Known vulnerabilities in npm - page 2

Vendor: OpenAnolis
Software: npm
Software CPE: cpe:2.3:o:openanolis:npm:*:*:*:*:*:anolis_os:*:*
Total vulnerabilities: 96
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting npm npm is affected by 96 known vulnerabilities: 7 high, 72 medium, 17 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150
CWE-330 Medium
No
No
10.8.2-1.18.20.6.1, 10.8.2-1.20.18.2.1 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 29 more
#VU103225 - Missing release of memory after effective lifetime
CVE-2025-23085
CWE-401 Medium
No
No
10.8.2-1.18.20.6.1, 10.8.2-1.20.18.2.1 22.01.2025 SB2025012252
SB2025012439
SB2025012440
and 30 more
#VU103222 - Permissions, Privileges, and Access Controls
CVE-2025-23083
CWE-264 Low
No
No
10.8.2-1.20.18.2.1 22.01.2025 SB2025012252
SB2025012346
SB2025012402
and 21 more
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-27982
CWE-444 Medium
No
No
10.5.0-1.18.20.2.1.0.1 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 53 more
#VU88175 - Reachable Assertion
CVE-2024-27983
CWE-617 Medium
Available
No
10.5.0-1.18.20.2.1.0.1 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU88144 - Improper input validation
CVE-2024-28182
CWE-20 Medium
No
No
10.5.0-1.18.20.2.1.0.1 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU86807 - Out-of-bounds read
CVE-2024-25629
CWE-125 Low
No
No
10.5.0-1.18.20.2.1.0.1 26.02.2024 SB2024022648
SB2024030621
SB2024032954
and 38 more
#VU86733 - Improper input validation
CVE-2024-22025
CWE-20 Medium
No
No
10.5.0-1.18.20.2.1.0.1 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 34 more
#VU86726 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-21891
CWE-22 Medium
No
No
10.8.1-1.20.16.0.1 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86724 - Covert Timing Channel
CVE-2023-46809
CWE-385 Medium
No
No
10.2.4-1.18.19.1.1.0.1 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 35 more
#VU86723 - Improper Privilege Management
CVE-2024-22017
CWE-269 Low
No
No
10.8.1-1.20.16.0.1 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86722 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-21896
CWE-22 Medium
No
No
10.8.1-1.20.16.0.1 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86721 - Improper input validation
CVE-2024-22019
CWE-20 Medium
No
No
8.19.4-1.16.20.2.4.0.1, 10.2.4-1.18.19.1.1.0.1 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 48 more
#VU86718 - Improper Handling of Exceptional Conditions
CVE-2024-21892
CWE-755 Low
No
No
10.2.4-1.18.19.1.1.0.1 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 30 more
#VU82070 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39333
CWE-94 Low
No
No
9.8.1-1.18.18.2.1.0.1 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 28 more
#VU82069 - Improper Validation of Integrity Check Value
CVE-2023-38552
CWE-354 Medium
No
No
9.8.1-1.18.18.2.1.0.1 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 34 more
#VU82067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-39331
CWE-22 Medium
No
No
10.8.1-1.20.16.0.1 17.10.2023 SB2023101703
SB2023101804
SB2023101805
and 12 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
8.19.4-1.16.20.2.3.0.2, 8.19.4-1.16.20.2.4.0.1, 9.8.1-1.18.18.2.1.0.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU79337 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32004
CWE-22 Medium
No
No
10.8.1-1.20.16.0.1 10.08.2023 SB2023081012
SB20230821189
SB20230821190
and 10 more
#VU77594 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-30584
CWE-22 Medium
No
No
10.8.1-1.20.16.0.1 21.06.2023 SB2023062144
SB2023072539
SB2023082320
and 8 more


Showing elements 21 - 40 out of 96