The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,845
Mitigations18,585
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
systeminformation< 5.33.14
npm: systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net
3.3
12 minutes ago
systeminformation< 5.33.13
npm: systeminformation has prototype pollution in `networkStats()` via the interface name
6.5
12 minutes ago
graphql-scalars<= 2.0.0
npm: graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service
7.5
13 minutes ago
i18next-http-backend< 4.0.4
npm: i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string
3.7
16 minutes ago
re2js>= 2.2.0, < 2.8.7
npm: RE2JS: Quadratic-time denial of service in re2js lookbehind matching
7.5
16 minutes ago
i18next-http-backend< 4.0.3
npm: i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)
3.1
18 minutes ago
happy-dom<= 20.14.6
npm: Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML
8.6
19 minutes ago
@intlify/vue-i18n-core>= 9.2.0-alpha.7, < 11.4.14
npm: Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list
2.1
19 minutes ago
petite-vue-i18n>= 9.2.0-alpha.7, < 11.4.14
npm: Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list
2.1
19 minutes ago
@intlify/core-base>= 9.0.0-beta.12, < 11.4.14
npm: Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list
2.1
19 minutes ago
@intlify/core>= 9.0.0-beta.10, < 11.4.14
npm: Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list
2.1
19 minutes ago
vue-i18n>= 9.0.0-beta.5, < 11.4.14
npm: Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list
2.1
19 minutes ago
@intlify/shared9.14.5
npm: Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages
7.2
19 minutes ago
@intlify/vue-i18n-core9.14.5
npm: Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages
7.2
19 minutes ago
@intlify/core9.14.5
npm: Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages
7.2
19 minutes ago
@intlify/core-base9.14.5
npm: Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages
7.2
19 minutes ago
petite-vue-i18n9.14.5
npm: Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages
7.2
19 minutes ago
vue-i18n9.14.5
npm: Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages
7.2
19 minutes ago
happy-dom<= 20.14.5
npm: Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies
6.5
20 minutes ago
@graphql-tools/executor-legacy-ws<= 1.1.35
npm: GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
8.2
21 minutes ago