Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-11753
  • npm/@ornikar/eslint-config-typescript-react
Malicious code in @ornikar/eslint-config-typescript-react (npm) 04 Aug
  • No fix available
MAL-2026-11981
  • npm/pob-test-typescript-package-in-monorepo
Malicious code in pob-test-typescript-package-in-monorepo (npm) 04 Aug
  • No fix available
MAL-2026-11751
  • npm/@ornikar/eslint-config-typescript
Malicious code in @ornikar/eslint-config-typescript (npm) 04 Aug
  • No fix available
MAL-2026-11752
  • npm/@ornikar/eslint-config-typescript-nestjs
Malicious code in @ornikar/eslint-config-typescript-nestjs (npm) 04 Aug
  • No fix available
GHSA-w284-33mx-6g9v
  • npm/swagger-typescript-api
swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies 29 Jul
  • Fix available
  • Severity - 8.3 (High)
GHSA-5f94-x226-ccpm
  • npm/swagger-typescript-api
swagger-typescript-api vulnerable to code injection via unescaped enum string values 29 Jul
  • Fix available
  • Severity - 8.3 (High)
GHSA-38c3-wv3c-v3xj
  • npm/swagger-typescript-api
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template 29 Jul
  • Fix available
  • Severity - 8.3 (High)
GHSA-x36r-4347-pm5x
  • npm/swagger-typescript-api
swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref` 29 Jul
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-hqj5-cw9f-rx67
  • npm/swagger-typescript-api
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template 29 Jul
  • Fix available
  • Severity - 8.3 (High)
GHSA-h754-fxp7-88wx
  • npm/swagger-typescript-api
swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref` 29 Jul
  • Fix available
  • Severity - 7.4 (High)
MAL-2026-10704
  • npm/@across-toolkit/typescript-config
Malicious code in @across-toolkit/typescript-config (npm) 16 Jul
  • No fix available
MAL-2026-6925
  • npm/typescript-base58
Malicious code in typescript-base58 (npm) 07 Jul
  • No fix available
MAL-2026-7092
  • npm/@spinstorm/typescript-config
Malicious code in @spinstorm/typescript-config (npm) 07 Jul
  • No fix available
MAL-2026-6746
  • npm/typescript-util-core
Malicious code in typescript-util-core (npm) 03 Jul
  • No fix available
MAL-2026-5470
  • npm/getd-typescript-eslint-rules
Malicious code in getd-typescript-eslint-rules (npm) 09 Jun
  • No fix available
MAL-2026-4314
  • npm/expo-config-plugin-typescript
Malicious code in expo-config-plugin-typescript (npm) 25 May
  • No fix available