Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-8020All versions of the package private-ip are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide an IP or hostname npm · private-ip
- CVE-2025-54139HAX CMS' application pages are vulnerable to clickjackingnpm · @haxtheweb/haxcms-nodejs · fixed in 11.0.13
- CVE-2025-54137NodeJS version of the HAX CMS application is distributed with Default Secretsnpm · @haxtheweb/haxcms-nodejs · fixed in 11.0.10
- CVE-2025-54134HAX CMS NodeJs's Improper Error Handling Leads to Denial of Servicenpm · @haxtheweb/haxcms-nodejs · fixed in 11.0.9
- CVE-2025-54128HAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site Scriptingnpm · @haxtheweb/haxcms-nodejs · fixed in 11.0.8
- CVE-2025-54127HAXcms's Insecure Default Configuration Leads to Unauthenticated Accessnpm · @haxtheweb/haxcms-nodejs · fixed in 11.0.7
- CVE-2025-53832@translated/lara-mcp vulnerable to command injection in import_tmx toolnpm · @translated/lara-mcp · fixed in 0.0.12
- CVE-2025-54313eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise.npm · @pkgr/core, eslint-config-prettier +4 · fixed in 0.2.9, 8.10.2, 9.1.2 and more
- CVE-2025-7783Usage of unsafe random function in form-data for choosing boundarynpm · form-data · fixed in 2.5.4, 3.0.4, 4.0.4
- CVE-2025-54075mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)npm · @nuxtjs/mdc · fixed in 0.17.2
- CVE-2025-54073mcp-package-docs vulnerable to command injection in several toolsnpm · mcp-package-docs · fixed in 0.1.28
- CVE-2025-54070OpenZeppelin Contracts's Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffersnpm · @openzeppelin/contracts, @openzeppelin/contracts-upgradeable · fixed in 5.4.0
- CVE-2025-7339on-headers vulnerable to http response header manipulationnpm · on-headers · fixed in 1.1.0
- CVE-2025-7338Multer vulnerable to Denial of Service via unhandled exception from malformed requestnpm · multer · fixed in 2.0.2
- CVE-2025-54066DiracX-Web login page has Open Redirect vulnerabilitynpm · @dirac-grid/diracx-web-components · fixed in 0.1.0-a8
- CVE-2025-53892Intlify Vue I18n's escapeParameterHtml does not prevent DOM-based XSS via tag attributes like onerrornpm · @intlify/core, @intlify/core-base +3 · fixed in 9.14.5, 10.0.8, 11.1.10
- CVE-2025-53889Directus missing permission checks for manual trigger Flowsnpm · directus · fixed in 11.9.0
- CVE-2025-53887Directus's exact version number is exposed by the OpenAPI Specnpm · directus · fixed in 11.9.0
- CVE-2025-53886Directus doesn't redact tokens in Flow logsnpm · directus · fixed in 11.9.0
- CVE-2025-53885Directus doesn't redact sensitive user data when logging via event hooksnpm · directus · fixed in 11.9.0
- CVE-2025-53818github-kanban-mcp-server Command Injection vulnerabilitynpm · @sunwood-ai-labs/github-kanban-mcp-server
- CVE-2025-53626pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluationnpm · @pdfme/common · fixed in 5.4.1
- CVE-2025-53364Parse Server exposes the data schema via GraphQL APInpm · parse-server · fixed in 8.2.2, 7.5.3
- CVE-2025-53624docusaurus-plugin-content-gists Exposes GitHub Personal Access Tokennpm · docusaurus-plugin-content-gists · fixed in 4.0.0
- CVE-2025-53620Crashing any Qwik Servernpm · @builder.io/qwik-city · fixed in 1.13.0
- CVE-2025-53548@clerk/backend Performs Insufficient Verification of Data Authenticitynpm · @clerk/astro, @clerk/backend +7 · fixed in 2.10.2, 2.4.0, 1.7.4 and more
- CVE-2025-6514OS command injection in mcp-remote when connecting to untrusted MCP serversnpm · mcp-remote · fixed in 0.1.16
- CVE-2025-53355mcp-server-kubernetes vulnerable to command injection in several toolsnpm · mcp-server-kubernetes · fixed in 2.5.0
- CVE-2025-53372node-code-sandbox-mcp has a Sandbox Escape via Command Injectionnpm · node-code-sandbox-mcp · fixed in 1.3.0
- CVE-2025-53535Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routesnpm · better-auth · fixed in 1.2.10