The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,798
Mitigations19,218
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@microsoft/aspire-cli-osx-arm64>= 13.4.2, < 13.6.5
Aspire Information Disclosure Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli-osx-x64>= 13.4.2, < 13.6.5
Aspire Information Disclosure Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli-linux-musl-x64>= 13.4.2, < 13.6.5
Aspire Information Disclosure Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli-linux-arm64>= 13.4.2, < 13.6.5
Aspire Information Disclosure Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli-linux-x64>= 13.4.2, < 13.6.5
Aspire Information Disclosure Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli>= 13.4.2, < 13.6.5
Aspire Information Disclosure Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli-osx-arm64>= 13.4.2, < 13.6.5
Aspire Elevation of Privilege Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli-osx-x64>= 13.4.2, < 13.6.5
Aspire Elevation of Privilege Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli-linux-musl-x64>= 13.4.2, < 13.6.5
Aspire Elevation of Privilege Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli-linux-arm64>= 13.4.2, < 13.6.5
Aspire Elevation of Privilege Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli-linux-x64>= 13.4.2, < 13.6.5
Aspire Elevation of Privilege Vulnerability
7.3
5 hours ago
@microsoft/aspire-cli>= 13.4.2, < 13.6.5
Aspire Elevation of Privilege Vulnerability
7.3
5 hours ago
node-forge<= 1.4.2
npm: Forge: Ed25519 signature verification accepts small-order public keys
3.7
8 hours ago
node-forge<= 1.4.2
npm: Forge: TLS client crash on an unsupported ServerHello compression method
5.9
8 hours ago
node-forge>= 0.1.2, <= 1.4.2
npm: Forge: ReDoS in forge.http response header and cookie trimming
5.9
8 hours ago
node-forge<= 1.4.2
npm: Forge: TLS client crash on a handshake record received without a session
5.9
8 hours ago
fast-xml-parser<= 5.11.2
npm: fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tags
3.7
8 hours ago
mongoose< 6.13.12
npm: Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collections
4.8
8 hours ago
mongoose< 6.13.12
npm: Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of service) and shared schema state
8.2
8 hours ago
mongoose< 6.13.12
npm: Mongoose: Prototype pollution via Schema.prototype.virtual()
6.5
8 hours ago