Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-59140backslash@0.2.1 contains malware after npm account takeovernpm · backslash · fixed in 0.2.2
- CVE-2025-59155hackmd-mcp server-side request forgery in HTTP transport modenpm · hackmd-mcp · fixed in 1.5.0
- CVE-2025-58177n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameternpm · n8n · fixed in 1.107.0
- CVE-2025-59364The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/npm · express-xss-sanitizer · fixed in 2.0.1
- CVE-2025-58434Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeovernpm · flowise · fixed in 3.0.6
- CVE-2025-59139Hono has Body Limit Middleware Bypassnpm · hono · fixed in 4.9.7
- CVE-2025-58754Axios is vulnerable to DoS attack through lack of data size checknpm · axios · fixed in 1.12.0, 0.30.2
- CVE-2025-9910Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin.npm · jsondiffpatch · fixed in 0.7.2
- CVE-2025-59052Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakagenpm · @angular/platform-server, @angular/ssr +1 · fixed in 18.2.14, 20.3.0, 19.2.15 and more
- CVE-2025-59049Mockoon has a Path Traversal and LFI in the static file serving endpointnpm · @mockoon/cli, @mockoon/commons-server · fixed in 9.2.0
- CVE-2025-59041Claude Code vulnerable to arbitrary code execution caused by maliciously configured git emailnpm · @anthropic-ai/claude-code · fixed in 1.0.105
- CVE-2025-58764Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command executionnpm · @anthropic-ai/claude-code · fixed in 1.0.105
- CVE-2025-57520A Cross Site Scripting (XSS) vulnerability exists in Decap CMS thru 3.8.3.npm · decap-cms
- CVE-2025-59046interactive-git-checkout has Command Injection vulnerabilitynpm · interactive-git-checkout
- CVE-2025-59039Prebid Universal Creative on npm briefly compromisednpm · prebid-universal-creative
- CVE-2025-59038Prebid.js NPM package briefly compromisednpm · prebid.js · fixed in 10.10.0
- CVE-2025-59037DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malwarenpm · @duckdb/duckdb-wasm, @duckdb/node-api +2 · fixed in 1.30.0, 1.3.4-alpha.27, 1.3.4
- CVE-2025-58765wabac.js has XSS vulnerability in 404 error handling logicnpm · @webrecorder/archivewebpage, @webrecorder/wabac +1 · fixed in 0.15.4, 2.23.11, 2.3.17
- CVE-2025-57665Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security abnpm · element-plus
- CVE-2025-58752Vite's `server.fs` settings were not applied to HTML filesnpm · vite · fixed in 7.1.5, 7.0.7, 6.3.6 and more
- CVE-2025-58751Vite middleware may serve files starting with the same name with the public directorynpm · vite · fixed in 7.1.5, 7.0.7, 6.3.6 and more
- CVE-2025-58451Cattown Vulnerable to Inefficient Regular Expression Complexity and Uncontrolled Resource Consumptionnpm · cattown · fixed in 1.0.2
- CVE-2025-58444MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Servernpm · @modelcontextprotocol/inspector · fixed in 0.16.6
- CVE-2025-54994@akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` APInpm · @akoskm/create-mcp-server-stdio · fixed in 0.0.13
- CVE-2025-10097SimStudioAI sim route.ts code injectionnpm · simstudio
- CVE-2019-25225`sanitize-html` prior to version 2.0.0-beta is vulnerable to Cross-site Scripting (XSS).npm · sanitize-html · fixed in 2.0.0-beta
- CVE-2025-56265An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbinpm · @n8n/n8n-nodes-langchain · fixed in 1.107.0
- CVE-2025-57285codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function (lib/utils.js).npm · codeceptjs · fixed in 3.7.5
- CVE-2025-58362Hono contains a flaw in URL path parsing, potentially leading to path confusionnpm · hono · fixed in 4.9.6
- CVE-2025-58179Astro Cloudflare adapter is vulnerable to Server-Side Request Forgery via /_image endpointnpm · @astrojs/cloudflare · fixed in 12.6.6