9d11464 · scanned 2026-10-30 07:34 UTC
npm940affects this code · P0
body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
body-parser→ 2.4.0Get these as pull requests
affects this code · P0
Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling
vite→ 6.4.4affects this code · P0
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
diff→ 5.2.2affects this code · P0
js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources
js-yaml→ 4.3.2affects this code · P0
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
minimatch→ 4.2.5affects this code · P0
nanoid: non-secure generators can loop indefinitely with negative size
nanoid→ 3.3.18affects this code · P0
Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()
serialize-javascr…→ 7.1.3affects this code · P0
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
diff→ 8.0.3affects this code · P3 · 6 more mentions checked
setupFiles: [],vitest→ 5.0.5inconclusive
https-proxy-agent→ 9.1.0inconclusive
@babel/inconclusive
@babel/inconclusive
@vitest/inconclusive
@vitest/inconclusive
typescript→ 7.0.2inconclusive
@types/inconclusive
mocha→ 12.0.3inconclusive
chai→ 6.3.0affects this code · P4
deepmerge mergeObject() allows prototype poisoning of returned objects
deepmergeadvisory