cyclonedx-node-npm vulnerabilities

CVEs whose affected-version data names the cyclonedx-node-npm package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-71538High· 8.5

5d ago

@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects

@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts, used when npm_execpath does not provide the npm CLI path, can construct a she…

▾ TwilightCycloneDX · cyclonedx-node-npmEPSS 0.15%via NVD