VulnSea

Tagged “npm”

CVEs tagged npm, newest first.

1010 CVEsRSS

CVE-2026-53930Medium
3mo ago

NocoDB: Server-Side Request Forgery via Base Migration URL

NocoDB: Server-Side Request Forgery via Base Migration URL

▾ Sunlitnocodb · nocodbEPSS 0.39%via GHSA
CVE-2026-53931Medium
3mo ago

NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint

NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint

▾ Sunlitnocodb · nocodbEPSS 0.41%via GHSA
CVE-2026-53840High· 7.1
3mo ago

OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin

OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin

▾ Twilightopenclaw · openclawEPSS 0.31%via GHSA
CVE-2026-54316MediumPoC
3mo ago

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

▾ Twilightanthropic-ai · @anthropic-ai/claude-codeEPSS 0.52%via GHSA
CVE-2026-9595Medium· 5.3
3mo ago

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

▾ Sunlitwebpack-dev-server · webpack-dev-serverEPSS 0.23%via GHSA
CVE-2026-6734High· 7.5
3mo ago

undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)

A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one dest…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.39%via CSAF
CVE-2026-12151High· 7.5
3mo ago

undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)

A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client …

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.79%via CSAF
CVE-2026-9697High· 7.4
3mo ago

undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)

A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.55%via CSAF
CVE-2026-56301Medium· 5.5
3mo ago

Nuxt dev server vite-node IPC socket is world-connectable on Linux

Nuxt dev server vite-node IPC socket is world-connectable on Linux

▾ Sunlitnuxt · nuxtEPSS 0.15%via GHSA
CVE-2026-56317Low
3mo ago

Cross-site scripting via <NoScript> slot content in Nuxt's head components

Cross-site scripting via <NoScript> slot content in Nuxt's head components

▾ Sunlitnuxt · nuxtEPSS 0.34%via GHSA
CVE-2026-56326Medium· 6.1
3mo ago

Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`

Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`

▾ Sunlitnuxt · nuxtEPSS 0.36%via GHSA
CVE-2026-53721High
3mo ago

Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher

Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matcher

▾ Twilightnuxt · nuxtEPSS 0.51%via GHSA
GHSA-534h-c3cw-v3h9Medium· 5.5
3mo ago

Nuxt dev server vite-node IPC socket is world-connectable on Linux

Nuxt dev server vite-node IPC socket is world-connectable on Linux

▾ Sunlitnuxt · nuxtvia GHSA
CVE-2026-53722Medium
3mo ago

Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL

Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL

▾ Sunlitnuxt · nuxtEPSS 0.33%via GHSA
CVE-2026-50146High· 7.1
3mo ago

Astro: Reflected XSS via unescaped slot name

Astro: Reflected XSS via unescaped slot name

▾ Twilightastro · astroEPSS 0.27%via GHSA
CVE-2026-54287Medium· 5.3
3mo ago

hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice

hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice

▾ Sunlithono · honoEPSS 0.31%via GHSA
CVE-2026-54286Medium· 5.9
3mo ago

hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

▾ Sunlithono · honoEPSS 0.43%via GHSA
CVE-2026-54290High· 7.1
3mo ago

hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard

hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard

▾ Twilighthono · honoEPSS 0.33%via GHSA
CVE-2026-54289Medium· 4.8
3mo ago

hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest

hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest

▾ Sunlithono · honoEPSS 0.18%via GHSA
CVE-2026-54288Medium· 6.5
3mo ago

hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`

hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`

▾ Sunlithono · honoEPSS 0.15%via GHSA
CVE-2026-54300Medium· 5.3
3mo ago

@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN config

@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN config

▾ Sunlitastrojs · @astrojs/netlifyEPSS 0.31%via GHSA
CVE-2026-54299High· 7.5
3mo ago

Astro: Host header SSRF in prerendered error page fetch

Astro: Host header SSRF in prerendered error page fetch

▾ Twilightastro · astroEPSS 0.33%via GHSA
CVE-2026-54298Medium· 4.2
3mo ago

Astro: XSS via Unescaped Attribute Names in Spread Props

Astro: XSS via Unescaped Attribute Names in Spread Props

▾ Sunlitastro · astroEPSS 0.23%via GHSA
CVE-2026-49444High· 8.5
3mo ago

n8n: Python sandbox escape

n8n: Python sandbox escape

▾ Twilightn8n · n8nEPSS 0.39%via GHSA
CVE-2026-49465Medium· 7.7
3mo ago

n8n: Git Node Clone and Push Operations Bypass File Sandbox

n8n: Git Node Clone and Push Operations Bypass File Sandbox

▾ Sunlitn8n · n8nEPSS 0.54%via GHSA
CVE-2026-54310Medium· 9.9
3mo ago

n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes

n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes

▾ Sunlitn8n · n8nEPSS 0.55%via GHSA
CVE-2026-54313Medium· 7.7
3mo ago

n8n: NoSQL Injection in MongoDB Node Find And Replace Operation

n8n: NoSQL Injection in MongoDB Node Find And Replace Operation

▾ Sunlitn8n · n8nEPSS 0.34%via GHSA
GHSA-hv7x-3x78-gx53Medium· 7.4
3mo ago

n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint

n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint

▾ Sunlitn8n · n8nvia GHSA
CVE-2026-54308Medium· 7.2
3mo ago

n8n: Missing Token Validation on Microsoft Agent 365 Trigger and Stripe Nodes

n8n: Missing Token Validation on Microsoft Agent 365 Trigger and Stripe Nodes

▾ Sunlitn8n · n8nEPSS 0.30%via GHSA
CVE-2026-54301High· 7.6
3mo ago

n8n: Same-Origin XSS in Respond to Webhook Node

n8n: Same-Origin XSS in Respond to Webhook Node

▾ Twilightn8n · n8nEPSS 0.24%via GHSA
CVEs tagged “npm” — page 29 · VulnSea