npm / @threadplane/render
@threadplane/render 0.3.7
RiskcriticalVulnscritical- processes
- 820
- operations
- 68K
- packages
- 2,229
- compiler runs
- 0
- connections
- 3
- build time
- 23s
- job time
- 23s
- capture
- 985 KB
- records
- 119K
- bytes / record
- 8.3
Angular render engine for agent-generated UI: maps JSON specs onto your own design-system components.
Graph
- Credential store contents reached a network peersecret-exfil · critical
- Credential store read by build-time codecredential-read · high
- Build script reached threadplane.aiegress · medium
- 9382f7d2e0602446ba491db768feb190c5aabebc8b508cb6bffddcce537bb08490a6d9ea34bbbb4eb75b142b3d2766ec65dea7d0cbc39e4385cbd35118fcfile · retained · retained
Loading the graph
Loading the graph
Loading the graph
Checks
13 of 18 clear Network activity Sensitive data access and transfer +3 moreBuild behavior▲▲✓✓✓✓✓✓✓✓
Supply chain▲▲✓✓✓✓▲
Pipeline✓
Detections
4-
criticalCredential store contents reached a network peer
-
highCredential store read by build-time code
-
mediumBuild script reached threadplane.ai
-
lowPublished tarball holds code its source does not
Network
3 peers- threadplane.ai:443 undeclared
- github.com:443 infrastructure
- registry.npmjs.org:8080 ecosystem
| Vulnerabilities414 | Fix | Severity | |
|---|---|---|---|
| Dependencies | |||
| @xhmikosr/decompress 10.2.0 | >=10.2.2 | ||
| CVE-2026-101894 | @xhmikosr/decompress: Path traversal via symlink chain | critical | |
| CVE-2026-53486 | Decompress: Archive extraction can create files and links outside of the target directory | critical | |
| anyio 4.13.0, 4.14.0 | >=4.14.2 | ||
| CVE-2026-63374 | AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing | critical | |
| CVE-2026-63349 | AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups | high | |
| CVE-2026-64847 | AnyIO process-pool workers can block indefinitely on undrained stderr | medium | |
| certifi 2026.2.25, 2026.4.22, 2026.5.20, 2026.6.17, 2026.7.22 | >=2026.10.18 | ||
| GHSA-6q48-6c7w-9gw2 | certifi bundles emSign root CAs with compromised intermediate CA keys | critical | |
| handlebars 4.7.8 | >=4.7.10 | ||
| CVE-2026-106445 | Handlebars: JavaScript Injection via Own Property Check Bypass | critical | |
| CVE-2026-106446 | Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937) | critical | |
| CVE-2026-33937 | Handlebars.js has JavaScript Injection via AST Type Confusion | critical | |
| CVE-2026-33938 | Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block | high | |
| CVE-2026-33939 | Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation | high | |
| CVE-2026-33940 | Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial | high | |
| CVE-2026-33941 | Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options | high | |
| CVE-2026-106444 | Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates | medium | |
| CVE-2026-33916 | Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection | medium | |
| GHSA-7rx3-28cr-v5wh | Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry | medium | |
| GHSA-442j-39wm-28r2 | Handlebars.js has a Property Access Validation Bypass in container.lookup | low | |
| next 16.2.12 | >=16.4.1 | ||
| CVE-2026-75604 | Next.js: Unauthenticated Remote Code Execution on windows-hosted servers | critical | |
| GHSA-2464-fhr4-w9xw | Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used | critical | |
| GHSA-2xp9-vwfh-vxw4 | Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used | critical | |
| GHSA-673q-mjm6-r5xr | Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays | critical | |
| GHSA-vcvr-r3jv-pc5j | Next.js: Remote Code Execution in next/og ImageResponse | critical | |
| CVE-2026-94482 | Next.js: Denial of Service in App Router using Server Actions | high | |
| CVE-2026-94483 | Next.js has Server-Side Request Forgery in Image Optimization | high | |
| CVE-2026-94484 | Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service | medium | |
| CVE-2026-94485 | Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass | medium | |
| CVE-2026-94543 | Next.js has cache poisoning of SSG and ISR pages in self-hosted applications | medium | |
| CVE-2026-94486 | Next.js has information disclosure in development server's Model Context Protocol endpoint | low | |
| piscina 4.9.2, 5.1.4 | >=4.9.4 | ||
| CVE-2026-102992 | piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env | critical | |
| CVE-2026-55388 | piscina: Prototype Pollution Gadget → RCE via inherited options.filename | high | |
| proxy-addr 2.0.7 | >=2.0.8 | ||
| CVE-2026-90711 | proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet | critical | |
| pyjwt 2.12.1, 2.13.0 | none published | ||
| CVE-2026-102268 | PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard | critical | |
| CVE-2026-102266 | PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation | high | |
| CVE-2026-102267 | PyJWT: PyJWKClient follows redirects when fetching JWKS | high | |
| CVE-2026-102271 | PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard | high | |
| CVE-2026-102272 | PyJWT BOM Bypass | high | |
| CVE-2026-102273 | PyJWT accepts public JWK containers as HMAC secrets | high | |
| CVE-2026-48526 | PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed | high | |
| GHSA-pxh4-856f-4h89 | PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery | high | |
| CVE-2026-101917 | PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524) | medium | |
| CVE-2026-101918 | PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False) | medium | |
| CVE-2026-102265 | PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header | medium | |
| CVE-2026-102269 | PyJWT: Non-canonical signature segments enable raw-token revocation bypass | medium | |
| CVE-2026-102270 | PyJWT: ReDoS vulnerability when calling the `is_pem_format` function. | medium | |
| CVE-2026-102274 | PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set | medium | |
| CVE-2026-102275 | PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion | medium | |
| CVE-2026-103001 | PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse | medium | |
| CVE-2026-48522 | PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp://, data: schemes | medium | |
| CVE-2026-48523 | PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` / `PyJWKClient` keys | medium | |
| CVE-2026-48525 | PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS | medium | |
| CVE-2026-48524 | PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) | low | |
| shell-quote 1.8.3 | >=1.9.0 | ||
| CVE-2026-9277 | shell-quote quote() does not escape newlines in object .op values | critical | |
| CVE-2026-13311 | shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407) | high | |
| tar 7.5.11 | >=7.5.21 | ||
| CVE-2026-59873 | node-tar: Decompression/parse DoS via unlimited input | critical | |
| CVE-2026-59874 | node-tar: Negative tar entry size causes infinite loop in archive replace | high | |
| CVE-2026-73566 | node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection | high | |
| CVE-2026-53655 | node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) | medium | |
| CVE-2026-59871 | node-tar: Process crash via PAX numeric path type confusion | medium | |
| CVE-2026-59875 | node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records | medium | |
| websocket-driver 0.7.4 | >=0.7.5 | ||
| CVE-2026-54466 | websocket-driver: Message corruption via abuse of protocol length headers | critical | |
| CVE-2026-54490 | websocket-driver: Resource limit bypass via message compression | medium | |
| @angular/common 21.1.6 | >=21.2.20 | ||
| CVE-2026-50170 | @angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache | high | |
| CVE-2026-50171 | @angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo) | high | |
| CVE-2026-54266 | @angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning | high | |
| CVE-2026-54268 | @angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate) | high | |
| CVE-2026-68945 | Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning | high | |
| CVE-2026-88059 | Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent` | medium | |
| @angular/compiler 21.1.6 | >=21.2.20 | ||
| CVE-2026-32635 | Angular vulnerable to XSS in i18n attribute bindings | high | |
| CVE-2026-69151 | Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes | high | |
| CVE-2026-50557 | Angular: Template and Attribute Namespace Sanitization Bypass (XSS) | medium | |
| CVE-2026-54265 | @angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS) | medium | |
| CVE-2026-88057 | Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler | medium | |
| @angular/core 21.1.6 | >=21.2.20 | ||
| CVE-2026-32635 | Angular vulnerable to XSS in i18n attribute bindings | high | |
| CVE-2026-54267 | Angular Client Hydration DOM Clobbering & Response-Cache Poisoning | high | |
| CVE-2026-69151 | Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes | high | |
| CVE-2026-50557 | Angular: Template and Attribute Namespace Sanitization Bypass (XSS) | medium | |
| CVE-2026-52725 | @angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS) | medium | |
| CVE-2026-88057 | Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler | medium | |
| @angular/router 21.1.6 | >=21.2.25 | ||
| CVE-2026-101896 | Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters | high | |
| CVE-2026-111752 | @angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR) | high | |
| @babel/plugin-transform-modules-systemjs 7.29.0 | >=7.29.4 | ||
| CVE-2026-44728 | @babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input | high | |
| @fastify/busboy 2.1.1 | >=3.2.2 | ||
| CVE-2026-19481 | @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header | high | |
| CVE-2026-74866 | @fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name | medium | |
| @modelcontextprotocol/sdk 1.26.0 | >=1.32.0 | ||
| CVE-2026-104850 | MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server | high | |
| CVE-2026-111767 | MCP TypeScript SDK: Experimental tasks were not tied to the session that created them | high | |
| CVE-2026-111768 | MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation | high | |
| GHSA-f897-62hf-6gxq | MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length | high | |
| CVE-2026-111769 | MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies | medium | |
| CVE-2026-111771 | MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service | medium | |
| @modelcontextprotocol/server 2.0.0 | >=2.3.0 | ||
| CVE-2026-111768 | MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation | high | |
| CVE-2026-111770 | MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another | high | |
| GHSA-f897-62hf-6gxq | MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length | high | |
| CVE-2026-111771 | MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service | medium | |
| adm-zip 0.5.16 | none published | ||
| CVE-2026-102282 | adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation | high | |
| CVE-2026-39244 | adm-zip: Crafted ZIP file triggers 4GB memory allocation | high | |
| CVE-2026-77301 | adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) | high | |
| GHSA-8238-w5pm-2374 | adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS) | high | |
| GHSA-rcw4-f5rp-g42v | adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0 | high | |
| CVE-2026-76845 | adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite | medium | |
| GHSA-c6fg-446q-cg94 | adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path | medium | |
| GHSA-p634-w6r4-rjp2 | adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content | medium | |
| axios 1.13.6 | >=1.20.0 | ||
| CVE-2026-101898 | Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls | high | |
| CVE-2026-101901 | Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization | high | |
| CVE-2026-42033 | Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking | high | |
| CVE-2026-42035 | Axios: Header Injection via Prototype Pollution | high | |
| CVE-2026-42043 | Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0 | high | |
| CVE-2026-42264 | Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking | high | |
| CVE-2026-44486 | Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection | high | |
| CVE-2026-44487 | Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter | high | |
| CVE-2026-44488 | Allocation of Resources Without Limits or Throttling in Axios | high | |
| CVE-2026-44494 | axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy` | high | |
| CVE-2026-44495 | axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge | high | |
| CVE-2026-44496 | Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection | high | |
| CVE-2025-62718 | Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF | medium | |
| CVE-2026-101900 | Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders | medium | |
| CVE-2026-101902 | Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method | medium | |
| CVE-2026-101904 | Axios: Header Injection via Inherited headers After Minimal Interceptor | medium | |
| CVE-2026-101908 | Axios: Prototype pollution gadget in fetch adapter can alter outbound requests | medium | |
| CVE-2026-40175 | Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain | medium | |
| CVE-2026-42034 | Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0 | medium | |
| CVE-2026-42036 | Axios: HTTP adapter streamed responses bypass maxContentLength | medium | |
| CVE-2026-42037 | Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream | medium | |
| CVE-2026-42038 | Axios: no_proxy bypass via IP alias allows SSRF | medium | |
| CVE-2026-42039 | Axios: unbounded recursion in toFormData causes DoS via deeply nested request data | medium | |
| CVE-2026-42041 | Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy | medium | |
| CVE-2026-42042 | Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion | medium | |
| CVE-2026-42044 | Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver` | medium | |
| CVE-2026-44490 | axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions | medium | |
| CVE-2026-67312 | Axios: Deep formToJSON Key Recursion Can Cause Denial of Service | medium | |
| CVE-2026-67313 | Axios: Excessive recursion in formDataToJSON can cause denial of service | medium | |
| CVE-2026-67316 | Axios: Prototype pollution gadgets can alter axios request construction | medium | |
| CVE-2026-67317 | Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength` | medium | |
| CVE-2026-67318 | Axios: HTTP/2 streamed uploads bypass `maxBodyLength` | medium | |
| CVE-2026-67319 | Axios: Nested axios option objects can consume polluted prototype values | medium | |
| CVE-2026-42040 | Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams | low | |
| basic-ftp 5.2.0 | >=6.2.1 | ||
| CVE-2026-102990 | basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking) | high | |
| CVE-2026-39983 | basic-ftp has FTP Command Injection via CRLF | high | |
| CVE-2026-41324 | basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list() | high | |
| CVE-2026-44240 | basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering | high | |
| GHSA-6v7q-wjvx-w8wg | basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands | high | |
| body-parser 1.20.4, 2.2.2 | >=1.20.9 | ||
| CVE-2026-111181 | body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body | high | |
| CVE-2026-12590 | body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement | low | |
| brace-expansion 1.1.12, 1.1.14, 2.0.2, 5.0.4 | >=5.0.6 | ||
| CVE-2026-102276 | brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion | high | |
| CVE-2026-102278 | brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion | high | |
| CVE-2026-13149 | brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups | high | |
| CVE-2026-14257 | brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash | high | |
| CVE-2026-69152 | brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation | high | |
| CVE-2026-102277 | brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service | medium | |
| CVE-2026-33750 | brace-expansion: Zero-step sequence causes process hang and memory exhaustion | medium | |
| CVE-2026-45149 | brace-expansion: Large numeric range defeats documented `max` DoS protection | medium | |
| browserslist 4.28.1 | >=4.28.7 | ||
| CVE-2026-73088 | Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) | high | |
| CVE-2026-73089 | Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM | high | |
| compression 1.8.1 | >=1.8.2 | ||
| CVE-2026-87776 | compression vulnerable to Denial of Service via memory leak on premature response close | high | |
| dompurify 3.4.2 | none published | ||
| GHSA-mrv2-3pqr-j5jr | DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p) | high | |
| CVE-2026-49458 | DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks | medium | |
| CVE-2026-49459 | DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM | medium | |
| CVE-2026-49978 | DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content | medium | |
| CVE-2026-65898 | DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch) | medium | |
| CVE-2026-65902 | DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR` | medium | |
| GHSA-55q2-fjhq-7xh7 | DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS | medium | |
| CVE-2026-65899 | DOMPurify: Trusted Types policy survives `clearConfig()` and can poison later `RETURN_TRUSTED_TYPE` output | low | |
| CVE-2026-65900 | DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes | low | |
| CVE-2026-65901 | DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects | low | |
| CVE-2026-66010 | DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements. | low | |
| GHSA-6688-9rhm-gjv2 | DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes | low | |
| GHSA-c6gr-qvv4-5v3f | DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml | low | |
| extract-zip 2.0.1 | none published | ||
| CVE-2026-19693 | extract-zip allows arbitrary file writes through symlink archive entries | high | |
| CVE-2026-56876 | extract-zip unvalidated symlink path traversal | high | |
| fast-uri 3.1.0, 3.1.6 | >=3.1.9 | ||
| CVE-2026-13676 | fast-uri vulnerable to host confusion via failed IDN canonicalization | high | |
| CVE-2026-16221 | fast-uri vulnerable to host confusion via literal backslash authority delimiter | high | |
| CVE-2026-18446 | fast-uri vulnerable to host confusion via backslash authority introducer | high | |
| CVE-2026-6321 | fast-uri vulnerable to path traversal via percent-encoded dot segments | high | |
| CVE-2026-6322 | fast-uri vulnerable to host confusion via percent-encoded authority delimiters | high | |
| CVE-2026-75975 | fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization | high | |
| CVE-2026-76172 | fast-uri vulnerable to host confusion via percent-encoded scheme normalization | high | |
| CVE-2026-84292 | fast-uri vulnerable to authority injection via an unvalidated port in serialize | high | |
| CVE-2026-84394 | fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority | high | |
| CVE-2026-110180 | fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization | medium | |
| CVE-2026-110306 | fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding | medium | |
| CVE-2026-86472 | fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets | medium | |
| CVE-2026-110095 | fast-uri vulnerable to improper path equivalence in relative reference normalization | low | |
| CVE-2026-110725 | fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references | low | |
| form-data 4.0.5 | >=4.0.6 | ||
| CVE-2026-12143 | form-data: CRLF injection in form-data via unescaped multipart field names and filenames | high | |
| http-proxy-middleware 3.0.5, 2.0.9 | >=3.0.7 | ||
| CVE-2026-55603 | http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody` | high | |
| CVE-2026-55602 | http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass | medium | |
| immutable 5.1.5 | >=5.1.8 | ||
| CVE-2026-59879 | Immutable.js `List` 32-bit trie overflow → unrecoverable DoS | high | |
| CVE-2026-59880 | Immutable: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set | high | |
| ip-address 10.1.0 | >=10.7.4 | ||
| CVE-2026-69192 | ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass | high | |
| CVE-2026-101911 | ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process | medium | |
| CVE-2026-101912 | ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range | medium | |
| CVE-2026-101913 | ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts | medium | |
| CVE-2026-111997 | ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process | medium | |
| CVE-2026-42338 | ip-address has XSS in Address6 HTML-emitting methods | medium | |
| js-yaml 3.14.2, 4.1.1 | >=3.15.2 | ||
| CVE-2026-59869 | js-yaml: YAML merge-key chains can force quadratic CPU consumption | high | |
| CVE-2026-84375 | js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources | high | |
| GHSA-5p4m-2wfm-xmqj | JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported | high | |
| CVE-2026-53550 | JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases | medium | |
| koa 3.0.3 | >=3.1.2 | ||
| CVE-2026-27959 | Koa has Host Header Injection via ctx.hostname | high | |
| langchain-core 1.2.26 | >=1.3.3 | ||
| CVE-2026-44843 | LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists | high | |
| CVE-2026-40087 | LangChain has incomplete f-string validation in prompt templates | medium | |
| langgraph-sdk 0.3.12, 0.3.14, 0.3.15, 0.4.2, 0.4.4 | >=0.4.6 | ||
| CVE-2026-104873 | LangGraph SDK custom auth silently ignores actions= on resource decorators | high | |
| CVE-2026-118667 | LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests | medium | |
| CVE-2026-48776 | LangGraph SDK has unsafe URL path construction | medium | |
| langsmith 0.5.10, 0.7.25, 0.8.11, 0.8.3, 0.8.7, 0.8.8, 0.8.9 | >=0.8.18 | ||
| CVE-2026-45134 | LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning | high | |
| GHSA-f4xh-w4cj-qxq8 | LangSmith SDK TracingMiddleware: Arbitrary server-side file read | high | |
| CVE-2026-40190 | LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()` | medium | |
| CVE-2026-41182 | LangSmith SDK: Streaming token events bypass output redaction | medium | |
| launch-editor 2.13.1 | >=2.14.2 | ||
| CVE-2026-112942 | launch-editor: `fs.existsSync()` existence check can be bypassed on Windows | high | |
| CVE-2026-112943 | launch-editor: escapeCmdArgs() omits % escaping on Windows | medium | |
| CVE-2026-112944 | launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors | medium | |
| CVE-2026-53632 | launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows | medium | |
| linkify-it 5.0.0 | >=5.0.2 | ||
| CVE-2026-48801 | LinkifyIt#match scan loop has quadratic algorithmic complexity | high | |
| CVE-2026-59887 | linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text | high | |
| lodash 4.17.21, 4.17.23 | >=4.18.1 | ||
| CVE-2026-4800 | lodash vulnerable to Code Injection via `_.template` imports key names | high | |
| CVE-2025-13465 | Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functions | medium | |
| CVE-2026-2950 | lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAt | medium | |
| markdown-it 14.1.1 | >=14.3.3 | ||
| CVE-2026-111758 | markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0) | high | |
| CVE-2026-111759 | markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes | high | |
| CVE-2026-48988 | markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations | medium | |
| GHSA-253c-mchw-3w2r | markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds | medium | |
| CVE-2026-111766 | markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled | low | |
| minimatch 10.1.1, 3.0.8, 7.4.6, 10.2.3, 10.2.4, 7.4.9, 9.0.9 | >=11.0.1 | ||
| CVE-2026-26996 | minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern | high | |
| CVE-2026-27903 | minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments | high | |
| CVE-2026-27904 | minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions | high | |
| CVE-2026-118764 | minimatch has potential denial of service via globparts amplification | medium | |
| nanoid 3.3.11 | >=3.3.18 | ||
| CVE-2026-67213 | nanoid: custom generators can loop indefinitely when size is zero | high | |
| CVE-2026-67214 | nanoid: non-secure generators can loop indefinitely with negative size | high | |
| CVE-2026-73086 | nanoid: Integer Overflow or Wraparound | high | |
| node-forge 1.3.3 | none published | ||
| CVE-2026-118779 | Forge: Regular expression denial of service in PEM decoding (pem.decode) | high | |
| CVE-2026-118782 | Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count | high | |
| CVE-2026-119187 | Forge: Denial of service in TLS record processing via call stack exhaustion | high | |
| CVE-2026-119188 | Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message | high | |
| CVE-2026-119190 | Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 | high | |
| CVE-2026-33891 | Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input | high | |
| CVE-2026-33894 | Forge has signature forgery in RSA-PKCS due to ASN.1 extra field | high | |
| CVE-2026-33895 | Forge has signature forgery in Ed25519 due to missing S > L check | high | |
| CVE-2026-33896 | Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) | high | |
| CVE-2026-85393 | node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements | high | |
| CVE-2026-118777 | Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie | medium | |
| CVE-2026-118778 | Forge: TLS client crash when the server sends no certificate | medium | |
| CVE-2026-119186 | Forge: AES-GCM authentication bypass via unvalidated tagLength option | medium | |
| CVE-2026-118775 | Forge: ASN.1 OID first arc truncation in asn1.oidToDer | low | |
| CVE-2026-118780 | Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store | low | |
| CVE-2026-118781 | Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) | low | |
| nx 22.5.1, 22.5.4, 22.6.0 | >=22.7.10 | ||
| CVE-2026-104854 | Nx daemon and plugin worker sockets are accessible to other local users | high | |
| CVE-2026-71476 | Nx: Zip-Slip in the self-hosted remote cache | high | |
| GHSA-w2vw-w76x-qr89 | Nx: OS command injection via git revisions and remote refs | high | |
| CVE-2026-104853 | Nx: Path traversal in nx migrate package-migrations extraction | medium | |
| CVE-2026-54753 | `nx graph` dev server permissive CORS policy | medium | |
| pacote 21.0.4 | >=21.5.1 | ||
| CVE-2026-9496 | pacote is vulnerable to Denial of Service (DoS) via the addGitSha function | high | |
| path-to-regexp 6.1.0, 0.1.12, 8.3.0 | >=8.4.0 | ||
| CVE-2024-45296 | path-to-regexp outputs backtracking regular expressions | high | |
| CVE-2026-4867 | path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters | high | |
| CVE-2026-4926 | path-to-regexp vulnerable to Denial of Service via sequential optional groups | high | |
| CVE-2026-4923 | path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards | medium | |
| picomatch 2.3.1, 4.0.2, 4.0.3 | >=2.3.2 | ||
| CVE-2026-33671 | Picomatch has a ReDoS vulnerability via extglob quantifiers | high | |
| CVE-2026-33672 | Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching | medium | |
| postcss 8.4.31, 8.5.6, 8.5.14 | >=8.5.23 | ||
| CVE-2026-45623 | PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments | high | |
| CVE-2026-73646 | PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure | high | |
| CVE-2026-41305 | PostCSS has XSS via Unescaped </style> in its CSS Stringify Output | medium | |
| CVE-2026-69153 | PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset | medium | |
| protobufjs 7.5.5 | >=7.6.5 | ||
| CVE-2026-44289 | protobuf.js: Denial of service through unbounded protobuf recursion | high | |
| CVE-2026-44290 | protobuf.js: Process-wide denial of service through unsafe option paths | high | |
| CVE-2026-44291 | protobuf.js: Code generation gadget after prototype pollution | high | |
| CVE-2026-44293 | protobuf.js: Code injection through bytes field defaults in generated toObject code | high | |
| CVE-2026-48712 | protobufjs: Denial of service through unbounded Any expansion during JSON conversion | high | |
| CVE-2026-44288 | protobufjs has overlong UTF-8 decoding | medium | |
| CVE-2026-44292 | protobuf.js: Prototype injection in generated message constructors | medium | |
| CVE-2026-44294 | protobuf.js: Denial of service from crafted field names in generated code | medium | |
| CVE-2026-45740 | protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion | medium | |
| CVE-2026-54269 | protobufjs : Schema-derived names can shadow runtime-significant properties | medium | |
| CVE-2026-59877 | protobufjs: Denial of Service via infinite loop in .proto option parsing | medium | |
| pyasn1 0.6.4 | >=0.6.5 | ||
| CVE-2026-119194 | pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding | high | |
| CVE-2026-119195 | pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding | high | |
| CVE-2026-119196 | pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding | high | |
| CVE-2026-119197 | pyasn1 has quadratic-complexity denial of service in binary REAL decoding | high | |
| serialize-javascript 6.0.2, 7.0.4, 7.0.5 | >=7.1.3 | ||
| GHSA-5c6j-r48x-rmvq | Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() | high | |
| CVE-2026-34043 | Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects | medium | |
| CVE-2026-115897 | Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body | low | |
| sharp 0.34.5 | >=0.35.5 | ||
| GHSA-f88m-g3jw-g9cj | sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 | high | |
| GHSA-rgj7-g3m4-5g8c | sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545 | high | |
| GHSA-wq5f-xc86-pv6w | sharp : Vulnerability in librsvg dependency CVE-2026-96889 | high | |
| sigstore 4.1.0 | >=4.1.1 | ||
| CVE-2026-48815 | sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced | high | |
| smol-toml 1.5.2 | >=1.9.0 | ||
| CVE-2026-85730 | smol-toml: Denial of Service via malformed TOML documents | high | |
| GHSA-r4xh-jqrq-34v2 | smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line | medium | |
| GHSA-v3rj-xjv7-4jmq | smol-toml: Denial of Service via TOML documents containing thousands of consecutive commented lines | medium | |
| source-map-js 1.2.1 | >=1.2.2 | ||
| CVE-2026-93749 | source-map-js allows event-loop denial of service through indexed source-map section offsets | high | |
| starlette 1.0.0, 1.2.0, 1.2.1 | >=1.3.1 | ||
| CVE-2026-48818 | Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows | high | |
| CVE-2026-54283 | Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS | high | |
| CVE-2026-48710 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks | medium | |
| CVE-2026-48817 | Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` | medium | |
| CVE-2026-54282 | Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname | low | |
| svgo 3.3.3, 4.0.1 | >=3.3.5 | ||
| CVE-2026-73650 | SVGO removeScripts plugin leaves some executable scripts intact | high | |
| CVE-2026-84370 | SVGO: removeScripts allows executable links through namespace and control-character bypasses | high | |
| CVE-2026-84369 | SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements | medium | |
| tmp 0.2.5 | >=0.2.6 | ||
| CVE-2026-44705 | tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape | high | |
| undici 5.28.4, 7.20.0, 7.24.4 | >=7.30.1 | ||
| CVE-2026-109383 | undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent | high | |
| CVE-2026-109829 | undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects | high | |
| CVE-2026-109869 | undici vulnerable to Denial of Service via unhandled error on excessive content-encodings | high | |
| CVE-2026-12151 | undici WebSocket client vulnerable to denial of service via fragment count bypass | high | |
| CVE-2026-13697 | undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives | high | |
| CVE-2026-1526 | Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression | high | |
| CVE-2026-1528 | Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client | high | |
| CVE-2026-19534 | undici vulnerable to Denial of Service via unrequested WebSocket subprotocol | high | |
| CVE-2026-2229 | Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation | high | |
| CVE-2026-6734 | undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse | high | |
| CVE-2026-84961 | undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool | high | |
| CVE-2026-87018 | undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation | high | |
| CVE-2026-9697 | undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent | high | |
| CVE-2025-22150 | Use of Insufficiently Random Values in undici | medium | |
| CVE-2026-109841 | undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens | medium | |
| CVE-2026-109924 | undici vulnerable to Denial of Service via unbounded memory in the EventSource parser | medium | |
| CVE-2026-109932 | undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering | medium | |
| CVE-2026-14643 | undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives | medium | |
| CVE-2026-15157 | undici vulnerable to CRLF Injection via blob-like body 'type' property | medium | |
| CVE-2026-1525 | Undici has an HTTP Request/Response Smuggling issue | medium | |
| CVE-2026-1527 | Undici has CRLF Injection in undici via `upgrade` option | medium | |
| CVE-2026-16728 | undici vulnerable to downstream response desynchronization via retry interceptor | medium | |
| CVE-2026-16729 | undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields | medium | |
| CVE-2026-18149 | undici vulnerable to Denial of Service via orphaned RetryHandler response body | medium | |
| CVE-2026-22036 | Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion | medium | |
| CVE-2026-2581 | Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS | medium | |
| CVE-2026-84890 | undici vulnerable to Denial of Service via unbounded decompression of compressed responses | medium | |
| CVE-2026-84933 | undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches | medium | |
| CVE-2026-85014 | undici vulnerable to Denial of Service via WebSocketStream unclean close | medium | |
| CVE-2026-87029 | undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor | medium | |
| CVE-2026-9678 | undici vulnerable to cross-user information disclosure via shared cache whitespace bypass | medium | |
| CVE-2026-9679 | undici vulnerable to HTTP header injection via Set-Cookie percent-decoding | medium | |
| CVE-2025-47279 | undici Denial of Service attack via bad certificate data | low | |
| CVE-2026-11525 | undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching | low | |
| CVE-2026-18540 | undici vulnerable to downstream response splitting via retry interceptor | low | |
| CVE-2026-6733 | undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse | low | |
| CVE-2026-84947 | undici vulnerable to response truncation via oversized chunked responses in the dump interceptor | low | |
| CVE-2026-85008 | undici vulnerable to caching and replay of unsafe HTTP method responses | low | |
| urllib3 2.6.3, 2.7.0 | >=2.8.0 | ||
| CVE-2026-44431 | urllib3: Sensitive headers forwarded across origins in proxied low-level redirects | high | |
| CVE-2026-44432 | urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API | high | |
| CVE-2026-97687 | urllib3: HTTPS proxy TLS configuration may be ignored or overridden | high | |
| CVE-2026-97689 | urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory | high | |
| CVE-2026-97688 | urllib3: Chunked Deflate streaming can enter an infinite loop | medium | |
| vite 7.3.0, 7.3.1 | >=7.3.7 | ||
| CVE-2026-112942 | launch-editor: `fs.existsSync()` existence check can be bypassed on Windows | high | |
| CVE-2026-39363 | Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket | high | |
| CVE-2026-39364 | Vite: `server.fs.deny` bypassed with queries | high | |
| CVE-2026-112943 | launch-editor: escapeCmdArgs() omits % escaping on Windows | medium | |
| CVE-2026-112944 | launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors | medium | |
| CVE-2026-112946 | Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine | medium | |
| CVE-2026-39365 | Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling | medium | |
| CVE-2026-53571 | vite: `server.fs.deny` bypass on Windows alternate paths | medium | |
| CVE-2026-53632 | launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows | medium | |
| CVE-2026-112945 | Vite: Cross origin script execution through Vite custom middleware | low | |
| webpack-dev-middleware 7.4.5 | >=7.4.6 | ||
| CVE-2026-76844 | webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath | high | |
| ws 8.18.0 | >=8.21.0 | ||
| CVE-2026-48779 | ws: Memory exhaustion DoS from tiny fragments and data chunks | high | |
| CVE-2026-45736 | ws: Uninitialized memory disclosure | medium | |
| zod 3.22.4, 3.23.8, 3.25.76, 4.3.5, 4.3.6, 4.4.3, 4.5.4 | >=4.6.6 | ||
| CVE-2023-54404 | Zod can exhaust memory while validating oversized constrained collections | high | |
| @anthropic-ai/sdk 0.79.0 | >=0.91.1 | ||
| CVE-2026-34451 | Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories | medium | |
| CVE-2026-41686 | Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool | medium | |
| @hono/node-server 1.19.11 | >=2.1.3 | ||
| CVE-2026-118663 | @hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths | medium | |
| CVE-2026-39406 | @hono/node-server: Middleware bypass via repeated slashes in serveStatic | medium | |
| GHSA-frvp-7c67-39w9 | Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) | medium | |
| @humanfs/node 0.16.7 | >=0.16.8 | ||
| GHSA-p498-v437-472g | humanfs: Recursive copy follows symlinked files and copies data from outside the source tree | medium | |
| @opentelemetry/core 2.2.0, 2.7.1 | >=2.8.0 | ||
| CVE-2026-54285 | OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation | medium | |
| @protobufjs/utf8 1.1.0 | >=1.1.1 | ||
| CVE-2026-44288 | protobufjs has overlong UTF-8 decoding | medium | |
| @sigstore/core 3.1.0 | >=3.2.1 | ||
| CVE-2026-48758 | @sigstore/core has DSSE payloadType type-binding failure | medium | |
| @sigstore/verify 3.1.0 | >=3.1.1 | ||
| CVE-2026-48816 | sigstore-js has Insufficient Verification of Data Authenticity | medium | |
| @vitest/mocker 4.1.0 | >=4.1.12 | ||
| CVE-2026-112949 | Vitest: Code injection via unauthenticated manual mock registration | medium | |
| CVE-2026-84373 | Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock | medium | |
| ajv 8.17.1, 8.6.3 | >=8.18.0 | ||
| CVE-2025-69873 | ajv has ReDoS when using `$data` option | medium | |
| baseline-browser-mapping 2.10.8 | >=2.11.0 | ||
| CVE-2026-45819 | baseline-browser-mapping process termination on invalid input causes denial of service | medium | |
| colord 2.9.3 | >=2.9.4 | ||
| CVE-2026-85062 | Colord: Slow rejection of oversized malformed color strings | medium | |
| fflate 0.4.8, 0.7.4, 0.8.2 | >=0.4.9 | ||
| CVE-2026-45820 | fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives | medium | |
| file-type 20.5.0 | >=21.3.2 | ||
| CVE-2026-31808 | file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header | medium | |
| CVE-2026-32630 | file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entry | medium | |
| follow-redirects 1.15.11 | >=1.16.0 | ||
| CVE-2026-40895 | follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets | medium | |
| glob 13.0.6 | >=14.0.2 | ||
| CVE-2026-118773 | Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal | medium | |
| hono 4.13.5 | >=4.13.11 | ||
| CVE-2026-111757 | Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths | medium | |
| CVE-2026-93981 | hono/jsx renders plain strings unescaped in boundary components, leading to XSS | medium | |
| idna 3.11, 3.13 | >=3.15 | ||
| CVE-2026-45409 | Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix | medium | |
| langchain 1.3.2, 1.3.4 | >=1.3.9 | ||
| CVE-2026-55443 | LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders | medium | |
| langgraph 1.2.11, 1.2.4, 1.2.6 | >=1.2.14 | ||
| CVE-2026-118667 | LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests | medium | |
| langgraph-checkpoint 4.0.1, 4.0.3 | >=4.1.1 | ||
| CVE-2026-48775 | LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading | medium | |
| mcp 1.29.1 | >=1.30.0 | ||
| CVE-2026-116684 | Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server | medium | |
| CVE-2026-116685 | Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies | medium | |
| CVE-2026-116686 | Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas | medium | |
| CVE-2026-59951 | MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion | medium | |
| postcss-selector-parser 6.1.2, 7.1.1 | >=6.1.5 | ||
| CVE-2026-104844 | PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion | medium | |
| CVE-2026-9358 | postcss-selector-parser allows denial of service through uncontrolled AST recursion | low | |
| qs 6.14.2 | >=6.16.1 | ||
| CVE-2026-110816 | qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS) | medium | |
| CVE-2026-82417 | qs: Denial of Service via Attacker Controlled isBuffer | medium | |
| CVE-2026-82562 | qs array-limit bypass via bracket-key comma parsing | medium | |
| CVE-2026-8723 | qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set | medium | |
| satori 0.12.2 | >=0.33.5 | ||
| CVE-2026-94545 | Satori-generated SVG has improper escaping | medium | |
| setuptools 82.0.1, 84.0.0 | >=84.1.0 | ||
| CVE-2026-59890 | setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ | medium | |
| GHSA-xmj3-9gf7-h52w | setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description | low | |
| uuid 10.0.0, 11.1.0, 8.3.2 | >=11.1.1 | ||
| CVE-2026-41907 | uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided | medium | |
| vitest 4.1.0 | >=4.1.11 | ||
| CVE-2026-84373 | Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock | medium | |
| webpack-dev-server 5.2.3 | >=5.2.6 | ||
| CVE-2026-14620 | webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints | medium | |
| CVE-2026-14631 | webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header | medium | |
| CVE-2026-6402 | webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins | medium | |
| CVE-2026-9595 | webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies | medium | |
| yaml 1.10.2, 2.8.2 | >=1.10.3 | ||
| CVE-2026-33532 | yaml is vulnerable to Stack Overflow via deeply nested YAML collections | medium | |
| @ai-sdk/provider-utils 2.2.8 | >=3.0.28 | ||
| CVE-2026-8769 | @ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue | low | |
| @babel/core 7.28.5, 7.29.0 | >=7.29.6 | ||
| CVE-2026-49356 | @babel/core: Arbitrary File Read via sourceMappingURL Comment | low | |
| deepmerge 4.3.1 | none published | ||
| CVE-2026-93753 | deepmerge mergeObject() allows prototype poisoning of returned objects | low | |
| esbuild 0.27.3, 0.27.4 | >=0.28.1 | ||
| GHSA-g7r4-m6w7-qqqr | esbuild allows arbitrary file read when running the development server on Windows | low | |
| katex 0.17.0 | >=0.18.2 | ||
| CVE-2026-103923 | KaTeX: Existing prototype pollution can bypass trust restrictions | low | |
| langchain-openai 1.1.12 | >=1.1.14 | ||
| CVE-2026-41488 | langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding | low | |
| cryptography 46.0.6, 46.0.7, 48.0.0, 49.0.0 | >=50.0.0 | ||
| CVE-2026-69247 | cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing | high | |
| CVE-2026-69249 | python-cryptography: Duplicate self-signed intermediates can cause exponential path-building | high | |
| GHSA-537c-gmf6-5ccf | Vulnerable OpenSSL included in cryptography wheels | high | |
| CVE-2026-39892 | Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs | medium | |
| CVE-2026-69248 | python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees | medium | |
| langgraph-api 0.10.0, 0.13.2, 0.7.96, 0.8.7, 0.9.0 | >=0.15.0 | ||
| CVE-2026-118668 | LangGraph JavaScript custom authentication may permit cross-user Store access | high | |
| CVE-2026-55235 | langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication | medium | |
| CVE-2026-55236 | langgraph-api: Incomplete assistant authorization in LangGraph Server run creation | medium | |
| langgraph-cli 0.4.19, 0.4.25, 0.4.27, 0.4.30, 0.4.31 build | >=0.4.32 | ||
| CVE-2026-115885 | LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output | medium | |
| opentelemetry-api 1.40.0, 1.41.1, 1.42.1, 1.44.0 | >=1.45.1 | ||
| CVE-2026-114603 | OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api | medium | |
Versions30
0.3.7criticalnone8h ago0.3.6not analyzed1d ago0.3.5criticalnone1d ago0.3.4not analyzed5d ago0.3.3not analyzed13d ago0.3.2not analyzed2026-10-090.3.1not analyzed2026-10-080.3.0not analyzed2026-10-080.2.0not analyzed2026-09-180.1.0not analyzed2026-09-080.0.66not analyzed2026-09-050.0.65not analyzed2026-09-030.0.64not analyzed2026-08-310.0.63not analyzed2026-08-310.0.62not analyzed2026-08-300.0.61not analyzed2026-08-300.0.60not analyzed2026-08-290.0.59not analyzed2026-08-290.0.58not analyzed2026-08-180.0.57not analyzed2026-08-090.0.56not analyzed2026-07-070.0.55not analyzed2026-07-060.0.54not analyzed2026-07-060.0.53not analyzed2026-06-240.0.52not analyzed2026-06-200.0.51not analyzed2026-06-190.0.50not analyzed2026-06-180.0.49not analyzed2026-06-080.0.47not analyzed2026-05-260.0.46not analyzed2026-05-25
1 of 1 jobs captured: install success · Generated 2026-11-06 · run 0390afd0-a05a-4a93-9a1c-8e0def3040a8
analysis 0.1.0 · 2026-11-06 · 4346b99 · graph v2