Npmjs vulnerabilities

Products

• Npm 8
• Tar 3
• Arborist 2

Newest

• npmjs images images vulnerable to Denial of Service CVE-2024-21523 7.5 HighJuly 10, 2024
• npmjs domain-suffix domain-suffix RegEx Denial of Service CVE-2024-25354 7.5 HighMarch 27, 2024
• npmjs semver semver vulnerable to Regular Expression Denial of Service CVE-2022-25883 Fix available 5.3 MediumJune 21, 2023
• npm, netapp ontap select deploy administration utility +1 more npm packing does not respect root-level ignore files in workspaces CVE-2022-29244 Fix available 7.5 HighJune 2, 2022
• npmjs npm, fedoraproject fedora, netapp next generation application programming interface +2 more The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if... CVE-2021-43616 Public exploitFix availableDisputed 9.0 CriticalNovember 13, 2021
• isaacs node-tar, npmjs tar, oracle graalvm +1 more +3 more Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization CVE-2021-37713 Fix available 8.2 HighAugust 31, 2021
• npm arborist, oracle graalvm, siemens sinec infrastructure network services +2 more UNIX Symbolic Link (Symlink) Following in @npmcli/arborist CVE-2021-39134 Fix available 8.2 HighAugust 31, 2021
• npm arborist, oracle graalvm, siemens sinec infrastructure network services +2 more UNIX Symbolic Link (Symlink) Following in @npmcli/arborist CVE-2021-39135 Fix available 8.2 HighAugust 31, 2021
• isaacs node-tar, npmjs tar, debian linux +2 more +4 more Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links CVE-2021-37712 Fix available 8.2 HighAugust 31, 2021
• isaacs node-tar, npmjs tar, debian linux +2 more +4 more Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links CVE-2021-37701 Fix available 8.2 HighAugust 31, 2021
• npmjs hosted-git-info, siemens sinec infrastructure network services +1 more Regular Expression Denial of Service (ReDoS) CVE-2021-23362 Fix available 5.3 MediumMarch 23, 2021
• npmjs npm-user-validate Regular Expression Denial of Service (ReDoS) CVE-2020-7754 Fix available 7.5 HighOctober 16, 2020
• cli, npmjs npm, fedoraproject fedora +1 more +3 more Sensitive information exposure through logs in npm cli CVE-2020-15095 Fix available 4.4 MediumJuly 7, 2020
• cli, npmjs npm, fedoraproject fedora +4 more +6 more Arbitrary File Overwrite in npm CLI CVE-2019-16777 Fix available 7.7 HighDecember 13, 2019
• cli, npmjs npm, fedoraproject fedora +4 more +6 more Unauthorized File Access in npm CLI before before version 6.13.3 CVE-2019-16776 Fix available 7.7 HighDecember 13, 2019
• cli, npmjs npm, fedoraproject fedora +4 more +6 more Unauthorized File Access in npm CLI before before version 6.13.3 CVE-2019-16775 Fix available 7.7 HighDecember 13, 2019
• npmjs npm Incorrect Permission Assignment for Critical Resource in NPM CVE-2018-7408 Fix available 7.8 HighFebruary 22, 2018
• nodejs node.js, npmjs npm, ibm sdk +2 more npm Token Leak in npm CVE-2016-3956 Fix available 7.5 HighJuly 2, 2016