npm - OSV

GHSA-79qf-vqgc-7xx3

npm/@apostrophecms/import-export

ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal 02 Sep

Fix available
Severity - 6.5 (Medium)

MAL-2026-4103

npm/@antv/x6-plugin-export

Malicious code in @antv/x6-plugin-export (npm) 19 May

No fix available

MAL-2026-3656

npm/buffer-export

Malicious code in buffer-export (npm) 13 May

No fix available

GHSA-mwxc-m426-3f78

npm/@apostrophecms/import-export

ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction 18 Mar

Fix available
Severity - 9.9 (Critical)

MAL-2026-1550

npm/syntax-export-extensions

Malicious code in syntax-export-extensions (npm) 16 Mar

No fix available

MAL-2026-1565

npm/transform-export-extensions

Malicious code in transform-export-extensions (npm) 16 Mar

No fix available

MAL-2026-1334

npm/sort-export-all

Malicious code in sort-export-all (npm) 11 Mar

No fix available

MAL-2026-1255

npm/pearpass-lib-data-export

Malicious code in pearpass-lib-data-export (npm) 05 Mar

No fix available

MAL-2025-191142

npm/react-data-to-export

Malicious code in react-data-to-export (npm) 24 Nov 2025

No fix available

MAL-2025-190893

npm/@posthog/snowflake-export-plugin

Malicious code in @posthog/snowflake-export-plugin (npm) 24 Nov 2025

No fix available

MAL-2025-185433

npm/alpha-integer-pi-assert-export

Malicious code in alpha-integer-pi-assert-export (npm) 13 Nov 2025

No fix available

MAL-2025-185565

npm/array-async-export-lambda-transpile

Malicious code in array-async-export-lambda-transpile (npm) 13 Nov 2025

No fix available

MAL-2025-186030

npm/cat-encrypt-export-kappa-validate

Malicious code in cat-encrypt-export-kappa-validate (npm) 13 Nov 2025

No fix available

MAL-2025-186140

npm/chi-short-export-assert-execute

Malicious code in chi-short-export-assert-execute (npm) 13 Nov 2025

No fix available

MAL-2025-186197

npm/cold-cron-object-chi-export

Malicious code in cold-cron-object-chi-export (npm) 13 Nov 2025

No fix available

MAL-2025-186500

npm/decode-export-data-cold-error

Malicious code in decode-export-data-cold-error (npm) 13 Nov 2025

No fix available

Vulnerabilities