npm kayıtları
npm üreticisine ait 1.373 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 33
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-506 Embedded Malicious Code339
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')107
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')50
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')49
- CWE-400 Uncontrolled Resource Consumption38
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')31
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
1.373 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | GHSA-8mwq-mj73-qv68İstismar yok | Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elementsnpm · @sequelize/core · CWE-790 | Kritik10,0 | — | — | 16 Şub 2023 |
40Planlayın | GHSA-9qr9-h5gf-34mpİstismar yok | Next.js is vulnerable to RCE in React flight protocolnpm · next · CWE-502 | Kritik10,0 | — | — | 3 Ara 2025 |
40Planlayın | GHSA-rc4v-99cr-pjcmİstismar yok | Prototype Pollution in ali-security/mongoosenpm · @seal-security/mongoose-fixed · CWE-1321 | Kritik10,0 | — | — | 17 Eki 2023 |
40Planlayın | GHSA-4vmm-mhcq-4x9jİstismar yok | Sandbox Bypass Leading to Arbitrary Code Execution in constantinoplenpm · constantinople | Kritik10,0 | — | — | 14 Haz 2019 |
40Planlayın | GHSA-fmh4-wr37-44fpİstismar yok | React Server Components are Vulnerable to RCEnpm · @vitejs/plugin-rsc · CWE-502 | Kritik10,0 | — | — | 3 Ara 2025 |
40Planlayın | GHSA-vr6p-vq2p-6j74İstismar yok | Withdrawn Advisory: LikeC4 has RCE through vulnerable React and Next.js versionsnpm · likec4 · CWE-502 | Kritik10,0 | — | — | 15 Ara 2025 |
39İzleyin | GHSA-2vqq-jgxx-fxjcİstismar yok | Malicious Package in motiv.scssnpm · motiv.scss · CWE-506 | Kritik9,8 | — | — | 11 Eyl 2020 |
39İzleyin | GHSA-3f97-rj68-2pjfİstismar yok | Malicious Package in buffe2-xornpm · buffe2-xor · CWE-506 | Kritik9,8 | — | — | 3 Eyl 2020 |
39İzleyin | GHSA-3fc5-9x9m-vqc4İstismar yok | Duplicate Advisory: Privilege Escalation in express-cartnpm · express-cart | Kritik9,8 | — | — | 3 Haz 2019 |
39İzleyin | GHSA-2p62-c4rm-mr72İstismar yok | Malicious Package in another-date-pickernpm · another-date-picker · CWE-506 | Kritik9,8 | — | — | 1 Eyl 2020 |
39İzleyin | GHSA-2p99-6f47-8x9jİstismar yok | Malicious Package in asncnpm · asnc · CWE-506 | Kritik9,8 | — | — | 2 Eyl 2020 |
39İzleyin | GHSA-226w-6hhj-69hpİstismar yok | Malicious Package in cal_rdnpm · cal_rd · CWE-506 | Kritik9,8 | — | — | 3 Eyl 2020 |
39İzleyin | GHSA-2q6w-rxf3-4wc9İstismar yok | Malicious Package in codifynpm · codify · CWE-506 | Kritik9,8 | — | — | 1 Eyl 2020 |
39İzleyin | GHSA-26w7-cxv4-gfx2İstismar yok | Astro: Remote code execution through AVIF image optimizationnpm · astro · CWE-125 | Kritik9,8 | — | — | 8 Eyl 2026 |
39İzleyin | GHSA-377f-vvrc-9wggİstismar yok | Malicious Package in zemennpm · zemen · CWE-506 | Kritik9,8 | — | — | 3 Eyl 2020 |
39İzleyin | GHSA-38vq-cjh5-vw7xİstismar yok | Malicious Package in nodes.jsnpm · nodes.js · CWE-506 | Kritik9,8 | — | — | 3 Eyl 2020 |
39İzleyin | GHSA-2hqf-qqmq-pgppİstismar yok | Malicious Package in commander-jsnpm · commander-js · CWE-506 | Kritik9,8 | — | — | 2 Eyl 2020 |
39İzleyin | GHSA-277p-xwpp-3jf7İstismar yok | Malicious Package in rrgodnpm · rrgod · CWE-506 | Kritik9,8 | — | — | 2 Eyl 2020 |
39İzleyin | GHSA-2xw5-3767-qxvmİstismar yok | Malicious Package in ng-ui-librarynpm · ng-ui-library · CWE-506 | Kritik9,8 | — | — | 11 Eyl 2020 |
39İzleyin | GHSA-28qq-5f47-r5x2İstismar yok | Duplicate Advisory: gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)npm · gemini-mcp-tool · CWE-78 | Kritik9,8 | — | — | 23 Oca 2026 |
39İzleyin | GHSA-2mxc-m4c3-wqhqİstismar yok | Malicious Package in ruffer-xornpm · ruffer-xor · CWE-506 | Kritik9,8 | — | — | 3 Eyl 2020 |
39İzleyin | GHSA-28f4-mjfq-qrvfİstismar yok | Malicious Package in buffes-xornpm · buffes-xor · CWE-506 | Kritik9,8 | — | — | 3 Eyl 2020 |
39İzleyin | GHSA-2563-83p7-f34pİstismar yok | Malicious Package in requesttnpm · requestt · CWE-506 | Kritik9,8 | — | — | 2 Eyl 2020 |
39İzleyin | GHSA-2h3x-95c6-885rİstismar yok | Malicious Package in river-mocknpm · river-mock · CWE-506 | Kritik9,8 | — | — | 3 Eyl 2020 |
39İzleyin | GHSA-33gc-f8v9-v8hmİstismar yok | Malicious Package in ladder-text-jsnpm · ladder-text-js · CWE-506 | Kritik9,8 | — | — | 1 Eyl 2020 |
- GHSA-8mwq-mj73-qv6840Planlayın
Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elements
KritikCVSS 10,0İstismar yoknpm · @sequelize/core16 Şub 2023
- GHSA-9qr9-h5gf-34mp40Planlayın
Next.js is vulnerable to RCE in React flight protocol
KritikCVSS 10,0İstismar yoknpm · next3 Ara 2025
- GHSA-rc4v-99cr-pjcm40Planlayın
Prototype Pollution in ali-security/mongoose
KritikCVSS 10,0İstismar yoknpm · @seal-security/mongoose-fixed17 Eki 2023
- GHSA-4vmm-mhcq-4x9j40Planlayın
Sandbox Bypass Leading to Arbitrary Code Execution in constantinople
KritikCVSS 10,0İstismar yoknpm · constantinople14 Haz 2019
- GHSA-fmh4-wr37-44fp40Planlayın
React Server Components are Vulnerable to RCE
KritikCVSS 10,0İstismar yoknpm · @vitejs/plugin-rsc3 Ara 2025
- GHSA-vr6p-vq2p-6j7440Planlayın
Withdrawn Advisory: LikeC4 has RCE through vulnerable React and Next.js versions
KritikCVSS 10,0İstismar yoknpm · likec415 Ara 2025
- GHSA-2vqq-jgxx-fxjc39İzleyin
Malicious Package in motiv.scss
KritikCVSS 9,8İstismar yoknpm · motiv.scss11 Eyl 2020
- GHSA-3f97-rj68-2pjf39İzleyin
Malicious Package in buffe2-xor
KritikCVSS 9,8İstismar yoknpm · buffe2-xor3 Eyl 2020
- GHSA-3fc5-9x9m-vqc439İzleyin
Duplicate Advisory: Privilege Escalation in express-cart
KritikCVSS 9,8İstismar yoknpm · express-cart3 Haz 2019
- GHSA-2p62-c4rm-mr7239İzleyin
Malicious Package in another-date-picker
KritikCVSS 9,8İstismar yoknpm · another-date-picker1 Eyl 2020
- GHSA-2p99-6f47-8x9j39İzleyin
Malicious Package in asnc
KritikCVSS 9,8İstismar yoknpm · asnc2 Eyl 2020
- GHSA-226w-6hhj-69hp39İzleyin
Malicious Package in cal_rd
KritikCVSS 9,8İstismar yoknpm · cal_rd3 Eyl 2020
- GHSA-2q6w-rxf3-4wc939İzleyin
Malicious Package in codify
KritikCVSS 9,8İstismar yoknpm · codify1 Eyl 2020
- GHSA-26w7-cxv4-gfx239İzleyin
Astro: Remote code execution through AVIF image optimization
KritikCVSS 9,8İstismar yoknpm · astro8 Eyl 2026
- GHSA-377f-vvrc-9wgg39İzleyin
Malicious Package in zemen
KritikCVSS 9,8İstismar yoknpm · zemen3 Eyl 2020
- GHSA-38vq-cjh5-vw7x39İzleyin
Malicious Package in nodes.js
KritikCVSS 9,8İstismar yoknpm · nodes.js3 Eyl 2020
- GHSA-2hqf-qqmq-pgpp39İzleyin
Malicious Package in commander-js
KritikCVSS 9,8İstismar yoknpm · commander-js2 Eyl 2020
- GHSA-277p-xwpp-3jf739İzleyin
Malicious Package in rrgod
KritikCVSS 9,8İstismar yoknpm · rrgod2 Eyl 2020
- GHSA-2xw5-3767-qxvm39İzleyin
Malicious Package in ng-ui-library
KritikCVSS 9,8İstismar yoknpm · ng-ui-library11 Eyl 2020
- GHSA-28qq-5f47-r5x239İzleyin
Duplicate Advisory: gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)
KritikCVSS 9,8İstismar yoknpm · gemini-mcp-tool23 Oca 2026
- GHSA-2mxc-m4c3-wqhq39İzleyin
Malicious Package in ruffer-xor
KritikCVSS 9,8İstismar yoknpm · ruffer-xor3 Eyl 2020
- GHSA-28f4-mjfq-qrvf39İzleyin
Malicious Package in buffes-xor
KritikCVSS 9,8İstismar yoknpm · buffes-xor3 Eyl 2020
- GHSA-2563-83p7-f34p39İzleyin
Malicious Package in requestt
KritikCVSS 9,8İstismar yoknpm · requestt2 Eyl 2020
- GHSA-2h3x-95c6-885r39İzleyin
Malicious Package in river-mock
KritikCVSS 9,8İstismar yoknpm · river-mock3 Eyl 2020
- GHSA-33gc-f8v9-v8hm39İzleyin
Malicious Package in ladder-text-js
KritikCVSS 9,8İstismar yoknpm · ladder-text-js1 Eyl 2020