Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-55284Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Codenpm · @anthropic-ai/claude-code · fixed in 1.0.4
- CVE-2025-55285@backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`npm · @backstage/plugin-scaffolder-backend · fixed in 2.1.1
- CVE-2025-55207@astrojs/node's trailing slash handling causes open redirect issuenpm · @astrojs/node · fixed in 9.4.1
- CVE-2025-8943Unsupervised OS command execution leads to remote code execution by unauthenticated network attackersnpm · flowise · fixed in 3.0.1
- CVE-2025-55346Unintended dynamic code execution leads to remote code execution by network attackersnpm · flowise
- CVE-2025-55164content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCEnpm · content-security-policy-parser · fixed in 0.6.0
- CVE-2025-55008AuthKit React Router: Sensitive auth data rendered in HTMLnpm · @workos-inc/authkit-react-router · fixed in 0.7.0
- CVE-2025-55009AuthKit: Sensitive auth data rendered in HTMLnpm · @workos-inc/authkit-remix · fixed in 0.15.0
- CVE-2025-54888@fedify/fedify: Improper Authentication and Incorrect Authorizationnpm · @fedify/fedify · fixed in 1.3.20, 1.4.13, 1.5.5 and more
- CVE-2025-55152oak: ReDoS in x-forwarded-proto and x-forwarded-for headersnpm · @oakserver/oak
- CVE-2025-54793Astro: Duplicate trailing slash feature can lead to Open Redirectsnpm · astro · fixed in 5.12.8
- CVE-2025-54798tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameternpm · tmp · fixed in 0.2.4
- CVE-2025-54885Thinbus generates insufficient entropy: 252 bits vs minimum 256 bitsnpm · thinbus-srp · fixed in 2.0.1
- CVE-2025-54387IPX is Vulnerable to Path Traversal via Prefix Matching Bypassnpm · ipx · fixed in 1.3.2, 2.1.1, 3.1.1
- CVE-2025-54794Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file accessnpm · @anthropic-ai/claude-code · fixed in 0.2.111
- CVE-2025-54795Claude Code echo command allowed bypass of user approval prompt for command executionnpm · @anthropic-ai/claude-code · fixed in 1.0.20
- CVE-2025-54803js-toml is vulnerable to Prototype Pollutionnpm · js-toml · fixed in 1.0.2
- CVE-2025-54782@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developersnpm · @nestjs/devtools-integration · fixed in 0.2.1
- CVE-2025-54590webfinger.js is vulnerable to Blind SSRF attacks through localhostnpm · webfinger.js · fixed in 2.8.1
- CVE-2025-34146nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoSnpm · @nyariv/sandboxjs · fixed in 0.8.24
- CVE-2025-54586GitProxy is susceptible to a hidden commits injection attacknpm · @finos/git-proxy · fixed in 1.19.2
- CVE-2025-54585GitProxy is vulnerable to a new branch approval exploitnpm · @finos/git-proxy · fixed in 1.19.2
- CVE-2025-54584GitProxy is vulnerable to a packfile parsing exploitnpm · @finos/git-proxy · fixed in 1.19.2
- CVE-2025-54583GitProxy bypasses approvals when pushing multiple branchesnpm · @finos/git-proxy · fixed in 1.19.2
- CVE-2025-54419Node-SAML Contains SAML Signature Verification Vulnerabilitynpm · @node-saml/node-saml, @node-saml/passport-saml +1 · fixed in 5.1.0
- CVE-2025-8267Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete denylist of IP addrnpm · ssrfcheck · fixed in 1.2.0
- CVE-2025-54378HAX CMS Backend Lacks Comprehensive Authorization Checksnpm · @haxtheweb/haxcms-nodejs · fixed in 11.0.14
- CVE-2025-8101Linkify 4.3.1 - Prototype Pollution & HTML Attribute Injection (XSS)npm · linkifyjs · fixed in 4.3.2
- CVE-2025-8129KoaJS Koa HTTP Header response.js back redirectnpm · koa · fixed in 2.16.2, 3.0.1
- CVE-2025-8021All versions of the package files-bucket-server are vulnerable to Directory Traversal where an attacker can traverse the file system and accnpm · files-bucket-server