NP
Vendor
Npmjs
16
CVEs
0
On KEV
0
New 30D
Products
NP9.8
Npm
Npmjs
8 CVEs0 on KEV0 new
TA8.6
Tar
Npmjs
3 CVEs0 on KEV0 new
AR7.8
Arborist
Npmjs
2 CVEs0 on KEV0 new
HO5.3
Hosted-git-info
Npmjs
1 CVEs0 on KEV0 new
NP7.5
Npm-user-validate
Npmjs
1 CVEs0 on KEV0 new
SE7.5
Semver
Npmjs
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-25883 | SE Semver Npmjs | 7.5 | Jun 21 | Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a… |
| CVE-2022-29244 | NP Npm Npmjs | 7.5 | Jun 13 | npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag (ie |
| CVE-2021-43616 | NP Npm Npmjs | 9.8 | Nov 13 | The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json |
| CVE-2021-39135 | AR Arborist Npmjs | 7.8 | Aug 31 | `@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package… |
| CVE-2021-39134 | AR Arborist Npmjs | 7.8 | Aug 31 | `@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package… |
| CVE-2021-37713 | TA Tar Npmjs | 8.6 | Aug 31 | The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability |
| CVE-2021-37712 | TA Tar Npmjs | 8.6 | Aug 31 | The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability |
| CVE-2021-37701 | TA Tar Npmjs | 8.6 | Aug 31 | The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability |
| CVE-2021-23362 | HO Hosted-git-info Npmjs | 5.3 | Mar 23 | The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js |
| CVE-2020-7754 | NP Npm-user-validate Npmjs | 7.5 | Oct 27 | This affects the package npm-user-validate before 1.0.1 |
| CVE-2020-15095 | NP Npm Npmjs | 4.4 | Jul 7 | Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files |
| CVE-2019-16777 | NP Npm Npmjs | 6.5 | Dec 13 | Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite |
| CVE-2019-16776 | NP Npm Npmjs | 8.1 | Dec 13 | Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write |
| CVE-2019-16775 | NP Npm Npmjs | 6.5 | Dec 13 | Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write |
| CVE-2018-7408 | NP Npm Npmjs | 7.8 | Feb 22 | An issue was discovered in an npm 5.7.0 2018-02-21 pre-release (marked as "next: 5.7.0" and therefore automatically installed by an "npm upgrade -g npm" command, and also… |
| CVE-2016-3956 | NP Npm Npmjs | 7.5 | Jul 2 | The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js 0.10 before 0.10.44, 0.12 before 0.12.13, 4 before 4.4.2, and 5 before 5.10.0, includes bearer tokens with… |