NP
Vendor
npm
16
CVEs
0
On KEV
0
New 30D
Products
NO8.6
node-tar
npm
5 CVEs0 on KEV0 new
AR7.8
arborist
npm
2 CVEs0 on KEV0 new
CL6.1
@claviska/jquery-minicolors
npm
1 CVEs0 on KEV0 new
CL7.0
cli
npm
1 CVEs0 on KEV0 new
ER9.6
erxes
npm
1 CVEs0 on KEV0 new
FA8.8
@fastify/oauth2
npm
1 CVEs0 on KEV0 new
IZ6.1
iziModal
npm
1 CVEs0 on KEV0 new
MI6.1
mind-elixir
npm
1 CVEs0 on KEV0 new
NP7.5
npm
npm
1 CVEs0 on KEV0 new
TE6.1
textangular
npm
1 CVEs0 on KEV0 new
VD6.1
vditor
npm
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-0775 | CL cli npm | 7.0 | Jan 23 | npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability |
| CVE-2023-31999 | FA @fastify/oauth2 npm | 8.8 | Jul 4 | All versions of @fastify/oauth2 used a statically generated state parameter at startup time and were used across all requests for all users |
| CVE-2021-32850 | CL @claviska/jquery-minicolors npm | 6.1 | Feb 20 | jQuery MiniColors vulnerable to Cross-site Scripting |
| CVE-2021-32851 | MI mind-elixir npm | 6.1 | Feb 20 | jQuery MiniColors vulnerable to Cross-site Scripting |
| CVE-2021-32853 | ER erxes npm | 9.6 | Feb 20 | Erxes vulnerable to Cross-site Scripting |
| CVE-2021-32854 | TE textangular npm | 6.1 | Feb 20 | textAngular text editor vulnerable to Cross-site Scripting |
| CVE-2021-32855 | VD vditor npm | 6.1 | Feb 20 | vditor vulnerable to Cross-site Scripting |
| CVE-2021-32860 | IZ iziModal npm | 6.1 | Feb 20 | iziModal vulnerable to Cross-site Scripting |
| CVE-2022-29244 | NP npm npm | 7.5 | Jun 13 | npm packing does not respect root-level ignore files in workspaces |
| CVE-2021-39135 | AR arborist npm | 7.8 | Aug 31 | UNIX Symbolic Link (Symlink) Following in @npmcli/arborist |
| CVE-2021-39134 | AR arborist npm | 7.8 | Aug 31 | UNIX Symbolic Link (Symlink) Following in @npmcli/arborist |
| CVE-2021-37713 | NO node-tar npm | 8.6 | Aug 31 | Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization |
| CVE-2021-37712 | NO node-tar npm | 8.6 | Aug 31 | Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links |
| CVE-2021-37701 | NO node-tar npm | 8.6 | Aug 31 | Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links |
| CVE-2021-32804 | NO node-tar npm | 8.1 | Aug 3 | Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization |
| CVE-2021-32803 | NO node-tar npm | 8.1 | Aug 3 | Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning |