Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2220041
AlmaLinux
5946
Alpaquita
16105
Alpine
4618
Android
3677
Azure Linux
17673
BellSoft Hardened Containers
754
Bitnami
9325
Chainguard
1035628
CleanStart
4404
CRAN
14
crates.io
2745
Debian
68676
Echo
7558
GHC
3
GIT
108492
GitHub Actions
55
Go
9247
Hackage
33
Hex
364
Julia
1713
Linux
29975
Mageia
6233
Maven
7046
MinimOS
146748
npm
229023
NuGet
1869
opam
29
openEuler
8900
openSUSE
14498
OSS-Fuzz
4014
Packagist
7100
Pub
11
PyPI
25233
Red Hat
23413
Rocky Linux
4319
Root
19607
RubyGems
5326
SUSE
23390
SwiftURL
60
TuxCare
9675
Ubuntu
65799
VSCode
21
Wolfi
290722
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-10652
npm/json-bigint-extend
Malicious code in json-bigint-extend (npm)
14 Jul
No fix available
MAL-2026-10420
npm/path-addon-extend
Malicious code in path-addon-extend (npm)
13 Jul
No fix available
MAL-2026-4592
npm/jsontoken-extend
Malicious code in jsontoken-extend (npm)
25 May
No fix available
MAL-2026-2920
npm/buffer-util-extend
Malicious code in buffer-util-extend (npm)
14 Apr
No fix available
MAL-2026-2929
npm/path-extend
Malicious code in path-extend (npm)
14 Apr
No fix available
MAL-2026-2363
npm/env-extend
Malicious code in env-extend (npm)
24 Mar
No fix available
MAL-2025-192743
npm/dotenv-extend
Malicious code in dotenv-extend (npm)
23 Dec 2025
No fix available
MAL-2025-192825
npm/no-use-extend-native
Malicious code in no-use-extend-native (npm)
23 Dec 2025
No fix available
MAL-2025-6968
npm/vite-plugin-vue-extend-plugin
Malicious code in vite-plugin-vue-extend-plugin (npm)
17 Aug 2025
No fix available
MAL-2025-20087
npm/express-uatraits-extend
Malicious code in express-uatraits-extend (npm)
14 Aug 2025
No fix available
MAL-2025-38651
npm/vscode-extend
Malicious code in vscode-extend (npm)
14 Aug 2025
No fix available
GHSA-7qgg-vw88-cc99
npm/utils-extend
utils-extend Prototype Pollution
06 Feb 2025
No fix available
Severity - 9.1 (Critical)
GHSA-m639-9whg-fw97
npm/object-extend
Prototype Pollution in object-extend
19 Feb 2022
No fix available
Severity - 9.8 (Critical)
GHSA-mh82-55cm-6gfh
npm/js-extend
Prototype pollution vulnerability in js-extend
08 Jun 2021
No fix available
Severity - 9.8 (Critical)
GHSA-cg42-4wrc-gp47
npm/node-extend
Code Injection in node-extend
17 May 2021
No fix available
Severity - 9.8 (Critical)
GHSA-6pq3-928q-x6w6
npm/utils-extend
Prototype Pollution
03 Sep 2020
No fix available
Load more...
npm - OSV