Vendor
npm
Public exploit1Avg CVSS7.2
CVEs in the catalog
28
since 2018-08
Months in the top 100
8
months with a stored rank
Best rank
#21
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| cli | 5 | 18% |
| node tar | 5 | 18% |
| arborist | 2 | 7% |
| buttle | 1 | 4% |
| cached path relative | 1 | 4% |
| claviska jquery minicolors | 1 | 4% |
| confidential compute attestation | 1 | 4% |
| cordova plugin ionic webview | 1 | 4% |
| cryostat 4 | 1 | 4% |
| erxes | 1 | 4% |
| fastify oauth2 | 1 | 4% |
| http live simulator | 1 | 4% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-22 | 10 | 36% |
| CWE-79 | 8 | 29% |
| CWE-61 | 3 | 11% |
| CWE-59 | 2 | 7% |
| CWE-20 | 1 | 4% |
| CWE-200 | 1 | 4% |
| CWE-400 | 1 | 4% |
| CWE-532 | 1 | 4% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-0775 | CWE-732 | none yet | 7 | 2026-01-23 |
| CVE-2023-31999 | n/a | none yet | n/a | 2023-07-04 |
| CVE-2021-32860 | CWE-79 | none yet | 6.1 | 2023-02-20 |
| CVE-2021-32855 | CWE-79 | none yet | 6.1 | 2023-02-20 |
| CVE-2021-32854 | CWE-79 | none yet | 6.1 | 2023-02-20 |
| CVE-2021-32853 | CWE-79 | none yet | 6.1 | 2023-02-20 |
| CVE-2021-32851 | CWE-79 | none yet | 6.1 | 2023-02-20 |
| CVE-2021-32850 | CWE-79 | none yet | 6.1 | 2023-02-20 |
| CVE-2022-29244 | CWE-200 | none yet | 7.5 | 2022-06-13 |
| CVE-2021-39135 | CWE-61 | none yet | 8.2 | 2021-08-31 |
| CVE-2021-39134 | CWE-61 | none yet | 8.2 | 2021-08-31 |
| CVE-2021-37713 | CWE-22 | none yet | 8.2 | 2021-08-31 |
| CVE-2021-37712 | CWE-22, CWE-59 | none yet | 8.2 | 2021-08-31 |
| CVE-2021-37701 | CWE-22, CWE-59 | none yet | 8.2 | 2021-08-31 |
| CVE-2021-32804 | CWE-22 | 1 | 8.2 | 2021-08-03 |