Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-pvw4-cvr4-97p8
  • npm/@cap-js/db-service
  • npm/@cap-js/postgres
  • npm/@cap-js/sqlite
Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service) 20 May
  • Fix available
MAL-2026-3176
  • npm/@cap-js/db-service
Malicious code in @cap-js/db-service (npm) 29 Apr
  • No fix available