Vulnerabilities in npm Inc. software





Denial of service in node-tar22 Mar, 2024
Medium Patched
Regular expression denial of service in semver03 Aug, 2023
Medium Patched
Prototype pollution in qs29 Nov, 2022
Medium Patched
Multiple vulnerabilities in NPM Tar17 Nov, 2021
Medium Patched
Path traversal in NPM Tar17 Nov, 2021
Medium Patched
Insufficient verification of data authenticity in npm cli13 Nov, 2021
High Patched
Multiple vulnerabilities in arborist package for npm31 Aug, 2021
Low Patched
Path traversal in NPM Tar03 Aug, 2021
Medium Patched
Path traversal in NPM Tar03 Aug, 2021
Medium Patched
Denial of service in hosted-git-info package23 Mar, 2021
Medium Patched
Information disclosure in npm CLI07 Jul, 2020
Low Patched
Multiple vulnerabilities in marky-markdown package for NPM17 Feb, 2020
Low Not Patched
Link following in harp10 Feb, 2020
Medium Patched
Denial of Service in Sequelize package for Node.js29 Jan, 2020
Medium Patched
Embedded malicious code (backdoor) in ember_cli_babe package for Node.js02 Oct, 2019
High Not Patched
Embedded malicious code (backdoor) in harmlesspackage package for Node.js02 Oct, 2019
High Not Patched
Embedded malicious code (backdoor) in yeoman-genrator package for Node.js02 Oct, 2019
High Not Patched
Embedded malicious code (backdoor) in require-port package for Node.js02 Oct, 2019
High Not Patched
Embedded malicious code (backdoor) in log-symboles package for Node.js02 Oct, 2019
High Not Patched
SQL injection in Sequelize package for Node.js05 Sep, 2019
High Patched