-73414 · npm

Shescape: Shell injection via unescaped parentheses on Windows with CMD

CVE-2026-73567 · npm

sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock

CVE-2026-73649 · npm

Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)

GHSA-mqhr-6j6h-74p5 · npm

Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak

GHSA-rjg6-39jm-rgg4 · npm

@better-auth/scim: account takeover and stale access via SCIM provider-id collision

GHSA-w28w-gp39-m4p6 · npm

Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer

CVE-2026-73420 · npm

Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass

CVE-2026-73421 · npm

Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

CVE-2026-59891 · npm

Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry

CVE-2026-73653 · npm

@vitest/browser: Browser Mode provider commands bypass the file-access permission gate

CVE-2026-59873 · npm

node-tar: Decompression/parse DoS via unlimited input

CVE-2026-54466 · npm

websocket-driver: Message corruption via abuse of protocol length headers

CVE-2026-27690 · npm

SAP Approuter Vulnerable to HTTP Request Smuggling

GHSA-9hc2-hjx8-q6pv · npm

TidGi Desktop Remote Code Execution via Malicious TiddlyWiki Repository Import — Tiddler Startup Module Auto-Execution

CVE-2026-53512 · npm

Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins

CVE-2026-53513 · npm

@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints

CVE-2026-53486 · npm

Decompress: Archive extraction can create files and links outside of the target directory

CVE-2026-55500 · npm

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover

GHSA-vjc7-jrh9-9j86 · npm

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

CVE-2026-49352 · npm

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass

CVE-2026-59800 · npm

9router: Missing Authorization and OS Command Injection

CVE-2026-53943 · npm

Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header

CVE-2026-48797 · PyPI

Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication

CVE-2026-49252 · npm

deepstream is vulnerable to prototype pollution

CVE-2026-48713 · npm

i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string

CVE-2026-48714 · npm

i18next-http-middleware: MissingKeyHandler does not reject keys whose segments contain prototype-polluting names

CVE-2026-12866 · npm

expr-eval vulnerable to Code Execution

CVE-2026-54350 · npm

Budibase has nonymous NoSQL operator injection via published-app query templates

CVE-2026-48170 · npm

scimPatch vulnerable to prototype pollution via unfiltered keys in patch

CVE-2026-54352 · npm

Budibase has arbitrary file read by workspace-builder via PWA-zip symlink upload

CVE-2026-54051 · npm

Network-AI: Improper Neutralization of Special Elements used in an OS Command

CVE-2026-57138 · npm

npm PraisonAI codeMode sandbox escape via Function constructor

CVE-2026-57140 · npm

npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

CVE-2026-57141 · npm

PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

CVE-2026-58399 · npm

@acastellon/auth: Authentication bypass via spoofable headers in validateToken()

CVE-2026-54157 · npm

LobeHub: Unauthenticated SSRF in `/webapi/proxy`

CVE-2026-30120 · npm

Remotion: remote code execution (RCE) vulnerability

CVE-2026-30121 · npm

Remotion: arbitrary file write vulnerability

CVE-2026-50880 · npm

YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution

CVE-2026-53633 · npm

Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE

CVE-2026-54257 · npm

Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

CVE-2026-48150 · npm

Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign

CVE-2026-48063 · npm

Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload

CVE-2026-9277 · npm

shell-quote quote() does not escape newlines in object .op values

CVE-2026-47430 · npm

Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews.

CVE-2026-47668 · npm

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

CVE-2026-47669 · npm

DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE

CVE-2026-47670 · npm

Authenticated Remote Code Execution via loadReader functionName code injection in DbGate

GHSA-jpvj-wpmj-h7rv · npm

Supply chain compromise via malicious @cap-js/openapi

CVE-2026-47428 · npm

Vitest browser mode serves unsanitized otelCarrier query parameter as inline script

CVE-2026-47429 · npm

When Vitest UI server is listening, arbitrary file can be read and executed

CVE-2026-47131 · npm

vm2 has a Sandbox Escape issue

CVE-2026-47137 · npm

vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE

CVE-2026-47140 · npm

NodeVM builtin denylist bypass via process and inspector/promises allows host code execution

CVE-2026-47208 · npm

vm2 is Vulnerable to Sandbox Breakout Through Promise Species

CVE-2026-47210 · npm

vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass

CVE-2026-45618 · npm

LiquidJS is Vulnerable to Remote Code Execution

CVE-2026-46695 · PyPI

BoxLite: Permission Bypass Allows Modification of Read-Only Files

CVE-2026-46703 · PyPI

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

GHSA-q2f7-m237-v562 · npm

@hulumi/policies: GitHub OIDC trust policy bypass via AWS set-qualified condition operators

CVE-2026-46421 · npm

Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service)

CVE-2026-46339 · npm

9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

CVE-2026-46395 · npm

HAXcms: Private Key Disclosure via Broken HMAC Implementation

CVE-2026-46412 · npm

Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm

GHSA-27f5-xjrr-q9ff · npm

Malware in @opensearch-project/opensearch

CVE-2026-27886 · npm

Strapi may leak sensitive data via relational filtering due to lack of query sanitization

CVE-2026-44990 · npm

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

CVE-2026-45058 · npm

Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark

CVE-2026-45311 · Rust (crates.io)

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

CVE-2026-45353 · npm

Electerm Local code through electerm's single-instance socket

CVE-2026-45411 · npm

vm2 Has a Sandbox Breakout Using Async Generator

CVE-2026-22599 · npm

Strapi Vulnerable to SQL Injection in Content Type Builder

CVE-2026-42074 · npm

OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

CVE-2026-44649 · npm

SillyTavern has Authentication Bypass via SSO Header Injection

CVE-2026-44650 · npm

SillyTavern has a Path Traversal issue

CVE-2026-45091 · npm

sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)

CVE-2026-45321 · npm

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

CVE-2026-25244 · npm

WebdriverIO BrowserStack Service has a Command Injection issue

CVE-2026-43898 · npm

SandboxJS has a sandbox escape via Function.caller leakage of internal call op

CVE-2026-44643 · npm

Angular Expressions - Remote Code Execution using filters

CVE-2026-43940 · npm

Electerm runWidget has a path traversal that leads to arbitrary code execution

CVE-2026-43944 · npm

Electerm users can run dangrous code through link or command line

CVE-2026-44008 · npm

vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`

CVE-2026-44009 · npm

vm2 has Sandbox Breakout Through Null Proto Exception

CVE-2025-63703 · npm

parse-ini is vulnerable to Prototype Pollution in index.js()

CVE-2025-63704 · npm

query-parser-string is vulnerable to Prototype Pollution

CVE-2025-63706 · npm

next-npm-version is vulnerable to Command injection

CVE-2026-43997 · npm

vm2 Access to Host Object Enables Sandbox Escape

CVE-2026-43999 · npm

vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape

CVE-2026-44005 · npm

vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape

CVE-2026-44006 · npm

vm2 has a Sandbox Escape Vulnerability

CVE-2026-44007 · npm

vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution

GHSA-54pg-9963-v8vg · npm

Compromised version of intercom-client published to npm

CVE-2026-44351 · npm

fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver

CVE-2026-24120 · npm

VM2 Has Sandbox Breakout Through Promise Species

CVE-2026-24781 · npm

VM2 Has Sandbox Breakout Through Inspect Function

CVE-2026-26332 · npm

VM2 Has a Sandbox Escape Issue via SuppressedError

CVE-2026-26956 · npm

VM2 Has a WASM Sandbox Escape

CVE-2026-42281 · npm

MagicMirror vulnerable to unauthenticated SSRF via /cors endpoint

CVE-2026-24118 · npm

VM2 Sandbox Breakout Through __lookupGetter__

CVE-2026-41501 · npm

electerm has Command Injection via runLinux funtion

CVE-2026-42076 · npm

Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

CVE-2026-41507 · npm

Remote Code Execution (RCE) via String Literal Injection into math-codegen

CVE-2026-33805 · npm

Fastify's connection header abuse enables stripping of proxy-added headers

CVE-2026-33807 · npm

@fastify/express's middleware path doubling causes authentication bypass in child plugin scopes

CVE-2026-33808 · npm

@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)

CVE-2026-41242 · npm

Arbitrary code execution in protobufjs

CVE-2026-41248 · npm

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

CVE-2026-41428 · npm

Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints

CVE-2026-41478 · npm

Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)

CVE-2026-41500 · npm

electerm: electerm_install_script_CommandInjection Vulnerability Report

CVE-2026-6270 · npm

@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes

GHSA-3xx2-mqjm-hg9x · npm

Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise

GHSA-47wq-cj9q-wpmp · npm

Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys

GHSA-vr7g-88fq-vhq3 · npm

Paperclip: OS Command Injection via Execution Workspace cleanupCommand

CVE-2026-40887 · npm

@vendure/core has a SQL Injection vulnerability

CVE-2026-41679 · npm

paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

CVE-2026-39397 · npm

@delmaredigital/payload-puc is missing authorization on /api/puck/* CRUD endpoints allows unauthenticated access to Puck-registered collections

CVE-2026-35216 · npm

Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step

CVE-2026-31818 · npm

Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist

CVE-2026-33950 · npm

Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity

CVE-2026-34208 · npm

SandboxJS: Sandbox integrity escape

CVE-2026-35039 · npm

fast-jwt: Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)

GHSA-xg6x-h9c9-2m83 · npm

Better Auth Has Two-Factor Authentication Bypass via Premature Session Caching (session.cookieCache)

CVE-2026-34841 · npm

Axios npm Supply Chain Incident Impacting @usebruno/cli

CVE-2026-34950 · npm

fast-jwt: Incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key

GHSA-3hfp-gqgh-xc5g · npm

Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions

CVE-2026-34751 · npm

Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery

CVE-2026-34532 · npm

parse-server has cloud function validator bypass via prototype chain traversal

CVE-2026-34156 · npm

NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node

CVE-2026-34220 · npm

MikroORM is vulnerable to SQL Injection via specially crafted object

GHSA-8x4m-qw58-3pcx · npm

mppx has multiple payment bypass and griefing vulnerabilities

CVE-2026-33937 · npm

Handlebars.js has JavaScript Injection via AST Type Confusion

CVE-2026-33863 · npm

Convict has prototype pollution via load(), loadFile(), and schema initialization

CVE-2026-33864 · npm

Convict has Prototype Pollution via startsWith() function

CVE-2026-26830 · npm

pdf-image has an OS Command Injection Vulnerability through its pdfFilePath parameter

CVE-2026-26831 · npm

textract is vulnerable to OS Command Injection

CVE-2026-26832 · npm

node-tesseract-ocr is vulnerable to OS Command Injection through unsanitized recognize() function parameter

CVE-2026-26833 · npm

thumbler allows OS Command Injection

CVE-2026-4599 · npm

jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation

CVE-2026-32731 · npm

ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction

CVE-2026-31938 · npm

jsPDF has HTML Injection in New Window paths

CVE-2026-26954 · npm

SandboxJS affected by a Sandbox Escape

CVE-2026-32304 · npm

Locutus vulnerable to RCE via unsanitized input in create_function()

CVE-2026-32306 · npm

OneUptime ClickHouse SQL Injection via Aggregate Query Parameters

CVE-2026-32621 · npm

Apollo Federation vulnerable to prototype pollution via incomplete key sanitization

CVE-2026-28792 · npm

TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS

CVE-2026-32242 · npm

Parse Server's OAuth2 adapter shares mutable state across providers via singleton instance

CVE-2026-32248 · npm

Parse Server: Account takeover via operator injection in authentication data identifier

CVE-2026-30965 · npm

Parse Server vulnerable to session token exfiltration via `redirectClassNameForKey` query parameter

CVE-2026-30966 · npm

Parse Server has role escalation and CLP bypass via direct `_Join` table write

CVE-2026-31856 · npm

Parse Server vulnerable to SQL injection via `Increment` operation on nested object field in PostgreSQL

CVE-2026-31862 · npm

@siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters

CVE-2026-31871 · npm

Parse Server vulnerable to SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL

CVE-2026-28292 · npm

simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE

CVE-2026-29792 · npm

Feathers has an OAuth Callback Account Takeover issue

CVE-2026-29793 · npm

Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

CVE-2026-30956 · npm

OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header that leads to cross‑tenant data exposure and account takeover

CVE-2026-30957 · npm

OneUptime has Synthetic Monitor RCE via exposed Playwright browser object

CVE-2026-31840 · npm

Parse Server: SQL injection via dot-notation field name in PostgreSQL

CVE-2026-30863 · npm

Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters

CVE-2026-30887 · npm

OneUpTime's Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE

CVE-2026-30921 · npm

OneUptime: Synthetic Monitor RCE via exposed Playwright browser object

CVE-2026-27971 · npm

Qwik vulnerable to Unauthenticated RCE via server$ Deserialization

CVE-2026-28794 · npm

`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization

CVE-2026-27595 · npm

Parse Dashboard has incomplete authentication on AI Agent endpoint

CVE-2026-27597 · npm

@enclave-vm/core is vulnerable to Sandbox Escape

CVE-2026-27608 · npm

Parse Dashboard is Missing Authorization for its Agent Endpoint

CVE-2026-27699 · npm

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

CVE-2026-27702 · npm

Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)

CVE-2026-27728 · npm

OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()

CVE-2026-27739 · npm

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

CVE-2026-27804 · npm

Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter

CVE-2025-69985 · npm

FUXA has JWT Authentication Bypass via HTTP Referer header spoofing

CVE-2026-27574 · npm

OneUptime:: node:vm sandbox escape in probe allows any project member to achieve RCE

CVE-2026-27584 · npm

ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints

CVE-2026-25896 · npm

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

CVE-2026-27212 · npm

Prototype pollution in swiper

CVE-2026-26980 · npm

Ghost has a SQL injection in Content API

CVE-2026-28474 · npm

Nextcloud Talk allowlist bypass via actor.name display name spoofing

CVE-2026-26021 · npm

set-in Affected by Prototype Pollution

CVE-2026-1774 · npm

CASL Ability is Vulnerable to Prototype Pollution

CVE-2026-25881 · npm

@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)

CVE-2026-25938 · npm

FUXA Unauthenticated Remote Code Execution in Node-RED Integration

CVE-2026-25939 · npm

FUXA Unauthenticated Remote Arbitrary Scheduler Write

CVE-2026-25520 · npm

@nyariv/sandboxjs has a Sandbox Escape issue

CVE-2026-25544 · npm

@payloadcms/drizzle has SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters

CVE-2026-25586 · npm

@nyariv/sandboxjs has Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution

CVE-2026-25587 · npm

@nyariv/sandboxjs has a Sandbox Escape vulnerability

CVE-2026-25641 · npm

@nyariv/sandboxjs vulnerable to sandbox escape via TOCTOU bug on keys in property accesses

CVE-2026-25751 · npm

FUXA Unauthenticated Exposure of Plaintext Database Credentials

CVE-2026-25752 · npm

FUXA Unauthenticated Remote Arbitrary Device Tag Write

CVE-2026-25893 · npm

FUXA Unauthenticated Remote Code Execution via Admin JWT Minting

CVE-2026-25894 · npm

FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration

CVE-2026-25895 · npm

FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API

CVE-2026-25630 · npm

survey-pdf Upgraded jsPDF Version Due to Security Vulnerability

CVE-2026-25150 · npm

Prototype Pollution via FormData Processing in Qwik City

CVE-2026-23515 · npm

Signal K set-system-time plugin vulnerable to RCE - Command Injection

CVE-2026-25142 · npm

SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE

CVE-2026-25521 · npm

locutus is vulnerable to Prototype Pollution

CVE-2026-25141 · npm

Orval has Code Injection via unsanitized x-enum-descriptions using JS comments

CVE-2026-25047 · npm

deepHas vulnerable to Prototype Pollution via constructor.prototype

CVE-2026-23830 · npm

SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor

CVE-2026-22696 · Rust (crates.io)

dcap-qvl has Missing Verification for QE Identity

CVE-2026-22709 · npm

vm2 has a Sandbox Escape

GHSA-cr3w-cw5w-h3fj · npm

Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE

CVE-2026-23947 · npm

Orval has a code injection via unsanitized x-enum-descriptions in enum generation

CVE-2026-23966 · npm

sm-crypto Affected by Private Key Recovery in SM2-PKE

CVE-2025-61686 · npm

React Router has Path Traversal in File Session Storage

CVE-2025-68428 · npm

jsPDF has Local File Inclusion/Path Traversal vulnerability

CVE-2025-66398 · npm

Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)

CVE-2025-68620 · npm

Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling

CVE-2026-21440 · npm

AdonisJS Path Traversal in Multipart File Handling

CVE-2025-13158 · npm

apidoc-core has a prototype pollution vulnerability

CVE-2025-66456 · npm

Elysia vulnerable to prototype pollution with multiple standalone schema validation

CVE-2025-67489 · npm

@vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server

CVE-2025-55182 · npm

React Server Components are Vulnerable to RCE

GHSA-9qr9-h5gf-34mp · npm

Next.js is vulnerable to RCE in React flight protocol

GHSA-fmh4-wr37-44fp · npm

React Server Components are Vulnerable to RCE

CVE-2025-64767 · npm

@hpke/core reuses AEAD nonces

CVE-2025-65108 · npm

md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter

CVE-2025-11953 · npm

@react-native-community/cli has arbitrary OS command injection

CVE-2025-62410 · npm

happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript

CVE-2025-61927 · npm

Happy DOM: VM Context Escape can lead to Remote Code Execution

CVE-2025-59159 · npm

SillyTavern Web Interface Vulnerable DNS Rebinding

CVE-2025-11148 · npm

check-branches is vulnerable to command Injection

CVE-2025-59936 · npm

get-jwks: poisoned JWKS cache allows post-fetch issuer validation bypass

CVE-2020-36851 · npm

cors-anywhere vulnerable to server-side request forgery

CVE-2025-59039 · npm

Prebid-universal-creative latest on npm briefly compromised

CVE-2025-59046 · npm

interactive-git-checkout has a Command Injection vulnerability

CVE-2025-57285 · npm

CodeceptJS's incomprehensive sanitation can lead to Command Injection

CVE-2025-9287 · npm

cipher-base is missing type checks, leading to hash rewind and passing on crafted data

CVE-2025-9288 · npm

sha.js is missing type checks leading to hash rewind and passing on crafted data

CVE-2025-55746 · npm

Directus allows unauthenticated file upload and file modification due to lacking input sanitization

CVE-2025-55294 · npm

screenshot-desktop vulnerable to command Injection via `format` option

CVE-2025-54782 · npm

@nestjs/devtools-integration: CSRF to Sandbox Escape Allows for RCE against JS Developers

CVE-2025-54419 · npm

Node-SAML SAML Signature Verification Vulnerability

CVE-2025-54369 · npm

Node-SAML SAML Authentication Bypass

CVE-2025-54127 · npm

NodeJS version of HAX CMS Has Insecure Default Configuration That Leads to Unauthenticated Access

CVE-2025-7783 · npm

form-data uses unsafe random function in form-data for choosing boundary

CVE-2025-53620 · npm

Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests

CVE-2025-53624 · npm

docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token

CVE-2025-6545 · npm

pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos

CVE-2025-6547 · npm

pbkdf2 silently disregards Uint8Array input, returning static keys

GHSA-8g98-m4j9-qww5 · npm

Taylored webhook validation vulnerabilities

CVE-2025-36852 · npm

@nx/azure-cache Vulnerable to Build Cache Poisoning via Untrusted Pull Requests

CVE-2025-49223 · npm

billboard.js allows prototype pollution via the function generate

CVE-2025-47949 · npm

samlify SAML Signature Wrapping attack

CVE-2025-46572 · npm

Passport-wsfed-saml2 allows SAML Authentication Bypass via Signature Wrapping

CVE-2025-32965 · npm

Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2

CVE-2025-31477 · Rust (crates.io)

Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell`

CVE-2025-29927 · npm

Authorization Bypass in Next.js Middleware

CVE-2025-29774 · npm

xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References

CVE-2025-29775 · npm

xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment

CVE-2025-0868 · npm

DocsGPT Allows Remote Code Execution

CVE-2025-25200 · npm

Inefficient Regular Expression Complexity in koa

GHSA-vjh7-7g9h-fjfh · npm

Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)

CVE-2024-57077 · npm

utils-extend Prototype Pollution

CVE-2025-24981 · npm

Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc

CVE-2025-24964 · npm

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

CVE-2025-23061 · npm

Mongoose search injection vulnerability

CVE-2024-56198 · npm

path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability

CVE-2024-54152 · npm

Angular Expressions - Remote Code Execution when using locals

GHSA-q849-wxrc-vqrp · npm

hull.js Code Injection Vulnerability

CVE-2024-51757 · npm

happy-dom allows for server side code to be executed by a <script> tag

CVE-2024-48910 · npm

DOMPurify vulnerable to tampering by prototype polution

CVE-2024-48914 · npm

Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy

CVE-2024-21534 · Maven

JSONPath Plus Remote Code Execution (RCE) Vulnerability

CVE-2024-42640 · npm

angular-base64-upload vulnerable to unauthenticated remote code execution

CVE-2024-47169 · npm

Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal

CVE-2024-38989 · npm

Prototype pollution in izatop bunt

CVE-2023-49785 · npm

NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint

CVE-2024-34344 · npm

Nuxt vulnerable to remote code execution via the browser when running the test locally

CVE-2024-39309 · npm

ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

CVE-2024-36573 · npm

obx Prototype Pollution

CVE-2024-36858 · npm

Jan path traversal vulnerability

CVE-2024-37273 · npm

Jan path traversal vulnerability

CVE-2024-24294 · npm

Blackprint @blackprint/engine Prototype Pollution issue

CVE-2024-34706 · npm

@valtimo/components exposes access token to form.io

CVE-2024-34391 · npm

libxmljs vulnerable to type confusion when parsing specially crafted XML

CVE-2024-34392 · npm

libxmljs vulnerable to type confusion when parsing specially crafted XML

CVE-2024-34393 · npm

libxmljs2 type confusion vulnerability when parsing specially crafted XML

CVE-2024-34394 · npm

libxmljs2 vulnerable to type confusion when parsing specially crafted XML

CVE-2024-32962 · npm

xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing

CVE-2024-21511 · npm

MySQL2 for Node Arbitrary Code Injection

CVE-2024-30564 · npm

@andrei-tatar/nora-firebase-common Prototype Pollution vulnerability

CVE-2024-28056 · npm

AWS Amplify CLI has incorrect trust policy management

CVE-2024-21508 · npm

mysql2 Remote Code Execution (RCE) via the readCodeFor function

CVE-2024-27448 · npm

MailDev Remote Code Execution

CVE-2024-29650 · npm

@thi.ng/paths Prototype Pollution vulnerability

CVE-2024-29027 · npm

Server crashes on invalid Cloud Function or Cloud Job name

CVE-2024-27922 · npm

HTTP Handling Vulnerability in the Bare server

CVE-2024-27307 · npm

JSONata expression can pollute the "Object" prototype

CVE-2024-27298 · npm

ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection

GHSA-4g2x-vq5p-5vj6 · npm

Budibase affected by VM2 Constructor Escape Vulnerability

GHSA-84c3-j8r2-mcm8 · npm

@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys

CVE-2024-1631 · npm

agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`

CVE-2024-24398 · npm

Stimulsoft Dashboard.JS directory traversal vulnerability

CVE-2023-51837 · npm

Ylianst MeshCentral Missing SSL Certificate Validation

CVE-2023-51839 · npm

DeviceFarmer stf uses DES-ECB

CVE-2023-46943 · npm

EverShop at risk to unauthorized access via weak HMAC secret

CVE-2024-22206 · npm

@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)

CVE-2023-46308 · Composer (PHP)

plotly.js prototype pollution vulnerability

CVE-2023-7080 · npm

Arbitrary remote code execution within `wrangler dev` Workers sandbox