Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-66405Portkey.ai Gateway: Server-Side Request Forgery (SSRF) in Custom Hostnpm · @portkey-ai/gateway · fixed in 1.14.0
- CVE-2025-66400mdast-util-to-hast unsanitized class attributenpm · mdast-util-to-hast · fixed in 13.2.1
- CVE-2025-66420Tryton sao (aka tryton-sao) before 7.6.9 allows XSS via an HTML attachment.npm · tryton-sao · fixed in 7.6.9, 7.4.19, 7.0.38 and more
- CVE-2025-66421Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values.npm · tryton-sao · fixed in 7.6.11, 7.4.21, 7.0.40 and more
- CVE-2025-66219willitmerge has a command Injection vulnerabilitynpm · willitmerge
- CVE-2025-12758Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in thenpm · validator · fixed in 13.15.22
- CVE-2025-66030node-forge ASN.1 OID Integer Truncationnpm · node-forge · fixed in 1.3.2
- CVE-2025-66031node-forge ASN.1 Unbounded Recursionnpm · node-forge · fixed in 1.3.2
- CVE-2025-66035Angular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLsnpm · @angular/common · fixed in 21.0.1, 20.3.14, 19.2.16
- CVE-2025-66028OneUptime is Vulnerable to Privilege Escalation via Login Response Manipulationnpm · @oneuptime/common · fixed in 8.0.5567
- CVE-2025-65966OneUptime Unauthorized User Creation via APInpm · @oneuptime/common · fixed in 9.1.0
- CVE-2025-66020Valibot has a ReDoS vulnerability in `EMOJI_REGEX`npm · valibot · fixed in 1.2.0
- CVE-2025-12816CVE-2025-12816npm · node-forge · fixed in 1.3.2
- CVE-2025-65944Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`npm · @sentry/astro, @sentry/aws-serverless +10 · fixed in 10.27.0
- CVE-2025-13466body-parser vulnerable to denial of service when url encoding is usednpm · body-parser · fixed in 2.2.1
- CVE-2025-65108md-to-pdf is vulnerable to arbitrary JavaScript code execution when parsing front matternpm · md-to-pdf · fixed in 5.2.5
- CVE-2025-64767hpke-js reuses AEAD noncesnpm · @hpke/core · fixed in 1.7.5
- CVE-2025-64762authkit-nextjs may let session cookies be cached in CDNsnpm · @workos-inc/authkit-nextjs · fixed in 2.11.1
- CVE-2025-64755@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writesnpm · @anthropic-ai/claude-code · fixed in 2.0.31
- CVE-2025-13437Arbitrary node_modules Directory Deletion in Google zxnpm · zx · fixed in 8.8.5
- CVE-2025-60794Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/usenpm · @perfood/couch-auth
- CVE-2025-65099Claude Code vulnerable to command execution prior to startup trust dialognpm · @anthropic-ai/claude-code · fixed in 1.0.39
- CVE-2025-64765Astro middleware authentication checks based on url.pathname can be bypassed via url encoded valuesnpm · astro · fixed in 5.15.8
- CVE-2025-64764Astro is vulnerable to Reflected XSS via the server islands featurenpm · astro · fixed in 5.15.8
- CVE-2025-65019Astro Cloudflare adapter has a Stored Cross Site Scripting vulnerability in /_image endpointnpm · astro · fixed in 5.15.9
- CVE-2025-64757Astro Development Server is Vulnerable to Arbitrary Local File Readnpm · astro · fixed in 5.14.3
- CVE-2025-64756glob CLI: Command injection via -c/--cmd executes matches with shell:truenpm · glob · fixed in 11.1.0, 10.5.0
- CVE-2025-64758@dependencytrack/frontend Vulnerable to Persistent Cross-Site-Scripting via Welcome Messagenpm · @dependencytrack/frontend · fixed in 4.13.6
- CVE-2025-13033Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflictnpm · nodemailer · fixed in 7.0.7
- CVE-2025-13204CVE-2025-13204npm · expr-eval, expr-eval-fork · fixed in 2.0.2