package-lock.json - Trivy Report - 2026-10-28 14:29:22.263028584 +0000 UTC m=+0.806350453

npm
Package Vulnerability ID Severity Installed Version Fixed Version Links
@babel/runtime CVE-2025-27789 MEDIUM 7.0.0-beta.42 7.26.10, 8.0.0-alpha.17 https://advisory.echohq.com/cve/CVE-2025-27789 https://github.com/advisories/GHSA-968p-4wvh-cqc8 https://github.com/babel/babel https://github.com/babel/babel/commit/d5952e80c0faa5ec20e35085531b6e572d31dad4 https://github.com/babel/babel/pull/17173 https://github.com/babel/babel/security/advisories/GHSA-968p-4wvh-cqc8 https://nvd.nist.gov/vuln/detail/CVE-2025-27789
@babel/runtime CVE-2025-27789 MEDIUM 7.0.0-beta.56 7.26.10, 8.0.0-alpha.17 https://advisory.echohq.com/cve/CVE-2025-27789 https://github.com/advisories/GHSA-968p-4wvh-cqc8 https://github.com/babel/babel https://github.com/babel/babel/commit/d5952e80c0faa5ec20e35085531b6e572d31dad4 https://github.com/babel/babel/pull/17173 https://github.com/babel/babel/security/advisories/GHSA-968p-4wvh-cqc8 https://nvd.nist.gov/vuln/detail/CVE-2025-27789
@babel/runtime CVE-2025-27789 MEDIUM 7.0.0-rc.1 7.26.10, 8.0.0-alpha.17 https://advisory.echohq.com/cve/CVE-2025-27789 https://github.com/advisories/GHSA-968p-4wvh-cqc8 https://github.com/babel/babel https://github.com/babel/babel/commit/d5952e80c0faa5ec20e35085531b6e572d31dad4 https://github.com/babel/babel/pull/17173 https://github.com/babel/babel/security/advisories/GHSA-968p-4wvh-cqc8 https://nvd.nist.gov/vuln/detail/CVE-2025-27789
@babel/runtime CVE-2025-27789 MEDIUM 7.11.2 7.26.10, 8.0.0-alpha.17 https://advisory.echohq.com/cve/CVE-2025-27789 https://github.com/advisories/GHSA-968p-4wvh-cqc8 https://github.com/babel/babel https://github.com/babel/babel/commit/d5952e80c0faa5ec20e35085531b6e572d31dad4 https://github.com/babel/babel/pull/17173 https://github.com/babel/babel/security/advisories/GHSA-968p-4wvh-cqc8 https://nvd.nist.gov/vuln/detail/CVE-2025-27789
ajv CVE-2025-69873 MEDIUM 6.12.4 8.18.0, 6.14.0 https://access.redhat.com/errata/RHSA-2026:10093 https://access.redhat.com/errata/RHSA-2026:13512 https://access.redhat.com/errata/RHSA-2026:14774 https://access.redhat.com/errata/RHSA-2026:15091 https://access.redhat.com/errata/RHSA-2026:16874 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:26211 https://access.redhat.com/errata/RHSA-2026:26214 https://access.redhat.com/errata/RHSA-2026:33371 https://access.redhat.com/errata/RHSA-2026:36651 https://access.redhat.com/errata/RHSA-2026:40118 https://access.redhat.com/errata/RHSA-2026:40945 https://access.redhat.com/errata/RHSA-2026:40984 https://access.redhat.com/errata/RHSA-2026:41941 https://access.redhat.com/errata/RHSA-2026:41944 https://access.redhat.com/errata/RHSA-2026:5168 https://access.redhat.com/errata/RHSA-2026:5807 https://access.redhat.com/errata/RHSA-2026:5907 https://access.redhat.com/errata/RHSA-2026:5910 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:6277 https://access.redhat.com/errata/RHSA-2026:6309 https://access.redhat.com/errata/RHSA-2026:6497 https://access.redhat.com/errata/RHSA-2026:6567 https://access.redhat.com/errata/RHSA-2026:6568 https://access.redhat.com/errata/RHSA-2026:6802 https://access.redhat.com/errata/RHSA-2026:7314 https://access.redhat.com/errata/RHSA-2026:9742 https://access.redhat.com/security/cve/CVE-2025-69873 https://advisory.echohq.com/cve/CVE-2025-69873 https://bugzilla.redhat.com/show_bug.cgi?id=2439070 https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md https://github.com/advisories/GHSA-2g4f-4pwh-qvx6 https://github.com/ajv-validator/ajv https://github.com/ajv-validator/ajv/commit/720a23fa453ffae8340e92c9b0fe886c54cfe0d5 https://github.com/ajv-validator/ajv/pull/2586 https://github.com/ajv-validator/ajv/pull/2588 https://github.com/ajv-validator/ajv/pull/2590 https://github.com/ajv-validator/ajv/releases/tag/v6.14.0 https://github.com/ajv-validator/ajv/releases/tag/v8.18.0 https://github.com/github/advisory-database/pull/6991 https://nvd.nist.gov/vuln/detail/CVE-2025-69873 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69873.json https://www.cve.org/CVERecord?id=CVE-2025-69873
ansi-regex CVE-2021-3807 HIGH 3.0.0 6.0.1, 5.0.1, 4.1.1, 3.0.1 https://access.redhat.com/errata/RHSA-2022:6595 https://access.redhat.com/security/cve/CVE-2021-3807 https://app.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 https://bugzilla.redhat.com/1907444 https://bugzilla.redhat.com/1945459 https://bugzilla.redhat.com/1964461 https://bugzilla.redhat.com/2007557 https://bugzilla.redhat.com/2098556 https://bugzilla.redhat.com/2102001 https://bugzilla.redhat.com/2105422 https://bugzilla.redhat.com/2105426 https://bugzilla.redhat.com/2105428 https://bugzilla.redhat.com/2105430 https://bugzilla.redhat.com/show_bug.cgi?id=1907444 https://bugzilla.redhat.com/show_bug.cgi?id=1945459 https://bugzilla.redhat.com/show_bug.cgi?id=1964461 https://bugzilla.redhat.com/show_bug.cgi?id=2007557 https://bugzilla.redhat.com/show_bug.cgi?id=2098556 https://bugzilla.redhat.com/show_bug.cgi?id=2102001 https://bugzilla.redhat.com/show_bug.cgi?id=2105422 https://bugzilla.redhat.com/show_bug.cgi?id=2105426 https://bugzilla.redhat.com/show_bug.cgi?id=2105428 https://bugzilla.redhat.com/show_bug.cgi?id=2105430 https://bugzilla.redhat.com/show_bug.cgi?id=2121019 https://bugzilla.redhat.com/show_bug.cgi?id=2124299 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28469 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33502 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29244 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32212 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32213 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32214 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33987 https://errata.almalinux.org/9/ALSA-2022-6595.html https://errata.rockylinux.org/RLSA-2022:6595 https://github.com/chalk/ansi-regex https://github.com/chalk/ansi-regex/commit/419250fa510bf31b4cc672e76537a64f9332e1f1 https://github.com/chalk/ansi-regex/commit/75a657da7af875b2e2724fd6331bf0a4b23d3c9a https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9 https://github.com/chalk/ansi-regex/commit/c3c0b3f2736b9c01feec0fef33980c43720dcde8 https://github.com/chalk/ansi-regex/issues/38#issuecomment-924086311 https://github.com/chalk/ansi-regex/issues/38#issuecomment-925924774 https://github.com/chalk/ansi-regex/releases/tag/v6.0.1 https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994 https://linux.oracle.com/cve/CVE-2021-3807.html https://linux.oracle.com/errata/ELSA-2022-6595.html https://nvd.nist.gov/vuln/detail/CVE-2021-3807 https://security.netapp.com/advisory/ntap-20221014-0002 https://security.netapp.com/advisory/ntap-20221014-0002/ https://www.cve.org/CVERecord?id=CVE-2021-3807 https://www.oracle.com/security-alerts/cpuapr2022.html
apexcharts CVE-2021-23327 MEDIUM 3.20.0 3.24.0 https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19 https://github.com/apexcharts/apexcharts.js/pull/2158 https://nvd.nist.gov/vuln/detail/CVE-2021-23327 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616 https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708 https://www.npmjs.com/package/apexcharts
brace-expansion CVE-2026-102276 HIGH 1.1.11 5.0.10, 3.0.7, 2.1.5, 1.1.19 https://access.redhat.com/security/cve/CVE-2026-102276 https://advisory.echohq.com/cve/CVE-2026-102276 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p https://nvd.nist.gov/vuln/detail/CVE-2026-102276 https://www.cve.org/CVERecord?id=CVE-2026-102276
brace-expansion CVE-2026-102278 HIGH 1.1.11 5.0.11, 3.0.8, 2.1.6, 1.1.20 https://access.redhat.com/security/cve/CVE-2026-102278 https://advisory.echohq.com/cve/CVE-2026-102278 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7 https://nvd.nist.gov/vuln/detail/CVE-2026-102278 https://www.cve.org/CVERecord?id=CVE-2026-102278
brace-expansion CVE-2026-13149 HIGH 1.1.11 5.0.7, 1.1.16, 2.1.2 https://access.redhat.com/errata/RHSA-2026:47058 https://access.redhat.com/errata/RHSA-2026:48034 https://access.redhat.com/security/cve/CVE-2026-13149 https://advisory.echohq.com/cve/CVE-2026-13149 https://bugzilla.redhat.com/2494813 https://bugzilla.redhat.com/2498116 https://bugzilla.redhat.com/2498120 https://bugzilla.redhat.com/show_bug.cgi?id=2494813 https://bugzilla.redhat.com/show_bug.cgi?id=2498116 https://bugzilla.redhat.com/show_bug.cgi?id=2498120 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874 https://errata.almalinux.org/10/ALSA-2026-48034.html https://errata.rockylinux.org/RLSA-2026:47058 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265 https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754 https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95 https://github.com/juliangruber/brace-expansion/pull/122 https://github.com/juliangruber/brace-expansion/pull/123 https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16 https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2 https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp https://linux.oracle.com/cve/CVE-2026-13149.html https://linux.oracle.com/errata/ELSA-2026-48034.html https://nvd.nist.gov/vuln/detail/CVE-2026-13149 https://www.cve.org/CVERecord?id=CVE-2026-13149 https://www.npmjs.com/package/brace-expansion
brace-expansion CVE-2026-14257 HIGH 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 https://access.redhat.com/errata/RHSA-2026:55603 https://access.redhat.com/errata/RHSA-2026:58819 https://access.redhat.com/security/cve/CVE-2026-14257 https://advisory.echohq.com/cve/CVE-2026-14257 https://bugzilla.redhat.com/2506433 https://bugzilla.redhat.com/2507593 https://bugzilla.redhat.com/2510722 https://bugzilla.redhat.com/2510801 https://bugzilla.redhat.com/show_bug.cgi?id=2487258 https://bugzilla.redhat.com/show_bug.cgi?id=2487269 https://bugzilla.redhat.com/show_bug.cgi?id=2506433 https://bugzilla.redhat.com/show_bug.cgi?id=2507593 https://bugzilla.redhat.com/show_bug.cgi?id=2510722 https://bugzilla.redhat.com/show_bug.cgi?id=2510801 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192 https://errata.almalinux.org/10/ALSA-2026-58819.html https://errata.rockylinux.org/RLSA-2026:55603 https://github.com/advisories/GHSA-mh99-v99m-4gvg https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5 https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031 https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb https://github.com/juliangruber/brace-expansion/pull/129 https://github.com/juliangruber/brace-expansion/pull/130 https://github.com/juliangruber/brace-expansion/pull/136 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg https://linux.oracle.com/cve/CVE-2026-14257.html https://linux.oracle.com/errata/ELSA-2026-58819.html https://nvd.nist.gov/vuln/detail/CVE-2026-14257 https://www.cve.org/CVERecord?id=CVE-2026-14257 https://www.npmjs.com/package/brace-expansion
brace-expansion CVE-2026-69152 HIGH 1.1.11 1.1.18, 2.1.4, 3.0.6, 5.0.9 https://access.redhat.com/errata/RHSA-2026:55603 https://access.redhat.com/errata/RHSA-2026:58819 https://access.redhat.com/security/cve/CVE-2026-69152 https://advisory.echohq.com/cve/CVE-2026-69152 https://bugzilla.redhat.com/2506433 https://bugzilla.redhat.com/2507593 https://bugzilla.redhat.com/2510722 https://bugzilla.redhat.com/2510801 https://bugzilla.redhat.com/show_bug.cgi?id=2487258 https://bugzilla.redhat.com/show_bug.cgi?id=2487269 https://bugzilla.redhat.com/show_bug.cgi?id=2506433 https://bugzilla.redhat.com/show_bug.cgi?id=2507593 https://bugzilla.redhat.com/show_bug.cgi?id=2510722 https://bugzilla.redhat.com/show_bug.cgi?id=2510801 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192 https://errata.almalinux.org/10/ALSA-2026-58819.html https://errata.rockylinux.org/RLSA-2026:55603 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895 https://linux.oracle.com/cve/CVE-2026-69152.html https://linux.oracle.com/errata/ELSA-2026-58819.html https://nvd.nist.gov/vuln/detail/CVE-2026-69152 https://www.cve.org/CVERecord?id=CVE-2026-69152
brace-expansion CVE-2026-102277 MEDIUM 1.1.11 5.0.12, 3.0.9, 2.1.7, 1.1.21 https://access.redhat.com/security/cve/CVE-2026-102277 https://advisory.echohq.com/cve/CVE-2026-102277 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96 https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22 https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364 https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr https://nvd.nist.gov/vuln/detail/CVE-2026-102277 https://www.cve.org/CVERecord?id=CVE-2026-102277
brace-expansion CVE-2026-33750 MEDIUM 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 https://access.redhat.com/security/cve/CVE-2026-33750 https://advisory.echohq.com/cve/CVE-2026-33750 https://github.com/advisories/GHSA-f886-m6hf-6m8v https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113 https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184 https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5 https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2 https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a https://github.com/juliangruber/brace-expansion/issues/98 https://github.com/juliangruber/brace-expansion/pull/95 https://github.com/juliangruber/brace-expansion/pull/96 https://github.com/juliangruber/brace-expansion/pull/97 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v https://nvd.nist.gov/vuln/detail/CVE-2026-33750 https://www.cve.org/CVERecord?id=CVE-2026-33750
brace-expansion CVE-2025-5889 LOW 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 https://access.redhat.com/security/cve/CVE-2025-5889 https://advisory.echohq.com/cve/CVE-2025-5889 https://gist.github.com/mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466 https://github.com/advisories/GHSA-v6h2-p8h4-qcjw https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/0b6a9781e18e9d2769bb2931f4856d1360243ed2 https://github.com/juliangruber/brace-expansion/commit/15f9b3c75ebf5988198241fecaebdc45eff28a9f https://github.com/juliangruber/brace-expansion/commit/36603d5f3599a37af9e85eda30acd7d28599c36e https://github.com/juliangruber/brace-expansion/commit/c3c73c8b088defc70851843be88ccc3af08e7217 https://github.com/juliangruber/brace-expansion/pull/65/commits/a5b98a4f30d7813266b221435e1eaaf25a1b0ac5 https://github.com/juliangruber/brace-expansion/releases/tag/v4.0.1 https://nvd.nist.gov/vuln/detail/CVE-2025-5889 https://vuldb.com/?ctiid.311660 https://vuldb.com/?id.311660 https://vuldb.com/?submit.585717 https://www.cve.org/CVERecord?id=CVE-2025-5889
braces CVE-2024-4068 HIGH 2.3.2 3.0.3 https://access.redhat.com/security/cve/CVE-2024-4068 https://devhub.checkmarx.com/cve-details/CVE-2024-4068 https://devhub.checkmarx.com/cve-details/CVE-2024-4068/ https://github.com/micromatch/braces https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js#L308 https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff https://github.com/micromatch/braces/issues/35 https://github.com/micromatch/braces/pull/37 https://github.com/micromatch/braces/pull/40 https://nvd.nist.gov/vuln/detail/CVE-2024-4068 https://www.cve.org/CVERecord?id=CVE-2024-4068
browserslist CVE-2026-73088 HIGH 4.1.1 4.28.7 https://access.redhat.com/security/cve/CVE-2026-73088 https://github.com/browserslist/browserslist https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255625890b31ca51 https://github.com/browserslist/browserslist/releases/tag/4.28.7 https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98-2v4g https://nvd.nist.gov/vuln/detail/CVE-2026-73088 https://www.cve.org/CVERecord?id=CVE-2026-73088
browserslist CVE-2026-73089 HIGH 4.1.1 4.28.7 https://access.redhat.com/security/cve/CVE-2026-73089 https://github.com/browserslist/browserslist https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405 https://github.com/browserslist/browserslist/releases/tag/4.28.7 https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx https://nvd.nist.gov/vuln/detail/CVE-2026-73089 https://www.cve.org/CVERecord?id=CVE-2026-73089
browserslist CVE-2021-23364 MEDIUM 4.1.1 4.16.5 https://access.redhat.com/security/cve/CVE-2021-23364 https://github.com/browserslist/browserslist/blob/e82f32d1d4100d6bc79ea0b6b6a2d281a561e33c/index.js%23L472-L474 https://github.com/browserslist/browserslist/commit/c091916910dfe0b5fd61caad96083c6709b02d98 https://github.com/browserslist/browserslist/pull/593 https://nvd.nist.gov/vuln/detail/CVE-2021-23364 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1277182 https://snyk.io/vuln/SNYK-JS-BROWSERSLIST-1090194 https://www.cve.org/CVERecord?id=CVE-2021-23364
canvg CVE-2025-25977 HIGH 1.5.3 4.0.3, 3.0.11 https://access.redhat.com/security/cve/CVE-2025-25977 https://github.com/canvg/canvg https://github.com/canvg/canvg/blob/937668eced93e0335c67a255d0d2277ea708b2cb/src/Document/StyleElement.ts https://github.com/canvg/canvg/commit/c3743e6345f3e01aefdcdd412c3f26494f4b5d7d https://github.com/canvg/canvg/issues/1749 https://nvd.nist.gov/vuln/detail/CVE-2025-25977 https://www.cve.org/CVERecord?id=CVE-2025-25977
cross-spawn CVE-2024-21538 HIGH 6.0.5 7.0.5, 6.0.6 https://access.redhat.com/security/cve/CVE-2024-21538 https://github.com/moxystudio/node-cross-spawn https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f https://github.com/moxystudio/node-cross-spawn/commit/d35c865b877d2f9ded7c1ed87521c2fdb689c8dd https://github.com/moxystudio/node-cross-spawn/issues/165 https://github.com/moxystudio/node-cross-spawn/pull/160 https://nvd.nist.gov/vuln/detail/CVE-2024-21538 https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-8366349 https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230 https://www.cve.org/CVERecord?id=CVE-2024-21538
crypto-js CVE-2023-46233 CRITICAL 3.3.0 4.2.0 https://access.redhat.com/security/cve/CVE-2023-46233 https://github.com/brix/crypto-js https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html https://nvd.nist.gov/vuln/detail/CVE-2023-46233 https://ubuntu.com/security/notices/USN-6753-1 https://www.cve.org/CVERecord?id=CVE-2023-46233
crypto-js CVE-2026-71851 CRITICAL 3.3.0 4.0.0 https://access.redhat.com/security/cve/CVE-2026-71851 https://github.com/brix/crypto-js https://github.com/brix/crypto-js/commit/b405ff597fb3ac76a7bdfbc72dca10ba1079b1d5 https://github.com/brix/crypto-js/security/advisories/GHSA-rg76-677x-56q9 https://nvd.nist.gov/vuln/detail/CVE-2026-71851 https://www.coinspect.com/blog/ill-bloom-investigation https://www.cve.org/CVERecord?id=CVE-2026-71851
decode-uri-component CVE-2022-38900 HIGH 0.2.0 0.2.1 https://access.redhat.com/errata/RHSA-2023:1743 https://access.redhat.com/errata/RHSA-2023:6316 https://access.redhat.com/security/cve/CVE-2022-38900 https://bugzilla.redhat.com/2170644 https://bugzilla.redhat.com/show_bug.cgi?id=2134609 https://bugzilla.redhat.com/show_bug.cgi?id=2156324 https://bugzilla.redhat.com/show_bug.cgi?id=2165824 https://bugzilla.redhat.com/show_bug.cgi?id=2168631 https://bugzilla.redhat.com/show_bug.cgi?id=2170644 https://bugzilla.redhat.com/show_bug.cgi?id=2171935 https://bugzilla.redhat.com/show_bug.cgi?id=2172217 https://bugzilla.redhat.com/show_bug.cgi?id=2175826 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35065 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25881 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3517 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38900 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4904 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23918 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23920 https://errata.almalinux.org/9/ALSA-2023-6316.html https://errata.rockylinux.org/RLSA-2023:1743 https://github.com/SamVerschueren/decode-uri-component https://github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9 https://github.com/SamVerschueren/decode-uri-component/issues/5 https://github.com/SamVerschueren/decode-uri-component/releases/tag/v0.2.1 https://github.com/advisories/GHSA-w573-4hg7-7wgq https://github.com/sindresorhus/query-string/issues/345 https://linux.oracle.com/cve/CVE-2022-38900.html https://linux.oracle.com/errata/ELSA-2023-6316.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ERN6YE3DS7NBW7UH44SCJBMNC2NWQ7SM https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ERN6YE3DS7NBW7UH44SCJBMNC2NWQ7SM/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KAC5KQ2SEWAMQ6UZAUBZ5KXKEOESH375 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KAC5KQ2SEWAMQ6UZAUBZ5KXKEOESH375/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QABOUA2I542UTANVZIVFKWMRYVHLV32D https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QABOUA2I542UTANVZIVFKWMRYVHLV32D/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UW4SCMT3SEUFVIL7YIADQ5K36GJEO6I5 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UW4SCMT3SEUFVIL7YIADQ5K36GJEO6I5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNV2GNZXOTEDAJRFH3ZYWRUBGIVL7BSU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNV2GNZXOTEDAJRFH3ZYWRUBGIVL7BSU/ https://nvd.nist.gov/vuln/detail/CVE-2022-38900 https://www.cve.org/CVERecord?id=CVE-2022-38900
decode-uri-component CVE-2026-45822 MEDIUM 0.2.0 0.5.0 https://access.redhat.com/security/cve/CVE-2026-45822 https://advisory.echohq.com/cve/CVE-2026-45822 https://github.com/SamVerschueren/decode-uri-component https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005 https://github.com/SamVerschueren/decode-uri-component/releases/tag/v0.5.0 https://github.com/SamVerschueren/decode-uri-component/security/advisories/GHSA-vcc3-ghjq-m6fr https://github.com/advisories/GHSA-vcc3-ghjq-m6fr https://nvd.nist.gov/vuln/detail/CVE-2026-45822 https://www.cve.org/CVERecord?id=CVE-2026-45822 https://www.npmjs.com/package/decode-uri-component
es5-ext CVE-2024-27088 LOW 0.10.53 0.10.63 https://github.com/medikoo/es5-ext https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2 https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602 https://github.com/medikoo/es5-ext/issues/201 https://github.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h https://nvd.nist.gov/vuln/detail/CVE-2024-27088
eventsource CVE-2022-1650 CRITICAL 0.1.6 1.1.1, 2.0.2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1650.json https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-34716.json https://access.redhat.com/security/cve/CVE-2022-1650 https://github.com/EventSource/eventsource/commit/f9f6416567bff62c1af2f4314be51d9870e94bc2 https://github.com/EventSource/eventsource/pull/273#issuecomment-1127624508 https://github.com/eventsource/eventsource https://github.com/eventsource/eventsource/commit/10ee0c4881a6ba2fe65ec18ed195ac35889583c4 https://github.com/eventsource/eventsource/commit/10ee0c4881a6ba2fe65ec18ed195ac35889583c4%20%28v2.0.2%29 https://huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8e https://huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8e/ https://lists.debian.org/debian-lts-announce/2022/12/msg00021.html https://nvd.nist.gov/vuln/detail/CVE-2022-1650 https://ubuntu.com/security/notices/USN-6082-1 https://www.cve.org/CVERecord?id=CVE-2022-1650
form-data CVE-2025-7783 CRITICAL 2.3.3 2.5.4, 3.0.4, 4.0.4 https://access.redhat.com/security/cve/CVE-2025-7783 https://github.com/benweissmann/CVE-2025-7783-poc https://github.com/form-data/form-data https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0 https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4 https://lists.debian.org/debian-lts-announce/2025/07/msg00023.html https://nvd.nist.gov/vuln/detail/CVE-2025-7783 https://ubuntu.com/security/notices/USN-7976-1 https://www.cve.org/CVERecord?id=CVE-2025-7783
form-data CVE-2026-12143 HIGH 2.3.3 2.5.6, 3.0.5, 4.0.6 https://access.redhat.com/errata/RHSA-2026:33155 https://access.redhat.com/errata/RHSA-2026:33160 https://access.redhat.com/errata/RHSA-2026:33163 https://access.redhat.com/errata/RHSA-2026:33173 https://access.redhat.com/errata/RHSA-2026:33183 https://access.redhat.com/errata/RHSA-2026:34342 https://access.redhat.com/errata/RHSA-2026:36319 https://access.redhat.com/errata/RHSA-2026:36625 https://access.redhat.com/errata/RHSA-2026:36754 https://access.redhat.com/errata/RHSA-2026:40262 https://access.redhat.com/errata/RHSA-2026:41031 https://access.redhat.com/errata/RHSA-2026:41066 https://access.redhat.com/errata/RHSA-2026:41928 https://access.redhat.com/errata/RHSA-2026:41929 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:42146 https://access.redhat.com/errata/RHSA-2026:42796 https://access.redhat.com/errata/RHSA-2026:43052 https://access.redhat.com/errata/RHSA-2026:44263 https://access.redhat.com/errata/RHSA-2026:44267 https://access.redhat.com/errata/RHSA-2026:48124 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:48693 https://access.redhat.com/errata/RHSA-2026:50300 https://access.redhat.com/errata/RHSA-2026:54770 https://access.redhat.com/errata/RHSA-2026:56338 https://access.redhat.com/errata/RHSA-2026:56366 https://access.redhat.com/errata/RHSA-2026:56431 https://access.redhat.com/errata/RHSA-2026:57013 https://access.redhat.com/errata/RHSA-2026:57545 https://access.redhat.com/errata/RHSA-2026:57590 https://access.redhat.com/errata/RHSA-2026:57801 https://access.redhat.com/errata/RHSA-2026:59136 https://access.redhat.com/errata/RHSA-2026:59153 https://access.redhat.com/errata/RHSA-2026:59155 https://access.redhat.com/errata/RHSA-2026:59556 https://access.redhat.com/errata/RHSA-2026:59557 https://access.redhat.com/errata/RHSA-2026:59558 https://access.redhat.com/errata/RHSA-2026:59559 https://access.redhat.com/errata/RHSA-2026:59579 https://access.redhat.com/errata/RHSA-2026:60387 https://access.redhat.com/errata/RHSA-2026:60388 https://access.redhat.com/errata/RHSA-2026:60389 https://access.redhat.com/errata/RHSA-2026:60390 https://access.redhat.com/errata/RHSA-2026:60391 https://access.redhat.com/errata/RHSA-2026:60446 https://access.redhat.com/errata/RHSA-2026:60477 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:63047 https://access.redhat.com/errata/RHSA-2026:63355 https://access.redhat.com/errata/RHSA-2026:63373 https://access.redhat.com/errata/RHSA-2026:66003 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-12143 https://advisory.echohq.com/cve/CVE-2026-12143 https://bugzilla.redhat.com/show_bug.cgi?id=2488480 https://cwe.mitre.org/data/definitions/93.html https://github.com/advisories/GHSA-hmw2-7cc7-3qxx https://github.com/form-data/form-data https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435 https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229 https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045 https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data https://nvd.nist.gov/vuln/detail/CVE-2026-12143 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json https://www.cve.org/CVERecord?id=CVE-2026-12143 https://www.npmjs.com/package/form-data
froala-editor CVE-2019-19935 MEDIUM 3.2.1 3.2.3 http://packetstormsecurity.com/files/158300/Froala-WYSIWYG-HTML-Editor-3.1.1-Cross-Site-Scripting.html https://blog.compass-security.com/2020/07/yet-another-froala-0-day-xss https://blog.compass-security.com/2020/07/yet-another-froala-0-day-xss/ https://compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2020-004_DOM_XSS_in_Froala_WYSIWYG_HTML_Editor.txt https://froala.com/wysiwyg-editor/changelog/#3.2.3 https://github.com/froala/wysiwyg-editor-release https://github.com/froala/wysiwyg-editor/compare/v3.0.5...v3.0.6 https://nvd.nist.gov/vuln/detail/CVE-2019-19935 https://snyk.io/vuln/npm:froala-editor
froala-editor CVE-2020-22864 MEDIUM 3.2.1 4.0.11 https://github.com/418sec/wysiwyg-editor/pull/1 https://github.com/froala/wysiwyg-editor https://github.com/froala/wysiwyg-editor/issues/3880 https://github.com/froala/wysiwyg-editor/pull/3911 https://github.com/froala/wysiwyg-editor/releases/tag/v4.0.11 https://nvd.nist.gov/vuln/detail/CVE-2020-22864 https://www.youtube.com/watch?v=WE3b1iSnWJY
froala-editor CVE-2021-30109 MEDIUM 3.2.1 http://froala.com https://github.com/Hackdwerg/CVE-2021-30109/blob/main/README.md https://github.com/froala/wysiwyg-editor-release https://nvd.nist.gov/vuln/detail/CVE-2021-30109
froala-editor CVE-2024-51434 MEDIUM 3.2.1 https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434 https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434/ https://github.com/froala/wysiwyg-editor https://nvd.nist.gov/vuln/detail/CVE-2024-51434
immer CVE-2021-23436 CRITICAL 7.0.8 9.0.6 https://access.redhat.com/security/cve/CVE-2021-23436 https://github.com/immerjs/immer https://github.com/immerjs/immer/commit/fa671e55ee9bd42ae08cc239102b665a23958237 https://nvd.nist.gov/vuln/detail/CVE-2021-23436 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1579266 https://snyk.io/vuln/SNYK-JS-IMMER-1540542 https://www.cve.org/CVERecord?id=CVE-2021-23436
immer CVE-2020-28477 HIGH 7.0.8 8.0.1 https://access.redhat.com/security/cve/CVE-2020-28477 https://github.com/immerjs/immer/blob/master/src/plugins/patches.ts%23L213 https://github.com/immerjs/immer/commit/da2bd4fa0edc9335543089fe7d290d6a346c40c5 https://github.com/immerjs/immer/issues/738 https://nvd.nist.gov/vuln/detail/CVE-2020-28477 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1061986 https://snyk.io/vuln/SNYK-JS-IMMER-1019369 https://www.cve.org/CVERecord?id=CVE-2020-28477 https://www.npmjs.com/package/immer
immer CVE-2021-3757 HIGH 7.0.8 9.0.6 https://access.redhat.com/security/cve/CVE-2021-3757 https://github.com/immerjs/immer https://github.com/immerjs/immer/commit/fa671e55ee9bd42ae08cc239102b665a23958237 https://huntr.dev/bounties/23d38099-71cd-42ed-a77a-71e68094adfa https://nvd.nist.gov/vuln/detail/CVE-2021-3757 https://www.cve.org/CVERecord?id=CVE-2021-3757
ini CVE-2020-7788 HIGH 1.3.5 1.3.6 https://access.redhat.com/errata/RHSA-2022:6595 https://access.redhat.com/security/cve/CVE-2020-7788 https://bugzilla.redhat.com/1907444 https://bugzilla.redhat.com/1945459 https://bugzilla.redhat.com/1964461 https://bugzilla.redhat.com/2007557 https://bugzilla.redhat.com/2098556 https://bugzilla.redhat.com/2102001 https://bugzilla.redhat.com/2105422 https://bugzilla.redhat.com/2105426 https://bugzilla.redhat.com/2105428 https://bugzilla.redhat.com/2105430 https://bugzilla.redhat.com/show_bug.cgi?id=1907444 https://bugzilla.redhat.com/show_bug.cgi?id=1945459 https://bugzilla.redhat.com/show_bug.cgi?id=1964461 https://bugzilla.redhat.com/show_bug.cgi?id=2007557 https://bugzilla.redhat.com/show_bug.cgi?id=2098556 https://bugzilla.redhat.com/show_bug.cgi?id=2102001 https://bugzilla.redhat.com/show_bug.cgi?id=2105422 https://bugzilla.redhat.com/show_bug.cgi?id=2105426 https://bugzilla.redhat.com/show_bug.cgi?id=2105428 https://bugzilla.redhat.com/show_bug.cgi?id=2105430 https://bugzilla.redhat.com/show_bug.cgi?id=2121019 https://bugzilla.redhat.com/show_bug.cgi?id=2124299 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28469 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33502 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29244 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32212 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32213 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32214 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33987 https://errata.almalinux.org/9/ALSA-2022-6595.html https://errata.rockylinux.org/RLSA-2022:6595 https://github.com/npm/ini https://github.com/npm/ini/commit/56d2805e07ccd94e2ba0984ac9240ff02d44b6f1 https://github.com/npm/ini/commit/56d2805e07ccd94e2ba0984ac9240ff02d44b6f1%20%28v1.3.6%29 https://linux.oracle.com/cve/CVE-2020-7788.html https://linux.oracle.com/errata/ELSA-2022-6595.html https://lists.debian.org/debian-lts-announce/2020/12/msg00032.html https://nvd.nist.gov/vuln/detail/CVE-2020-7788 https://snyk.io/vuln/SNYK-JS-INI-1048974 https://www.cve.org/CVERecord?id=CVE-2020-7788 https://www.npmjs.com/advisories/1589
json-schema CVE-2021-3918 CRITICAL 0.2.3 0.4.0 https://access.redhat.com/security/cve/CVE-2021-3918 https://bugzilla.redhat.com/show_bug.cgi?id=1907444 https://bugzilla.redhat.com/show_bug.cgi?id=1945459 https://bugzilla.redhat.com/show_bug.cgi?id=1964461 https://bugzilla.redhat.com/show_bug.cgi?id=1999731 https://bugzilla.redhat.com/show_bug.cgi?id=1999739 https://bugzilla.redhat.com/show_bug.cgi?id=2007557 https://bugzilla.redhat.com/show_bug.cgi?id=2014057 https://bugzilla.redhat.com/show_bug.cgi?id=2014059 https://bugzilla.redhat.com/show_bug.cgi?id=2024702 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28469 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22959 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22960 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33502 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37701 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37712 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3918 https://errata.almalinux.org/8/ALSA-2022-0350.html https://errata.rockylinux.org/RLSA-2022:0350 https://github.com/kriszyp/json-schema https://github.com/kriszyp/json-schema/commit/22f146111f541d9737e832823699ad3528ca7741 https://github.com/kriszyp/json-schema/commit/22f146111f541d9737e832823699ad3528ca7741%20%28v0.4.0%29 https://github.com/kriszyp/json-schema/commit/b62f1da1ff5442f23443d6be6a92d00e65cba93a https://github.com/kriszyp/json-schema/commit/f6f6a3b02d667aa4ba2d5d50cc19208c4462abfa https://huntr.dev/bounties/bb6ccd63-f505-4e3a-b55f-cd2662c261a9 https://linux.oracle.com/cve/CVE-2021-3918.html https://linux.oracle.com/errata/ELSA-2022-0350.html https://lists.debian.org/debian-lts-announce/2022/12/msg00013.html https://nvd.nist.gov/vuln/detail/CVE-2021-3918 https://security.netapp.com/advisory/ntap-20250117-0004 https://security.netapp.com/advisory/ntap-20250117-0004/ https://ubuntu.com/security/notices/USN-6103-1 https://www.cve.org/CVERecord?id=CVE-2021-3918
json5 CVE-2022-46175 HIGH 0.5.1 2.2.2, 1.0.2 https://access.redhat.com/security/cve/CVE-2022-46175 https://github.com/json5/json5 https://github.com/json5/json5/commit/62a65408408d40aeea14c7869ed327acead12972 https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8 https://github.com/json5/json5/issues/199 https://github.com/json5/json5/issues/295 https://github.com/json5/json5/pull/298 https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h https://lists.debian.org/debian-lts-announce/2023/11/msg00021.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3S26TLPLVFAJTUN3VIXFDEBEXDYO22CE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3S26TLPLVFAJTUN3VIXFDEBEXDYO22CE/ https://nvd.nist.gov/vuln/detail/CVE-2022-46175 https://ubuntu.com/security/notices/USN-6758-1 https://www.cve.org/CVERecord?id=CVE-2022-46175
jsonpath-plus CVE-2024-21534 CRITICAL 4.0.0 10.2.0 https://access.redhat.com/security/cve/CVE-2024-21534 https://github.com/JSONPath-Plus/JSONPath https://github.com/JSONPath-Plus/JSONPath/commit/6b2f1b4c234292c75912b790bf7e2d7339d4ccd3 https://github.com/JSONPath-Plus/JSONPath/commit/73ad72e5ee788d8287dea6e8283a3f16f63c9eb8 https://github.com/JSONPath-Plus/JSONPath/commit/b70aa713553caf838a63bac923195a5bc541fd72 https://github.com/JSONPath-Plus/JSONPath/compare/v9.0.0...v10.1.0 https://github.com/JSONPath-Plus/JSONPath/issues/226 https://github.com/JSONPath-Plus/JSONPath/issues/226#issuecomment-2424230316 https://github.com/JSONPath-Plus/JSONPath/pull/233 https://nvd.nist.gov/vuln/detail/CVE-2024-21534 https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-8185019 https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884 https://www.cve.org/CVERecord?id=CVE-2024-21534
jsonpath-plus CVE-2025-1302 HIGH 4.0.0 10.3.0 https://access.redhat.com/security/cve/CVE-2025-1302 https://gist.github.com/nickcopi/11ba3cb4fdee6f89e02e6afae8db6456 https://github.com/JSONPath-Plus/JSONPath https://github.com/JSONPath-Plus/JSONPath/blob/8e4acf8aff5f446aa66323e12394ac5615c3b260/src/Safe-Script.js#L127 https://github.com/JSONPath-Plus/JSONPath/blob/8e4acf8aff5f446aa66323e12394ac5615c3b260/src/Safe-Script.js%23L127 https://github.com/JSONPath-Plus/JSONPath/commit/30942896d27cb8a806b965a5ca9ef9f686be24ee https://nvd.nist.gov/vuln/detail/CVE-2024-21534 https://nvd.nist.gov/vuln/detail/CVE-2025-1302 https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-8719585 https://www.cve.org/CVERecord?id=CVE-2025-1302
loader-utils CVE-2022-37601 CRITICAL 1.1.0 2.0.3, 1.4.1 http://users.encs.concordia.ca/~mmannan/publications/JS-vulnerability-aisaccs2022.pdf https://access.redhat.com/security/cve/CVE-2022-37601 https://dl.acm.org/doi/abs/10.1145/3488932.3497769 https://dl.acm.org/doi/pdf/10.1145/3488932.3497769 https://github.com/webpack/loader-utils https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/parseQuery.js#L11 https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/parseQuery.js#L47 https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5 https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c https://github.com/webpack/loader-utils/commit/f4e48a232fae900237c3e5ff7b57ce9e1c734de1 https://github.com/webpack/loader-utils/issues/212 https://github.com/webpack/loader-utils/issues/212#issuecomment-1319192884 https://github.com/webpack/loader-utils/pull/217 https://github.com/webpack/loader-utils/pull/220 https://github.com/webpack/loader-utils/releases/tag/v1.4.1 https://github.com/webpack/loader-utils/releases/tag/v2.0.3 https://github.com/xmldom/xmldom/issues/436#issuecomment-1319412826 https://lists.debian.org/debian-lts-announce/2022/12/msg00044.html https://nvd.nist.gov/vuln/detail/CVE-2022-37601 https://www.cve.org/CVERecord?id=CVE-2022-37601
loader-utils CVE-2022-37599 HIGH 1.1.0 1.4.2, 2.0.4, 3.2.1 https://access.redhat.com/security/cve/CVE-2022-37599 https://github.com/advisories/GHSA-hhq3-ff78-jv3g https://github.com/webpack/loader-utils https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L38 https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L83 https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb https://github.com/webpack/loader-utils/commit/d2d752d59629daee38f34b24307221349c490eb1 https://github.com/webpack/loader-utils/issues/211 https://github.com/webpack/loader-utils/issues/216 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/ https://nvd.nist.gov/vuln/detail/CVE-2022-37599 https://www.cve.org/CVERecord?id=CVE-2022-37599
loader-utils CVE-2022-37603 HIGH 1.1.0 1.4.2, 2.0.4, 3.2.1 https://access.redhat.com/security/cve/CVE-2022-37603 https://github.com/webpack/loader-utils https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L107 https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L38 https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb https://github.com/webpack/loader-utils/commit/d2d752d59629daee38f34b24307221349c490eb1 https://github.com/webpack/loader-utils/issues/213 https://github.com/webpack/loader-utils/issues/216 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ERN6YE3DS7NBW7UH44SCJBMNC2NWQ7SM https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ERN6YE3DS7NBW7UH44SCJBMNC2NWQ7SM/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KAC5KQ2SEWAMQ6UZAUBZ5KXKEOESH375 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KAC5KQ2SEWAMQ6UZAUBZ5KXKEOESH375/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNV2GNZXOTEDAJRFH3ZYWRUBGIVL7BSU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNV2GNZXOTEDAJRFH3ZYWRUBGIVL7BSU/ https://nvd.nist.gov/vuln/detail/CVE-2022-37603 https://www.cve.org/CVERecord?id=CVE-2022-37603
lodash CVE-2020-8203 HIGH 4.17.15 4.17.19 https://access.redhat.com/security/cve/CVE-2020-8203 https://github.com/advisories/GHSA-p6mc-m468-83gw https://github.com/github/advisory-database/pull/2884 https://github.com/lodash/lodash https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12 https://github.com/lodash/lodash/issues/4744 https://github.com/lodash/lodash/issues/4874 https://github.com/lodash/lodash/wiki/Changelog#v41719 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2020-8203.yml https://hackerone.com/reports/712065 https://hackerone.com/reports/864701 https://nvd.nist.gov/vuln/detail/CVE-2020-8203 https://security.netapp.com/advisory/ntap-20200724-0006 https://security.netapp.com/advisory/ntap-20200724-0006/ https://ubuntu.com/security/notices/USN-8411-1 https://web.archive.org/web/20210914001339/https://github.com/lodash/lodash/issues/4744 https://www.cve.org/CVERecord?id=CVE-2020-8203 https://www.npmjs.com/advisories/1523 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
lodash CVE-2021-23337 HIGH 4.17.15 4.17.21 https://access.redhat.com/security/cve/CVE-2021-23337 https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf https://github.com/advisories/GHSA-35jh-r3h4-6jhm https://github.com/lodash/lodash https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js#L14851 https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js%23L14851 https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2021-23337.yml https://nvd.nist.gov/vuln/detail/CVE-2021-23337 https://security.netapp.com/advisory/ntap-20210312-0006 https://security.netapp.com/advisory/ntap-20210312-0006/ https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929 https://snyk.io/vuln/SNYK-JS-LODASH-1040724 https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2021-23337 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
lodash CVE-2026-4800 HIGH 4.17.15 4.18.0 https://access.redhat.com/errata/RHBA-2026:21387 https://access.redhat.com/errata/RHSA-2026:10131 https://access.redhat.com/errata/RHSA-2026:10175 https://access.redhat.com/errata/RHSA-2026:10710 https://access.redhat.com/errata/RHSA-2026:10713 https://access.redhat.com/errata/RHSA-2026:11454 https://access.redhat.com/errata/RHSA-2026:11469 https://access.redhat.com/errata/RHSA-2026:11470 https://access.redhat.com/errata/RHSA-2026:11471 https://access.redhat.com/errata/RHSA-2026:11493 https://access.redhat.com/errata/RHSA-2026:11494 https://access.redhat.com/errata/RHSA-2026:11495 https://access.redhat.com/errata/RHSA-2026:11516 https://access.redhat.com/errata/RHSA-2026:12277 https://access.redhat.com/errata/RHSA-2026:12279 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:13553 https://access.redhat.com/errata/RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:13826 https://access.redhat.com/errata/RHSA-2026:14870 https://access.redhat.com/errata/RHSA-2026:14871 https://access.redhat.com/errata/RHSA-2026:16874 https://access.redhat.com/errata/RHSA-2026:17448 https://access.redhat.com/errata/RHSA-2026:17468 https://access.redhat.com/errata/RHSA-2026:17469 https://access.redhat.com/errata/RHSA-2026:17547 https://access.redhat.com/errata/RHSA-2026:17549 https://access.redhat.com/errata/RHSA-2026:17550 https://access.redhat.com/errata/RHSA-2026:17598 https://access.redhat.com/errata/RHSA-2026:17789 https://access.redhat.com/errata/RHSA-2026:19008 https://access.redhat.com/errata/RHSA-2026:19167 https://access.redhat.com/errata/RHSA-2026:19409 https://access.redhat.com/errata/RHSA-2026:19410 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20041 https://access.redhat.com/errata/RHSA-2026:20042 https://access.redhat.com/errata/RHSA-2026:20943 https://access.redhat.com/errata/RHSA-2026:20946 https://access.redhat.com/errata/RHSA-2026:21658 https://access.redhat.com/errata/RHSA-2026:22619 https://access.redhat.com/errata/RHSA-2026:24331 https://access.redhat.com/errata/RHSA-2026:24762 https://access.redhat.com/errata/RHSA-2026:24977 https://access.redhat.com/errata/RHSA-2026:29795 https://access.redhat.com/errata/RHSA-2026:34100 https://access.redhat.com/errata/RHSA-2026:34342 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36621 https://access.redhat.com/errata/RHSA-2026:36651 https://access.redhat.com/errata/RHSA-2026:37186 https://access.redhat.com/errata/RHSA-2026:40118 https://access.redhat.com/errata/RHSA-2026:40795 https://access.redhat.com/errata/RHSA-2026:40945 https://access.redhat.com/errata/RHSA-2026:40984 https://access.redhat.com/errata/RHSA-2026:41928 https://access.redhat.com/errata/RHSA-2026:41941 https://access.redhat.com/errata/RHSA-2026:41944 https://access.redhat.com/errata/RHSA-2026:42078 https://access.redhat.com/errata/RHSA-2026:44235 https://access.redhat.com/errata/RHSA-2026:48699 https://access.redhat.com/errata/RHSA-2026:54188 https://access.redhat.com/errata/RHSA-2026:56789 https://access.redhat.com/errata/RHSA-2026:56854 https://access.redhat.com/errata/RHSA-2026:56912 https://access.redhat.com/errata/RHSA-2026:59833 https://access.redhat.com/errata/RHSA-2026:60023 https://access.redhat.com/errata/RHSA-2026:8483 https://access.redhat.com/errata/RHSA-2026:8484 https://access.redhat.com/errata/RHSA-2026:8490 https://access.redhat.com/errata/RHSA-2026:8491 https://access.redhat.com/errata/RHSA-2026:8493 https://access.redhat.com/errata/RHSA-2026:8498 https://access.redhat.com/errata/RHSA-2026:9385 https://access.redhat.com/errata/RHSA-2026:9742 https://access.redhat.com/security/cve/CVE-2026-4800 https://advisory.echohq.com/cve/CVE-2026-4800 https://bugzilla.redhat.com/2453496 https://bugzilla.redhat.com/show_bug.cgi?id=2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2453496 https://cna.openjsf.org/security-advisories.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4800 https://errata.almalinux.org/10/ALSA-2026-10713.html https://errata.rockylinux.org/RLSA-2026:24331 https://github.com/advisories/GHSA-35jh-r3h4-6jhm https://github.com/advisories/GHSA-r5fr-rjxr-66jc https://github.com/lodash/lodash https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc https://linux.oracle.com/cve/CVE-2026-4800.html https://linux.oracle.com/errata/ELSA-2026-24331.html https://nvd.nist.gov/vuln/detail/CVE-2026-4800 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4800.json https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2026-4800
lodash NSWG-ECO-516 HIGH 4.17.15 >=4.17.19 https://github.com/lodash/lodash/pull/4759 https://hackerone.com/reports/712065 https://www.npmjs.com/advisories/1523
lodash CVE-2020-28500 MEDIUM 4.17.15 4.17.21 https://access.redhat.com/security/cve/CVE-2020-28500 https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf https://github.com/advisories/GHSA-29mw-wpgm-hmr9 https://github.com/github/advisory-database/pull/6139 https://github.com/lodash/lodash https://github.com/lodash/lodash/blob/npm/trimEnd.js https://github.com/lodash/lodash/blob/npm/trimEnd.js#L8 https://github.com/lodash/lodash/blob/npm/trimEnd.js%23L8 https://github.com/lodash/lodash/commit/c4847ebe7d14540bb28a8b932a9ce1b9ecbfee1a https://github.com/lodash/lodash/pull/5065 https://github.com/lodash/lodash/pull/5065/commits/02906b8191d3c100c193fe6f7b27d1c40f200bb7 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2020-28500.yml https://nvd.nist.gov/vuln/detail/CVE-2020-28500 https://security.netapp.com/advisory/ntap-20210312-0006 https://security.netapp.com/advisory/ntap-20210312-0006/ https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074896 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074894 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074892 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074895 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074893 https://snyk.io/vuln/SNYK-JS-LODASH-1018905 https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2020-28500 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
lodash CVE-2025-13465 MEDIUM 4.17.15 4.17.23 https://access.redhat.com/errata/RHSA-2026:11414 https://access.redhat.com/errata/RHSA-2026:13542 https://access.redhat.com/errata/RHSA-2026:13548 https://access.redhat.com/errata/RHSA-2026:13829 https://access.redhat.com/errata/RHSA-2026:14774 https://access.redhat.com/errata/RHSA-2026:14870 https://access.redhat.com/errata/RHSA-2026:14871 https://access.redhat.com/errata/RHSA-2026:15091 https://access.redhat.com/errata/RHSA-2026:17469 https://access.redhat.com/errata/RHSA-2026:1845 https://access.redhat.com/errata/RHSA-2026:18480 https://access.redhat.com/errata/RHSA-2026:18868 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20042 https://access.redhat.com/errata/RHSA-2026:20088 https://access.redhat.com/errata/RHSA-2026:2078 https://access.redhat.com/errata/RHSA-2026:2119 https://access.redhat.com/errata/RHSA-2026:2145 https://access.redhat.com/errata/RHSA-2026:2147 https://access.redhat.com/errata/RHSA-2026:2148 https://access.redhat.com/errata/RHSA-2026:2149 https://access.redhat.com/errata/RHSA-2026:21658 https://access.redhat.com/errata/RHSA-2026:24331 https://access.redhat.com/errata/RHSA-2026:2438 https://access.redhat.com/errata/RHSA-2026:2452 https://access.redhat.com/errata/RHSA-2026:2462 https://access.redhat.com/errata/RHSA-2026:2465 https://access.redhat.com/errata/RHSA-2026:2469 https://access.redhat.com/errata/RHSA-2026:2484 https://access.redhat.com/errata/RHSA-2026:25089 https://access.redhat.com/errata/RHSA-2026:2651 https://access.redhat.com/errata/RHSA-2026:2661 https://access.redhat.com/errata/RHSA-2026:2672 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2816 https://access.redhat.com/errata/RHSA-2026:2817 https://access.redhat.com/errata/RHSA-2026:2818 https://access.redhat.com/errata/RHSA-2026:2819 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2926 https://access.redhat.com/errata/RHSA-2026:2984 https://access.redhat.com/errata/RHSA-2026:2990 https://access.redhat.com/errata/RHSA-2026:3087 https://access.redhat.com/errata/RHSA-2026:33154 https://access.redhat.com/errata/RHSA-2026:33371 https://access.redhat.com/errata/RHSA-2026:34100 https://access.redhat.com/errata/RHSA-2026:3422 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36651 https://access.redhat.com/errata/RHSA-2026:36882 https://access.redhat.com/errata/RHSA-2026:3710 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3825 https://access.redhat.com/errata/RHSA-2026:3869 https://access.redhat.com/errata/RHSA-2026:3870 https://access.redhat.com/errata/RHSA-2026:3874 https://access.redhat.com/errata/RHSA-2026:3884 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:3962 https://access.redhat.com/errata/RHSA-2026:40118 https://access.redhat.com/errata/RHSA-2026:40945 https://access.redhat.com/errata/RHSA-2026:40984 https://access.redhat.com/errata/RHSA-2026:41064 https://access.redhat.com/errata/RHSA-2026:41928 https://access.redhat.com/errata/RHSA-2026:41941 https://access.redhat.com/errata/RHSA-2026:41944 https://access.redhat.com/errata/RHSA-2026:4423 https://access.redhat.com/errata/RHSA-2026:4466 https://access.redhat.com/errata/RHSA-2026:4467 https://access.redhat.com/errata/RHSA-2026:4630 https://access.redhat.com/errata/RHSA-2026:4782 https://access.redhat.com/errata/RHSA-2026:5633 https://access.redhat.com/errata/RHSA-2026:5636 https://access.redhat.com/errata/RHSA-2026:57487 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:6288 https://access.redhat.com/errata/RHSA-2026:6497 https://access.redhat.com/errata/RHSA-2026:6567 https://access.redhat.com/errata/RHSA-2026:8218 https://access.redhat.com/errata/RHSA-2026:8229 https://access.redhat.com/errata/RHSA-2026:9848 https://access.redhat.com/security/cve/CVE-2025-13465 https://advisory.echohq.com/cve/CVE-2025-13465 https://bugzilla.redhat.com/2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2425946 https://bugzilla.redhat.com/show_bug.cgi?id=2430538 https://bugzilla.redhat.com/show_bug.cgi?id=2431036 https://bugzilla.redhat.com/show_bug.cgi?id=2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2433645 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://cna.openjsf.org/security-advisories.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842 https://errata.almalinux.org/10/ALSA-2026-2438.html https://errata.rockylinux.org/RLSA-2026:18868 https://github.com/advisories/GHSA-xxjr-mmjv-4gpg https://github.com/lodash/lodash https://github.com/lodash/lodash/commit/edadd452146f7e4bad4ea684e955708931d84d81 https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg https://linux.oracle.com/cve/CVE-2025-13465.html https://linux.oracle.com/errata/ELSA-2026-2452.html https://nvd.nist.gov/vuln/detail/CVE-2025-13465 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13465.json https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2025-13465
lodash CVE-2026-2950 MEDIUM 4.17.15 4.18.0 https://access.redhat.com/security/cve/CVE-2026-2950 https://advisory.echohq.com/cve/CVE-2026-2950 https://cna.openjsf.org/security-advisories.html https://github.com/advisories/GHSA-f23m-r3pf-42rh https://github.com/lodash/lodash https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg https://nvd.nist.gov/vuln/detail/CVE-2026-2950 https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2026-2950
lodash CVE-2021-23337 HIGH 4.17.20 4.17.21 https://access.redhat.com/security/cve/CVE-2021-23337 https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf https://github.com/advisories/GHSA-35jh-r3h4-6jhm https://github.com/lodash/lodash https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js#L14851 https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js%23L14851 https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2021-23337.yml https://nvd.nist.gov/vuln/detail/CVE-2021-23337 https://security.netapp.com/advisory/ntap-20210312-0006 https://security.netapp.com/advisory/ntap-20210312-0006/ https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929 https://snyk.io/vuln/SNYK-JS-LODASH-1040724 https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2021-23337 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
lodash CVE-2026-4800 HIGH 4.17.20 4.18.0 https://access.redhat.com/errata/RHBA-2026:21387 https://access.redhat.com/errata/RHSA-2026:10131 https://access.redhat.com/errata/RHSA-2026:10175 https://access.redhat.com/errata/RHSA-2026:10710 https://access.redhat.com/errata/RHSA-2026:10713 https://access.redhat.com/errata/RHSA-2026:11454 https://access.redhat.com/errata/RHSA-2026:11469 https://access.redhat.com/errata/RHSA-2026:11470 https://access.redhat.com/errata/RHSA-2026:11471 https://access.redhat.com/errata/RHSA-2026:11493 https://access.redhat.com/errata/RHSA-2026:11494 https://access.redhat.com/errata/RHSA-2026:11495 https://access.redhat.com/errata/RHSA-2026:11516 https://access.redhat.com/errata/RHSA-2026:12277 https://access.redhat.com/errata/RHSA-2026:12279 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:13553 https://access.redhat.com/errata/RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:13826 https://access.redhat.com/errata/RHSA-2026:14870 https://access.redhat.com/errata/RHSA-2026:14871 https://access.redhat.com/errata/RHSA-2026:16874 https://access.redhat.com/errata/RHSA-2026:17448 https://access.redhat.com/errata/RHSA-2026:17468 https://access.redhat.com/errata/RHSA-2026:17469 https://access.redhat.com/errata/RHSA-2026:17547 https://access.redhat.com/errata/RHSA-2026:17549 https://access.redhat.com/errata/RHSA-2026:17550 https://access.redhat.com/errata/RHSA-2026:17598 https://access.redhat.com/errata/RHSA-2026:17789 https://access.redhat.com/errata/RHSA-2026:19008 https://access.redhat.com/errata/RHSA-2026:19167 https://access.redhat.com/errata/RHSA-2026:19409 https://access.redhat.com/errata/RHSA-2026:19410 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20041 https://access.redhat.com/errata/RHSA-2026:20042 https://access.redhat.com/errata/RHSA-2026:20943 https://access.redhat.com/errata/RHSA-2026:20946 https://access.redhat.com/errata/RHSA-2026:21658 https://access.redhat.com/errata/RHSA-2026:22619 https://access.redhat.com/errata/RHSA-2026:24331 https://access.redhat.com/errata/RHSA-2026:24762 https://access.redhat.com/errata/RHSA-2026:24977 https://access.redhat.com/errata/RHSA-2026:29795 https://access.redhat.com/errata/RHSA-2026:34100 https://access.redhat.com/errata/RHSA-2026:34342 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36621 https://access.redhat.com/errata/RHSA-2026:36651 https://access.redhat.com/errata/RHSA-2026:37186 https://access.redhat.com/errata/RHSA-2026:40118 https://access.redhat.com/errata/RHSA-2026:40795 https://access.redhat.com/errata/RHSA-2026:40945 https://access.redhat.com/errata/RHSA-2026:40984 https://access.redhat.com/errata/RHSA-2026:41928 https://access.redhat.com/errata/RHSA-2026:41941 https://access.redhat.com/errata/RHSA-2026:41944 https://access.redhat.com/errata/RHSA-2026:42078 https://access.redhat.com/errata/RHSA-2026:44235 https://access.redhat.com/errata/RHSA-2026:48699 https://access.redhat.com/errata/RHSA-2026:54188 https://access.redhat.com/errata/RHSA-2026:56789 https://access.redhat.com/errata/RHSA-2026:56854 https://access.redhat.com/errata/RHSA-2026:56912 https://access.redhat.com/errata/RHSA-2026:59833 https://access.redhat.com/errata/RHSA-2026:60023 https://access.redhat.com/errata/RHSA-2026:8483 https://access.redhat.com/errata/RHSA-2026:8484 https://access.redhat.com/errata/RHSA-2026:8490 https://access.redhat.com/errata/RHSA-2026:8491 https://access.redhat.com/errata/RHSA-2026:8493 https://access.redhat.com/errata/RHSA-2026:8498 https://access.redhat.com/errata/RHSA-2026:9385 https://access.redhat.com/errata/RHSA-2026:9742 https://access.redhat.com/security/cve/CVE-2026-4800 https://advisory.echohq.com/cve/CVE-2026-4800 https://bugzilla.redhat.com/2453496 https://bugzilla.redhat.com/show_bug.cgi?id=2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2453496 https://cna.openjsf.org/security-advisories.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4800 https://errata.almalinux.org/10/ALSA-2026-10713.html https://errata.rockylinux.org/RLSA-2026:24331 https://github.com/advisories/GHSA-35jh-r3h4-6jhm https://github.com/advisories/GHSA-r5fr-rjxr-66jc https://github.com/lodash/lodash https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc https://linux.oracle.com/cve/CVE-2026-4800.html https://linux.oracle.com/errata/ELSA-2026-24331.html https://nvd.nist.gov/vuln/detail/CVE-2026-4800 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4800.json https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2026-4800
lodash CVE-2020-28500 MEDIUM 4.17.20 4.17.21 https://access.redhat.com/security/cve/CVE-2020-28500 https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf https://github.com/advisories/GHSA-29mw-wpgm-hmr9 https://github.com/github/advisory-database/pull/6139 https://github.com/lodash/lodash https://github.com/lodash/lodash/blob/npm/trimEnd.js https://github.com/lodash/lodash/blob/npm/trimEnd.js#L8 https://github.com/lodash/lodash/blob/npm/trimEnd.js%23L8 https://github.com/lodash/lodash/commit/c4847ebe7d14540bb28a8b932a9ce1b9ecbfee1a https://github.com/lodash/lodash/pull/5065 https://github.com/lodash/lodash/pull/5065/commits/02906b8191d3c100c193fe6f7b27d1c40f200bb7 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2020-28500.yml https://nvd.nist.gov/vuln/detail/CVE-2020-28500 https://security.netapp.com/advisory/ntap-20210312-0006 https://security.netapp.com/advisory/ntap-20210312-0006/ https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074896 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074894 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074892 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074895 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074893 https://snyk.io/vuln/SNYK-JS-LODASH-1018905 https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2020-28500 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
lodash CVE-2025-13465 MEDIUM 4.17.20 4.17.23 https://access.redhat.com/errata/RHSA-2026:11414 https://access.redhat.com/errata/RHSA-2026:13542 https://access.redhat.com/errata/RHSA-2026:13548 https://access.redhat.com/errata/RHSA-2026:13829 https://access.redhat.com/errata/RHSA-2026:14774 https://access.redhat.com/errata/RHSA-2026:14870 https://access.redhat.com/errata/RHSA-2026:14871 https://access.redhat.com/errata/RHSA-2026:15091 https://access.redhat.com/errata/RHSA-2026:17469 https://access.redhat.com/errata/RHSA-2026:1845 https://access.redhat.com/errata/RHSA-2026:18480 https://access.redhat.com/errata/RHSA-2026:18868 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20042 https://access.redhat.com/errata/RHSA-2026:20088 https://access.redhat.com/errata/RHSA-2026:2078 https://access.redhat.com/errata/RHSA-2026:2119 https://access.redhat.com/errata/RHSA-2026:2145 https://access.redhat.com/errata/RHSA-2026:2147 https://access.redhat.com/errata/RHSA-2026:2148 https://access.redhat.com/errata/RHSA-2026:2149 https://access.redhat.com/errata/RHSA-2026:21658 https://access.redhat.com/errata/RHSA-2026:24331 https://access.redhat.com/errata/RHSA-2026:2438 https://access.redhat.com/errata/RHSA-2026:2452 https://access.redhat.com/errata/RHSA-2026:2462 https://access.redhat.com/errata/RHSA-2026:2465 https://access.redhat.com/errata/RHSA-2026:2469 https://access.redhat.com/errata/RHSA-2026:2484 https://access.redhat.com/errata/RHSA-2026:25089 https://access.redhat.com/errata/RHSA-2026:2651 https://access.redhat.com/errata/RHSA-2026:2661 https://access.redhat.com/errata/RHSA-2026:2672 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2816 https://access.redhat.com/errata/RHSA-2026:2817 https://access.redhat.com/errata/RHSA-2026:2818 https://access.redhat.com/errata/RHSA-2026:2819 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2926 https://access.redhat.com/errata/RHSA-2026:2984 https://access.redhat.com/errata/RHSA-2026:2990 https://access.redhat.com/errata/RHSA-2026:3087 https://access.redhat.com/errata/RHSA-2026:33154 https://access.redhat.com/errata/RHSA-2026:33371 https://access.redhat.com/errata/RHSA-2026:34100 https://access.redhat.com/errata/RHSA-2026:3422 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36651 https://access.redhat.com/errata/RHSA-2026:36882 https://access.redhat.com/errata/RHSA-2026:3710 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3825 https://access.redhat.com/errata/RHSA-2026:3869 https://access.redhat.com/errata/RHSA-2026:3870 https://access.redhat.com/errata/RHSA-2026:3874 https://access.redhat.com/errata/RHSA-2026:3884 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:3962 https://access.redhat.com/errata/RHSA-2026:40118 https://access.redhat.com/errata/RHSA-2026:40945 https://access.redhat.com/errata/RHSA-2026:40984 https://access.redhat.com/errata/RHSA-2026:41064 https://access.redhat.com/errata/RHSA-2026:41928 https://access.redhat.com/errata/RHSA-2026:41941 https://access.redhat.com/errata/RHSA-2026:41944 https://access.redhat.com/errata/RHSA-2026:4423 https://access.redhat.com/errata/RHSA-2026:4466 https://access.redhat.com/errata/RHSA-2026:4467 https://access.redhat.com/errata/RHSA-2026:4630 https://access.redhat.com/errata/RHSA-2026:4782 https://access.redhat.com/errata/RHSA-2026:5633 https://access.redhat.com/errata/RHSA-2026:5636 https://access.redhat.com/errata/RHSA-2026:57487 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:6288 https://access.redhat.com/errata/RHSA-2026:6497 https://access.redhat.com/errata/RHSA-2026:6567 https://access.redhat.com/errata/RHSA-2026:8218 https://access.redhat.com/errata/RHSA-2026:8229 https://access.redhat.com/errata/RHSA-2026:9848 https://access.redhat.com/security/cve/CVE-2025-13465 https://advisory.echohq.com/cve/CVE-2025-13465 https://bugzilla.redhat.com/2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2425946 https://bugzilla.redhat.com/show_bug.cgi?id=2430538 https://bugzilla.redhat.com/show_bug.cgi?id=2431036 https://bugzilla.redhat.com/show_bug.cgi?id=2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2433645 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://cna.openjsf.org/security-advisories.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842 https://errata.almalinux.org/10/ALSA-2026-2438.html https://errata.rockylinux.org/RLSA-2026:18868 https://github.com/advisories/GHSA-xxjr-mmjv-4gpg https://github.com/lodash/lodash https://github.com/lodash/lodash/commit/edadd452146f7e4bad4ea684e955708931d84d81 https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg https://linux.oracle.com/cve/CVE-2025-13465.html https://linux.oracle.com/errata/ELSA-2026-2452.html https://nvd.nist.gov/vuln/detail/CVE-2025-13465 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13465.json https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2025-13465
lodash CVE-2026-2950 MEDIUM 4.17.20 4.18.0 https://access.redhat.com/security/cve/CVE-2026-2950 https://advisory.echohq.com/cve/CVE-2026-2950 https://cna.openjsf.org/security-advisories.html https://github.com/advisories/GHSA-f23m-r3pf-42rh https://github.com/lodash/lodash https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg https://nvd.nist.gov/vuln/detail/CVE-2026-2950 https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2026-2950
lodash-es CVE-2020-8203 HIGH 4.17.15 4.17.20 https://access.redhat.com/security/cve/CVE-2020-8203 https://github.com/advisories/GHSA-p6mc-m468-83gw https://github.com/github/advisory-database/pull/2884 https://github.com/lodash/lodash https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12 https://github.com/lodash/lodash/issues/4744 https://github.com/lodash/lodash/issues/4874 https://github.com/lodash/lodash/wiki/Changelog#v41719 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2020-8203.yml https://hackerone.com/reports/712065 https://hackerone.com/reports/864701 https://nvd.nist.gov/vuln/detail/CVE-2020-8203 https://security.netapp.com/advisory/ntap-20200724-0006 https://security.netapp.com/advisory/ntap-20200724-0006/ https://ubuntu.com/security/notices/USN-8411-1 https://web.archive.org/web/20210914001339/https://github.com/lodash/lodash/issues/4744 https://www.cve.org/CVERecord?id=CVE-2020-8203 https://www.npmjs.com/advisories/1523 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
lodash-es CVE-2021-23337 HIGH 4.17.15 4.17.21 https://access.redhat.com/security/cve/CVE-2021-23337 https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf https://github.com/advisories/GHSA-35jh-r3h4-6jhm https://github.com/lodash/lodash https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js#L14851 https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js%23L14851 https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2021-23337.yml https://nvd.nist.gov/vuln/detail/CVE-2021-23337 https://security.netapp.com/advisory/ntap-20210312-0006 https://security.netapp.com/advisory/ntap-20210312-0006/ https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929 https://snyk.io/vuln/SNYK-JS-LODASH-1040724 https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2021-23337 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
lodash-es CVE-2026-4800 HIGH 4.17.15 4.18.0 https://access.redhat.com/errata/RHBA-2026:21387 https://access.redhat.com/errata/RHSA-2026:10131 https://access.redhat.com/errata/RHSA-2026:10175 https://access.redhat.com/errata/RHSA-2026:10710 https://access.redhat.com/errata/RHSA-2026:10713 https://access.redhat.com/errata/RHSA-2026:11454 https://access.redhat.com/errata/RHSA-2026:11469 https://access.redhat.com/errata/RHSA-2026:11470 https://access.redhat.com/errata/RHSA-2026:11471 https://access.redhat.com/errata/RHSA-2026:11493 https://access.redhat.com/errata/RHSA-2026:11494 https://access.redhat.com/errata/RHSA-2026:11495 https://access.redhat.com/errata/RHSA-2026:11516 https://access.redhat.com/errata/RHSA-2026:12277 https://access.redhat.com/errata/RHSA-2026:12279 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:13553 https://access.redhat.com/errata/RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:13826 https://access.redhat.com/errata/RHSA-2026:14870 https://access.redhat.com/errata/RHSA-2026:14871 https://access.redhat.com/errata/RHSA-2026:16874 https://access.redhat.com/errata/RHSA-2026:17448 https://access.redhat.com/errata/RHSA-2026:17468 https://access.redhat.com/errata/RHSA-2026:17469 https://access.redhat.com/errata/RHSA-2026:17547 https://access.redhat.com/errata/RHSA-2026:17549 https://access.redhat.com/errata/RHSA-2026:17550 https://access.redhat.com/errata/RHSA-2026:17598 https://access.redhat.com/errata/RHSA-2026:17789 https://access.redhat.com/errata/RHSA-2026:19008 https://access.redhat.com/errata/RHSA-2026:19167 https://access.redhat.com/errata/RHSA-2026:19409 https://access.redhat.com/errata/RHSA-2026:19410 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20041 https://access.redhat.com/errata/RHSA-2026:20042 https://access.redhat.com/errata/RHSA-2026:20943 https://access.redhat.com/errata/RHSA-2026:20946 https://access.redhat.com/errata/RHSA-2026:21658 https://access.redhat.com/errata/RHSA-2026:22619 https://access.redhat.com/errata/RHSA-2026:24331 https://access.redhat.com/errata/RHSA-2026:24762 https://access.redhat.com/errata/RHSA-2026:24977 https://access.redhat.com/errata/RHSA-2026:29795 https://access.redhat.com/errata/RHSA-2026:34100 https://access.redhat.com/errata/RHSA-2026:34342 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36621 https://access.redhat.com/errata/RHSA-2026:36651 https://access.redhat.com/errata/RHSA-2026:37186 https://access.redhat.com/errata/RHSA-2026:40118 https://access.redhat.com/errata/RHSA-2026:40795 https://access.redhat.com/errata/RHSA-2026:40945 https://access.redhat.com/errata/RHSA-2026:40984 https://access.redhat.com/errata/RHSA-2026:41928 https://access.redhat.com/errata/RHSA-2026:41941 https://access.redhat.com/errata/RHSA-2026:41944 https://access.redhat.com/errata/RHSA-2026:42078 https://access.redhat.com/errata/RHSA-2026:44235 https://access.redhat.com/errata/RHSA-2026:48699 https://access.redhat.com/errata/RHSA-2026:54188 https://access.redhat.com/errata/RHSA-2026:56789 https://access.redhat.com/errata/RHSA-2026:56854 https://access.redhat.com/errata/RHSA-2026:56912 https://access.redhat.com/errata/RHSA-2026:59833 https://access.redhat.com/errata/RHSA-2026:60023 https://access.redhat.com/errata/RHSA-2026:8483 https://access.redhat.com/errata/RHSA-2026:8484 https://access.redhat.com/errata/RHSA-2026:8490 https://access.redhat.com/errata/RHSA-2026:8491 https://access.redhat.com/errata/RHSA-2026:8493 https://access.redhat.com/errata/RHSA-2026:8498 https://access.redhat.com/errata/RHSA-2026:9385 https://access.redhat.com/errata/RHSA-2026:9742 https://access.redhat.com/security/cve/CVE-2026-4800 https://advisory.echohq.com/cve/CVE-2026-4800 https://bugzilla.redhat.com/2453496 https://bugzilla.redhat.com/show_bug.cgi?id=2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2453496 https://cna.openjsf.org/security-advisories.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4800 https://errata.almalinux.org/10/ALSA-2026-10713.html https://errata.rockylinux.org/RLSA-2026:24331 https://github.com/advisories/GHSA-35jh-r3h4-6jhm https://github.com/advisories/GHSA-r5fr-rjxr-66jc https://github.com/lodash/lodash https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc https://linux.oracle.com/cve/CVE-2026-4800.html https://linux.oracle.com/errata/ELSA-2026-24331.html https://nvd.nist.gov/vuln/detail/CVE-2026-4800 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4800.json https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2026-4800
lodash-es CVE-2020-28500 MEDIUM 4.17.15 4.17.21 https://access.redhat.com/security/cve/CVE-2020-28500 https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf https://github.com/advisories/GHSA-29mw-wpgm-hmr9 https://github.com/github/advisory-database/pull/6139 https://github.com/lodash/lodash https://github.com/lodash/lodash/blob/npm/trimEnd.js https://github.com/lodash/lodash/blob/npm/trimEnd.js#L8 https://github.com/lodash/lodash/blob/npm/trimEnd.js%23L8 https://github.com/lodash/lodash/commit/c4847ebe7d14540bb28a8b932a9ce1b9ecbfee1a https://github.com/lodash/lodash/pull/5065 https://github.com/lodash/lodash/pull/5065/commits/02906b8191d3c100c193fe6f7b27d1c40f200bb7 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2020-28500.yml https://nvd.nist.gov/vuln/detail/CVE-2020-28500 https://security.netapp.com/advisory/ntap-20210312-0006 https://security.netapp.com/advisory/ntap-20210312-0006/ https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074896 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074894 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074892 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074895 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074893 https://snyk.io/vuln/SNYK-JS-LODASH-1018905 https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2020-28500 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
lodash-es CVE-2025-13465 MEDIUM 4.17.15 4.17.23 https://access.redhat.com/errata/RHSA-2026:11414 https://access.redhat.com/errata/RHSA-2026:13542 https://access.redhat.com/errata/RHSA-2026:13548 https://access.redhat.com/errata/RHSA-2026:13829 https://access.redhat.com/errata/RHSA-2026:14774 https://access.redhat.com/errata/RHSA-2026:14870 https://access.redhat.com/errata/RHSA-2026:14871 https://access.redhat.com/errata/RHSA-2026:15091 https://access.redhat.com/errata/RHSA-2026:17469 https://access.redhat.com/errata/RHSA-2026:1845 https://access.redhat.com/errata/RHSA-2026:18480 https://access.redhat.com/errata/RHSA-2026:18868 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20042 https://access.redhat.com/errata/RHSA-2026:20088 https://access.redhat.com/errata/RHSA-2026:2078 https://access.redhat.com/errata/RHSA-2026:2119 https://access.redhat.com/errata/RHSA-2026:2145 https://access.redhat.com/errata/RHSA-2026:2147 https://access.redhat.com/errata/RHSA-2026:2148 https://access.redhat.com/errata/RHSA-2026:2149 https://access.redhat.com/errata/RHSA-2026:21658 https://access.redhat.com/errata/RHSA-2026:24331 https://access.redhat.com/errata/RHSA-2026:2438 https://access.redhat.com/errata/RHSA-2026:2452 https://access.redhat.com/errata/RHSA-2026:2462 https://access.redhat.com/errata/RHSA-2026:2465 https://access.redhat.com/errata/RHSA-2026:2469 https://access.redhat.com/errata/RHSA-2026:2484 https://access.redhat.com/errata/RHSA-2026:25089 https://access.redhat.com/errata/RHSA-2026:2651 https://access.redhat.com/errata/RHSA-2026:2661 https://access.redhat.com/errata/RHSA-2026:2672 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2816 https://access.redhat.com/errata/RHSA-2026:2817 https://access.redhat.com/errata/RHSA-2026:2818 https://access.redhat.com/errata/RHSA-2026:2819 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2926 https://access.redhat.com/errata/RHSA-2026:2984 https://access.redhat.com/errata/RHSA-2026:2990 https://access.redhat.com/errata/RHSA-2026:3087 https://access.redhat.com/errata/RHSA-2026:33154 https://access.redhat.com/errata/RHSA-2026:33371 https://access.redhat.com/errata/RHSA-2026:34100 https://access.redhat.com/errata/RHSA-2026:3422 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36651 https://access.redhat.com/errata/RHSA-2026:36882 https://access.redhat.com/errata/RHSA-2026:3710 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3825 https://access.redhat.com/errata/RHSA-2026:3869 https://access.redhat.com/errata/RHSA-2026:3870 https://access.redhat.com/errata/RHSA-2026:3874 https://access.redhat.com/errata/RHSA-2026:3884 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:3962 https://access.redhat.com/errata/RHSA-2026:40118 https://access.redhat.com/errata/RHSA-2026:40945 https://access.redhat.com/errata/RHSA-2026:40984 https://access.redhat.com/errata/RHSA-2026:41064 https://access.redhat.com/errata/RHSA-2026:41928 https://access.redhat.com/errata/RHSA-2026:41941 https://access.redhat.com/errata/RHSA-2026:41944 https://access.redhat.com/errata/RHSA-2026:4423 https://access.redhat.com/errata/RHSA-2026:4466 https://access.redhat.com/errata/RHSA-2026:4467 https://access.redhat.com/errata/RHSA-2026:4630 https://access.redhat.com/errata/RHSA-2026:4782 https://access.redhat.com/errata/RHSA-2026:5633 https://access.redhat.com/errata/RHSA-2026:5636 https://access.redhat.com/errata/RHSA-2026:57487 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:6288 https://access.redhat.com/errata/RHSA-2026:6497 https://access.redhat.com/errata/RHSA-2026:6567 https://access.redhat.com/errata/RHSA-2026:8218 https://access.redhat.com/errata/RHSA-2026:8229 https://access.redhat.com/errata/RHSA-2026:9848 https://access.redhat.com/security/cve/CVE-2025-13465 https://advisory.echohq.com/cve/CVE-2025-13465 https://bugzilla.redhat.com/2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2425946 https://bugzilla.redhat.com/show_bug.cgi?id=2430538 https://bugzilla.redhat.com/show_bug.cgi?id=2431036 https://bugzilla.redhat.com/show_bug.cgi?id=2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2433645 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://cna.openjsf.org/security-advisories.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842 https://errata.almalinux.org/10/ALSA-2026-2438.html https://errata.rockylinux.org/RLSA-2026:18868 https://github.com/advisories/GHSA-xxjr-mmjv-4gpg https://github.com/lodash/lodash https://github.com/lodash/lodash/commit/edadd452146f7e4bad4ea684e955708931d84d81 https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg https://linux.oracle.com/cve/CVE-2025-13465.html https://linux.oracle.com/errata/ELSA-2026-2452.html https://nvd.nist.gov/vuln/detail/CVE-2025-13465 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13465.json https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2025-13465
lodash-es CVE-2026-2950 MEDIUM 4.17.15 4.18.0 https://access.redhat.com/security/cve/CVE-2026-2950 https://advisory.echohq.com/cve/CVE-2026-2950 https://cna.openjsf.org/security-advisories.html https://github.com/advisories/GHSA-f23m-r3pf-42rh https://github.com/lodash/lodash https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg https://nvd.nist.gov/vuln/detail/CVE-2026-2950 https://ubuntu.com/security/notices/USN-8411-1 https://www.cve.org/CVERecord?id=CVE-2026-2950
micromatch CVE-2024-4067 MEDIUM 3.1.10 4.0.8 https://access.redhat.com/security/cve/CVE-2024-4067 https://advisory.checkmarx.net/advisory/CVE-2024-4067 https://advisory.checkmarx.net/advisory/CVE-2024-4067/ https://devhub.checkmarx.com/cve-details/CVE-2024-4067 https://devhub.checkmarx.com/cve-details/CVE-2024-4067/ https://github.com/micromatch/micromatch https://github.com/micromatch/micromatch/blob/2c56a8604b68c1099e7bc0f807ce0865a339747a/index.js#L448 https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade https://github.com/micromatch/micromatch/commit/500d5d6f42f0e8dfa1cb5464c6cb420b1b6aaaa0 https://github.com/micromatch/micromatch/issues/243 https://github.com/micromatch/micromatch/pull/247 https://github.com/micromatch/micromatch/pull/266 https://github.com/micromatch/micromatch/releases/tag/4.0.8 https://nvd.nist.gov/vuln/detail/CVE-2024-4067 https://www.cve.org/CVERecord?id=CVE-2024-4067
minimatch CVE-2022-3517 HIGH 3.0.4 3.0.5 https://access.redhat.com/errata/RHSA-2023:0321 https://access.redhat.com/security/cve/CVE-2022-3517 https://bugzilla.redhat.com/2066009 https://bugzilla.redhat.com/2130518 https://bugzilla.redhat.com/2134609 https://bugzilla.redhat.com/2140911 https://bugzilla.redhat.com/show_bug.cgi?id=2066009 https://bugzilla.redhat.com/show_bug.cgi?id=2130518 https://bugzilla.redhat.com/show_bug.cgi?id=2134609 https://bugzilla.redhat.com/show_bug.cgi?id=2140911 https://bugzilla.redhat.com/show_bug.cgi?id=2142808 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44906 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3517 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35256 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548 https://errata.almalinux.org/9/ALSA-2023-0321.html https://errata.rockylinux.org/RLSA-2023:0321 https://github.com/grafana/grafana-image-renderer/issues/329 https://github.com/isaacs/minimatch https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6 https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6%20%28v3.0.5%29 https://github.com/nodejs/node/issues/42510 https://linux.oracle.com/cve/CVE-2022-3517.html https://linux.oracle.com/errata/ELSA-2023-1743.html https://lists.debian.org/debian-lts-announce/2023/01/msg00011.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK/ https://nvd.nist.gov/vuln/detail/CVE-2022-3517 https://ubuntu.com/security/notices/USN-6086-1 https://www.cve.org/CVERecord?id=CVE-2022-3517
minimatch CVE-2026-26996 HIGH 3.0.4 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 https://access.redhat.com/errata/RHSA-2026:7675 https://access.redhat.com/errata/RHSA-2026:7896 https://access.redhat.com/security/cve/CVE-2026-26996 https://advisory.echohq.com/cve/CVE-2026-26996 https://bugzilla.redhat.com/2431340 https://bugzilla.redhat.com/2436942 https://bugzilla.redhat.com/2441268 https://bugzilla.redhat.com/2447140 https://bugzilla.redhat.com/2447141 https://bugzilla.redhat.com/2447142 https://bugzilla.redhat.com/2447143 https://bugzilla.redhat.com/2447144 https://bugzilla.redhat.com/2447145 https://bugzilla.redhat.com/2448754 https://bugzilla.redhat.com/2453037 https://bugzilla.redhat.com/2453151 https://bugzilla.redhat.com/2453152 https://bugzilla.redhat.com/2453157 https://bugzilla.redhat.com/2453158 https://bugzilla.redhat.com/2453160 https://bugzilla.redhat.com/2453161 https://bugzilla.redhat.com/2453162 https://bugzilla.redhat.com/show_bug.cgi?id=2441268 https://bugzilla.redhat.com/show_bug.cgi?id=2442922 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://bugzilla.redhat.com/show_bug.cgi?id=2453151 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904 https://errata.almalinux.org/10/ALSA-2026-7675.html https://errata.rockylinux.org/RLSA-2026:7896 https://github.com/advisories/GHSA-3ppc-4f35-3m26 https://github.com/isaacs/minimatch https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 https://linux.oracle.com/cve/CVE-2026-26996.html https://linux.oracle.com/errata/ELSA-2026-8339.html https://nvd.nist.gov/vuln/detail/CVE-2026-26996 https://www.cve.org/CVERecord?id=CVE-2026-26996
minimatch CVE-2026-27903 HIGH 3.0.4 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 https://access.redhat.com/security/cve/CVE-2026-27903 https://advisory.echohq.com/cve/CVE-2026-27903 https://github.com/advisories/GHSA-7r86-cg39-jmmj https://github.com/isaacs/minimatch https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748 https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj https://nvd.nist.gov/vuln/detail/CVE-2026-27903 https://www.cve.org/CVERecord?id=CVE-2026-27903
minimatch CVE-2026-27904 HIGH 3.0.4 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 https://access.redhat.com/errata/RHSA-2026:7080 https://access.redhat.com/errata/RHSA-2026:7896 https://access.redhat.com/security/cve/CVE-2026-27904 https://advisory.echohq.com/cve/CVE-2026-27904 https://bugzilla.redhat.com/2436942 https://bugzilla.redhat.com/2441268 https://bugzilla.redhat.com/2442922 https://bugzilla.redhat.com/2447142 https://bugzilla.redhat.com/2447143 https://bugzilla.redhat.com/2447144 https://bugzilla.redhat.com/2447145 https://bugzilla.redhat.com/2448754 https://bugzilla.redhat.com/2453151 https://bugzilla.redhat.com/show_bug.cgi?id=2441268 https://bugzilla.redhat.com/show_bug.cgi?id=2442922 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://bugzilla.redhat.com/show_bug.cgi?id=2453151 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904 https://errata.almalinux.org/10/ALSA-2026-7080.html https://errata.rockylinux.org/RLSA-2026:7896 https://github.com/advisories/GHSA-23c5-xmqv-rm74 https://github.com/isaacs/minimatch https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74 https://linux.oracle.com/cve/CVE-2026-27904.html https://linux.oracle.com/errata/ELSA-2026-8339.html https://nvd.nist.gov/vuln/detail/CVE-2026-27904 https://www.cve.org/CVERecord?id=CVE-2026-27904
minimist CVE-2021-44906 CRITICAL 1.2.5 1.2.6, 0.2.4 https://access.redhat.com/errata/RHSA-2023:0321 https://access.redhat.com/security/cve/CVE-2021-44906 https://bugzilla.redhat.com/2066009 https://bugzilla.redhat.com/2130518 https://bugzilla.redhat.com/2134609 https://bugzilla.redhat.com/2140911 https://bugzilla.redhat.com/show_bug.cgi?id=2066009 https://bugzilla.redhat.com/show_bug.cgi?id=2130518 https://bugzilla.redhat.com/show_bug.cgi?id=2134609 https://bugzilla.redhat.com/show_bug.cgi?id=2140911 https://bugzilla.redhat.com/show_bug.cgi?id=2142808 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44906 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3517 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35256 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548 https://errata.almalinux.org/9/ALSA-2023-0321.html https://errata.rockylinux.org/RLSA-2023:0321 https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip https://github.com/advisories/GHSA-xvch-5gv4-984h https://github.com/minimistjs/minimist/commit/34e20b8461118608703d6485326abbb8e35e1703 https://github.com/minimistjs/minimist/commit/bc8ecee43875261f4f17eb20b1243d3ed15e70eb https://github.com/minimistjs/minimist/commit/c2b981977fa834b223b408cfb860f933c9811e4d https://github.com/minimistjs/minimist/commit/ef9153fc52b6cea0744b2239921c5dcae4697f11 https://github.com/minimistjs/minimist/commits/v0.2.4 https://github.com/minimistjs/minimist/issues/11 https://github.com/minimistjs/minimist/pull/24 https://github.com/substack/minimist https://github.com/substack/minimist/blob/master/index.js#L69 https://github.com/substack/minimist/issues/164 https://linux.oracle.com/cve/CVE-2021-44906.html https://linux.oracle.com/errata/ELSA-2023-0321.html https://nvd.nist.gov/vuln/detail/CVE-2021-44906 https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 https://stackoverflow.com/questions/8588563/adding-custom-properties-to-a-function/20278068#20278068 https://www.cve.org/CVERecord?id=CVE-2021-44906
moment CVE-2022-24785 HIGH 2.24.0 2.29.2 https://access.redhat.com/security/cve/CVE-2022-24785 https://github.com/moment/moment https://github.com/moment/moment/commit/4211bfc8f15746be4019bba557e29a7ba83d54c5 https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4 https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/ https://nvd.nist.gov/vuln/detail/CVE-2022-24785 https://security.netapp.com/advisory/ntap-20220513-0006 https://security.netapp.com/advisory/ntap-20220513-0006/ https://security.netapp.com/advisory/ntap-20241108-0002 https://security.netapp.com/advisory/ntap-20241108-0002/ https://ubuntu.com/security/notices/USN-5559-1 https://www.cve.org/CVERecord?id=CVE-2022-24785 https://www.tenable.com/security/tns-2022-09
moment CVE-2022-31129 HIGH 2.24.0 2.29.4 https://access.redhat.com/security/cve/CVE-2022-31129 https://github.com/moment/moment https://github.com/moment/moment/commit/9a3b5894f3d5d602948ac8a02e4ee528a49ca3a3 https://github.com/moment/moment/pull/6015#issuecomment-1152961973 https://github.com/moment/moment/pull/6015/commits/4bbb9f3ccbe231de40207503f344fe5ce97584f4 https://github.com/moment/moment/pull/6015/commits/bfd4f2375d5c1a2106246721d693a9611dddfbfe https://github.com/moment/moment/pull/6015/commits/dc0d180e90d8a84f7ff13572363330a22b3ea504 https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g https://huntr.dev/bounties/f0952b67-f2ff-44a9-a9cd-99e0a87cb633 https://huntr.dev/bounties/f0952b67-f2ff-44a9-a9cd-99e0a87cb633/ https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO/ https://nvd.nist.gov/vuln/detail/CVE-2022-31129 https://security.netapp.com/advisory/ntap-20221014-0003 https://security.netapp.com/advisory/ntap-20221014-0003/ https://security.netapp.com/advisory/ntap-20241108-0002 https://security.netapp.com/advisory/ntap-20241108-0002/ https://ubuntu.com/security/notices/USN-5559-1 https://ubuntu.com/security/notices/USN-6550-1 https://www.cve.org/CVERecord?id=CVE-2022-31129
moment-timezone GHSA-v78c-4p63-2j6c MEDIUM 0.5.25 0.5.35 https://github.com/moment/moment-timezone https://github.com/moment/moment-timezone/commit/7915ac567ab19700e44ad6b5d8ef0b85e48a9e75 https://github.com/moment/moment-timezone/security/advisories/GHSA-v78c-4p63-2j6c
moment-timezone GHSA-56x4-j7p9-fcf9 LOW 0.5.25 0.5.35 https://github.com/moment/moment-timezone https://github.com/moment/moment-timezone/commit/ce955a301ff372e8e9fb3a5b516620c60e7a082a https://github.com/moment/moment-timezone/security/advisories/GHSA-56x4-j7p9-fcf9
node-fetch CVE-2022-0235 HIGH 1.7.3 3.1.1, 2.6.7 https://access.redhat.com/errata/RHSA-2023:0050 https://access.redhat.com/security/cve/CVE-2022-0235 https://bugzilla.redhat.com/2044591 https://bugzilla.redhat.com/2066009 https://bugzilla.redhat.com/2134609 https://bugzilla.redhat.com/2140911 https://bugzilla.redhat.com/2142821 https://bugzilla.redhat.com/2150323 https://bugzilla.redhat.com/show_bug.cgi?id=2044591 https://bugzilla.redhat.com/show_bug.cgi?id=2066009 https://bugzilla.redhat.com/show_bug.cgi?id=2134609 https://bugzilla.redhat.com/show_bug.cgi?id=2140911 https://bugzilla.redhat.com/show_bug.cgi?id=2142821 https://bugzilla.redhat.com/show_bug.cgi?id=2150323 https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44906 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0235 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24999 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3517 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548 https://errata.almalinux.org/8/ALSA-2023-0050.html https://errata.rockylinux.org/RLSA-2023:0050 https://github.com/node-fetch/node-fetch https://github.com/node-fetch/node-fetch/commit/1ef4b560a17e644a02a3bfdea7631ffeee578b35 https://github.com/node-fetch/node-fetch/commit/36e47e8a6406185921e4985dcbeff140d73eaa10 https://github.com/node-fetch/node-fetch/commit/5c32f002fdd65b1c6a8f1e3620210813d45c7e60 https://github.com/node-fetch/node-fetch/pull/1449/commits/5c32f002fdd65b1c6a8f1e3620210813d45c7e60 https://github.com/node-fetch/node-fetch/pull/1453 https://huntr.dev/bounties/d26ab655-38d6-48b3-be15-f9ad6b6ae6f7 https://huntr.dev/bounties/d26ab655-38d6-48b3-be15-f9ad6b6ae6f7/ https://linux.oracle.com/cve/CVE-2022-0235.html https://linux.oracle.com/errata/ELSA-2023-0050.html https://lists.debian.org/debian-lts-announce/2022/12/msg00007.html https://nvd.nist.gov/vuln/detail/CVE-2022-0235 https://ubuntu.com/security/notices/USN-6158-1 https://www.cve.org/CVERecord?id=CVE-2022-0235
node-fetch CVE-2022-0235 HIGH 2.6.1 3.1.1, 2.6.7 https://access.redhat.com/errata/RHSA-2023:0050 https://access.redhat.com/security/cve/CVE-2022-0235 https://bugzilla.redhat.com/2044591 https://bugzilla.redhat.com/2066009 https://bugzilla.redhat.com/2134609 https://bugzilla.redhat.com/2140911 https://bugzilla.redhat.com/2142821 https://bugzilla.redhat.com/2150323 https://bugzilla.redhat.com/show_bug.cgi?id=2044591 https://bugzilla.redhat.com/show_bug.cgi?id=2066009 https://bugzilla.redhat.com/show_bug.cgi?id=2134609 https://bugzilla.redhat.com/show_bug.cgi?id=2140911 https://bugzilla.redhat.com/show_bug.cgi?id=2142821 https://bugzilla.redhat.com/show_bug.cgi?id=2150323 https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44906 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0235 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24999 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3517 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548 https://errata.almalinux.org/8/ALSA-2023-0050.html https://errata.rockylinux.org/RLSA-2023:0050 https://github.com/node-fetch/node-fetch https://github.com/node-fetch/node-fetch/commit/1ef4b560a17e644a02a3bfdea7631ffeee578b35 https://github.com/node-fetch/node-fetch/commit/36e47e8a6406185921e4985dcbeff140d73eaa10 https://github.com/node-fetch/node-fetch/commit/5c32f002fdd65b1c6a8f1e3620210813d45c7e60 https://github.com/node-fetch/node-fetch/pull/1449/commits/5c32f002fdd65b1c6a8f1e3620210813d45c7e60 https://github.com/node-fetch/node-fetch/pull/1453 https://huntr.dev/bounties/d26ab655-38d6-48b3-be15-f9ad6b6ae6f7 https://huntr.dev/bounties/d26ab655-38d6-48b3-be15-f9ad6b6ae6f7/ https://linux.oracle.com/cve/CVE-2022-0235.html https://linux.oracle.com/errata/ELSA-2023-0050.html https://lists.debian.org/debian-lts-announce/2022/12/msg00007.html https://nvd.nist.gov/vuln/detail/CVE-2022-0235 https://ubuntu.com/security/notices/USN-6158-1 https://www.cve.org/CVERecord?id=CVE-2022-0235
papaparse CVE-2020-36649 HIGH 4.6.3 5.2.0 https://access.redhat.com/security/cve/CVE-2020-36649 https://github.com/mholt/PapaParse https://github.com/mholt/PapaParse/commit/235a12758cd77266d2e98fd715f53536b34ad621 https://github.com/mholt/PapaParse/issues/777 https://github.com/mholt/PapaParse/pull/779 https://github.com/mholt/PapaParse/releases/tag/5.2.0 https://nvd.nist.gov/vuln/detail/CVE-2020-36649 https://snyk.io/vuln/SNYK-JS-PAPAPARSE-564258 https://vuldb.com/?ctiid.218004 https://vuldb.com/?id.218004 https://www.cve.org/CVERecord?id=CVE-2020-36649
path-parse CVE-2021-23343 MEDIUM 1.0.6 1.0.7 https://access.redhat.com/errata/RHSA-2021:3666 https://access.redhat.com/security/cve/CVE-2021-23343 https://bugzilla.redhat.com/1956818 https://bugzilla.redhat.com/1988342 https://bugzilla.redhat.com/1988394 https://bugzilla.redhat.com/1990409 https://bugzilla.redhat.com/1990415 https://bugzilla.redhat.com/1993019 https://bugzilla.redhat.com/1993029 https://bugzilla.redhat.com/1993039 https://bugzilla.redhat.com/1993924 https://bugzilla.redhat.com/show_bug.cgi?id=1956818 https://bugzilla.redhat.com/show_bug.cgi?id=1988342 https://bugzilla.redhat.com/show_bug.cgi?id=1988394 https://bugzilla.redhat.com/show_bug.cgi?id=1990409 https://bugzilla.redhat.com/show_bug.cgi?id=1990415 https://bugzilla.redhat.com/show_bug.cgi?id=1993019 https://bugzilla.redhat.com/show_bug.cgi?id=1993029 https://bugzilla.redhat.com/show_bug.cgi?id=1993039 https://bugzilla.redhat.com/show_bug.cgi?id=1993924 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22931 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22939 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22940 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23343 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32803 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32804 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3672 https://errata.almalinux.org/8/ALSA-2021-3666.html https://errata.rockylinux.org/RLSA-2021:3666 https://github.com/jbgutierrez/path-parse https://github.com/jbgutierrez/path-parse/commit/eca63a7b9a473bf6978a2f5b7b3343662d1506f7 https://github.com/jbgutierrez/path-parse/issues/8 https://github.com/jbgutierrez/path-parse/pull/10 https://linux.oracle.com/cve/CVE-2021-23343.html https://linux.oracle.com/errata/ELSA-2021-3666.html https://lists.apache.org/thread.html/r6a32cb3eda3b19096ad48ef1e7aa8f26e005f2f63765abb69ce08b85@%3Cdev.myfaces.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-23343 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1279028 https://snyk.io/vuln/SNYK-JS-PATHPARSE-1077067 https://www.cve.org/CVERecord?id=CVE-2021-23343
path-to-regexp CVE-2024-45296 HIGH 1.8.0 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 https://access.redhat.com/security/cve/CVE-2024-45296 https://advisory.echohq.com/cve/CVE-2024-45296 https://github.com/advisories/GHSA-9wv6-86v2-598j https://github.com/pillarjs/path-to-regexp https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6 https://github.com/pillarjs/path-to-regexp/commit/925ac8e3c5780b02f58cbd4e52f95da8ad2ac485 https://github.com/pillarjs/path-to-regexp/commit/d31670ae8f6e69cbfd56e835742195b7d10942ef https://github.com/pillarjs/path-to-regexp/commit/f1253b47b347dcb909e3e80b0eb2649109e59894 https://github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0 https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j https://nvd.nist.gov/vuln/detail/CVE-2024-45296 https://security.netapp.com/advisory/ntap-20250124-0001 https://security.netapp.com/advisory/ntap-20250124-0001/ https://www.cve.org/CVERecord?id=CVE-2024-45296
qs CVE-2022-24999 HIGH 6.5.2 6.10.3, 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, 6.2.4 https://access.redhat.com/errata/RHSA-2023:0050 https://access.redhat.com/security/cve/CVE-2022-24999 https://bugzilla.redhat.com/2044591 https://bugzilla.redhat.com/2066009 https://bugzilla.redhat.com/2134609 https://bugzilla.redhat.com/2140911 https://bugzilla.redhat.com/2142821 https://bugzilla.redhat.com/2150323 https://bugzilla.redhat.com/show_bug.cgi?id=2044591 https://bugzilla.redhat.com/show_bug.cgi?id=2066009 https://bugzilla.redhat.com/show_bug.cgi?id=2134609 https://bugzilla.redhat.com/show_bug.cgi?id=2140911 https://bugzilla.redhat.com/show_bug.cgi?id=2142821 https://bugzilla.redhat.com/show_bug.cgi?id=2150323 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44906 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0235 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24999 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3517 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548 https://errata.almalinux.org/8/ALSA-2023-0050.html https://errata.rockylinux.org/RLSA-2023:0050 https://github.com/expressjs/express/releases/tag/4.17.3 https://github.com/ljharb/qs https://github.com/ljharb/qs/commit/4310742efbd8c03f6495f07906b45213da0a32ec https://github.com/ljharb/qs/commit/727ef5d34605108acb3513f72d5435972ed15b68 https://github.com/ljharb/qs/commit/73205259936317b40f447c5cdb71c5b341848e1b https://github.com/ljharb/qs/commit/8b4cc14cda94a5c89341b77e5fe435ec6c41be2d https://github.com/ljharb/qs/commit/ba24e74dd17931f825adb52f5633e48293b584e1 https://github.com/ljharb/qs/commit/e799ba57e573a30c14b67c1889c7c04d508b9105 https://github.com/ljharb/qs/commit/ed0f5dcbef4b168a8ae299d78b1e4a2e9b1baf1f https://github.com/ljharb/qs/commit/f945393cfe442fe8c6e62b4156fd35452c0686ee https://github.com/ljharb/qs/commit/fc3682776670524a42e19709ec4a8138d0d7afda https://github.com/ljharb/qs/pull/428 https://github.com/n8tz/CVE-2022-24999 https://linux.oracle.com/cve/CVE-2022-24999.html https://linux.oracle.com/errata/ELSA-2023-0050.html https://lists.debian.org/debian-lts-announce/2023/01/msg00039.html https://nvd.nist.gov/vuln/detail/CVE-2022-24999 https://security.netapp.com/advisory/ntap-20230908-0005 https://security.netapp.com/advisory/ntap-20230908-0005/ https://ubuntu.com/security/notices/USN-7693-1 https://www.cve.org/CVERecord?id=CVE-2022-24999
qs CVE-2025-15284 MEDIUM 6.5.2 6.14.1 https://access.redhat.com/errata/RHSA-2026:18480 https://access.redhat.com/errata/RHSA-2026:18868 https://access.redhat.com/security/cve/CVE-2025-15284 https://advisory.echohq.com/cve/CVE-2025-15284 https://bugzilla.redhat.com/2425946 https://bugzilla.redhat.com/2430538 https://bugzilla.redhat.com/2431036 https://bugzilla.redhat.com/2431740 https://bugzilla.redhat.com/2433645 https://bugzilla.redhat.com/show_bug.cgi?id=2425946 https://bugzilla.redhat.com/show_bug.cgi?id=2430538 https://bugzilla.redhat.com/show_bug.cgi?id=2431036 https://bugzilla.redhat.com/show_bug.cgi?id=2431740 https://bugzilla.redhat.com/show_bug.cgi?id=2433645 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842 https://errata.almalinux.org/10/ALSA-2026-18480.html https://errata.rockylinux.org/RLSA-2026:18868 https://github.com/advisories/GHSA-6rw7-vpxm-498p https://github.com/ljharb/qs https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9 https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p https://linux.oracle.com/cve/CVE-2025-15284.html https://linux.oracle.com/errata/ELSA-2026-18868.html https://nvd.nist.gov/vuln/detail/CVE-2025-15284 https://www.cve.org/CVERecord?id=CVE-2025-15284
qs CVE-2026-82417 MEDIUM 6.5.2 6.16.0 https://access.redhat.com/security/cve/CVE-2026-82417 https://advisory.echohq.com/cve/CVE-2026-82417 https://github.com/ljharb/qs https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6 https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g https://nvd.nist.gov/vuln/detail/CVE-2026-82417 https://www.cve.org/CVERecord?id=CVE-2026-82417
ra-ui-materialui CVE-2023-25572 MEDIUM 2.9.9 4.7.6, 3.19.12 https://github.com/marmelab/react-admin https://github.com/marmelab/react-admin/pull/8644 https://github.com/marmelab/react-admin/pull/8645 https://github.com/marmelab/react-admin/releases/tag/v3.19.12 https://github.com/marmelab/react-admin/releases/tag/v4.7.6 https://github.com/marmelab/react-admin/security/advisories/GHSA-5jcr-82fh-339v https://nvd.nist.gov/vuln/detail/CVE-2023-25572
react-admin CVE-2023-25572 MEDIUM 2.9.8 3.19.12, 4.7.6 https://github.com/marmelab/react-admin https://github.com/marmelab/react-admin/pull/8644 https://github.com/marmelab/react-admin/pull/8645 https://github.com/marmelab/react-admin/releases/tag/v3.19.12 https://github.com/marmelab/react-admin/releases/tag/v4.7.6 https://github.com/marmelab/react-admin/security/advisories/GHSA-5jcr-82fh-339v https://nvd.nist.gov/vuln/detail/CVE-2023-25572
react-dev-utils CVE-2021-24033 MEDIUM 6.1.1 11.0.4 https://access.redhat.com/security/cve/CVE-2021-24033 https://github.com/facebook/create-react-app https://github.com/facebook/create-react-app/commit/f5e415f3a5b66f07dcc60aba1b445fa7cda97268 https://github.com/facebook/create-react-app/pull/10644 https://nvd.nist.gov/vuln/detail/CVE-2021-24033 https://www.cve.org/CVERecord?id=CVE-2021-24033 https://www.facebook.com/security/advisories/cve-2021-24033 https://www.huntr.dev/bounties/1-npm-react-dev-utils
request CVE-2023-28155 MEDIUM 2.88.2 https://access.redhat.com/security/cve/CVE-2023-28155 https://doyensec.com/resources/Doyensec_Advisory_RequestSSRF_Q12023.pdf https://github.com/cypress-io/request/blob/master/lib/redirect.js#L116 https://github.com/cypress-io/request/commit/c5bcf21d40fb61feaff21a0e5a2b3934a440024f https://github.com/cypress-io/request/pull/28 https://github.com/cypress-io/request/releases/tag/v3.0.0 https://github.com/github/advisory-database/pull/2500 https://github.com/request/request https://github.com/request/request/blob/master/lib/redirect.js#L111 https://github.com/request/request/issues/3442 https://github.com/request/request/pull/3444 https://nvd.nist.gov/vuln/detail/CVE-2023-28155 https://security.netapp.com/advisory/ntap-20230413-0007 https://security.netapp.com/advisory/ntap-20230413-0007/ https://www.cve.org/CVERecord?id=CVE-2023-28155
semver CVE-2022-25883 HIGH 5.7.1 7.5.2, 6.3.1, 5.7.2 https://access.redhat.com/errata/RHSA-2023:5363 https://access.redhat.com/security/cve/CVE-2022-25883 https://bugzilla.redhat.com/2216475 https://bugzilla.redhat.com/2230948 https://bugzilla.redhat.com/2230955 https://bugzilla.redhat.com/2230956 https://bugzilla.redhat.com/show_bug.cgi?id=2216475 https://bugzilla.redhat.com/show_bug.cgi?id=2230948 https://bugzilla.redhat.com/show_bug.cgi?id=2230955 https://bugzilla.redhat.com/show_bug.cgi?id=2230956 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25883 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32002 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32006 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32559 https://errata.almalinux.org/9/ALSA-2023-5363.html https://errata.rockylinux.org/RLSA-2023:5363 https://github.com/advisories/GHSA-c2qf-rxjj-qqgw https://github.com/npm/node-semver https://github.com/npm/node-semver/blob/main/classes/range.js#L97-L104 https://github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104 https://github.com/npm/node-semver/blob/main/internal/re.js#L138 https://github.com/npm/node-semver/blob/main/internal/re.js#L160 https://github.com/npm/node-semver/blob/main/internal/re.js%23L138 https://github.com/npm/node-semver/blob/main/internal/re.js%23L160 https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0 https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441 https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c https://github.com/npm/node-semver/pull/564 https://github.com/npm/node-semver/pull/585 https://github.com/npm/node-semver/pull/593 https://linux.oracle.com/cve/CVE-2022-25883.html https://linux.oracle.com/errata/ELSA-2023-5363.html https://nvd.nist.gov/vuln/detail/CVE-2022-25883 https://security.netapp.com/advisory/ntap-20241025-0004 https://security.netapp.com/advisory/ntap-20241025-0004/ https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795 https://www.cve.org/CVERecord?id=CVE-2022-25883
shell-quote CVE-2026-9277 CRITICAL 1.6.1 1.8.4 http://www.openwall.com/lists/oss-security/2026/05/23/2 https://access.redhat.com/errata/RHSA-2026:26072 https://access.redhat.com/errata/RHSA-2026:26077 https://access.redhat.com/errata/RHSA-2026:26079 https://access.redhat.com/errata/RHSA-2026:26080 https://access.redhat.com/errata/RHSA-2026:26090 https://access.redhat.com/errata/RHSA-2026:26225 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:28571 https://access.redhat.com/errata/RHSA-2026:29197 https://access.redhat.com/errata/RHSA-2026:29795 https://access.redhat.com/errata/RHSA-2026:29834 https://access.redhat.com/errata/RHSA-2026:30076 https://access.redhat.com/errata/RHSA-2026:33574 https://access.redhat.com/errata/RHSA-2026:33683 https://access.redhat.com/errata/RHSA-2026:34342 https://access.redhat.com/errata/RHSA-2026:34791 https://access.redhat.com/errata/RHSA-2026:36754 https://access.redhat.com/errata/RHSA-2026:40765 https://access.redhat.com/errata/RHSA-2026:41066 https://access.redhat.com/errata/RHSA-2026:41928 https://access.redhat.com/errata/RHSA-2026:42796 https://access.redhat.com/errata/RHSA-2026:44237 https://access.redhat.com/errata/RHSA-2026:44263 https://access.redhat.com/errata/RHSA-2026:44267 https://access.redhat.com/errata/RHSA-2026:48699 https://access.redhat.com/errata/RHSA-2026:50850 https://access.redhat.com/errata/RHSA-2026:56854 https://access.redhat.com/errata/RHSA-2026:56912 https://access.redhat.com/errata/RHSA-2026:60023 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:62410 https://access.redhat.com/security/cve/CVE-2026-9277 https://advisory.echohq.com/cve/CVE-2026-9277 https://bugzilla.redhat.com/show_bug.cgi?id=2480741 https://github.com/advisories/GHSA-w7jw-789q-3m8p https://github.com/ljharb/shell-quote https://github.com/ljharb/shell-quote/commit/1518179 https://github.com/ljharb/shell-quote/commit/4378a6e613db5948168684864e49b42b83134d2d https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p https://nvd.nist.gov/vuln/detail/CVE-2026-9277 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9277.json https://ubuntu.com/security/notices/USN-8410-1 https://www.cve.org/CVERecord?id=CVE-2026-9277 https://www.npmjs.com/package/shell-quote
shell-quote CVE-2026-13311 HIGH 1.6.1 1.9.0 https://access.redhat.com/security/cve/CVE-2026-13311 https://advisory.echohq.com/cve/CVE-2026-13311 https://github.com/advisories/GHSA-395f-4hp3-45gv https://github.com/ljharb/shell-quote https://github.com/ljharb/shell-quote/commit/7ff5488599d01c323514f02f5efb74088dd134ec https://github.com/ljharb/shell-quote/releases/tag/v1.9.0 https://github.com/ljharb/shell-quote/security/advisories/GHSA-395f-4hp3-45gv https://nvd.nist.gov/vuln/detail/CVE-2026-13311 https://www.cve.org/CVERecord?id=CVE-2026-13311 https://www.npmjs.com/package/shell-quote
tmp CVE-2026-44705 HIGH 0.0.33 0.2.6 https://access.redhat.com/security/cve/CVE-2026-44705 https://advisory.echohq.com/cve/CVE-2026-44705 https://github.com/advisories/GHSA-ph9p-34f9-6g65 https://github.com/raszi/node-tmp https://github.com/raszi/node-tmp/commit/efa4a06f24374797ae32ab2b6ae39b7a611ae429 https://github.com/raszi/node-tmp/security/advisories/GHSA-ph9p-34f9-6g65 https://nvd.nist.gov/vuln/detail/CVE-2026-44705 https://www.cve.org/CVERecord?id=CVE-2026-44705
tmp CVE-2025-54798 LOW 0.0.33 0.2.4 https://access.redhat.com/security/cve/CVE-2025-54798 https://advisory.echohq.com/cve/CVE-2025-54798 https://github.com/advisories/GHSA-52f5-9888-hmc6 https://github.com/raszi/node-tmp https://github.com/raszi/node-tmp/commit/188b25e529496e37adaf1a1d9dccb40019a08b1b https://github.com/raszi/node-tmp/issues/207 https://github.com/raszi/node-tmp/security/advisories/GHSA-52f5-9888-hmc6 https://lists.debian.org/debian-lts-announce/2025/08/msg00007.html https://nvd.nist.gov/vuln/detail/CVE-2025-54798 https://www.cve.org/CVERecord?id=CVE-2025-54798
tough-cookie CVE-2023-26136 MEDIUM 2.5.0 4.1.3 https://access.redhat.com/security/cve/CVE-2023-26136 https://github.com/salesforce/tough-cookie https://github.com/salesforce/tough-cookie/commit/12d474791bb856004e858fdb1c47b7608d09cf6e https://github.com/salesforce/tough-cookie/issues/282 https://github.com/salesforce/tough-cookie/releases/tag/v4.1.3 https://lists.debian.org/debian-lts-announce/2023/07/msg00010.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/ https://nvd.nist.gov/vuln/detail/CVE-2023-26136 https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://security.snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873 https://www.cve.org/CVERecord?id=CVE-2023-26136
ua-parser-js CVE-2020-7733 HIGH 0.7.21 0.7.22 https://access.redhat.com/security/cve/CVE-2020-7733 https://github.com/faisalman/ua-parser-js/commit/233d3bae22a795153a7e6638887ce159c63e557d https://nvd.nist.gov/vuln/detail/CVE-2020-7733 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBFAISALMAN-674666 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-674665 https://snyk.io/vuln/SNYK-JS-UAPARSERJS-610226 https://www.cve.org/CVERecord?id=CVE-2020-7733 https://www.oracle.com//security-alerts/cpujul2021.html
ua-parser-js CVE-2020-7793 HIGH 0.7.21 0.7.23 https://access.redhat.com/security/cve/CVE-2020-7793 https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf https://github.com/faisalman/ua-parser-js/commit/6d1f26df051ba681463ef109d36c9cf0f7e32b18 https://github.com/faisalman/ua-parser-js/commit/6d1f26df051ba681463ef109d36c9cf0f7e32b18%20%280.7.23%29 https://nvd.nist.gov/vuln/detail/CVE-2020-7793 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBFAISALMAN-1050388 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050387 https://snyk.io/vuln/SNYK-JS-UAPARSERJS-1023599 https://www.cve.org/CVERecord?id=CVE-2020-7793
ua-parser-js CVE-2021-27292 HIGH 0.7.21 0.7.24 https://access.redhat.com/security/cve/CVE-2021-27292 https://gist.github.com/b-c-ds/6941d80d6b4e694df4bc269493b7be76 https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566 https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14 https://nvd.nist.gov/vuln/detail/CVE-2021-27292 https://www.cve.org/CVERecord?id=CVE-2021-27292
url-parse CVE-2022-0686 CRITICAL 1.4.7 1.5.8 https://access.redhat.com/security/cve/CVE-2022-0686 https://github.com/unshiftio/url-parse https://github.com/unshiftio/url-parse/commit/d5c64791ef496ca5459ae7f2176a31ea53b127e5 https://github.com/unshiftio/url-parse/commit/d5c64791ef496ca5459ae7f2176a31ea53b127e5%20%281.5.8%29 https://huntr.dev/bounties/55fd06cd-9054-4d80-83be-eb5a454be78c https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html https://nvd.nist.gov/vuln/detail/CVE-2022-0686 https://security.netapp.com/advisory/ntap-20220325-0006 https://security.netapp.com/advisory/ntap-20220325-0006/ https://ubuntu.com/security/notices/USN-5973-1 https://www.cve.org/CVERecord?id=CVE-2022-0686
url-parse CVE-2021-27515 MEDIUM 1.4.7 1.5.0 https://access.redhat.com/security/cve/CVE-2021-27515 https://advisory.checkmarx.net/advisory/CX-2021-4306 https://github.com/github/advisory-database/pull/6763 https://github.com/unshiftio/url-parse https://github.com/unshiftio/url-parse/commit/d1e7e8822f26e8a49794b757123b51386325b2b0 https://github.com/unshiftio/url-parse/compare/1.4.7...1.5.0 https://github.com/unshiftio/url-parse/pull/197 https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html https://nvd.nist.gov/vuln/detail/CVE-2021-27515 https://ubuntu.com/security/notices/USN-5973-1 https://www.cve.org/CVERecord?id=CVE-2021-27515
url-parse CVE-2021-3664 MEDIUM 1.4.7 1.5.2 https://access.redhat.com/security/cve/CVE-2021-3664 https://github.com/github/advisory-database/pull/6764 https://github.com/unshiftio/url-parse https://github.com/unshiftio/url-parse/commit/81ab967889b08112d3356e451bf03e6aa0cbb7e0 https://github.com/unshiftio/url-parse/issues/205 https://github.com/unshiftio/url-parse/issues/206 https://huntr.dev/bounties/1625557993985-unshiftio/url-parse https://huntr.dev/bounties/1625557993985-unshiftio/url-parse/ https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html https://nvd.nist.gov/vuln/detail/CVE-2021-3664 https://ubuntu.com/security/notices/USN-5973-1 https://www.cve.org/CVERecord?id=CVE-2021-3664
url-parse CVE-2022-0512 MEDIUM 1.4.7 1.5.6 https://access.redhat.com/security/cve/CVE-2022-0512 https://github.com/unshiftio/url-parse https://github.com/unshiftio/url-parse/commit/9be7ee88afd2bb04e4d5a1a8da9a389ac13f8c40 https://huntr.dev/bounties/6d1bc51f-1876-4f5b-a2c2-734e09e8e05b https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html https://nvd.nist.gov/vuln/detail/CVE-2022-0512 https://ubuntu.com/security/notices/USN-5973-1 https://www.cve.org/CVERecord?id=CVE-2022-0512
url-parse CVE-2022-0639 MEDIUM 1.4.7 1.5.7 https://access.redhat.com/security/cve/CVE-2022-0639 https://github.com/unshiftio/url-parse https://github.com/unshiftio/url-parse/commit/ef45a1355375a8244063793a19059b4f62fc8788 https://github.com/unshiftio/url-parse/commit/ef45a1355375a8244063793a19059b4f62fc8788%20%281.5.7%29 https://huntr.dev/bounties/83a6bc9a-b542-4a38-82cd-d995a1481155 https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html https://lists.debian.org/debian-lts-announce/2025/12/msg00024.html https://nvd.nist.gov/vuln/detail/CVE-2022-0639 https://ubuntu.com/security/notices/USN-5973-1 https://www.cve.org/CVERecord?id=CVE-2022-0639
url-parse CVE-2022-0691 MEDIUM 1.4.7 1.5.9 https://access.redhat.com/security/cve/CVE-2022-0691 https://github.com/github/advisory-database/pull/6765 https://github.com/unshiftio/url-parse https://github.com/unshiftio/url-parse/commit/0e3fb542d60ddbf6933f22eb9b1e06e25eaa5b63 https://github.com/unshiftio/url-parse/commit/0e3fb542d60ddbf6933f22eb9b1e06e25eaa5b63%20%281.5.9%29 https://huntr.dev/bounties/57124ed5-4b68-4934-8325-2c546257f2e4 https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html https://nvd.nist.gov/vuln/detail/CVE-2022-0691 https://security.netapp.com/advisory/ntap-20220325-0006 https://security.netapp.com/advisory/ntap-20220325-0006/ https://ubuntu.com/security/notices/USN-5973-1 https://www.cve.org/CVERecord?id=CVE-2022-0691
uuid CVE-2026-41907 MEDIUM 3.4.0 11.1.1, 12.0.1, 13.0.1 https://access.redhat.com/security/cve/CVE-2026-41907 https://advisory.echohq.com/cve/CVE-2026-41907 https://github.com/advisories/GHSA-w5hq-g745-h8pq https://github.com/uuidjs/uuid https://github.com/uuidjs/uuid/commit/32389c887c9e75f90442ee4cc95bbab0c4e8346e https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34 https://github.com/uuidjs/uuid/commit/3d61d6ac1f782cf6b1dd8661c60f11722cd49a0d https://github.com/uuidjs/uuid/commit/9d27ddf7046ce496ef39569ff84d948eeff9cb2a https://github.com/uuidjs/uuid/releases/tag/v11.1.1 https://github.com/uuidjs/uuid/releases/tag/v12.0.1 https://github.com/uuidjs/uuid/releases/tag/v13.0.1 https://github.com/uuidjs/uuid/releases/tag/v14.0.0 https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq https://nvd.nist.gov/vuln/detail/CVE-2026-41907 https://www.cve.org/CVERecord?id=CVE-2026-41907
websocket-driver CVE-2026-54466 CRITICAL 0.7.4 0.7.5 https://github.com/faye/websocket-driver-node https://github.com/faye/websocket-driver-node/commit/5b197ca874dab58e96cacad8a3c256797d804680 https://github.com/faye/websocket-driver-node/releases/tag/0.7.5 https://github.com/faye/websocket-driver-node/security/advisories/GHSA-xv26-6w52-cph6
websocket-driver CVE-2026-54490 MEDIUM 0.7.4 0.7.5 https://github.com/faye/websocket-driver-node https://github.com/faye/websocket-driver-node/commit/c55679a5b18251dd0a55d18a0cc6a4fd8822b92f https://github.com/faye/websocket-driver-node/releases/tag/0.7.5 https://github.com/faye/websocket-driver-node/security/advisories/GHSA-mp7j-qc5w-4988
word-wrap CVE-2023-26115 MEDIUM 1.2.3 1.2.4 https://access.redhat.com/security/cve/CVE-2023-26115 https://github.com/jonschlinkert/word-wrap https://github.com/jonschlinkert/word-wrap/blob/master/index.js#L39 https://github.com/jonschlinkert/word-wrap/blob/master/index.js%23L39 https://github.com/jonschlinkert/word-wrap/commit/420dce9a2412b21881202b73a3c34f0edc53cb2e https://github.com/jonschlinkert/word-wrap/releases/tag/1.2.4 https://nvd.nist.gov/vuln/detail/CVE-2023-26115 https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-4058657 https://security.snyk.io/vuln/SNYK-JS-WORDWRAP-3149973 https://www.cve.org/CVERecord?id=CVE-2023-26115
xlsx CVE-2023-30533 HIGH 0.12.13 0.19.3 https://cdn.sheetjs.com https://cdn.sheetjs.com/advisories/CVE-2023-30533 https://git.sheetjs.com/sheetjs/sheetjs https://git.sheetjs.com/sheetjs/sheetjs/issues/2667 https://git.sheetjs.com/sheetjs/sheetjs/issues/2986 https://git.sheetjs.com/sheetjs/sheetjs/src/branch/master/CHANGELOG.md https://nvd.nist.gov/vuln/detail/CVE-2023-30533
xlsx CVE-2024-22363 HIGH 0.12.13 0.20.2 https://cdn.sheetjs.com https://cdn.sheetjs.com/advisories/CVE-2024-22363 https://cwe.mitre.org/data/definitions/1333.html https://git.sheetjs.com/sheetjs/sheetjs https://git.sheetjs.com/sheetjs/sheetjs/src/tag/v0.20.2 https://nvd.nist.gov/vuln/detail/CVE-2024-22363
xlsx CVE-2021-32012 MEDIUM 0.12.13 0.17.0 https://floqast.com/engineering-blog/post/fuzzing-and-parsing-securely https://floqast.com/engineering-blog/post/fuzzing-and-parsing-securely/ https://nvd.nist.gov/vuln/detail/CVE-2021-32012 https://sheetjs.com/pro https://www.npmjs.com/package/xlsx/v/0.17.0 https://www.oracle.com/security-alerts/cpujan2022.html
xlsx CVE-2021-32013 MEDIUM 0.12.13 0.17.0 https://floqast.com/engineering-blog/post/fuzzing-and-parsing-securely https://floqast.com/engineering-blog/post/fuzzing-and-parsing-securely/ https://nvd.nist.gov/vuln/detail/CVE-2021-32013 https://sheetjs.com/pro https://www.npmjs.com/package/xlsx/v/0.17.0 https://www.oracle.com/security-alerts/cpujan2022.html
xlsx CVE-2021-32014 MEDIUM 0.12.13 0.17.0 https://floqast.com/engineering-blog/post/fuzzing-and-parsing-securely https://floqast.com/engineering-blog/post/fuzzing-and-parsing-securely/ https://nvd.nist.gov/vuln/detail/CVE-2021-32014 https://sheetjs.com/pro https://www.npmjs.com/package/xlsx/v/0.17.0 https://www.oracle.com/security-alerts/cpujan2022.html
xml2js CVE-2023-0842 MEDIUM 0.4.23 0.5.0 https://access.redhat.com/security/cve/CVE-2023-0842 https://fluidattacks.com/advisories/myers https://fluidattacks.com/advisories/myers/ https://github.com/Leonidas-from-XIV/node-xml2js https://github.com/Leonidas-from-XIV/node-xml2js/ https://github.com/Leonidas-from-XIV/node-xml2js/issues/663 https://github.com/Leonidas-from-XIV/node-xml2js/pull/603/commits/581b19a62d88f8a3c068b5a45f4542c2d6a495a5 https://github.com/Leonidas-from-XIV/node-xml2js/releases/tag/0.6.2 https://github.com/advisories/GHSA-776f-qx25-q3cc https://lists.debian.org/debian-lts-announce/2024/03/msg00013.html https://nvd.nist.gov/vuln/detail/CVE-2023-0842 https://www.cve.org/CVERecord?id=CVE-2023-0842
xmldom CVE-2022-39353 CRITICAL 0.1.31 https://access.redhat.com/security/cve/CVE-2022-39353 https://github.com/jindw/xmldom/issues/150 https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/52a708360c35aa160fcca8621720d71fd0f95f1a https://github.com/xmldom/xmldom/commit/7ff7c10ab2961703ac1752e95b4ff60ee4ee6643 https://github.com/xmldom/xmldom/commit/c02f786216bed70825f9a351c65e61500f51e931 https://github.com/xmldom/xmldom/releases/tag/0.7.7 https://github.com/xmldom/xmldom/releases/tag/0.8.4 https://github.com/xmldom/xmldom/releases/tag/0.9.0-beta.4 https://github.com/xmldom/xmldom/security/advisories/GHSA-crh6-fp67-6883 https://lists.debian.org/debian-lts-announce/2023/01/msg00000.html https://nvd.nist.gov/vuln/detail/CVE-2022-39353 https://ubuntu.com/security/notices/USN-6102-1 https://www.cve.org/CVERecord?id=CVE-2022-39353
xmldom CVE-2026-34601 HIGH 0.1.31 https://access.redhat.com/security/cve/CVE-2026-34601 https://advisory.echohq.com/cve/CVE-2026-34601 https://bugzilla.redhat.com/show_bug.cgi?id=2454595 https://github.com/advisories/GHSA-wh4c-j3r5-mjhp https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/2b852e836ab86dbbd6cbaf0537f584dd0b5ac184 https://github.com/xmldom/xmldom/releases/tag/0.8.12 https://github.com/xmldom/xmldom/releases/tag/0.9.9 https://github.com/xmldom/xmldom/security/advisories/GHSA-wh4c-j3r5-mjhp https://nvd.nist.gov/vuln/detail/CVE-2026-34601 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34601.json https://www.cve.org/CVERecord?id=CVE-2026-34601
xmldom CVE-2026-41672 HIGH 0.1.31 https://access.redhat.com/errata/RHSA-2026:26234 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/security/cve/CVE-2026-41672 https://advisory.echohq.com/cve/CVE-2026-41672 https://bugzilla.redhat.com/show_bug.cgi?id=2467631 https://github.com/advisories/GHSA-j759-j44w-7fr8 https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/b397540889086da868c30c366ad5c220d1a750c7 https://github.com/xmldom/xmldom/commit/fda7cc313de30243fea35cada64e0bb12099c2a1 https://github.com/xmldom/xmldom/pull/987 https://github.com/xmldom/xmldom/releases/tag/0.8.13 https://github.com/xmldom/xmldom/releases/tag/0.9.10 https://github.com/xmldom/xmldom/security/advisories/GHSA-j759-j44w-7fr8 https://nvd.nist.gov/vuln/detail/CVE-2026-41672 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41672.json https://www.cve.org/CVERecord?id=CVE-2026-41672
xmldom CVE-2026-41673 HIGH 0.1.31 https://access.redhat.com/errata/RHSA-2026:26234 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/security/cve/CVE-2026-41673 https://advisory.echohq.com/cve/CVE-2026-41673 https://bugzilla.redhat.com/show_bug.cgi?id=2467630 https://github.com/advisories/GHSA-2v35-w6hq-6mfw https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/17678a2a73ecbd1a2da90f3d47dc23da9cef81aa https://github.com/xmldom/xmldom/commit/291257493cb0eb6980eda83b162a9c4e6d7d2597 https://github.com/xmldom/xmldom/commit/2d6d6916ed8a4c223db1f6d7560ab4544c465b0f https://github.com/xmldom/xmldom/commit/430357c7b6333108856e917bf2367afe5ceb6f8a https://github.com/xmldom/xmldom/commit/4845ef109221df0890825de2822fbe77afba3afe https://github.com/xmldom/xmldom/commit/8834218c85ac2a4d757b9587c9028e67c2f7b6c3 https://github.com/xmldom/xmldom/commit/8b7cfd1491314abdc347261921d7334ff15f7112 https://github.com/xmldom/xmldom/commit/b0620383abc1df067f3ce1014c43ae1bc1161eeb https://github.com/xmldom/xmldom/commit/e6edcab6bef5bcdba0b220bb35442aa72f452b84 https://github.com/xmldom/xmldom/releases/tag/0.8.13 https://github.com/xmldom/xmldom/releases/tag/0.9.10 https://github.com/xmldom/xmldom/security/advisories/GHSA-2v35-w6hq-6mfw https://nvd.nist.gov/vuln/detail/CVE-2026-41673 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41673.json https://www.cve.org/CVERecord?id=CVE-2026-41673
xmldom CVE-2026-41674 HIGH 0.1.31 https://access.redhat.com/errata/RHSA-2026:20034 https://access.redhat.com/errata/RHSA-2026:21338 https://access.redhat.com/errata/RHSA-2026:21703 https://access.redhat.com/errata/RHSA-2026:26234 https://access.redhat.com/security/cve/CVE-2026-41674 https://advisory.echohq.com/cve/CVE-2026-41674 https://bugzilla.redhat.com/show_bug.cgi?id=2467620 https://github.com/advisories/GHSA-f6ww-3ggp-fr8h https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/372008f9ae0e20fd69f761c7b79e202598267314 https://github.com/xmldom/xmldom/releases/tag/0.8.13 https://github.com/xmldom/xmldom/releases/tag/0.9.10 https://github.com/xmldom/xmldom/security/advisories/GHSA-f6ww-3ggp-fr8h https://nvd.nist.gov/vuln/detail/CVE-2026-41674 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41674.json https://www.cve.org/CVERecord?id=CVE-2026-41674
xmldom CVE-2026-41675 HIGH 0.1.31 https://access.redhat.com/errata/RHSA-2026:26234 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/security/cve/CVE-2026-41675 https://advisory.echohq.com/cve/CVE-2026-41675 https://bugzilla.redhat.com/show_bug.cgi?id=2467629 https://github.com/advisories/GHSA-x6wf-f3px-wcqx https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/7207a4b0e0bcc228868075ed991665ef9f73b1c2 https://github.com/xmldom/xmldom/releases/tag/0.8.13 https://github.com/xmldom/xmldom/releases/tag/0.9.10 https://github.com/xmldom/xmldom/security/advisories/GHSA-x6wf-f3px-wcqx https://nvd.nist.gov/vuln/detail/CVE-2026-41675 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41675.json https://www.cve.org/CVERecord?id=CVE-2026-41675
xmldom CVE-2026-83605 HIGH 0.1.31 https://access.redhat.com/security/cve/CVE-2026-83605 https://advisory.echohq.com/cve/CVE-2026-83605 https://github.com/advisories/GHSA-4w3w-2rp5-g8jm https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/cba1321218b069182695813fa7565653708e172e https://github.com/xmldom/xmldom/commit/d8212e632507eaf1d9f609657dd4c56abeb12d44 https://github.com/xmldom/xmldom/pull/1043 https://github.com/xmldom/xmldom/pull/1050 https://github.com/xmldom/xmldom/releases/tag/0.8.14 https://github.com/xmldom/xmldom/releases/tag/0.9.11 https://github.com/xmldom/xmldom/security/advisories/GHSA-4w3w-2rp5-g8jm https://nvd.nist.gov/vuln/detail/CVE-2026-83605 https://www.cve.org/CVERecord?id=CVE-2026-83605
xmldom CVE-2026-83607 HIGH 0.1.31 https://access.redhat.com/security/cve/CVE-2026-83607 https://advisory.echohq.com/cve/CVE-2026-83607 https://github.com/advisories/GHSA-w2rr-34g9-rvrj https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/cba1321218b069182695813fa7565653708e172e https://github.com/xmldom/xmldom/commit/d8212e632507eaf1d9f609657dd4c56abeb12d44 https://github.com/xmldom/xmldom/pull/1043 https://github.com/xmldom/xmldom/pull/1050 https://github.com/xmldom/xmldom/releases/tag/0.8.14 https://github.com/xmldom/xmldom/releases/tag/0.9.11 https://github.com/xmldom/xmldom/security/advisories/GHSA-w2rr-34g9-rvrj https://nvd.nist.gov/vuln/detail/CVE-2026-83607 https://www.cve.org/CVERecord?id=CVE-2026-83607
xmldom CVE-2026-83608 HIGH 0.1.31 https://access.redhat.com/security/cve/CVE-2026-83608 https://advisory.echohq.com/cve/CVE-2026-83608 https://github.com/advisories/GHSA-27p8-2357-5qqv https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/57aec90ac57b4408ae7c5d1746bf2a693b5ed90e https://github.com/xmldom/xmldom/commit/85f12eb4d14b44de33216cfb72b50af4d24e9fdd https://github.com/xmldom/xmldom/pull/1071 https://github.com/xmldom/xmldom/pull/1072 https://github.com/xmldom/xmldom/releases/tag/0.8.15 https://github.com/xmldom/xmldom/releases/tag/0.9.12 https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv https://nvd.nist.gov/vuln/detail/CVE-2026-83608 https://www.cve.org/CVERecord?id=CVE-2026-83608
xmldom CVE-2026-83613 HIGH 0.1.31 https://access.redhat.com/security/cve/CVE-2026-83613 https://advisory.echohq.com/cve/CVE-2026-83613 https://github.com/advisories/GHSA-8344-3jmq-59r6 https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/2c548f200cfec991cd5846627ef8f03542309213 https://github.com/xmldom/xmldom/commit/cfb09b5dbeb035fdfedc9f01e2bbaf226bf47cf3 https://github.com/xmldom/xmldom/pull/1071 https://github.com/xmldom/xmldom/pull/1072 https://github.com/xmldom/xmldom/releases/tag/0.8.15 https://github.com/xmldom/xmldom/releases/tag/0.9.12 https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6 https://nvd.nist.gov/vuln/detail/CVE-2026-83613 https://www.cve.org/CVERecord?id=CVE-2026-83613
xmldom CVE-2026-83615 HIGH 0.1.31 https://access.redhat.com/security/cve/CVE-2026-83615 https://advisory.echohq.com/cve/CVE-2026-83615 https://github.com/advisories/GHSA-965w-775f-mr7g https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/954370f58c046223faf95ba77efcbc8ce014409d https://github.com/xmldom/xmldom/commit/dabffe884e864eeecb1f515c716f875e1bc47ec1 https://github.com/xmldom/xmldom/pull/1071 https://github.com/xmldom/xmldom/pull/1072 https://github.com/xmldom/xmldom/releases/tag/0.8.15 https://github.com/xmldom/xmldom/releases/tag/0.9.12 https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g https://nvd.nist.gov/vuln/detail/CVE-2026-83615 https://www.cve.org/CVERecord?id=CVE-2026-83615
xmldom CVE-2026-83616 HIGH 0.1.31 https://access.redhat.com/security/cve/CVE-2026-83616 https://advisory.echohq.com/cve/CVE-2026-83616 https://github.com/advisories/GHSA-c7q8-3ch8-vqpv https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/1cde3e31a07c41c87cfd368d6946aa477f16b4f9 https://github.com/xmldom/xmldom/commit/3b694872bcb5c7e3cbadba961a4be2488750ce5b https://github.com/xmldom/xmldom/pull/1071 https://github.com/xmldom/xmldom/pull/1072 https://github.com/xmldom/xmldom/releases/tag/0.8.15 https://github.com/xmldom/xmldom/releases/tag/0.9.12 https://github.com/xmldom/xmldom/security/advisories/GHSA-c7q8-3ch8-vqpv https://nvd.nist.gov/vuln/detail/CVE-2026-83616 https://www.cve.org/CVERecord?id=CVE-2026-83616
xmldom CVE-2021-21366 MEDIUM 0.1.31 0.5.0 https://access.redhat.com/security/cve/CVE-2021-21366 https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/d4201b9dfbf760049f457f9f08a3888d48835135 https://github.com/xmldom/xmldom/releases/tag/0.5.0 https://github.com/xmldom/xmldom/security/advisories/GHSA-h6q6-9hqw-rwfv https://lists.debian.org/debian-lts-announce/2023/01/msg00000.html https://nvd.nist.gov/vuln/detail/CVE-2021-21366 https://ubuntu.com/security/notices/USN-6102-1 https://www.cve.org/CVERecord?id=CVE-2021-21366 https://www.npmjs.com/package/xmldom
xmldom CVE-2021-32796 MEDIUM 0.1.31 https://access.redhat.com/security/cve/CVE-2021-32796 https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/7b4b743917a892d407356e055b296dcd6d107e8b https://github.com/xmldom/xmldom/security/advisories/GHSA-5fg8-2547-mr8q https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/ https://mattermost.com/blog/securing-xml-implementations-across-the-web https://nvd.nist.gov/vuln/detail/CVE-2021-32796 https://www.cve.org/CVERecord?id=CVE-2021-32796 https://www.npmjs.com/package/@xmldom/xmldom
xmldom CVE-2026-83610 MEDIUM 0.1.31 https://access.redhat.com/security/cve/CVE-2026-83610 https://advisory.echohq.com/cve/CVE-2026-83610 https://github.com/advisories/GHSA-6gmq-8vp8-gcm6 https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/4664386e4f4d99d17b416a151dbe8323e245284b https://github.com/xmldom/xmldom/commit/6c3fb5ffeafe7901ec928ce9010988dd716c94a0 https://github.com/xmldom/xmldom/pull/1071 https://github.com/xmldom/xmldom/pull/1072 https://github.com/xmldom/xmldom/releases/tag/0.8.15 https://github.com/xmldom/xmldom/releases/tag/0.9.12 https://github.com/xmldom/xmldom/security/advisories/GHSA-6gmq-8vp8-gcm6 https://nvd.nist.gov/vuln/detail/CVE-2026-83610 https://www.cve.org/CVERecord?id=CVE-2026-83610
xmldom CVE-2026-83611 MEDIUM 0.1.31 https://access.redhat.com/security/cve/CVE-2026-83611 https://advisory.echohq.com/cve/CVE-2026-83611 https://github.com/advisories/GHSA-6h8r-xr42-gp59 https://github.com/xmldom/xmldom https://github.com/xmldom/xmldom/commit/4430189660b0d380ee9c9ee7550a1358688e8828 https://github.com/xmldom/xmldom/commit/7b2ec67e1750daadd0bb06c92e875e726544a362 https://github.com/xmldom/xmldom/pull/1071 https://github.com/xmldom/xmldom/pull/1072 https://github.com/xmldom/xmldom/releases/tag/0.8.15 https://github.com/xmldom/xmldom/releases/tag/0.9.12 https://github.com/xmldom/xmldom/security/advisories/GHSA-6h8r-xr42-gp59 https://nvd.nist.gov/vuln/detail/CVE-2026-83611 https://www.cve.org/CVERecord?id=CVE-2026-83611
yaml CVE-2026-33532 MEDIUM 1.10.0 2.8.3, 1.10.3 https://access.redhat.com/security/cve/CVE-2026-33532 https://advisory.echohq.com/cve/CVE-2026-33532 https://github.com/advisories/GHSA-48c2-rrv3-qjmp https://github.com/eemeli/yaml https://github.com/eemeli/yaml/commit/1e84ebbea7ec35011a4c61bbb820a529ee4f359b https://github.com/eemeli/yaml/releases/tag/v1.10.3 https://github.com/eemeli/yaml/releases/tag/v2.8.3 https://github.com/eemeli/yaml/security/advisories/GHSA-48c2-rrv3-qjmp https://nvd.nist.gov/vuln/detail/CVE-2026-33532 https://www.cve.org/CVERecord?id=CVE-2026-33532
No Misconfigurations found