npm - OSV

GHSA-r3r9-wp5j-pq5g

npm/request-filtering-agent

request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process 22 Sep

Fix available
Severity - 7.5 (High)

MAL-2026-15632

npm/node-request-utils

Malicious code in node-request-utils (npm) 31 Aug

No fix available

MAL-2026-12668

npm/custom-plugins-request-factory

Malicious code in custom-plugins-request-factory (npm) 05 Aug

No fix available

MAL-2026-11684

npm/@or-sdk/content-request

Malicious code in @or-sdk/content-request (npm) 04 Aug

No fix available

MAL-2026-11964

npm/cacheable-request

Malicious code in cacheable-request (npm) 04 Aug

No fix available

MAL-2026-10936

npm/twilio-platform-request

Malicious code in twilio-platform-request (npm) 20 Jul

No fix available

MAL-2026-10414

npm/express-request-engine

Malicious code in express-request-engine (npm) 13 Jul

No fix available

MAL-2026-7352

npm/pull-request-comment-branch

Malicious code in pull-request-comment-branch (npm) 07 Jul

No fix available

MAL-2026-6175

npm/request-performance

Malicious code in request-performance (npm) 17 Jun

No fix available

MAL-2026-6176

npm/request-tracking-sqlite

Malicious code in request-tracking-sqlite (npm) 17 Jun

No fix available

MAL-2026-4950

npm/@cloudplatform-single-spa/mlspace-access-request

Malicious code in @cloudplatform-single-spa/mlspace-access-request (npm) 28 May

No fix available

MAL-2026-3771

npm/request-logger-canary

Malicious code in request-logger-canary (npm) 14 May

No fix available

MAL-2026-2798

npm/request-easy-validator

Malicious code in request-easy-validator (npm) 16 Apr

No fix available

GHSA-mvvv-v22x-xqwp

npm/@nocobase/plugin-workflow-request

NocoBase has SSRF in Workflow HTTP Request and Custom Request Plugins 15 Apr

Fix available
Severity - 6.4 (Medium)

MAL-2026-2526

npm/request-js-validator

Malicious code in request-js-validator (npm) 06 Apr

No fix available

MAL-2026-1646

npm/abstract-http-request

Malicious code in abstract-http-request (npm) 18 Mar

No fix available

Vulnerabilities