İçeriğe atla
Noroxi

npmjs kayıtları

npmjs üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%88,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2021-43616
    40Planlayın

    The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differ

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    npmjs · npm13 Kas 2021

  • CVE-2021-37701
    35İzleyin

    Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links

    YüksekCVSS 8,6İstismar yokEPSS %3

    npmjs · tar31 Ağu 2021

  • CVE-2021-37712
    35İzleyin

    Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links

    YüksekCVSS 8,6İstismar yokEPSS %2

    npmjs · tar31 Ağu 2021

  • CVE-2021-37713
    34İzleyin

    Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

    YüksekCVSS 8,6İstismar yokEPSS %1

    npmjs · tar31 Ağu 2021

  • CVE-2019-16776
    33İzleyin

    Unauthorized File Access in npm CLI before before version 6.13.3

    YüksekCVSS 8,1İstismar yokEPSS %3

    npmjs · npm12 Ara 2019

  • CVE-2016-3956
    32İzleyin

    The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js 0.10 before 0.10.44, 0.12 before 0.12.13, 4 before 4.4.2, and 5 before

    YüksekCVSS 7,5İstismar yokEPSS %7

    ibm · sdk2 Tem 2016

  • CVE-2022-29244
    31İzleyin

    npm packing does not respect root-level ignore files in workspaces

    YüksekCVSS 7,5İstismar yokEPSS %4

    npmjs · npm13 Haz 2022

  • CVE-2020-7754
    31İzleyin

    Regular Expression Denial of Service (ReDoS)

    YüksekCVSS 7,5İstismar yokEPSS %3

    npmjs · npm-user-validate27 Eki 2020

  • CVE-2022-25883
    31İzleyin

    Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when

    YüksekCVSS 7,5İstismar yokEPSS %3

    npmjs · semver21 Haz 2023

  • CVE-2021-39134
    31İzleyin

    UNIX Symbolic Link (Symlink) Following in @npmcli/arborist

    YüksekCVSS 7,8İstismar yokEPSS %1

    npmjs · arborist31 Ağu 2021

  • CVE-2021-39135
    31İzleyin

    UNIX Symbolic Link (Symlink) Following in @npmcli/arborist

    YüksekCVSS 7,8İstismar yokEPSS %1

    npmjs · arborist31 Ağu 2021

  • CVE-2018-7408
    31İzleyin

    An issue was discovered in an npm 5.7.0 2018-02-21 pre-release (marked as "next: 5.7.0" and therefore automatically installed by an "npm upg

    YüksekCVSS 7,8İstismar yokEPSS %0

    npmjs · npm22 Şub 2018

  • CVE-2024-21523
    30İzleyin

    All versions of the package images are vulnerable to Denial of Service (DoS) due to providing unexpected input types to several different fu

    YüksekCVSS 7,5İstismar yokEPSS %1

    10 Tem 2024

  • CVE-2024-25354
    30İzleyin

    RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.

    YüksekCVSS 7,5İstismar yokEPSS %1

    27 Mar 2024

  • CVE-2019-16775
    27İzleyin

    Unauthorized File Access in npm CLI before before version 6.13.3

    OrtaCVSS 6,5İstismar yokEPSS %3

    redhat · enterprise linux12 Ara 2019

  • CVE-2019-16777
    27İzleyin

    Arbitrary File Overwrite in npm CLI

    OrtaCVSS 6,5İstismar yokEPSS %2

    npmjs · npm12 Ara 2019

  • CVE-2021-23362
    22İzleyin

    Regular Expression Denial of Service (ReDoS)

    OrtaCVSS 5,3İstismar yokEPSS %4

    npmjs · hosted-git-info23 Mar 2021

  • CVE-2020-15095
    17İzleyin

    Sensitive information exposure through logs in npm cli

    OrtaCVSS 4,4İstismar yokEPSS %0

    npmjs · npm7 Tem 2020