The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,030
Mitigations18,239
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@angular/common<= 19.2.25
NPM: @angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
5.9
1 hour ago
markdown-it>= 14.1.0, < 14.3.3
NPM: markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)
7.5
1 hour ago
markdown-it< 14.3.3
NPM: markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled
3.7
1 hour ago
@modelcontextprotocol/server>= 2.0.0, < 2.3.0
NPM: MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
7.7
1 hour ago
@modelcontextprotocol/server>= 2.0.0, < 2.3.0
NPM: MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
7.5
1 hour ago
@modelcontextprotocol/sdk>= 1.3.0, < 1.32.0
NPM: MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
7.5
1 hour ago
vite-plus<= 1.0.0
NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
6.3
1 hour ago
vite<= 6.4.3
NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
6.3
1 hour ago
launch-editor<= 2.14.1
NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
6.3
1 hour ago
vite-plus<= 1.0.0
NPM: launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
7.5
1 hour ago
vite<= 6.4.3
NPM: launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
7.5
1 hour ago
launch-editor<= 2.14.1
NPM: launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
7.5
1 hour ago
@modelcontextprotocol/server-legacy>= 2.0.0, < 2.3.1
NPM: MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
6.8
1 hour ago
@modelcontextprotocol/express>= 2.0.0, < 2.0.2
NPM: MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
6.8
1 hour ago
@modelcontextprotocol/server>= 2.0.0, < 2.3.0
NPM: MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
6.8
1 hour ago
@modelcontextprotocol/sdk>= 1.6.0, < 1.32.0
NPM: MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
6.8
1 hour ago
vite-plus<= 1.0.0
NPM: launch-editor: escapeCmdArgs() omits % escaping on Windows
6.3
3 hours ago
vite<= 6.4.3
NPM: launch-editor: escapeCmdArgs() omits % escaping on Windows
6.3
3 hours ago
launch-editor<= 2.14.1
NPM: launch-editor: escapeCmdArgs() omits % escaping on Windows
6.3
3 hours ago
@modelcontextprotocol/sdk>= 1.24.0, < 1.32.0
NPM: MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
8.6
3 hours ago