# cve.now: npm packages

The newest entries affecting npm packages (up to 200). To check exact package versions, use the MCP check_stack tool or /stack.

- [CVE-2026-119282](https://cve.now/CVE-2026-119282.md): Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle (CVSS 7.3, nrwl nx · @nx maven +3)
- [GHSA-W9X9-J56R-H98R](https://cve.now/GHSA-W9X9-J56R-H98R.md): @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy (high (no CVSS), @eeacms/volto-chatbot)
- [GHSA-C33X-VCV4-VG3G](https://cve.now/GHSA-C33X-VCV4-VG3G.md): Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence (low (no CVSS), cedar-policy · @cedar-policy/cedar-wasm)
- [CVE-2026-118666](https://cve.now/CVE-2026-118666.md): GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller (CVSS 6.0, ardatan graphql-tools · @graphql-tools executor-legacy-ws +1)
- [CVE-2026-118665](https://cve.now/CVE-2026-118665.md): GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications (CVSS 8.2, ardatan graphql-tools · @graphql-tools executor-legacy-ws +1)
- [CVE-2026-118664](https://cve.now/CVE-2026-118664.md): decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs (CVSS 8.2, SamVerschueren decode-uri-component · decode-uri-component)
- [CVE-2026-118663](https://cve.now/CVE-2026-118663.md): @hono/node-server: \`serveStatic\` decodes the request path a second time, leading to bypass of middleware on static paths (CVSS 5.3, honojs node-server · @hono/node-server)
- [CVE-2026-118662](https://cve.now/CVE-2026-118662.md): Vite: \`server.fs.deny\` bypassed with queries (CVSS 6.9, vitejs vite · vite)
- [CVE-2026-118661](https://cve.now/CVE-2026-118661.md): Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies (CVSS 6.5, capricorn86 happy-dom · happy-dom)
- [CVE-2026-118660](https://cve.now/CVE-2026-118660.md): Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML (CVSS 8.6, capricorn86 happy-dom · happy-dom)
- [GHSA-4MFG-R38W-W8FG](https://cve.now/GHSA-4MFG-R38W-W8FG.md): mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6 (high (no CVSS), mcp-sanitizer)
- [GHSA-7W82-6F9J-V9JP](https://cve.now/GHSA-7W82-6F9J-V9JP.md): mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths (high (no CVSS), mcp-sanitizer)
- [CVE-2026-118258](https://cve.now/CVE-2026-118258.md): i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string (CVSS 3.7, i18next-http-backend)
- [CVE-2026-118257](https://cve.now/CVE-2026-118257.md): Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages (CVSS 7.2, intlify vue-i18n · vue-i18n +5)
- [CVE-2026-118256](https://cve.now/CVE-2026-118256.md): Vue I18n: \`escapeParameter\` does not escape named values when the same call also passes a list (CVSS 2.1, intlify vue-i18n · vue-i18n +4)
- [CVE-2026-118255](https://cve.now/CVE-2026-118255.md): Highcharts Grid: javascript: URL in credits.href runs script on click (CVSS 8.4, highcharts · @highcharts dashboards +3)
- [CVE-2026-118254](https://cve.now/CVE-2026-118254.md): Highcharts Grid: pagination language options are parsed as HTML (CVSS 8.6, highcharts · @highcharts grid-lite +3)
- [CVE-2026-118253](https://cve.now/CVE-2026-118253.md): Highcharts Dashboards: fullscreen labels are parsed as HTML (CVSS 8.4, highcharts · @highcharts dashboards +1)
- [CVE-2026-118252](https://cve.now/CVE-2026-118252.md): Highcharts Dashboards: sidebar component labels are parsed as HTML (CVSS 8.4, highcharts · @highcharts dashboards +1)
- [CVE-2026-118251](https://cve.now/CVE-2026-118251.md): Highcharts: javascript: URL in credits.href runs script on click (CVSS 8.4, highcharts)
- [CVE-2026-118250](https://cve.now/CVE-2026-118250.md): Highcharts: dotted series.keys paths write to Object.prototype (CVSS 7.2, highcharts)
- [CVE-2026-118249](https://cve.now/CVE-2026-118249.md): Highcharts: series column construction writes to Object.prototype (CVSS 7.2, highcharts)
- [CVE-2026-118247](https://cve.now/CVE-2026-118247.md): Highcharts Dashboards / Grid Pro: \`DataTable.setCell\` and column writers treat \`\_\_proto\_\_\` as an existing column. (CVSS 6.9, highcharts · @highcharts dashboards +3)
- [CVE-2026-118246](https://cve.now/CVE-2026-118246.md): Highcharts Core: \`breadcrumbs.style\` keys become SVG event-handler attributes (CVSS 8.4, highcharts)
- [CVE-2026-118245](https://cve.now/CVE-2026-118245.md): Highcharts Dashboards: \`chartConstructor\` is an unchecked lookup into the Highcharts namespace (CVSS 8.6, highcharts · @highcharts dashboards +1)
- [CVE-2026-118244](https://cve.now/CVE-2026-118244.md): Highcharts Core: AST \`DOMParser\` fallback assigns unsanitized markup to \`innerHTML\` during print (CVSS 7.2, highcharts)
- [CVE-2026-118243](https://cve.now/CVE-2026-118243.md): Highcharts Dashboards: \`\_\_proto\_\_\` data table id writes sync listeners to \`Object.prototype\` (CVSS 5.3, highcharts · @highcharts/dashboards)
- [CVE-2026-118242](https://cve.now/CVE-2026-118242.md): Highcharts Grid: custom icon definition objects written with raw \`setAttribute\` on \`\<path\>\` (CVSS 8.5, highcharts · @highcharts grid-lite +3)
- [CVE-2026-116797](https://cve.now/CVE-2026-116797.md): Highcharts Grid Pro: cell-renderer \`attributes\` map written with raw \`setAttribute\` (CVSS 8.5, highcharts · @highcharts grid-pro +3)
- [CVE-2026-116796](https://cve.now/CVE-2026-116796.md): Highcharts Core: \`javascript:\` URL in an \`xlink:href\` attribute survives text filtering and reaches exported charts (CVSS 7.2, highcharts)
- [CVE-2026-116795](https://cve.now/CVE-2026-116795.md): RE2JS: Quadratic-time denial of service in re2js lookbehind matching (CVSS 7.5, le0pard re2js · re2js)
- [CVE-2026-59179](https://cve.now/CVE-2026-59179.md): OpenHop: Path Traversal in Flow ID File Operations (CVSS 8.3, naorsabag openhop · @openhop/server)
- [CVE-2026-55369](https://cve.now/CVE-2026-55369.md): Waline login accepts a non-string email as a match-all MongoDB query (CVSS 6.5, walinejs waline · @waline/vercel)
- [CVE-2026-59158](https://cve.now/CVE-2026-59158.md): Nuxt Ollama: public runtime configuration discloses the configured cloud API key (CVSS 7.5, thoda-dev nuxt-ollama · nuxt-ollama)
- [CVE-2026-116693](https://cve.now/CVE-2026-116693.md): dd-trace: ReDOS in URL query string obfuscation (CVSS 8.7, DataDog dd-trace-js · dd-trace)
- [CVE-2026-116688](https://cve.now/CVE-2026-116688.md): CKEditor: Cross-site scripting (XSS) in the engine package (CVSS 8.1, ckeditor5 · @ckeditor/ckeditor5-engine)
- [CVE-2026-116687](https://cve.now/CVE-2026-116687.md): CKEditor: Cross-site scripting (XSS) in the engine package (CVSS 3.1, ckeditor5 · @ckeditor/ckeditor5-engine)
- [GHSA-F897-62HF-6GXQ](https://cve.now/GHSA-F897-62HF-6GXQ.md): MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length (high (no CVSS), @modelcontextprotocol/sdk · @modelcontextprotocol/server +2)
- [CVE-2026-116675](https://cve.now/CVE-2026-116675.md): TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin \`data-mce-object\` serialization (CVSS 8.5, tinymce · tinymce/tinymce)
- [CVE-2026-116674](https://cve.now/CVE-2026-116674.md): systeminformation: Prototype pollution in \`networkStats()\` via the interface name (CVSS 6.5, sebhildebrandt systeminformation · systeminformation)
- [CVE-2026-116673](https://cve.now/CVE-2026-116673.md): systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net (CVSS 3.3, sebhildebrandt systeminformation · systeminformation)
- [CVE-2026-116804](https://cve.now/CVE-2026-116804.md): DOMPurify from 3.4.4 before 3.4.17 SAFE\_FOR\_TEMPLATES Bypass via Shadow Root Content (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-116803](https://cve.now/CVE-2026-116803.md): DOMPurify before 3.4.17 DOM XSS via IN\_PLACE Hook-Detached Subtrees (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-116802](https://cve.now/CVE-2026-116802.md): DOMPurify before 3.4.17 XSS via SMIL attributeName Guard Bypass in XHTML Mode (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-116584](https://cve.now/CVE-2026-116584.md): Seroval \`fromJSON\`/\`fromCrossJSON\` denial of service via unvalidated array node length (CVSS 7.5, lxsmnsyc seroval · seroval)
- [CVE-2026-116583](https://cve.now/CVE-2026-116583.md): Seroval: Code injection through a typed array's own constructor property (CVSS 5.3, lxsmnsyc seroval · seroval)
- [CVE-2026-116582](https://cve.now/CVE-2026-116582.md): Seroval: Script injection through RegExp sources in serialized output (CVSS 4.7, lxsmnsyc seroval · seroval)
- [CVE-2026-116581](https://cve.now/CVE-2026-116581.md): Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS) (CVSS 7.5, lxsmnsyc seroval · seroval)
- [CVE-2026-116580](https://cve.now/CVE-2026-116580.md): Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check (CVSS 7.3, lxsmnsyc seroval · seroval)
- [CVE-2026-116576](https://cve.now/CVE-2026-116576.md): systeminformation: Windows command injection in services() through Unicode quotation marks (CVSS 7.8, sebhildebrandt systeminformation · systeminformation)
- [CVE-2026-116575](https://cve.now/CVE-2026-116575.md): Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (\_build\_session\_scope) (CVSS 6.3, mem0ai mem0 · mem0ai)
- [CVE-2026-115923](https://cve.now/CVE-2026-115923.md): Backstage catalog rules can be bypassed for URL locations using encoded path segments (CVSS 6.5, backstage · @backstage/plugin-catalog-backend)
- [GHSA-H4FR-CMH5-QR62](https://cve.now/GHSA-H4FR-CMH5-QR62.md): Fallow: A \`.\*\` glob segment let an analyzed repository make Fallow test paths in the parent of the project root (low (no CVSS), fallow · @fallow-cli/fallow-node +3)
- [GHSA-F2HQ-32VH-53CC](https://cve.now/GHSA-F2HQ-32VH-53CC.md): postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words (high (no CVSS), postal-mime)
- [GHSA-8C8M-P3M8-CJG8](https://cve.now/GHSA-8C8M-P3M8-CJG8.md): Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient (medium (no CVSS), nodemailer)
- [GHSA-M943-M63M-W62W](https://cve.now/GHSA-M943-M63M-W62W.md): Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient (medium (no CVSS), nodemailer)
- [GHSA-85X2-Q946-CP5H](https://cve.now/GHSA-85X2-Q946-CP5H.md): Nodemailer: A "\>" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name (medium (no CVSS), nodemailer)
- [CVE-2026-115897](https://cve.now/CVE-2026-115897.md): Serialize JavaScript: Cross-site scripting (XSS) via unescaped \</script at the end of a serialized function body (CVSS 2.1, yahoo serialize-javascript · serialize-javascript)
- [CVE-2026-115895](https://cve.now/CVE-2026-115895.md): Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution (CVSS 8.8, capricorn86 happy-dom · happy-dom)
- [CVE-2026-115887](https://cve.now/CVE-2026-115887.md): graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service (CVSS 7.5, graphql-hive graphql-scalars · graphql-scalars)
- [CVE-2026-115570](https://cve.now/CVE-2026-115570.md): Electron: Mitigation for compromised eMudhra intermediate certificates (CVSS 7.4, electron)
- [CVE-2026-115569](https://cve.now/CVE-2026-115569.md): Fallow: Jest and Vitest \`projects\` entries let an analyzed repository make Fallow read files outside the project root (CVSS 3.3, fallow-rs fallow · @fallow-cli fallow-node +6)
- [CVE-2026-58497](https://cve.now/CVE-2026-58497.md): Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests (CVSS 8.6, olo-dot-io Uni-CLI · @zenalexa/unicli)
- [CVE-2026-115478](https://cve.now/CVE-2026-115478.md): obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes (CVSS 7.1, The-40-Thieves obsidian-tc · obsidian-tc)
- [CVE-2026-115477](https://cve.now/CVE-2026-115477.md): obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP (CVSS 7.1, The-40-Thieves obsidian-tc · obsidian-tc)
- [CVE-2026-115754](https://cve.now/CVE-2026-115754.md): serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped \</script in function body (CVSS 2.3, yahoo serialize-javascript · serialize-javascript)
- [CVE-2026-115730](https://cve.now/CVE-2026-115730.md): i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl (CVSS 2.3, i18next-http-backend)
- [CVE-2026-115728](https://cve.now/CVE-2026-115728.md): @hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing (CVSS 8.7, hapijs @hapi/content · @hapi/content)
- [CVE-2026-106763](https://cve.now/CVE-2026-106763.md): An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitize (CVSS 7.5, @justice8096/sagemath-mcp-server)
- [CVE-2026-106764](https://cve.now/CVE-2026-106764.md): An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function. (CVSS 7.5, @rog0x/mcp-git-tools)
- [CVE-2026-106765](https://cve.now/CVE-2026-106765.md): An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function. (CVSS 7.5, @rog0x/mcp-docker-tools)
- [CVE-2026-115419](https://cve.now/CVE-2026-115419.md): Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server (CVSS 8.1, AWS strands-agents · AWS strands-agents/sdk +2)
- [CVE-2026-114607](https://cve.now/CVE-2026-114607.md): better-auth: OAuth state can be used as a Magic Link to sign in as another user (CVSS 9.1, better-auth)
- [CVE-2026-94482](https://cve.now/CVE-2026-94482.md): Next.js: Denial of Service in App Router using Server Actions (CVSS 8.2, vercel next.js · next)
- [CVE-2026-113872](https://cve.now/CVE-2026-113872.md): multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown (CVSS 7.5, multer)
- [CVE-2026-114144](https://cve.now/CVE-2026-114144.md): toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse() (CVSS 7.5, BinaryMuse toml-node · toml)
- [CVE-2026-114143](https://cve.now/CVE-2026-114143.md): toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse() (CVSS 8.7, BinaryMuse toml-node · toml)
- [CVE-2026-114142](https://cve.now/CVE-2026-114142.md): toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype (CVSS 8.8, BinaryMuse toml-node · toml)
- [CVE-2026-114141](https://cve.now/CVE-2026-114141.md): toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse() (CVSS 8.7, BinaryMuse toml-node · toml)
- [CVE-2026-114139](https://cve.now/CVE-2026-114139.md): Sentry-Javascript: Middleware Bypass when using Tunnel route (CVSS 9.1, getsentry sentry-javascript · @sentry/nextjs)
- [CVE-2026-114133](https://cve.now/CVE-2026-114133.md): Nuxt server islands render \`useHeadSafe\` input without sanitisation (CVSS 5.4, nuxt)
- [CVE-2026-114132](https://cve.now/CVE-2026-114132.md): Nuxt: Server-side route rules (\`redirect\`, \`headers\`, \`proxy\`, \`ssr\`) are skipped for case-variant paths when routing is case-insensitive (CVSS 6.3, nuxt · @nuxt/nitro-server)
- [CVE-2026-114131](https://cve.now/CVE-2026-114131.md): Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass \`appMiddleware\` on dynamic and catch-all routes (CVSS 6.5, nuxt)
- [CVE-2026-114130](https://cve.now/CVE-2026-114130.md): Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a \`javascript:\` URL prefixed with an ASCII control character executes from \`\<NuxtLink\>\` when \`pages\` is disabled (CVSS 2.3, nuxt)
- [CVE-2026-114129](https://cve.now/CVE-2026-114129.md): stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service (CVSS 6.2, uhop stream-json · stream-json)
- [CVE-2026-114128](https://cve.now/CVE-2026-114128.md): Astro: Reflected/Stored XSS via unescaped \<script\>/\<style\> tag content in JSX/MDX rendering (CVSS 6.5, withastro astro · astro)
- [CVE-2026-114127](https://cve.now/CVE-2026-114127.md): Astro: Arbitrary CSS injection in Astro View Transitions (CVSS 2.3, withastro astro · astro)
- [CVE-2026-114126](https://cve.now/CVE-2026-114126.md): Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files (CVSS 8.7, storybookjs storybook · storybook +5)
- [CVE-2026-114125](https://cve.now/CVE-2026-114125.md): Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites (CVSS 8.6, storybookjs storybook · storybook +5)
- [CVE-2026-114124](https://cve.now/CVE-2026-114124.md): Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry (CVSS 3.9, electron)
- [CVE-2026-114122](https://cve.now/CVE-2026-114122.md): Electron: Frame subscription trusts GPU-supplied frame geometry (CVSS 3.9, electron)
- [CVE-2026-114121](https://cve.now/CVE-2026-114121.md): Electron: openExternal permission requests can be attributed to the wrong origin (CVSS 5.4, electron)
- [CVE-2026-113800](https://cve.now/CVE-2026-113800.md): Electron: HID and USB permission checks can be attributed to the wrong origin (CVSS 5.4, electron)
- [CVE-2026-113798](https://cve.now/CVE-2026-113798.md): Electron: Pointer lock permission requests can be attributed to the wrong frame (CVSS 5.4, electron)
- [CVE-2026-113797](https://cve.now/CVE-2026-113797.md): Electron: Extension tabs.query returns tab URLs and titles without the tabs permission (CVSS 3.1, electron)
- [CVE-2026-113796](https://cve.now/CVE-2026-113796.md): Electron: SameSite cookie restrictions are not applied to windows opened from links (CVSS 4.2, electron)
- [CVE-2026-114113](https://cve.now/CVE-2026-114113.md): Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders (CVSS 8.4, lovell sharp · sharp)
- [CVE-2026-114112](https://cve.now/CVE-2026-114112.md): Sharp before 0.35.4 RCE via bundled libheif AVIF decoding (CVSS 8.9, lovell sharp · sharp)
- [CVE-2026-114111](https://cve.now/CVE-2026-114111.md): Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability (CVSS 8.9, lovell sharp · sharp)
- [CVE-2026-114104](https://cve.now/CVE-2026-114104.md): adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass (CVSS 8.2, cthackers adm-zip · adm-zip)
- [CVE-2026-114103](https://cve.now/CVE-2026-114103.md): adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync() (CVSS 6.9, cthackers adm-zip · adm-zip)
- [CVE-2026-114102](https://cve.now/CVE-2026-114102.md): adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event (CVSS 8.7, cthackers adm-zip · adm-zip)
- [CVE-2026-114088](https://cve.now/CVE-2026-114088.md): Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO (CVSS 8.3, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114087](https://cve.now/CVE-2026-114087.md): Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets (CVSS 9.2, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114086](https://cve.now/CVE-2026-114086.md): Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpoint (CVSS 6.9, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114081](https://cve.now/CVE-2026-114081.md): Trigger.dev before 4.5.6 Cross-Tenant SQL Injection via TSQL Window-Function Name (CVSS 8.3, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114079](https://cve.now/CVE-2026-114079.md): Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint (CVSS 5.3, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114076](https://cve.now/CVE-2026-114076.md): Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URL (CVSS 5.3, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114073](https://cve.now/CVE-2026-114073.md): Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logs (CVSS 6.8, triggerdotdev trigger.dev · trigger.dev)
- [CVE-2026-114061](https://cve.now/CVE-2026-114061.md): SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pages (CVSS 2.3, sveltejs kit · @sveltejs/kit)
- [CVE-2026-114060](https://cve.now/CVE-2026-114060.md): SvelteKit before 3.0.0 Open Redirect via Enhanced Form Actions (CVSS 2.1, sveltejs kit · @sveltejs/kit)
- [CVE-2026-111758](https://cve.now/CVE-2026-111758.md): markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0) (CVSS 7.5, markdown-it)
- [CVE-2026-111767](https://cve.now/CVE-2026-111767.md): MCP TypeScript SDK: Experimental tasks were not tied to the session that created them (CVSS 8.6, modelcontextprotocol typescript-sdk · @modelcontextprotocol…)
- [CVE-2026-111756](https://cve.now/CVE-2026-111756.md): follow-redirects array-form headers bypass cross-origin credential stripping (CVSS 8.2, follow-redirects)
- [CVE-2026-113711](https://cve.now/CVE-2026-113711.md): ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export (CVSS 7.5, apostrophecms apostrophe · @apostrophecms import-export +2)
- [CVE-2026-113710](https://cve.now/CVE-2026-113710.md): ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing (CVSS 5.9, apostrophecms apostrophe · apostrophe)
- [CVE-2026-113671](https://cve.now/CVE-2026-113671.md): ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF (CVSS 4.3, apostrophecms apostrophe · @apostrophecms ai-helper +1)
- [CVE-2026-113669](https://cve.now/CVE-2026-113669.md): ApostropheCMS: Cross-domain session token in URL confers session takeover (CVSS 5.3, apostrophecms apostrophe · @apostrophecms passport-bridge +2)
- [CVE-2026-113667](https://cve.now/CVE-2026-113667.md): ApostropheCMS: CAPTCHA response token not URL-encoded (CVSS 5.3, apostrophecms apostrophe · @apostrophecms form +5)
- [CVE-2026-113668](https://cve.now/CVE-2026-113668.md): ApostropheCMS: :\_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure) (CVSS 5.3, apostrophecms apostrophe · apostrophe)
- [CVE-2026-113666](https://cve.now/CVE-2026-113666.md): ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service (CVSS 7.1, apostrophecms apostrophe · @apostrophecms db-connect +2)
- [CVE-2026-113665](https://cve.now/CVE-2026-113665.md): ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints (CVSS 3.7, apostrophecms apostrophe · apostrophe)
- [CVE-2026-113664](https://cve.now/CVE-2026-113664.md): ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test (CVSS 5.3, apostrophecms apostrophe · @apostrophecms import-export +1)
- [CVE-2026-113662](https://cve.now/CVE-2026-113662.md): ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document (CVSS 5.4, apostrophecms apostrophe · @apostrophecms import-export +1)
- [CVE-2026-113661](https://cve.now/CVE-2026-113661.md): ApostropheCMS: Incomplete CVE-2026-53606: \`meta http-equiv=refresh\` \`content\` still ships \`javascript:\` / \`data:\` URLs (CVSS 5.4, apostrophecms apostrophe · apostrophecms sanitize-html +1)
- [CVE-2026-113660](https://cve.now/CVE-2026-113660.md): ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers (CVSS 4.3, apostrophecms apostrophe · apostrophe)
- [CVE-2026-113659](https://cve.now/CVE-2026-113659.md): ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users (CVSS 6.1, apostrophecms apostrophe · apostrophe)
- [CVE-2026-113658](https://cve.now/CVE-2026-113658.md): ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory (CVSS 7.5, apostrophecms apostrophe · apostrophe)
- [CVE-2026-113657](https://cve.now/CVE-2026-113657.md): ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS) (CVSS 3.7, apostrophecms apostrophe · apostrophecms sanitize-html +1)
- [CVE-2026-113656](https://cve.now/CVE-2026-113656.md): ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS (CVSS 5.3, apostrophecms apostrophe · @apostrophecms form +1)
- [CVE-2026-113649](https://cve.now/CVE-2026-113649.md): ApostropheCMS: Import API bypasses publication roles for protected content (CVSS 6.5, apostrophecms apostrophe · @apostrophecms import-export +2)
- [CVE-2026-113655](https://cve.now/CVE-2026-113655.md): ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization (CVSS 4.3, apostrophecms apostrophe · apostrophe)
- [CVE-2026-113654](https://cve.now/CVE-2026-113654.md): ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting \<noscript\> content render (CVSS 5.3, apostrophecms apostrophe · apostrophecms sanitize-html +1)
- [CVE-2026-113653](https://cve.now/CVE-2026-113653.md): ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public) (CVSS 6.9, apostrophecms apostrophe · apostrophe)
- [CVE-2026-113652](https://cve.now/CVE-2026-113652.md): ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true) (CVSS 5.6, apostrophecms apostrophe · apostrophecms uploadfs +1)
- [CVE-2026-113651](https://cve.now/CVE-2026-113651.md): ApostropheCMS: Path traversal in uploadfs (CVSS 3.3, apostrophecms apostrophe · apostrophecms uploadfs +1)
- [CVE-2026-113650](https://cve.now/CVE-2026-113650.md): ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced) (CVSS 5.3, apostrophecms apostrophe · apostrophecms sanitize-html +1)
- [CVE-2026-113648](https://cve.now/CVE-2026-113648.md): ApostropheCMS: Missing Authentication in \`cleanExport\` Route (CVSS 3.1, apostrophecms apostrophe · @apostrophecms import-export +1)
- [CVE-2026-112958](https://cve.now/CVE-2026-112958.md): ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization (CVSS 5.4, apostrophecms apostrophe · apostrophe)
- [CVE-2026-112957](https://cve.now/CVE-2026-112957.md): ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users (CVSS 4.3, apostrophecms apostrophe · apostrophe)
- [CVE-2026-112956](https://cve.now/CVE-2026-112956.md): ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content (CVSS 6.5, apostrophecms apostrophe · @apostrophecms mport-export +1)
- [CVE-2026-112955](https://cve.now/CVE-2026-112955.md): ApostropheCMS: Import archives can exhaust server storage and deny service (CVSS 6.5, apostrophecms apostrophe · @apostrophecms import-export +1)
- [CVE-2026-112954](https://cve.now/CVE-2026-112954.md): ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API (CVSS 5.3, apostrophecms apostrophe · apostrophe)
- [CVE-2026-112953](https://cve.now/CVE-2026-112953.md): ApostropheCMS: Exposure of Sensitive Information via predictable export filenames (CVSS 6.0, apostrophecms apostrophe · @apostrophecms import-export +1)
- [CVE-2026-112952](https://cve.now/CVE-2026-112952.md): ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user (CVSS 4.3, apostrophecms apostrophe · apostrophe)
- [CVE-2026-112951](https://cve.now/CVE-2026-112951.md): ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix (CVSS 5.4, apostrophecms apostrophe · apostrophe)
- [CVE-2026-112950](https://cve.now/CVE-2026-112950.md): Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix (CVSS 5.9, vitest-dev vitest · @vitest mocker +1)
- [CVE-2026-112949](https://cve.now/CVE-2026-112949.md): Vitest: Code injection via unauthenticated manual mock registration (CVSS 4.7, vitest-dev vitest · @vitest mocker +1)
- [CVE-2026-112948](https://cve.now/CVE-2026-112948.md): Vitest: Servers misapply \`server.fs.deny\`, serving \`.env\`, private keys, \`.git\`, and the API token file (CVSS 6.5, vitest-dev vitest · @vitest browser +5)
- [CVE-2026-112947](https://cve.now/CVE-2026-112947.md): Vite: First 4 bytes of files outside of \`server.fs\` setting is exposed by \`?vite-wasm-instance\` (CVSS 6.3, vitejs vite · vitejs vite-plus +2)
- [CVE-2026-112946](https://cve.now/CVE-2026-112946.md): Vite: Files outside \`server.fs.allow\` could be served when project paths match system paths on non-Windows machine (CVSS 6.3, vitejs vite · vitejs vite-plus +2)
- [CVE-2026-112945](https://cve.now/CVE-2026-112945.md): Vite: Cross origin script execution through Vite custom middleware (CVSS 2.1, vitejs vite · vitejs vite-plus +2)
- [CVE-2026-112944](https://cve.now/CVE-2026-112944.md): launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors (CVSS 6.3, vitejs launch-editor · vitejs vite +4)
- [CVE-2026-112943](https://cve.now/CVE-2026-112943.md): launch-editor: escapeCmdArgs() omits % escaping on Windows (CVSS 6.3, vitejs launch-editor · vitejs vite +4)
- [CVE-2026-112942](https://cve.now/CVE-2026-112942.md): launch-editor: \`fs.existsSync()\` existence check can be bypassed on Windows (CVSS 7.5, vitejs launch-editor · vitejs vite +4)
- [CVE-2026-110725](https://cve.now/CVE-2026-110725.md): fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references (CVSS 3.7, fast-uri)
- [CVE-2026-110306](https://cve.now/CVE-2026-110306.md): fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding (CVSS 6.1, fast-uri)
- [CVE-2026-110180](https://cve.now/CVE-2026-110180.md): fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization (CVSS 4.8, fast-uri)
- [CVE-2026-110095](https://cve.now/CVE-2026-110095.md): fast-uri vulnerable to improper path equivalence in relative reference normalization (CVSS 3.7, fast-uri)
- [CVE-2026-111766](https://cve.now/CVE-2026-111766.md): markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled (CVSS 3.7, markdown-it)
- [CVE-2026-111759](https://cve.now/CVE-2026-111759.md): markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes (CVSS 7.5, markdown-it)
- [CVE-2026-111757](https://cve.now/CVE-2026-111757.md): Hono: \`serveStatic\` decodes the request path a second time, leading to bypass of middleware on static paths (CVSS 5.3, honojs hono · hono)
- [CVE-2026-111755](https://cve.now/CVE-2026-111755.md): follow-redirects sensitiveHeaders regex escaping can expose credential headers (CVSS 8.2, follow-redirects)
- [CVE-2026-111997](https://cve.now/CVE-2026-111997.md): ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters (CVSS 6.3, beaugunderson ip-address · ip-address)
- [CVE-2026-109461](https://cve.now/CVE-2026-109461.md): Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability (CVSS 5.9, Microsoft Identity Client for NodeJS · @azure/msal-node)
- [CVE-2026-109932](https://cve.now/CVE-2026-109932.md): undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering (CVSS 5.9, undici)
- [CVE-2026-104150](https://cve.now/CVE-2026-104150.md): AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity (CVSS 8.7, adonisjs http-server · @adonisjs/http-server)
- [CVE-2026-87018](https://cve.now/CVE-2026-87018.md): undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation (CVSS 7.5, undici)
- [CVE-2026-109383](https://cve.now/CVE-2026-109383.md): undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent (CVSS 7.4, undici)
- [CVE-2026-109829](https://cve.now/CVE-2026-109829.md): undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects (CVSS 7.4, undici)
- [CVE-2026-109841](https://cve.now/CVE-2026-109841.md): undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens (CVSS 5.9, undici)
- [CVE-2026-109924](https://cve.now/CVE-2026-109924.md): undici vulnerable to Denial of Service via unbounded memory in the EventSource parser (CVSS 5.9, undici)
- [CVE-2026-109869](https://cve.now/CVE-2026-109869.md): undici vulnerable to Denial of Service via unhandled error on excessive content-encodings (CVSS 7.5, undici)
- [CVE-2026-100409](https://cve.now/CVE-2026-100409.md): OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths (CVSS 7.5, opennextjs-cloudflare · @opennextjs/cloudflare)
- [CVE-2026-102527](https://cve.now/CVE-2026-102527.md): Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes (CVSS 6.9, nuxt-modules og-image · nuxt-og-image)
- [CVE-2026-109855](https://cve.now/CVE-2026-109855.md): undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake (CVSS 7.5, undici)
- [CVE-2026-110904](https://cve.now/CVE-2026-110904.md): ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 c (CVSS 5.3, ApostropheCMS · apostrophe)
- [CVE-2026-110872](https://cve.now/CVE-2026-110872.md): Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing (CVSS 8.2, nodemailer)
- [CVE-2026-110871](https://cve.now/CVE-2026-110871.md): Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service (CVSS 7.1, nodemailer)
- [CVE-2026-110870](https://cve.now/CVE-2026-110870.md): Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments (CVSS 6.9, nodemailer)
- [CVE-2026-110869](https://cve.now/CVE-2026-110869.md): Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes (CVSS 8.7, nodemailer)
- [CVE-2026-110864](https://cve.now/CVE-2026-110864.md): Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy (CVSS 9.1, better-auth)
- [CVE-2026-110862](https://cve.now/CVE-2026-110862.md): Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link (CVSS 9.3, better-auth)
- [CVE-2026-110861](https://cve.now/CVE-2026-110861.md): Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Condition (CVSS 6.3, better-auth drizzle-adapter · better-auth kysely-adapter +3)
- [CVE-2026-110816](https://cve.now/CVE-2026-110816.md): qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string (CVSS 5.3, ljharb qs · qs)
- [CVE-2026-103975](https://cve.now/CVE-2026-103975.md): Appium: Symlink based Zip Slip in @appium/support ZIP extraction (CVSS 6.5, appium · @appium/support)
- [CVE-2026-110634](https://cve.now/CVE-2026-110634.md): git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings (CVSS 9.3, danday74 git-diff · git-diff)
- [CVE-2026-77361](https://cve.now/CVE-2026-77361.md): obsidian-tc symlink path mismatch bypasses read ACL restrictions (CVSS 4.7, The-40-Thieves obsidian-tc · obsidian-tc)
- [CVE-2026-77362](https://cve.now/CVE-2026-77362.md): obsidian-tc bridge tools expose data outside the read ACL (CVSS 4.3, The-40-Thieves obsidian-tc · obsidian-tc)
- [CVE-2026-77366](https://cve.now/CVE-2026-77366.md): obsidian-tc tokens can access arbitrary configured vaults (CVSS 9.9, The-40-Thieves obsidian-tc · obsidian-tc)
- [CVE-2026-77364](https://cve.now/CVE-2026-77364.md): obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets (CVSS 6.5, The-40-Thieves obsidian-tc · obsidian-tc)
- [CVE-2026-77363](https://cve.now/CVE-2026-77363.md): obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access (CVSS 8.8, The-40-Thieves obsidian-tc · obsidian-tc)
- [CVE-2026-109346](https://cve.now/CVE-2026-109346.md): better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /device (CVSS 8.5, better-auth)
- [CVE-2026-103288](https://cve.now/CVE-2026-103288.md): Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comment Like (CVSS 7.1, TryGhost Ghost · ghost)
- [CVE-2026-94545](https://cve.now/CVE-2026-94545.md): Satori-generated SVG has improper escaping (CVSS 5.3, vercel satori · vercel next +1)
- [CVE-2026-93753](https://cve.now/CVE-2026-93753.md): deepmerge through 4.3.1 Prototype Poisoning via mergeObject (CVSS 8.7, TehShrike deepmerge · deepmerge)
- [CVE-2026-61448](https://cve.now/CVE-2026-61448.md): Parse Server 9.0.0 Stored XSS via malformed Content-Type (CVSS 2.1, parse-community parse-server · parse-server)
- [CVE-2026-61459](https://cve.now/CVE-2026-61459.md): MCP Server Kubernetes \< 3.9.0 Argument Injection via kubectl Structured Tools (CVSS 9.3, Flux159 mcp-server-kubernetes · mcp-server-kubernetes)
- [CVE-2023-31719](https://cve.now/CVE-2023-31719.md): FUXA \<= 1.1.12 is vulnerable to SQL Injection via /api/signin. (no CVSS, fuxa-server)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/ecosystem/npm
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.