Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-64530@apollo/composition has Improper Enforcement of Access Control on Interface Types and Fieldsnpm · @apollo/composition · fixed in 2.9.5, 2.10.4, 2.11.5 and more
- CVE-2025-64749Directus Vulnerable to Information Leakage in Existing Collectionsnpm · @directus/api, directus · fixed in 32.0.0, 11.13.0
- CVE-2025-64748Directus's conceal fields are searchable if read permissions enablednpm · @directus/api, directus · fixed in 32.0.0, 11.13.0
- CVE-2025-64747Directus Vulnerable to Stored Cross-site Scriptingnpm · directus · fixed in 11.13.0
- CVE-2025-64746Directus has Improper Permission Handling on Deleted Fieldsnpm · directus · fixed in 11.13.0
- CVE-2025-64745Astro development server error page vulnerable to reflected Cross-site Scriptingnpm · astro · fixed in 5.15.6
- CVE-2025-59840Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variablenpm · vega, vega-expression +1 · fixed in 6.2.0, 6.1.0, 5.2.1 and more
- CVE-2025-64525Astro: URL manipulation via unsanitized headers leads to path-based middleware protections bypass, potential SSRF/cache-poisoning, CVE-2025-61925 bypassnpm · astro · fixed in 5.15.5
- CVE-2025-64718js-yaml has prototype pollution in merge (<<)npm · js-yaml · fixed in 4.1.1, 3.14.2
- CVE-2025-64502Parse Server allows public `explain` queries which may expose sensitive database performance information and schema detailsnpm · parse-server · fixed in 8.5.0-alpha.5
- CVE-2025-12613Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values cnpm · cloudinary · fixed in 2.7.0
- CVE-2025-12919EverShop Order Order.resolvers.js resource injectionnpm · @evershop/evershop
- CVE-2025-64496Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Eventsnpm · open-webui · fixed in 0.6.35
- CVE-2025-64495Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCEnpm · open-webui · fixed in 0.6.35
- CVE-2025-64430Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Formatnpm · parse-server · fixed in 7.5.4, 8.4.0-alpha.2
- CVE-2025-48985A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta.npm · ai · fixed in 5.0.52, 5.1.0-beta.9
- CVE-2025-52662A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***.npm · @nuxt/devtools · fixed in 2.6.4
- CVE-2025-12735CVE-2025-12735npm · expr-eval, expr-eval-fork · fixed in 3.0.1
- CVE-2025-11953Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requestsnpm · @react-native-community/cli, @react-native-community/cli-server-api · fixed in 20.0.0, 19.1.2, 18.0.1
- CVE-2025-64118node-tar vulnerable to race condition leading to uninitialized memory exposurenpm · tar · fixed in 7.5.2
- CVE-2025-62726n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hooknpm · n8n · fixed in 1.113.0
- CVE-2025-60542SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call unpm · typeorm · fixed in 0.3.26
- CVE-2025-59837astro allows bypass of image proxy domain validation leading to SSRF and potential XSSnpm · astro · fixed in 5.13.10
- CVE-2025-62517Rollbar.js Prototype Pollution Vulnerability in merge()npm · rollbar · fixed in 2.26.5, 3.0.0-beta5
- CVE-2025-62713Kottster app reinitialization can be re-triggered allowing command injection in development modenpm · @kottster/server · fixed in 3.3.2
- CVE-2025-62610Hono Improperly Authorizes JWT Audience Validationnpm · hono · fixed in 4.10.2
- CVE-2025-62595Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logicnpm · koa · fixed in 3.0.3, 2.16.3
- CVE-2025-62522vite allows server.fs.deny bypass via backslash on Windowsnpm · vite · fixed in 7.1.11, 7.0.8, 6.4.1 and more
- CVE-2025-62505SSRF in lobehub/lobe-chat with native web fetch modulenpm · @lobehub/chat · fixed in 1.136.2
- CVE-2025-11849Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of thnpm · mammoth · fixed in 1.11.0