Known vulnerabilities in npm16 - page 2
Vendor:
SUSE
Software:
npm16
Software CPE:
cpe:2.3:o:suse:npm16:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
74
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
16.20.2-150400.3.42.1
16.20.2-150400.3.36.1
16.20.2-8.45.1
16.20.2-150400.3.33.1
16.20.2-150300.7.36.2
16.20.2-8.42.1
16.20.2-150400.3.30.1
16.20.2-150300.7.33.1
16.20.2-8.39.1
16.20.2-150300.7.30.1
16.20.2-150400.3.27.2
16.20.2-8.36.1
16.20.2-150300.7.27.2
16.20.2-150400.3.24.1
16.20.2-8.33.1
16.20.1-150300.7.24.2
16.20.1-150400.3.21.1
16.20.1-8.30.1
16.20.0-8.27.1
16.20.0-150300.7.21.2
16.20.0-150400.3.18.2
16.19.1-150300.7.18.1
16.19.1-150400.3.15.1
16.19.1-8.24.1
16.18.1-150300.7.15.1
16.18.1-150400.3.12.1
16.18.1-8.17.1
16.17.1-150400.3.9.1
16.17.1-150300.7.12.1
16.17.1-8.12.1
16.17.0-150300.7.9.1
16.17.0-150400.3.6.1
16.17.0-8.9.1
16.16.0-150300.7.6.2
16.16.0-150400.3.3.2
16.16.0-8.6.1
Vulnerabilities (74)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140032 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-15157 |
CWE-93 | Low | 16.20.2-150400.3.42.1 | 29.07.2026 |
SB2026072967 SB2026090821 SB2026091015 and 5 more |
||
| #VU135015 - Improper input validation CVE-2026-48618 |
CWE-20 | High | 16.20.2-150400.3.42.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 11 more |
||
| #VU134753 - Allocation of Resources Without Limits or Throttling CVE-2026-12151 |
CWE-770 | Medium | 16.20.2-150400.3.42.1 | 17.06.2026 |
SB2026061760 SB20260720393 SB2026080430 and 13 more |
||
| #VU134752 - Permissive List of Allowed Inputs CVE-2026-11525 |
CWE-183 | Low | 16.20.2-150400.3.42.1 | 17.06.2026 |
SB2026061760 SB2026080430 SB2026082715 and 9 more |
||
| #VU127582 - Allocation of Resources Without Limits or Throttling CVE-2026-22036 |
CWE-770 | Medium | 16.20.2-150400.3.42.1 | 24.04.2026 |
SB20260424138 SB20260424156 SB20260424157 and 9 more |
||
| #VU127046 - Improper input validation CVE-2026-27135 |
CWE-20 | Medium | 16.20.2-150400.3.42.1 | 23.04.2026 |
SB2026042395 SB20260423101 SB20260423102 and 37 more |
||
| #VU126388 - Uncaught Exception CVE-2025-59465 |
CWE-248 | Medium | 16.20.2-150400.3.42.1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 23 more |
||
| #VU124546 - Missing release of memory after effective lifetime CVE-2026-21714 |
CWE-401 | Medium | 16.20.2-150400.3.42.1 | 25.03.2026 |
SB20260325154 SB2026032902 SB20260415182 and 23 more |
||
| #VU124541 - DEPRECATED: Often Misused: Path Manipulation CVE-2026-21637 |
CWE-249 | High | 16.20.2-150400.3.42.1 | 25.03.2026 |
SB2026032902 SB20260415182 SB20260415187 and 29 more |
||
| #VU124542 - Error Handling CVE-2026-21710 |
CWE-388 | Medium | 16.20.2-150400.3.42.1 | 25.03.2026 |
SB20260325154 SB2026032902 SB2026041056 and 33 more |
||
| #VU124545 - Information Exposure Through Timing Discrepancy CVE-2026-21713 |
CWE-208 | Medium | 16.20.2-150400.3.42.1 | 25.03.2026 |
SB20260325154 SB2026032902 SB2026041543 and 22 more |
||
| #VU88178 - Insufficient Verification of Data Authenticity CVE-2024-30261 |
CWE-345 | Medium | 16.20.2-8.45.1, 16.20.2-150400.3.36.1 | 05.04.2024 |
SB2024040527 SB2024041611 SB2024041618 and 12 more |
||
| #VU88177 - Exposure of sensitive information to an unauthorized actor CVE-2024-30260 |
CWE-200 | Low | 16.20.2-8.45.1, 16.20.2-150400.3.36.1 | 05.04.2024 |
SB2024040527 SB2024041611 SB2024041618 and 11 more |
||
| #VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-27982 |
CWE-444 | Medium | 16.20.2-8.42.1, 16.20.2-150300.7.36.2, 16.20.2-150400.3.33.1 | 05.04.2024 |
SB2024040526 SB2024040851 SB2024040852 and 53 more |
||
| #VU88175 - Reachable Assertion CVE-2024-27983 |
CWE-617 | Medium | 16.20.2-8.42.1, 16.20.2-150300.7.36.2, 16.20.2-150400.3.33.1 | 05.04.2024 |
SB2024040526 SB2024040851 SB2024040852 and 56 more |
||
| #VU86733 - Improper input validation CVE-2024-22025 |
CWE-20 | Medium | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 34 more |
||
| #VU86724 - Covert Timing Channel CVE-2023-46809 |
CWE-385 | Medium | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 35 more |
||
| #VU86721 - Improper input validation CVE-2024-22019 |
CWE-20 | Medium | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 48 more |
||
| #VU86709 - Exposure of sensitive information to an unauthorized actor CVE-2024-24758 |
CWE-200 | Low | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022211 SB2024022225 SB2024022832 and 13 more |
||
| #VU86707 - Server-Side Request Forgery (SSRF) CVE-2024-24806 |
CWE-918 | Medium | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022210 SB2024022214 SB2024022225 and 54 more |
Showing elements 21 - 40 out of 74