---
title: "Critical npm advisories (page 4)"
url: https://erroneo.us/security/ecosystem/npm/4/
description: "All 499 critical GitHub-reviewed npm security advisories since October 2023, newest first, with vulnerable ranges and fixed versions. Page 4 of 5."
type: ecosystem
section: "Security Digest"
date_modified: 2026-03-02
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Critical npm advisories (page 4)

- 2026-03-02 [CVE-2026-27971](https://erroneo.us/security/cve/CVE-2026-27971/index.md) Qwik vulnerable to Unauthenticated RCE via server$ Deserialization — @builder.io/qwik <= 1.19.0 → 1.19.1
- 2026-03-02 [CVE-2026-28794](https://erroneo.us/security/cve/CVE-2026-28794/index.md) `@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization — @orpc/client <= 1.13.5 → 1.13.6
- 2026-03-02 [CVE-2026-28466](https://erroneo.us/security/cve/CVE-2026-28466/index.md) OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway — openclaw < 2026.2.14 → 2026.2.14
- 2026-03-02 [CVE-2026-32013](https://erroneo.us/security/cve/CVE-2026-32013/index.md) OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write — openclaw < 2026.2.25 → 2026.2.25
- 2026-03-02 [CVE-2026-31999](https://erroneo.us/security/cve/CVE-2026-31999/index.md) CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths — openclaw >= 2026.2.26, < 2026.3.1 → 2026.3.1
- 2026-02-26 [CVE-2026-28363](https://erroneo.us/security/cve/CVE-2026-28363/index.md) OpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist mode — openclaw < 2026.2.23 → 2026.2.23
- 2026-02-25 [CVE-2026-27498](https://erroneo.us/security/cve/CVE-2026-27498/index.md) n8n has Arbitrary Command Execution via File Write and Git Operations — n8n < 1.123.8 → 1.123.8; n8n >= 2.0.0, < 2.2.0 → 2.2.0
- 2026-02-25 [CVE-2026-27739](https://erroneo.us/security/cve/CVE-2026-27739/index.md) Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline — @angular/ssr >= 21.2.0-next.0, < 21.2.0-rc.0 → 21.2.0-rc.1; @angular/ssr >= 21.0.0-next.0, < 21.1.5 → 21.1.5; @angular/ssr >= 20.0.0-next.0, < 20.3.17 → 20.3.17
- 2026-02-25 [CVE-2026-27497](https://erroneo.us/security/cve/CVE-2026-27497/index.md) n8n has Potential Remote Code Execution via Merge Node — n8n < 1.123.22 → 1.123.22; n8n >= 2.0.0, < 2.9.3 → 2.9.3; n8n >= 2.10.0, < 2.10.1 → 2.10.1
- 2026-02-25 [CVE-2026-27577](https://erroneo.us/security/cve/CVE-2026-27577/index.md) n8n: Expression Sandbox Escape Leads to RCE — n8n < 1.123.22 → 1.123.22; n8n >= 2.0.0, < 2.9.3 → 2.9.3; n8n >= 2.10.0, < 2.10.1 → 2.10.1
- 2026-02-25 [CVE-2026-27702](https://erroneo.us/security/cve/CVE-2026-27702/index.md) Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud) — budibase < 3.30.4 → 3.30.4
- 2026-02-25 [CVE-2026-27595](https://erroneo.us/security/cve/CVE-2026-27595/index.md) Parse Dashboard has incomplete authentication on AI Agent endpoint — parse-dashboard >= 7.3.0-alpha.42, < 9.0.0-alpha.8 → 9.0.0-alpha.8
- 2026-02-25 [CVE-2026-27728](https://erroneo.us/security/cve/CVE-2026-27728/index.md) OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec() — @oneuptime/common < 10.0.7 → 10.0.7
- 2026-02-25 [CVE-2026-27495](https://erroneo.us/security/cve/CVE-2026-27495/index.md) n8n has a Sandbox Escape in its JavaScript Task Runner — n8n < 1.123.22 → 1.123.22; n8n >= 2.0.0, < 2.9.3 → 2.9.3; n8n >= 2.10.0, < 2.10.1 → 2.10.1
- 2026-02-25 [CVE-2026-27597](https://erroneo.us/security/cve/CVE-2026-27597/index.md) @enclave-vm/core is vulnerable to Sandbox Escape — @enclave-vm/core <= 2.10.1 → 2.11.1
- 2026-02-25 [CVE-2026-27608](https://erroneo.us/security/cve/CVE-2026-27608/index.md) Parse Dashboard is Missing Authorization for its Agent Endpoint — parse-dashboard >= 7.3.0-alpha.42, <= 9.0.0-alpha.7 → 9.0.0-alpha.8
- 2026-02-25 [CVE-2026-27493](https://erroneo.us/security/cve/CVE-2026-27493/index.md) n8n has Unauthenticated Expression Evaluation via Form Node — n8n < 1.123.22 → 1.123.22; n8n >= 2.0.0, < 2.9.3 → 2.9.3; n8n >= 2.10.0, < 2.10.1 → 2.10.1
- 2026-02-25 [CVE-2026-27699](https://erroneo.us/security/cve/CVE-2026-27699/index.md) Basic FTP has Path Traversal Vulnerability in its downloadToDir() method — basic-ftp < 5.2.0 → 5.2.0
- 2026-02-25 [CVE-2026-27804](https://erroneo.us/security/cve/CVE-2026-27804/index.md) Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter — parse-server >= 9.0.0, <= 9.3.1-alpha.3 → 9.3.1-alpha.4; parse-server <= 8.6.2 → 8.6.3
- 2026-02-24 [CVE-2026-27574](https://erroneo.us/security/cve/CVE-2026-27574/index.md) OneUptime:: node:vm sandbox escape in probe allows any project member to achieve RCE — @oneuptime/common < 10.0.0 → 10.0.0
- 2026-02-24 [CVE-2026-27584](https://erroneo.us/security/cve/CVE-2026-27584/index.md) ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints — @actual-app/sync-server < 26.2.1 → 26.2.1
- 2026-02-24 [CVE-2025-69985](https://erroneo.us/security/cve/CVE-2025-69985/index.md) FUXA has JWT Authentication Bypass via HTTP Referer header spoofing — @frangoteam/fuxa <= 1.2.8 → no fix
- 2026-02-20 [CVE-2026-25896](https://erroneo.us/security/cve/CVE-2026-25896/index.md) fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names — fast-xml-parser >= 5.0.0, < 5.3.5 → 5.3.5; fast-xml-parser >= 4.1.3, < 4.5.4 → 4.5.4
- 2026-02-19 [CVE-2026-27212](https://erroneo.us/security/cve/CVE-2026-27212/index.md) Prototype pollution in swiper — swiper >= 6.5.1, < 12.1.2 → 12.1.2
- 2026-02-18 [CVE-2026-26980](https://erroneo.us/security/cve/CVE-2026-26980/index.md) Ghost has a SQL injection in Content API — ghost >= 3.24.0, < 6.19.1 → 6.19.1
- 2026-02-17 [CVE-2026-28472](https://erroneo.us/security/cve/CVE-2026-28472/index.md) OpenClaw's gateway connect could skip device identity checks when auth.token was present but not yet validated — openclaw < 2026.2.2 → 2026.2.2
- 2026-02-17 [CVE-2026-28474](https://erroneo.us/security/cve/CVE-2026-28474/index.md) Nextcloud Talk allowlist bypass via actor.name display name spoofing — @openclaw/nextcloud-talk <= 2026.2.2 → 2026.2.6
- 2026-02-17 [CVE-2026-28454](https://erroneo.us/security/cve/CVE-2026-28454/index.md) OpenClaw has a potential access-group authorization bypass if channel type lookup fails — openclaw < 2026.2.1 → 2026.2.1
- 2026-02-17 [CVE-2026-28446](https://erroneo.us/security/cve/CVE-2026-28446/index.md) OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching) — openclaw < 2026.2.2 → 2026.2.2
- 2026-02-11 [CVE-2026-26021](https://erroneo.us/security/cve/CVE-2026-26021/index.md) set-in Affected by Prototype Pollution — set-in >= 2.0.1, < 2.0.5 → 2.0.5
- 2026-02-10 [CVE-2026-1774](https://erroneo.us/security/cve/CVE-2026-1774/index.md) CASL Ability is Vulnerable to Prototype Pollution — @casl/ability >= 2.4.0, <= 6.7.4 → 6.7.5
- 2026-02-09 [CVE-2026-25881](https://erroneo.us/security/cve/CVE-2026-25881/index.md) @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape) — @nyariv/sandboxjs <= 0.8.30 → 0.8.31
- 2026-02-09 [CVE-2026-25938](https://erroneo.us/security/cve/CVE-2026-25938/index.md) FUXA Unauthenticated Remote Code Execution in Node-RED Integration — fuxa-server >= 1.2.8, < 1.2.11 → 1.2.11
- 2026-02-09 [CVE-2026-25939](https://erroneo.us/security/cve/CVE-2026-25939/index.md) FUXA Unauthenticated Remote Arbitrary Scheduler Write — fuxa-server >= 1.2.8, < 1.2.11 → 1.2.11
- 2026-02-05 [CVE-2026-25544](https://erroneo.us/security/cve/CVE-2026-25544/index.md) @payloadcms/drizzle has SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters — @payloadcms/drizzle < 3.73.0 → 3.73.0
- 2026-02-05 [CVE-2026-25586](https://erroneo.us/security/cve/CVE-2026-25586/index.md) @nyariv/sandboxjs has Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution — @nyariv/sandboxjs <= 0.8.28 → 0.8.29
- 2026-02-05 [CVE-2026-25641](https://erroneo.us/security/cve/CVE-2026-25641/index.md) @nyariv/sandboxjs vulnerable to sandbox escape via TOCTOU bug on keys in property accesses — @nyariv/sandboxjs <= 0.8.28 → 0.8.29
- 2026-02-05 [CVE-2026-25587](https://erroneo.us/security/cve/CVE-2026-25587/index.md) @nyariv/sandboxjs has a Sandbox Escape vulnerability — @nyariv/sandboxjs <= 0.8.28 → 0.8.29
- 2026-02-05 [CVE-2026-25520](https://erroneo.us/security/cve/CVE-2026-25520/index.md) @nyariv/sandboxjs has a Sandbox Escape issue — @nyariv/sandboxjs <= 0.8.28 → 0.8.29
- 2026-02-04 [CVE-2026-25893](https://erroneo.us/security/cve/CVE-2026-25893/index.md) FUXA Unauthenticated Remote Code Execution via Admin JWT Minting — fuxa-server <= 1.2.9 → 1.2.10
- 2026-02-04 [CVE-2026-25056](https://erroneo.us/security/cve/CVE-2026-25056/index.md) n8n Merge Node has Arbitrary File Write leading to RCE — n8n < 1.118.0 → 1.118.0; n8n >= 2.0.0, < 2.4.0 → 2.4.0
- 2026-02-04 [CVE-2026-25630](https://erroneo.us/security/cve/CVE-2026-25630/index.md) survey-pdf Upgraded jsPDF Version Due to Security Vulnerability — survey-pdf <= 1.12.58 → 1.12.59; survey-pdf >= 2.0.0, <= 2.5.4 → 2.5.5
- 2026-02-04 [CVE-2026-25752](https://erroneo.us/security/cve/CVE-2026-25752/index.md) FUXA Unauthenticated Remote Arbitrary Device Tag Write — fuxa-server <= 1.2.9 → 1.2.10
- 2026-02-04 [CVE-2026-25052](https://erroneo.us/security/cve/CVE-2026-25052/index.md) n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users — n8n >= 2.0.0, < 2.5.0 → 2.5.0; n8n < 1.123.18 → 1.123.18
- 2026-02-04 [CVE-2026-25751](https://erroneo.us/security/cve/CVE-2026-25751/index.md) FUXA Unauthenticated Exposure of Plaintext Database Credentials — fuxa-server <= 1.2.9 → 1.2.10
- 2026-02-04 [CVE-2026-25053](https://erroneo.us/security/cve/CVE-2026-25053/index.md) n8n has OS Command Injection in Git Node — n8n >= 2.0.0, < 2.5.0 → 2.5.0; n8n < 1.123.10 → 1.123.10
- 2026-02-04 [CVE-2026-25895](https://erroneo.us/security/cve/CVE-2026-25895/index.md) FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API — fuxa-server <= 1.2.9 → 1.2.10
- 2026-02-04 [CVE-2026-25115](https://erroneo.us/security/cve/CVE-2026-25115/index.md) n8n has a Python sandbox escape — n8n < 2.4.8 → 2.4.8
- 2026-02-04 [CVE-2026-21893](https://erroneo.us/security/cve/CVE-2026-21893/index.md) n8n Vulnerable to Command Injection in Community Package Installation — n8n >= 0.187.0, < 1.120.3 → 1.120.3
- 2026-02-04 [CVE-2026-25049](https://erroneo.us/security/cve/CVE-2026-25049/index.md) n8n Has Expression Escape Vulnerability Leading to RCE — n8n < 1.123.17 → 1.123.17; n8n >= 2.0.0, < 2.5.2 → 2.5.2
- 2026-02-04 [CVE-2026-25894](https://erroneo.us/security/cve/CVE-2026-25894/index.md) FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration — fuxa-server <= 1.2.9 → 1.2.10
- 2026-02-03 [CVE-2026-25150](https://erroneo.us/security/cve/CVE-2026-25150/index.md) Prototype Pollution via FormData Processing in Qwik City — @builder.io/qwik-city < 1.19.0 → 1.19.0
- 2026-02-02 [CVE-2026-25521](https://erroneo.us/security/cve/CVE-2026-25521/index.md) locutus is vulnerable to Prototype Pollution — locutus >= 2.0.12, < 2.0.39 → 2.0.39
- 2026-02-02 [CVE-2026-23515](https://erroneo.us/security/cve/CVE-2026-23515/index.md) Signal K set-system-time plugin vulnerable to RCE - Command Injection — @signalk/set-system-time < 1.5.0 → 1.5.0
- 2026-02-02 [CVE-2026-25142](https://erroneo.us/security/cve/CVE-2026-25142/index.md) SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE — @nyariv/sandboxjs <= 0.8.26 → 0.8.27
- 2026-01-30 [CVE-2026-25141](https://erroneo.us/security/cve/CVE-2026-25141/index.md) Orval has Code Injection via unsanitized x-enum-descriptions using JS comments — @orval/core >= 7.19.0, < 7.21.0 → 7.21.0; @orval/core >= 8.0.0, < 8.2.0 → 8.2.0
- 2026-01-29 [CVE-2026-25047](https://erroneo.us/security/cve/CVE-2026-25047/index.md) deepHas vulnerable to Prototype Pollution via constructor.prototype — deephas < 1.0.8 → 1.0.8
- 2026-01-27 [CVE-2026-23830](https://erroneo.us/security/cve/CVE-2026-23830/index.md) SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor — @nyariv/sandboxjs < 0.8.26 → 0.8.26
- 2026-01-27 [CVE-2026-1470](https://erroneo.us/security/cve/CVE-2026-1470/index.md) n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution — n8n < 1.123.17 → 1.123.17; n8n >= 2.0.0, < 2.4.5 → 2.4.5; n8n >= 2.5.0, < 2.5.1 → 2.5.1
- 2026-01-26 [GHSA-cr3w-cw5w-h3fj](https://erroneo.us/security/ghsa/GHSA-cr3w-cw5w-h3fj/index.md) Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE — @saltcorn/server >= 1.1.1, < 1.5.0-beta.19 → 1.5.0-beta.19
- 2026-01-26 [CVE-2026-22709](https://erroneo.us/security/cve/CVE-2026-22709/index.md) vm2 has a Sandbox Escape — vm2 <= 3.10.1 → 3.10.2
- 2026-01-26 [CVE-2026-22696](https://erroneo.us/security/cve/CVE-2026-22696/index.md) dcap-qvl has Missing Verification for QE Identity — dcap-qvl < 0.3.9 → 0.3.9; @phala/dcap-qvl <= 0.3.0 → 0.3.9; @phala/dcap-qvl-web <= 0.3.3 → no fix
- 2026-01-21 [CVE-2026-23966](https://erroneo.us/security/cve/CVE-2026-23966/index.md) sm-crypto Affected by Private Key Recovery in SM2-PKE — sm-crypto < 0.3.14 → 0.3.14
- 2026-01-20 [CVE-2026-23947](https://erroneo.us/security/cve/CVE-2026-23947/index.md) Orval has a code injection via unsanitized x-enum-descriptions in enum generation — @orval/core >= 8.0.0-rc.0, < 8.0.2 → 8.0.2; @orval/core < 7.19.0 → 7.19.0
- 2026-01-20 [CVE-2026-23733](https://erroneo.us/security/cve/CVE-2026-23733/index.md) Lobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code Execution(RCE) — @lobehub/chat <= 1.143.2 → no fix
- 2026-01-16 [CVE-2026-23744](https://erroneo.us/security/cve/CVE-2026-23744/index.md) REC in MCPJam inspector due to HTTP Endpoint exposes — @mcpjam/inspector <= 1.4.2 → 1.4.3
- 2026-01-14 [CVE-2026-22686](https://erroneo.us/security/cve/CVE-2026-22686/index.md) enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain — enclave-vm < 2.7.0 → 2.7.0
- 2026-01-13 [CVE-2026-22785](https://erroneo.us/security/cve/CVE-2026-22785/index.md) orval MCP client is vulnerable to a code injection attack. — @orval/mcp < 7.18.0 → 7.18.0
- 2026-01-13 [CVE-2026-22813](https://erroneo.us/security/cve/CVE-2026-22813/index.md) Malicious website can execute commands on the local system through XSS in the OpenCode web UI — opencode-ai < 1.1.10 → 1.1.10
- 2026-01-08 [CVE-2025-61686](https://erroneo.us/security/cve/CVE-2025-61686/index.md) React Router has Path Traversal in File Session Storage — @react-router/node >= 7.0.0, <= 7.9.3 → 7.9.4; @remix-run/node <= 2.17.1 → 2.17.2; @remix-run/deno <= 2.17.1 → 2.17.2
- 2026-01-07 [CVE-2026-21858](https://erroneo.us/security/cve/CVE-2026-21858/index.md) n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling — n8n >= 1.65.0, < 1.121.0 → 1.121.0
- 2026-01-06 [CVE-2026-21877](https://erroneo.us/security/cve/CVE-2026-21877/index.md) n8n Vulnerable to RCE via Arbitrary File Write — n8n >= 0.123.0, < 1.121.3 → 1.121.3
- 2026-01-05 [CVE-2025-68428](https://erroneo.us/security/cve/CVE-2025-68428/index.md) jsPDF has Local File Inclusion/Path Traversal vulnerability — jspdf <= 3.0.4 → 4.0.0
- 2026-01-02 [CVE-2025-66398](https://erroneo.us/security/cve/CVE-2025-66398/index.md) Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE) — signalk-server < 2.19.0 → 2.19.0
- 2026-01-02 [CVE-2026-21440](https://erroneo.us/security/cve/CVE-2026-21440/index.md) AdonisJS Path Traversal in Multipart File Handling — @adonisjs/bodyparser < 10.1.2 → 10.1.2; @adonisjs/bodyparser >= 11.0.0-next.0, < 11.0.0-next.6 → 11.0.0-next.6
- 2026-01-02 [CVE-2025-68620](https://erroneo.us/security/cve/CVE-2025-68620/index.md) Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling — signalk-server < 2.19.0 → 2.19.0
- 2025-12-26 [CVE-2025-13158](https://erroneo.us/security/cve/CVE-2025-13158/index.md) apidoc-core has a prototype pollution vulnerability — apidoc-core >= 0.2.0, <= 0.15.0 → no fix
- 2025-12-26 [CVE-2025-68668](https://erroneo.us/security/cve/CVE-2025-68668/index.md) n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node — n8n >= 1.0.0, < 2.0.0 → 2.0.0
- 2025-12-22 [CVE-2025-68613](https://erroneo.us/security/cve/CVE-2025-68613/index.md) n8n Vulnerable to Remote Code Execution via Expression Injection — n8n >= 0.211.0, < 1.120.4 → 1.120.4; n8n >= 1.121.0, < 1.121.1 → 1.121.1
- 2025-12-09 [CVE-2025-66456](https://erroneo.us/security/cve/CVE-2025-66456/index.md) Elysia vulnerable to prototype pollution with multiple standalone schema validation — elysia >= 1.4.0, < 1.4.17 → 1.4.17
- 2025-12-08 [CVE-2025-65964](https://erroneo.us/security/cve/CVE-2025-65964/index.md) n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook — n8n >= 0.123.1, < 1.119.2 → 1.119.2
- 2025-12-08 [CVE-2025-67489](https://erroneo.us/security/cve/CVE-2025-67489/index.md) @vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server — @vitejs/plugin-rsc <= 0.5.5 → 0.5.6
- 2025-12-03 [CVE-2025-55182](https://erroneo.us/security/cve/CVE-2025-55182/index.md) React Server Components are Vulnerable to RCE — react-server-dom-webpack >= 19.1.0, < 19.1.2 → 19.1.2; react-server-dom-webpack = 19.2.0 → 19.2.1; react-server-dom-turbopack >= 19.1.0, < 19.1.2 → 19.1.2
- 2025-12-03 [GHSA-fmh4-wr37-44fp](https://erroneo.us/security/ghsa/GHSA-fmh4-wr37-44fp/index.md) React Server Components are Vulnerable to RCE — @vitejs/plugin-rsc <= 0.5.2 → 0.5.3
- 2025-12-03 [GHSA-9qr9-h5gf-34mp](https://erroneo.us/security/ghsa/GHSA-9qr9-h5gf-34mp/index.md) Next.js is vulnerable to RCE in React flight protocol — next >= 14.3.0-canary.77, < 15.0.5 → 15.0.5; next >= 15.2.0-canary.0, < 15.2.6 → 15.2.6; next >= 15.3.0-canary.0, < 15.3.6 → 15.3.6
- 2025-12-01 [CVE-2025-66401](https://erroneo.us/security/cve/CVE-2025-66401/index.md) MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL — mcp-watch <= 0.1.2 → no fix
- 2025-11-20 [CVE-2025-64767](https://erroneo.us/security/cve/CVE-2025-64767/index.md) @hpke/core reuses AEAD nonces — @hpke/core <= 1.7.4 → 1.7.5
- 2025-11-20 [CVE-2025-65108](https://erroneo.us/security/cve/CVE-2025-65108/index.md) md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter — md-to-pdf < 5.2.5 → 5.2.5
- 2025-11-03 [CVE-2025-11953](https://erroneo.us/security/cve/CVE-2025-11953/index.md) @react-native-community/cli has arbitrary OS command injection — @react-native-community/cli >= 20.0.0-alpha.0, < 20.0.0 → 20.0.0; @react-native-community/cli >= 19.0.0-alpha.0, < 19.1.2 → 19.1.2; @react-native-community/cli >= 18.0.0, < 18.0.1 → 18.0.1
- 2025-10-15 [CVE-2025-62410](https://erroneo.us/security/cve/CVE-2025-62410/index.md) happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript — happy-dom >= 19.0.0, < 20.0.2 → 20.0.2
- 2025-10-10 [CVE-2025-61927](https://erroneo.us/security/cve/CVE-2025-61927/index.md) Happy DOM: VM Context Escape can lead to Remote Code Execution — happy-dom < 20.0.0 → 20.0.0
- 2025-10-09 [CVE-2025-61913](https://erroneo.us/security/cve/CVE-2025-61913/index.md) Flowise is vulnerable to arbitrary file write through its WriteFileTool — flowise < 3.0.8 → 3.0.8; flowise-components < 3.0.8 → 3.0.8; Flowise <= 3.0.5 → 3.0.8
- 2025-10-06 [CVE-2025-55346](https://erroneo.us/security/cve/CVE-2025-55346/index.md) Flowise vulnerable to RCE via Dynamic function constructor injection — flowise <= 2.2.7-patch.1 → no fix
- 2025-10-06 [CVE-2025-59159](https://erroneo.us/security/cve/CVE-2025-59159/index.md) SillyTavern Web Interface Vulnerable DNS Rebinding — sillytavern < 1.13.4 → 1.13.4
- 2025-10-03 [CVE-2025-50538](https://erroneo.us/security/cve/CVE-2025-50538/index.md) Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel — flowise < 3.0.8 → 3.0.8
- 2025-09-30 [CVE-2025-11148](https://erroneo.us/security/cve/CVE-2025-11148/index.md) check-branches is vulnerable to command Injection — check-branches <= 0.0.19 → no fix
- 2025-09-26 [CVE-2025-59936](https://erroneo.us/security/cve/CVE-2025-59936/index.md) get-jwks: poisoned JWKS cache allows post-fetch issuer validation bypass — get-jwks <= 11.0.1 → 11.0.2
- 2025-09-25 [CVE-2020-36851](https://erroneo.us/security/cve/CVE-2020-36851/index.md) cors-anywhere vulnerable to server-side request forgery — cors-anywhere <= 0.4.4 → no fix
- 2025-09-24 [CVE-2025-59834](https://erroneo.us/security/cve/CVE-2025-59834/index.md) Command Injection in adb-mcp MCP Server — adb-mcp <= 0.1.0 → no fix
- 2025-09-15 [GHSA-q67q-549q-p849](https://erroneo.us/security/ghsa/GHSA-q67q-549q-p849/index.md) Flowise has arbitrary file access due to missing chat flow id validation — flowise >= 2.2.8, < 3.0.6 → 3.0.6

Pages: https://erroneo.us/security/ecosystem/npm/index.md · https://erroneo.us/security/ecosystem/npm/2/index.md · https://erroneo.us/security/ecosystem/npm/3/index.md · https://erroneo.us/security/ecosystem/npm/4/index.md · https://erroneo.us/security/ecosystem/npm/5/index.md

---
Source page: https://erroneo.us/security/ecosystem/npm/4/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt