Vulnerabilities in npm Inc. software





Prototype pollution in qs29 Nov, 2022
Medium Patched
Multiple vulnerabilities in NPM Tar17 Nov, 2021
Medium Patched
Path traversal in NPM Tar17 Nov, 2021
Medium Patched
Insufficient verification of data authenticity in npm cli13 Nov, 2021
High Patched
Multiple vulnerabilities in arborist package for npm31 Aug, 2021
Low Patched
Path traversal in NPM Tar03 Aug, 2021
Medium Patched
Path traversal in NPM Tar03 Aug, 2021
Medium Patched
Denial of service in hosted-git-info package23 Mar, 2021
Medium Patched
Information disclosure in npm CLI07 Jul, 2020
Low Patched
Multiple vulnerabilities in marky-markdown package for NPM17 Feb, 2020
Low Not Patched
Link following in harp10 Feb, 2020
Medium Patched
Denial of Service in Sequelize package for Node.js29 Jan, 2020
Medium Patched
Embedded malicious code (backdoor) in ember_cli_babe package for Node.js02 Oct, 2019
High Not Patched
Embedded malicious code (backdoor) in harmlesspackage package for Node.js02 Oct, 2019
High Not Patched
Embedded malicious code (backdoor) in yeoman-genrator package for Node.js02 Oct, 2019
High Not Patched
Embedded malicious code (backdoor) in require-port package for Node.js02 Oct, 2019
High Not Patched
Embedded malicious code (backdoor) in log-symboles package for Node.js02 Oct, 2019
High Not Patched
SQL injection in Sequelize package for Node.js05 Sep, 2019
High Patched
Path Traversal in serve-here.js nmp28 Jun, 2019
Medium Patched
SQL Injection in Sequelize nmp package25 Jun, 2019
Medium Patched