# cve.now: npm packages

The newest entries affecting npm packages (up to 200). To check exact package versions, use the MCP stack.check operation or /stack.

- [CVE-2026-128065](https://cve.now/CVE-2026-128065.md): @grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not applied (CVSS 6.9, grpc-node · @grpc/grpc-js-xds)
- [CVE-2026-126367](https://cve.now/CVE-2026-126367.md): @grpc/grpc-js: safe\_regex incorrectly applies partial string matching for patterns with alternation (CVSS 4.8, grpc-node · @grpc/grpc-js-xds)
- [CVE-2026-126363](https://cve.now/CVE-2026-126363.md): Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js (CVSS 2.3, withastro astro · @astrojs/solid-js)
- [CVE-2026-126362](https://cve.now/CVE-2026-126362.md): Astro reflected XSS via unescaped slot names in svelte renderer (CVSS 2.3, withastro astro · @astrojs/svelte)
- [CVE-2026-126359](https://cve.now/CVE-2026-126359.md): Hono: \`css\` helper does not escape a closing tag split between the template and an interpolated value, allowing HTML injection (CVSS 3.4, honojs hono · hono)
- [CVE-2026-126358](https://cve.now/CVE-2026-126358.md): Hono: RegExpRouter skips wildcard middleware for some route sets and for paths with an encoded line terminator (CVSS 5.3, honojs hono · hono)
- [CVE-2026-126357](https://cve.now/CVE-2026-126357.md): Hono: \`mount()\` and \`app.mount()\` can forward a path that bypasses middleware scoped inside the mount prefix (CVSS 5.3, honojs hono · hono)
- [CVE-2026-126356](https://cve.now/CVE-2026-126356.md): Hono: \`validator('form')\` skips validation for \`multipart/form-data\` requests with extra parameters (CVSS 5.3, honojs hono · hono)
- [CVE-2026-126355](https://cve.now/CVE-2026-126355.md): Hono: \`csrf()\` does not check requests sent by hyperlink auditing (\`text/ping\`) (CVSS 5.3, honojs hono · hono)
- [CVE-2026-126346](https://cve.now/CVE-2026-126346.md): basic-ftp denial of service in FTP client via CR/LF in password (CVSS 5.9, patrickjuchli basic-ftp · basic-ftp)
- [CVE-2026-126345](https://cve.now/CVE-2026-126345.md): basic-ftp: Uncaught TypeError in MLSD directory-listing parser via proto fact name causes DoS in Client.list() (CVSS 5.3, patrickjuchli basic-ftp · basic-ftp)
- [CVE-2026-126343](https://cve.now/CVE-2026-126343.md): @hono/node-server: Unhandled \`ECONNRESET\` on the socket during an asynchronous WebSocket upgrade crashes the process (CVSS 5.3, honojs node-server · @hono/node-server)
- [CVE-2026-126210](https://cve.now/CVE-2026-126210.md): @hono/node-server: Backslash in the request path is parsed as a path separator, bypassing path-based access control at a reverse proxy (CVSS 5.3, honojs node-server · @hono/node-server)
- [GHSA-7M8X-X364-M26J](https://cve.now/GHSA-7M8X-X364-M26J.md): Signal K Server: Buffered logs exposed to unauthenticated WebSocket clients (medium (no CVSS), signalk-server)
- [CVE-2026-126187](https://cve.now/CVE-2026-126187.md): React remote code execution in server components (CVSS 9.5, needs attention: First public exploit on GitHub Nov 11, react · react-server-dom-parcel +2)
- [CVE-2026-126066](https://cve.now/CVE-2026-126066.md): fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tags (CVSS 3.7, NaturalIntelligence fast-xml-parser · fast-xml-parser)
- [CVE-2026-125335](https://cve.now/CVE-2026-125335.md): Forge: Ed25519 signature verification accepts small-order public keys (CVSS 3.7, digitalbazaar forge · node-forge)
- [CVE-2026-125334](https://cve.now/CVE-2026-125334.md): Forge: TLS client crash on a handshake record received without a session (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-125333](https://cve.now/CVE-2026-125333.md): Forge: ReDoS in forge.http response header and cookie trimming (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-125332](https://cve.now/CVE-2026-125332.md): Forge denial of service in TLS client handshake (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-120778](https://cve.now/CVE-2026-120778.md): Aspire Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Aspire.Cli · Aspire.Cli +11)
- [CVE-2026-120792](https://cve.now/CVE-2026-120792.md): Aspire Information Disclosure Vulnerability (CVSS 7.3, Microsoft Aspire.Cli · Aspire.Cli +11)
- [CVE-2026-79914](https://cve.now/CVE-2026-79914.md): NocoBase: SSRF in customRequests:send via runtime options.url override (CVSS 4.3, nocobase · @nocobase/plugin-action-custom-request)
- [CVE-2026-92684](https://cve.now/CVE-2026-92684.md): Aggregation queries can bypass authentication restrictions in @neo4j/graphql (CVSS 8.7, @neo4j/graphql)
- [CVE-2026-120350](https://cve.now/CVE-2026-120350.md): Stored XSS in rich text editor via video embed (CVSS 5.1, com.vaadin:vaadin · com.vaadin:vaadin-core +3)
- [CVE-2026-125120](https://cve.now/CVE-2026-125120.md): Mongoose query injection bypasses sanitizeFilter in countDocuments (CVSS 9.8, Automattic mongoose · mongoose)
- [CVE-2026-125119](https://cve.now/CVE-2026-125119.md): Mongoose: Connection-level sanitizeFilter not applied (CVSS 7.5, Automattic mongoose · mongoose)
- [CVE-2026-125118](https://cve.now/CVE-2026-125118.md): Mongoose: Prototype pollution via Schema.prototype.virtual() (CVSS 6.5, Automattic mongoose · mongoose)
- [CVE-2026-125117](https://cve.now/CVE-2026-125117.md): Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of… (CVSS 8.2, Automattic mongoose · mongoose)
- [CVE-2026-125116](https://cve.now/CVE-2026-125116.md): Mongoose schema casting bypass in discriminator handling (CVSS 4.8, Automattic mongoose · mongoose)
- [CVE-2026-125115](https://cve.now/CVE-2026-125115.md): Novu: \`validateUrlSsrf\` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition (CVSS 6.8, novuhq novu · @novu application-generic +1)
- [CVE-2026-125107](https://cve.now/CVE-2026-125107.md): Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key (CVSS 7.5, julianhille MuhammaraJS · muhammara)
- [CVE-2026-123812](https://cve.now/CVE-2026-123812.md): Dynatrace MCP Server: create\_dynatrace\_notebook missing the human-approval gate (CVSS 3.7, dynatrace-oss dynatrace-mcp · @dynatrace-oss/dynatrace-mcp-…)
- [CVE-2026-123811](https://cve.now/CVE-2026-123811.md): Dynatrace MCP unauthenticated tool calls in HTTP MCP server (CVSS 7.5, dynatrace-oss dynatrace-mcp · @dynatrace-oss/dynatrace-mcp-…)
- [CVE-2026-123810](https://cve.now/CVE-2026-123810.md): Dynatrace MCP Server: DQL injection via parameters not documented as DQL (CVSS 4.3, dynatrace-oss dynatrace-mcp · @dynatrace-oss/dynatrace-mcp-…)
- [CVE-2026-123809](https://cve.now/CVE-2026-123809.md): Dynatrace MCP Server: Workflow template injection via create\_workflow\_for\_notification (CVSS 4.2, dynatrace-oss dynatrace-mcp · @dynatrace-oss/dynatrace-mcp-…)
- [CVE-2026-123808](https://cve.now/CVE-2026-123808.md): Nuxt UI: UAuthForm / UForm SSR markup omits \`method\`, leaking credentials via GET if submitted before hydration (CVSS 5.3, nuxt ui · @nuxt/ui)
- [CVE-2026-123807](https://cve.now/CVE-2026-123807.md): Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and… (CVSS 9.8, signalk-server · @signalk resources-provider +1)
- [CVE-2026-92683](https://cve.now/CVE-2026-92683.md): Incomplete evaluation of multi-condition JWT where filter in @authentication in @neo4j/graphql (CVSS 8.6, @neo4j/graphql)
- [CVE-2026-123569](https://cve.now/CVE-2026-123569.md): Devalue before 5.6.3 Denial of Service via Sparse Array Serialization (CVSS 8.7, sveltejs devalue · devalue)
- [CVE-2026-123568](https://cve.now/CVE-2026-123568.md): Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output (CVSS 2.1, sveltejs devalue · devalue)
- [CVE-2026-123567](https://cve.now/CVE-2026-123567.md): devalue prototype pollution in parse (CVSS 6.3, sveltejs devalue · devalue)
- [CVE-2026-123566](https://cve.now/CVE-2026-123566.md): Devalue before 5.9.3 CPU Amplification Denial of Service via uneval (CVSS 8.7, sveltejs devalue · devalue)
- [CVE-2026-123565](https://cve.now/CVE-2026-123565.md): Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval (CVSS 8.7, sveltejs devalue · devalue)
- [CVE-2026-123564](https://cve.now/CVE-2026-123564.md): Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays (CVSS 8.7, sveltejs devalue · devalue)
- [CVE-2026-123563](https://cve.now/CVE-2026-123563.md): devalue memory exhaustion via typed-array allocation in parse (CVSS 8.7, sveltejs devalue · devalue)
- [CVE-2026-123562](https://cve.now/CVE-2026-123562.md): Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection (CVSS 8.7, sveltejs devalue · devalue)
- [CVE-2026-123561](https://cve.now/CVE-2026-123561.md): Sveltejs devalue before 5.9.3 proto Rejection Bypass via Property-Key Coercion (CVSS 6.3, sveltejs devalue · devalue)
- [CVE-2026-102650](https://cve.now/CVE-2026-102650.md): Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API (CVSS 7.5, nuxt content · @nuxt/content)
- [CVE-2026-118670](https://cve.now/CVE-2026-118670.md): OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document (CVSS 8.8, OHIF Viewers · @ohif/extension-dicom-pdf)
- [CVE-2026-106128](https://cve.now/CVE-2026-106128.md): Prototype Pollution in Progress Software Kendo UI for Vue (CVSS 4.1, Progress Software @progress/kendo-vue-common)
- [CVE-2026-106127](https://cve.now/CVE-2026-106127.md): Prototype Pollution in Progress Software KendoReact (CVSS 4.1, Progress Software @progress/kendo-react-common)
- [CVE-2026-106144](https://cve.now/CVE-2026-106144.md): Prototype Pollution in Progress Software Kendo UI for Angular (CVSS 4.1, Progress Software @progress/kendo-angular-common · Progress…)
- [CVE-2026-106143](https://cve.now/CVE-2026-106143.md): Cross-Site Scripting in Progress Software Kendo UI for Vue (CVSS 5.4, Progress Software @progress/kendo-vue-editor)
- [CVE-2026-106142](https://cve.now/CVE-2026-106142.md): Cross-Site Scripting in Progress Software KendoReact (CVSS 5.4, Progress Software @progress/kendo-react-editor)
- [CVE-2026-106141](https://cve.now/CVE-2026-106141.md): Cross-Site Scripting in Progress Software Kendo UI for Angular (CVSS 5.4, Progress Software @progress/kendo-angular-editor)
- [CVE-2026-106136](https://cve.now/CVE-2026-106136.md): Cross-Site Scripting in Progress Software KendoReact (CVSS 5.4, Progress Software @progress/kendo-react-conversational-ui)
- [CVE-2026-106134](https://cve.now/CVE-2026-106134.md): Cross-Site Scripting in Progress Software KendoReact (CVSS 5.4, Progress Software @progress/kendo-react-layout)
- [CVE-2026-106135](https://cve.now/CVE-2026-106135.md): Cross-Site Scripting in Progress Software Kendo UI for Angular (CVSS 5.4, Progress Software @progress/kendo-angular-conversational-ui)
- [CVE-2026-111770](https://cve.now/CVE-2026-111770.md): Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another (CVSS 7.7, modelcontextprotocol typescript-sdk · @modelcontextproto… +1)
- [CVE-2026-111768](https://cve.now/CVE-2026-111768.md): Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation (CVSS 7.5, modelcontextprotocol typescript-sdk · @modelcontextproto… +3)
- [CVE-2026-111769](https://cve.now/CVE-2026-111769.md): Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom… (CVSS 6.5, modelcontextprotocol typescript-sdk · @modelcontextproto… +3)
- [CVE-2026-111771](https://cve.now/CVE-2026-111771.md): Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service (CVSS 6.8, modelcontextprotocol typescript-sdk · @modelcontextproto… +7)
- [CVE-2026-110802](https://cve.now/CVE-2026-110802.md): Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox (CVSS 6.1, altair-graphql altair · altair-graphql altair-express-mi… +7)
- [CVE-2026-114604](https://cve.now/CVE-2026-114604.md): GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments (CVSS 8.4, ardatan graphql-tools · @graphql-tools/utils)
- [CVE-2026-111753](https://cve.now/CVE-2026-111753.md): Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035) (CVSS 5.9, angular · @angular/common)
- [CVE-2026-46350](https://cve.now/CVE-2026-46350.md): dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS (CVSS 9.1, dcmjs-org dcmjs · dcmjs)
- [CVE-2026-76892](https://cve.now/CVE-2026-76892.md): tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process (CVSS 8.7, tsparticles · @tsparticles mcp-server +1)
- [CVE-2026-76893](https://cve.now/CVE-2026-76893.md): tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients (CVSS 6.9, tsparticles · @tsparticles mcp-server +1)
- [CVE-2026-63655](https://cve.now/CVE-2026-63655.md): tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS (CVSS 7.5, tsparticles · @tsparticles mcp-server +1)
- [CVE-2026-122131](https://cve.now/CVE-2026-122131.md): Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 Prototype Replacement via proto Language Key (CVSS 6.3, hapijs joi · joi +1)
- [CVE-2026-97705](https://cve.now/CVE-2026-97705.md): Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser (CVSS 7.5, moleculerjs moleculer · moleculer)
- [CVE-2026-107846](https://cve.now/CVE-2026-107846.md): bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list (CVSS 9.3, bitcoinjs-lib)
- [CVE-2026-114456](https://cve.now/CVE-2026-114456.md): Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers (CVSS 6.5, snowflake-connector-python · github.com/snowflakedb/gosn… +9)
- [CVE-2026-111751](https://cve.now/CVE-2026-111751.md): Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR) (CVSS 8.2, angular · @angular/router)
- [CVE-2026-111754](https://cve.now/CVE-2026-111754.md): Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR) (CVSS 5.1, angular · @angular/platform-server)
- [CVE-2026-111752](https://cve.now/CVE-2026-111752.md): Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR) (CVSS 8.2, angular · @angular/router)
- [CVE-2026-115779](https://cve.now/CVE-2026-115779.md): Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie() (CVSS 6.3, Effect-TS effect · @effect platform +2)
- [CVE-2026-76894](https://cve.now/CVE-2026-76894.md): CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "\*" (out) (CVSS 3.1, ondata ckan-mcp-server · @aborruso/ckan-mcp-server)
- [CVE-2026-95860](https://cve.now/CVE-2026-95860.md): node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound \`DefaultRolePermissions (CVSS 9.1, node-opcua · node-opcua-address-space +1)
- [CVE-2026-88968](https://cve.now/CVE-2026-88968.md): Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace (CVSS 7.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-63395](https://cve.now/CVE-2026-63395.md): isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE) (CVSS 8.8, isomorphic-git)
- [CVE-2026-63475](https://cve.now/CVE-2026-63475.md): isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS) (CVSS 4.3, isomorphic-git)
- [CVE-2026-63478](https://cve.now/CVE-2026-63478.md): isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout (CVSS 5.3, isomorphic-git)
- [CVE-2026-63501](https://cve.now/CVE-2026-63501.md): ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass) (CVSS 7.5, Agamnentzar ag-psd · ag-psd)
- [CVE-2026-44267](https://cve.now/CVE-2026-44267.md): Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered \`.constructor\` member access in Elo JavaScript emitter (CVSS 9.8, enspirit elo · @enspirit/elo)
- [CVE-2026-44266](https://cve.now/CVE-2026-44266.md): Elo: Remote Code Execution in Elo Ruby backend via unescaped \`#{...}\` interpolation in emitted string literals and subtype-constraint labels (CVSS 9.8, enspirit elo · @enspirit/elo)
- [CVE-2026-44265](https://cve.now/CVE-2026-44265.md): Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields (CVSS 7.4, enspirit elo · @enspirit/elo)
- [CVE-2026-121426](https://cve.now/CVE-2026-121426.md): Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser (CVSS 8.3, nodemailer)
- [CVE-2026-62300](https://cve.now/CVE-2026-62300.md): Filecoin Pin: Unbounded DAG pinning can exhaust filecoin-pin server resources (CVSS 6.5, filecoin-project filecoin-pin · filecoin-pin)
- [CVE-2026-62264](https://cve.now/CVE-2026-62264.md): PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP\_API\_KEY (CVSS 7.5, SylphxAI pdf-reader-mcp · @sylphx/pdf-reader-mcp)
- [CVE-2026-119978](https://cve.now/CVE-2026-119978.md): Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore (CVSS 9.0, FlowiseAI Flowise · flowise +1)
- [CVE-2026-61789](https://cve.now/CVE-2026-61789.md): DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation (CVSS 6.1, bytebase dbhub · @bytebase/dbhub)
- [CVE-2026-119713](https://cve.now/CVE-2026-119713.md): Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands (CVSS 8.7, @paperclipai/server)
- [CVE-2026-119282](https://cve.now/CVE-2026-119282.md): Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle (CVSS 7.3, nrwl nx · @nx maven +3)
- [CVE-2026-119202](https://cve.now/CVE-2026-119202.md): @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service (CVSS 7.5, hapijs content · @hapi/content +1)
- [CVE-2026-119201](https://cve.now/CVE-2026-119201.md): Nuxt dev server exposes generated appSecret through Vite file serving (CVSS 4.8, nuxt · @nuxt/vite-builder)
- [CVE-2026-119200](https://cve.now/CVE-2026-119200.md): Nuxt: Dot segments in the request path bypass \`server/middleware\` path checks and server route rules on page routes (CVSS 6.5, nuxt · @nuxt nitro-server +1)
- [CVE-2026-119199](https://cve.now/CVE-2026-119199.md): Nuxt dev server exposes private runtime config through the Nitro dev bundle (CVSS 5.9, nuxt · @nuxt/vite-builder)
- [CVE-2026-119198](https://cve.now/CVE-2026-119198.md): Nuxt dev server arbitrary file read through client error reports (CVSS 5.9, nuxt · @nuxt/vite-builder)
- [CVE-2026-119191](https://cve.now/CVE-2026-119191.md): Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer (CVSS 7.5, digitalbazaar forge · node-forge)
- [CVE-2026-119190](https://cve.now/CVE-2026-119190.md): Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 (CVSS 7.4, digitalbazaar forge · node-forge)
- [CVE-2026-119189](https://cve.now/CVE-2026-119189.md): Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-119188](https://cve.now/CVE-2026-119188.md): Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message (CVSS 7.5, digitalbazaar forge · node-forge)
- [CVE-2026-119187](https://cve.now/CVE-2026-119187.md): Forge: Denial of service in TLS record processing via call stack exhaustion (CVSS 7.5, digitalbazaar forge · node-forge)
- [CVE-2026-119186](https://cve.now/CVE-2026-119186.md): Forge: AES-GCM authentication bypass via unvalidated tagLength option (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-118782](https://cve.now/CVE-2026-118782.md): Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count (CVSS 7.5, digitalbazaar forge · node-forge)
- [CVE-2026-118781](https://cve.now/CVE-2026-118781.md): Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) (CVSS 2.9, digitalbazaar forge · node-forge)
- [CVE-2026-118780](https://cve.now/CVE-2026-118780.md): Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store (CVSS 3.7, digitalbazaar forge · node-forge)
- [CVE-2026-118779](https://cve.now/CVE-2026-118779.md): Forge: Regular expression denial of service in PEM decoding (pem.decode) (CVSS 7.5, digitalbazaar forge · node-forge)
- [CVE-2026-118778](https://cve.now/CVE-2026-118778.md): Forge: TLS client crash when the server sends no certificate (CVSS 5.9, digitalbazaar forge · node-forge)
- [CVE-2026-118777](https://cve.now/CVE-2026-118777.md): Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie (CVSS 4.8, digitalbazaar forge · node-forge)
- [CVE-2026-118776](https://cve.now/CVE-2026-118776.md): Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption (CVSS 3.7, digitalbazaar forge · node-forge)
- [CVE-2026-118775](https://cve.now/CVE-2026-118775.md): Forge: ASN.1 OID first arc truncation in asn1.oidToDer (CVSS 3.7, digitalbazaar forge · node-forge)
- [CVE-2026-118774](https://cve.now/CVE-2026-118774.md): Forge: Certificate signature verified with the issuer's RSA signature scheme (CVSS 3.7, digitalbazaar forge · node-forge)
- [CVE-2026-118773](https://cve.now/CVE-2026-118773.md): Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal (CVSS 6.3, isaacs node-glob · glob)
- [CVE-2026-118772](https://cve.now/CVE-2026-118772.md): joi: quadratic-time split in \`string().email({ multiple: true })\` allows denial of service (CVSS 7.5, hapijs joi · @hapi joi +2)
- [CVE-2026-118764](https://cve.now/CVE-2026-118764.md): minimatch denial of service via glob pattern amplification (CVSS 6.9, isaacs minimatch · minimatch)
- [CVE-2026-118763](https://cve.now/CVE-2026-118763.md): @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location (CVSS 7.4, sigstore-js · @sigstore/oci)
- [GHSA-W9X9-J56R-H98R](https://cve.now/GHSA-W9X9-J56R-H98R.md): @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy (high (no CVSS), @eeacms/volto-chatbot)
- [GHSA-C33X-VCV4-VG3G](https://cve.now/GHSA-C33X-VCV4-VG3G.md): Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence (low (no CVSS), cedar-policy · @cedar-policy/cedar-wasm)
- [CVE-2026-62374](https://cve.now/CVE-2026-62374.md): SD JWT JS: Tampered disclosures silently dropped instead of rejected (CVSS 7.1, openwallet-foundation @sd-jwt/core · openwallet-foundati… +2)
- [CVE-2026-118666](https://cve.now/CVE-2026-118666.md): GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller (CVSS 6.0, ardatan graphql-tools · @graphql-tools executor-legacy-ws +1)
- [CVE-2026-118665](https://cve.now/CVE-2026-118665.md): GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications (CVSS 8.2, ardatan graphql-tools · @graphql-tools executor-legacy-ws +1)
- [CVE-2026-118664](https://cve.now/CVE-2026-118664.md): decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs (CVSS 8.2, SamVerschueren decode-uri-component · decode-uri-component)
- [CVE-2026-118663](https://cve.now/CVE-2026-118663.md): @hono/node-server: \`serveStatic\` decodes the request path a second time, leading to bypass of middleware on static paths (CVSS 5.3, honojs node-server · @hono/node-server)
- [CVE-2026-118662](https://cve.now/CVE-2026-118662.md): Vite: \`server.fs.deny\` bypassed with queries (CVSS 6.9, vitejs vite · vite)
- [CVE-2026-118661](https://cve.now/CVE-2026-118661.md): Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies (CVSS 6.5, capricorn86 happy-dom · happy-dom)
- [CVE-2026-118660](https://cve.now/CVE-2026-118660.md): Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML (CVSS 8.6, capricorn86 happy-dom · happy-dom)
- [GHSA-4MFG-R38W-W8FG](https://cve.now/GHSA-4MFG-R38W-W8FG.md): mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6 (high (no CVSS), mcp-sanitizer)
- [GHSA-7W82-6F9J-V9JP](https://cve.now/GHSA-7W82-6F9J-V9JP.md): mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths (high (no CVSS), mcp-sanitizer)
- [CVE-2026-118258](https://cve.now/CVE-2026-118258.md): i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string (CVSS 3.7, i18next-http-backend)
- [CVE-2026-118257](https://cve.now/CVE-2026-118257.md): Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages (CVSS 7.2, intlify vue-i18n · vue-i18n +5)
- [CVE-2026-118256](https://cve.now/CVE-2026-118256.md): Vue I18n: \`escapeParameter\` does not escape named values when the same call also passes a list (CVSS 2.1, intlify vue-i18n · vue-i18n +4)
- [CVE-2026-118255](https://cve.now/CVE-2026-118255.md): Highcharts Grid: javascript: URL in credits.href runs script on click (CVSS 8.4, highcharts · @highcharts dashboards +3)
- [CVE-2026-118254](https://cve.now/CVE-2026-118254.md): Highcharts Grid: pagination language options are parsed as HTML (CVSS 8.6, highcharts · @highcharts grid-lite +3)
- [CVE-2026-118253](https://cve.now/CVE-2026-118253.md): Highcharts Dashboards: fullscreen labels are parsed as HTML (CVSS 8.4, highcharts · @highcharts dashboards +1)
- [CVE-2026-118252](https://cve.now/CVE-2026-118252.md): Highcharts Dashboards: sidebar component labels are parsed as HTML (CVSS 8.4, highcharts · @highcharts dashboards +1)
- [CVE-2026-118251](https://cve.now/CVE-2026-118251.md): Highcharts: javascript: URL in credits.href runs script on click (CVSS 8.4, highcharts)
- [CVE-2026-118250](https://cve.now/CVE-2026-118250.md): Highcharts: dotted series.keys paths write to Object.prototype (CVSS 7.2, highcharts)
- [CVE-2026-118249](https://cve.now/CVE-2026-118249.md): Highcharts: series column construction writes to Object.prototype (CVSS 7.2, highcharts)
- [CVE-2026-118247](https://cve.now/CVE-2026-118247.md): Highcharts Dashboards / Grid Pro: \`DataTable.setCell\` and column writers treat \`proto\` as an existing column. (CVSS 6.9, highcharts · @highcharts dashboards +3)
- [CVE-2026-118246](https://cve.now/CVE-2026-118246.md): Highcharts Core: \`breadcrumbs.style\` keys become SVG event-handler attributes (CVSS 8.4, highcharts)
- [CVE-2026-118245](https://cve.now/CVE-2026-118245.md): Highcharts Dashboards: \`chartConstructor\` is an unchecked lookup into the Highcharts namespace (CVSS 8.6, highcharts · @highcharts dashboards +1)
- [CVE-2026-118244](https://cve.now/CVE-2026-118244.md): Highcharts Core: AST \`DOMParser\` fallback assigns unsanitized markup to \`innerHTML\` during print (CVSS 7.2, highcharts)
- [CVE-2026-118243](https://cve.now/CVE-2026-118243.md): Highcharts Dashboards: \`proto\` data table id writes sync listeners to \`Object.prototype\` (CVSS 5.3, highcharts · @highcharts/dashboards)
- [CVE-2026-118242](https://cve.now/CVE-2026-118242.md): Highcharts Grid: custom icon definition objects written with raw \`setAttribute\` on \`\<path\>\` (CVSS 8.5, highcharts · @highcharts grid-lite +3)
- [CVE-2026-116797](https://cve.now/CVE-2026-116797.md): Highcharts Grid Pro: cell-renderer \`attributes\` map written with raw \`setAttribute\` (CVSS 8.5, highcharts · @highcharts grid-pro +3)
- [CVE-2026-116796](https://cve.now/CVE-2026-116796.md): Highcharts Core: \`javascript:\` URL in an \`xlink:href\` attribute survives text filtering and reaches exported charts (CVSS 7.2, highcharts)
- [CVE-2026-116795](https://cve.now/CVE-2026-116795.md): RE2JS: Quadratic-time denial of service in re2js lookbehind matching (CVSS 7.5, le0pard re2js · re2js)
- [CVE-2026-59179](https://cve.now/CVE-2026-59179.md): OpenHop: Path Traversal in Flow ID File Operations (CVSS 8.3, naorsabag openhop · @openhop/server)
- [CVE-2026-59176](https://cve.now/CVE-2026-59176.md): Functype: MCP set\_functype\_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import (CVSS 7.8, jordanburke functype · functype-mcp-server)
- [CVE-2026-55369](https://cve.now/CVE-2026-55369.md): Waline login accepts a non-string email as a match-all MongoDB query (CVSS 6.5, walinejs waline · @waline/vercel)
- [CVE-2026-59158](https://cve.now/CVE-2026-59158.md): Nuxt Ollama: public runtime configuration discloses the configured cloud API key (CVSS 7.5, thoda-dev nuxt-ollama · nuxt-ollama)
- [CVE-2026-116693](https://cve.now/CVE-2026-116693.md): dd-trace: ReDOS in URL query string obfuscation (CVSS 8.7, DataDog dd-trace-js · dd-trace)
- [CVE-2026-116689](https://cve.now/CVE-2026-116689.md): follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects (CVSS 5.9, follow-redirects)
- [CVE-2026-116688](https://cve.now/CVE-2026-116688.md): CKEditor: Cross-site scripting (XSS) in the engine package (CVSS 8.1, ckeditor5 · @ckeditor/ckeditor5-engine)
- [CVE-2026-116687](https://cve.now/CVE-2026-116687.md): CKEditor: Cross-site scripting (XSS) in the engine package (CVSS 3.1, ckeditor5 · @ckeditor/ckeditor5-engine)
- [GHSA-F897-62HF-6GXQ](https://cve.now/GHSA-F897-62HF-6GXQ.md): MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length (high (no CVSS), @modelcontextprotocol/sdk · @modelcontextprotocol/server +2)
- [CVE-2026-116675](https://cve.now/CVE-2026-116675.md): TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin \`data-mce-object\` serialization (CVSS 8.5, tinymce · tinymce/tinymce)
- [CVE-2026-116674](https://cve.now/CVE-2026-116674.md): systeminformation: Prototype pollution in \`networkStats()\` via the interface name (CVSS 6.5, sebhildebrandt systeminformation · systeminformation)
- [CVE-2026-116673](https://cve.now/CVE-2026-116673.md): systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net (CVSS 3.3, sebhildebrandt systeminformation · systeminformation)
- [CVE-2026-116584](https://cve.now/CVE-2026-116584.md): Seroval \`fromJSON\`/\`fromCrossJSON\` denial of service via unvalidated array node length (CVSS 7.5, lxsmnsyc seroval · seroval)
- [CVE-2026-116583](https://cve.now/CVE-2026-116583.md): Seroval: Code injection through a typed array's own constructor property (CVSS 5.3, lxsmnsyc seroval · seroval)
- [CVE-2026-116582](https://cve.now/CVE-2026-116582.md): Seroval: Script injection through RegExp sources in serialized output (CVSS 4.7, lxsmnsyc seroval · seroval)
- [CVE-2026-116581](https://cve.now/CVE-2026-116581.md): Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS) (CVSS 7.5, lxsmnsyc seroval · seroval)
- [CVE-2026-116580](https://cve.now/CVE-2026-116580.md): Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check (CVSS 7.3, lxsmnsyc seroval · seroval)
- [CVE-2026-116576](https://cve.now/CVE-2026-116576.md): systeminformation: Windows command injection in services() through Unicode quotation marks (CVSS 7.8, sebhildebrandt systeminformation · systeminformation)
- [CVE-2026-116575](https://cve.now/CVE-2026-116575.md): Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (\_build\_session\_scope) (CVSS 6.3, mem0ai mem0 · mem0ai)
- [CVE-2026-115923](https://cve.now/CVE-2026-115923.md): Backstage catalog rules can be bypassed for URL locations using encoded path segments (CVSS 6.5, backstage · @backstage/plugin-catalog-backend)
- [CVE-2026-115887](https://cve.now/CVE-2026-115887.md): graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service (CVSS 7.5, graphql-hive graphql-scalars · graphql-scalars)
- [CVE-2026-115752](https://cve.now/CVE-2026-115752.md): Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIcon (CVSS 2.3, signalk-server)
- [CVE-2026-115730](https://cve.now/CVE-2026-115730.md): i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl (CVSS 2.3, i18next-http-backend)
- [CVE-2026-106763](https://cve.now/CVE-2026-106763.md): An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and… (CVSS 7.5, @justice8096/sagemath-mcp-server)
- [CVE-2026-106764](https://cve.now/CVE-2026-106764.md): An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function. (CVSS 7.5, @rog0x/mcp-git-tools)
- [CVE-2026-106765](https://cve.now/CVE-2026-106765.md): An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function. (CVSS 7.5, @rog0x/mcp-docker-tools)
- [CVE-2026-113787](https://cve.now/CVE-2026-113787.md): odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values (CVSS 6.1, GitHubNewbie0 odf-kit · odf-kit)
- [CVE-2026-109932](https://cve.now/CVE-2026-109932.md): undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering (CVSS 5.9, undici)
- [CVE-2026-87018](https://cve.now/CVE-2026-87018.md): undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation (CVSS 7.5, undici)
- [CVE-2026-109383](https://cve.now/CVE-2026-109383.md): undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent (CVSS 7.4, undici)
- [CVE-2026-109829](https://cve.now/CVE-2026-109829.md): undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects (CVSS 7.4, undici)
- [CVE-2026-110634](https://cve.now/CVE-2026-110634.md): git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings (CVSS 9.3, danday74 git-diff · git-diff)
- [CVE-2026-107720](https://cve.now/CVE-2026-107720.md): fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set (CVSS 7.4, nearform fast-jwt · fast-jwt)
- [CVE-2026-105863](https://cve.now/CVE-2026-105863.md): Payload authentication token field handling issue (CVSS 9.2, needs attention: First public exploit on GitHub Nov 2, payloadcms payload · payload)
- [CVE-2026-104850](https://cve.now/CVE-2026-104850.md): MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server (CVSS 7.5, modelcontextprotocol typescript-sdk · @modelcontextproto… +1)
- [CVE-2026-93363](https://cve.now/CVE-2026-93363.md): Payload CMS storage-vercel-blob Adapter Improper Access Control on Upload Route (CVSS 5.3, payloadcms payload · @payloadcms/storage-vercel-blob)
- [CVE-2026-76844](https://cve.now/CVE-2026-76844.md): webpack-dev-middleware path traversal in getFilenameFromUrl (CVSS 8.3, webpack-dev-middleware)
- [CVE-2026-72860](https://cve.now/CVE-2026-72860.md): 9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable (CVSS 8.5, decolua 9router)
- [GHSA-62GX-5Q78-WRVX](https://cve.now/GHSA-62GX-5Q78-WRVX.md): obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete (high (no CVSS), obsidian-local-rest-api)
- [CVE-2026-61448](https://cve.now/CVE-2026-61448.md): Parse Server 9.0.0 Stored XSS via malformed Content-Type (CVSS 2.1, parse-community parse-server · parse-server)
- [CVE-2026-61459](https://cve.now/CVE-2026-61459.md): MCP Server Kubernetes \< 3.9.0 Argument Injection via kubectl Structured Tools (CVSS 9.3, Flux159 mcp-server-kubernetes · mcp-server-kubernetes)
- [GHSA-4X48-CGF9-Q33F](https://cve.now/GHSA-4X48-CGF9-Q33F.md): Novu has SSRF via conditions filter webhook bypasses validateUrlSsrf() protection (high (no CVSS), @novu/api)
- [CVE-2025-69985](https://cve.now/CVE-2025-69985.md): FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). (CVSS 9.8, @frangoteam/fuxa)
- [CVE-2026-25939](https://cve.now/CVE-2026-25939.md): FUXA Unauthenticated Remote Arbitrary Scheduler Write (CVSS 9.3, frangoteam FUXA · fuxa-server)
- [CVE-2025-67898](https://cve.now/CVE-2025-67898.md): MJML path traversal in mj-include lets attackers read files (CVSS 4.5, needs attention: First public exploit on GitHub Nov 13, MJML)
- [CVE-2025-55182](https://cve.now/CVE-2025-55182.md): A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0… (CVSS 10.0, KEV, Meta react-server-dom-webpack · Meta react-server-dom-tu… +4)
- [CVE-2025-13204](https://cve.now/CVE-2025-13204.md): CVE-2025-13204 (CVSS 9.8, silentmatt expr-eval · expr-eval +1)
- [CVE-2025-59845](https://cve.now/CVE-2025-59845.md): Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass (CVSS 8.2, needs attention: First public exploit on GitHub Nov 9, apollographql embeddable-explorer · @apollo/sandbox +1)
- [CVE-2023-31719](https://cve.now/CVE-2023-31719.md): FUXA \<= 1.1.12 is vulnerable to SQL Injection via /api/signin (CVSS 9.8, fuxa-server)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/npm
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.