Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-13481
  • npm/cdf-tag-commander-helper
 Malicious code in cdf-tag-commander-helper (npm) 06 Aug
  • No fix available
MAL-2026-10854
  • npm/@gocortexio/npmgremlinbox-typosquat-commander
 Malicious code in @gocortexio/npmgremlinbox-typosquat-commander (npm) 20 Jul
  • No fix available
GHSA-5xx3-j724-wmx5
  • npm/@wonderwhy-er/desktop-commander
 DesktopCommanderMCP is vulnerable to SSRF 03 Jun
  • No fix available
  • Severity - 2.1 (Low)
GHSA-r87g-78mx-3wg4
  • npm/@wonderwhy-er/desktop-commander
 DesktopCommanderMCP is vulnerable to Uncontrolled Resource Consumption 03 Jun
  • Fix available
  • Severity - 2.1 (Low)
MAL-2025-192687
  • npm/commander-stable
 Malicious code in commander-stable (npm) 22 Dec 2025
  • No fix available
MAL-2025-191356
  • npm/@voiceflow/natural-language-commander
 Malicious code in @voiceflow/natural-language-commander (npm) 25 Nov 2025
  • No fix available
MAL-2025-16410
  • npm/bytel-tag-commander
 Malicious code in bytel-tag-commander (npm) 14 Aug 2025
  • No fix available
MAL-2025-17408
  • npm/commander-js
 Malicious code in commander-js (npm) 14 Aug 2025
  • No fix available
GHSA-2hqf-qqmq-pgpp
  • npm/commander-js
 Malicious Package in commander-js 02 Sep 2020
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-8c8c-4vfj-rrpc
  • npm/redis-commander
 Reflected Cross-Site Scripting in redis-commander 01 Sep 2020
  • Fix available