Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-r9v2-gg2j-22q5
  • npm/@payloadcms/plugin-stripe
Payload: Insufficient Access Control in Stripe REST Proxy 06 Oct
  • Fix available
  • Severity - 6.4 (Medium)
GHSA-h3rm-78g3-j7cp
  • npm/@better-auth/stripe
@better-auth/stripe: cross-organization billing tampering in organization subscription actions 24 Jul
  • Fix available
  • Severity - 7.1 (High)
MAL-2026-5899
  • npm/stripe-cli-init-plugin
Malicious code in stripe-cli-init-plugin (npm) 16 Jun
  • No fix available
MAL-2026-5389
  • npm/@0xlr/stripe-frontend
Malicious code in @0xlr/stripe-frontend (npm) 09 Jun
  • No fix available
MAL-2026-5388
  • npm/@0xlr/stripe-checkout-js
Malicious code in @0xlr/stripe-checkout-js (npm) 09 Jun
  • No fix available
MAL-2026-4184
  • npm/stripe-internal-utils
Malicious code in stripe-internal-utils (npm) 20 May
  • No fix available
MAL-2025-20598
  • npm/firestore-stripe-invoices
Malicious code in firestore-stripe-invoices (npm) 14 Aug 2025
  • No fix available
MAL-2025-38674
  • npm/vue-storefront-stripe
Malicious code in vue-storefront-stripe (npm) 14 Aug 2025
  • No fix available
MAL-2025-1753
  • npm/calypso-stripe
Malicious code in calypso-stripe (npm) 03 Mar 2025
  • No fix available
MAL-2025-1940
  • npm/stripe-sample-accept-a-payment
Malicious code in stripe-sample-accept-a-payment (npm) 03 Mar 2025
  • No fix available
MAL-2025-2036
  • npm/ct-connect-stripe
Malicious code in ct-connect-stripe (npm) 03 Mar 2025
  • No fix available
MAL-2025-2053
  • npm/stripe-sample-accept-a-card-payment
Malicious code in stripe-sample-accept-a-card-payment (npm) 03 Mar 2025
  • No fix available
MAL-2024-11846
  • npm/stripe-internal
Malicious code in stripe-internal (npm) 14 Dec 2024
  • No fix available
MAL-2024-8894
  • npm/stripe-testfb-v3
Malicious code in stripe-testfb-v3 (npm) 17 Sep 2024
  • No fix available
MAL-2024-3059
  • npm/stripe-apps-deep
Malicious code in stripe-apps-deep (npm) 25 Jun 2024
  • No fix available
MAL-2023-8433
  • npm/stripe-terminal-react-native-dev-app
Malicious code in stripe-terminal-react-native-dev-app (npm) 05 Nov 2023
  • No fix available