Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
839276
AlmaLinux
5574
Alpaquita
13567
Alpine
4420
Android
3403
Azure Linux
12016
BellSoft Hardened Containers
620
Bitnami
8780
Chainguard
10042
CleanStart
1988
CRAN
14
crates.io
2641
Debian
63486
Echo
7883
GHC
3
GIT
99373
GitHub Actions
55
Go
8707
Hackage
32
Hex
229
Julia
1670
Linux
27479
Mageia
6105
Maven
6840
MinimOS
120757
npm
226267
NuGet
1844
opam
25
openEuler
8075
openSUSE
13912
OSS-Fuzz
3979
Packagist
6822
Pub
11
PyPI
24378
Red Hat
22133
Rocky Linux
3932
Root
18909
RubyGems
4591
SUSE
22326
SwiftURL
59
TuxCare
8353
Ubuntu
60814
VSCode
20
Wolfi
7142
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-11753
npm/@ornikar/eslint-config-typescript-react
Malicious code in @ornikar/eslint-config-typescript-react (npm)
04 Aug
No fix available
MAL-2026-11981
npm/pob-test-typescript-package-in-monorepo
Malicious code in pob-test-typescript-package-in-monorepo (npm)
04 Aug
No fix available
MAL-2026-11751
npm/@ornikar/eslint-config-typescript
Malicious code in @ornikar/eslint-config-typescript (npm)
04 Aug
No fix available
MAL-2026-11752
npm/@ornikar/eslint-config-typescript-nestjs
Malicious code in @ornikar/eslint-config-typescript-nestjs (npm)
04 Aug
No fix available
GHSA-w284-33mx-6g9v
npm/swagger-typescript-api
swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies
29 Jul
Fix available
Severity - 8.3 (High)
GHSA-5f94-x226-ccpm
npm/swagger-typescript-api
swagger-typescript-api vulnerable to code injection via unescaped enum string values
29 Jul
Fix available
Severity - 8.3 (High)
GHSA-38c3-wv3c-v3xj
npm/swagger-typescript-api
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template
29 Jul
Fix available
Severity - 8.3 (High)
GHSA-x36r-4347-pm5x
npm/swagger-typescript-api
swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
29 Jul
Fix available
Severity - 6.1 (Medium)
GHSA-hqj5-cw9f-rx67
npm/swagger-typescript-api
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template
29 Jul
Fix available
Severity - 8.3 (High)
GHSA-h754-fxp7-88wx
npm/swagger-typescript-api
swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`
29 Jul
Fix available
Severity - 7.4 (High)
MAL-2026-10704
npm/@across-toolkit/typescript-config
Malicious code in @across-toolkit/typescript-config (npm)
16 Jul
No fix available
MAL-2026-6925
npm/typescript-base58
Malicious code in typescript-base58 (npm)
07 Jul
No fix available
MAL-2026-7092
npm/@spinstorm/typescript-config
Malicious code in @spinstorm/typescript-config (npm)
07 Jul
No fix available
MAL-2026-6746
npm/typescript-util-core
Malicious code in typescript-util-core (npm)
03 Jul
No fix available
MAL-2026-5470
npm/getd-typescript-eslint-rules
Malicious code in getd-typescript-eslint-rules (npm)
09 Jun
No fix available
MAL-2026-4314
npm/expo-config-plugin-typescript
Malicious code in expo-config-plugin-typescript (npm)
25 May
No fix available
Load more...
npm - OSV