Security Digest · page 5 of 5
Critical npm advisories (page 5)
499 critical advisories for npm packages since October 2023, newest first. Check your project with npm audit (or: npm ls <package>).
- Flowise has an Arbitrary File Read GHSA-99pg-hqvx-r4gf CVSS 9.1 Critical
flowise= 3.0.5 → fixed in 3.0.6 - FlowiseAI Pre-Auth Arbitrary Code Execution CVE-2025-57164 CVSS 9.1 Critical
flowise= 3.0.5 → fixed in 3.0.6 - Flowise has Remote Code Execution vulnerability CVE-2025-59528 CVSS 10.0 Critical
flowise= 3.0.5 → fixed in 3.0.6 - Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover CVE-2025-58434 CVSS 9.8 Critical
flowise<= 3.0.5 → fixed in 3.0.6 - Prebid-universal-creative latest on npm briefly compromised CVE-2025-59039 CVSS 9.3 Critical
prebid-universal-creative= 1.17.3 → no fix listed - interactive-git-checkout has a Command Injection vulnerability CVE-2025-59046 CVSS 9.8 Critical
interactive-git-checkout<= 1.1.4 → no fix listed - @akoskm/create-mcp-server-stdio is vulnerable to MCP Server Command Injection through `exec` API CVE-2025-54994 CVSS 9.3 Critical
@akoskm/create-mcp-server-stdio< 0.0.13 → fixed in 0.0.13 - CodeceptJS's incomprehensive sanitation can lead to Command Injection CVE-2025-57285 CVSS 9.8 Critical
codeceptjs>= 3.5.0, < 3.7.5 → fixed in 3.7.5 - cipher-base is missing type checks, leading to hash rewind and passing on crafted data CVE-2025-9287 CVSS 9.1 Critical
cipher-base<= 1.0.4 → fixed in 1.0.5 - sha.js is missing type checks leading to hash rewind and passing on crafted data CVE-2025-9288 CVSS 9.1 Critical
sha.js<= 2.4.11 → fixed in 2.4.12 - Directus allows unauthenticated file upload and file modification due to lacking input sanitization CVE-2025-55746 CVSS 9.3 Critical
directus>= 10.8.0, < 11.9.3 → fixed in 11.9.3;@directus/api>= 14.1.0, < 28.0.2 → fixed in 28.0.2 - screenshot-desktop vulnerable to command Injection via `format` option CVE-2025-55294 CVSS 9.8 Critical
screenshot-desktop< 1.15.2 → fixed in 1.15.2 - Flowise OS command remote code execution CVE-2025-8943 CVSS 9.8 Critical
flowise<= 3.0.5 → no fix listed - @nestjs/devtools-integration: CSRF to Sandbox Escape Allows for RCE against JS Developers CVE-2025-54782 CVSS 9.4 Critical
@nestjs/devtools-integration<= 0.2.0 → fixed in 0.2.1 - Node-SAML SAML Signature Verification Vulnerability CVE-2025-54419 CVSS 10.0 Critical
@node-saml/node-saml<= 5.0.1 → fixed in 5.1.0;passport-saml<= 3.2.4 → no fix listed;@node-saml/passport-saml<= 5.0.1 → fixed in 5.1.0 - Node-SAML SAML Authentication Bypass CVE-2025-54369 CVSS 9.3 Critical
node-saml<= 3.1.2 → no fix listed;@node-saml/node-saml<= 5.0.1 → fixed in 5.1.0 - form-data uses unsafe random function in form-data for choosing boundary CVE-2025-7783 CVSS 9.4 Critical
form-data< 2.5.4 → fixed in 2.5.4;form-data>= 3.0.0, < 3.0.4 → fixed in 3.0.4;form-data>= 4.0.0, < 4.0.4 → fixed in 4.0.4 - NodeJS version of HAX CMS Has Insecure Default Configuration That Leads to Unauthenticated Access CVE-2025-54127 CVSS 9.3 Critical
@haxtheweb/haxcms-nodejs<= 11.0.6 → fixed in 11.0.7 - Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests CVE-2025-53620 CVSS 9.2 Critical
@builder.io/qwik-city< 1.13.0 → fixed in 1.13.0 - docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token CVE-2025-53624 CVSS 10.0 Critical
docusaurus-plugin-content-gists< 4.0.0 → fixed in 4.0.0 - mcp-remote exposed to OS command injection via untrusted MCP server connections CVE-2025-6514 CVSS 9.6 Critical
mcp-remote>= 0.0.5, < 0.1.16 → fixed in 0.1.16 - pbkdf2 silently disregards Uint8Array input, returning static keys CVE-2025-6547 CVSS 9.1 Critical
pbkdf2>= 1.0.0, <= 3.1.2 → fixed in 3.1.3 - pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos CVE-2025-6545 CVSS 9.1 Critical
pbkdf2>= 3.0.10, <= 3.1.2 → fixed in 3.1.3 - Taylored webhook validation vulnerabilities GHSA-8g98-m4j9-qww5
taylored>= 7.0.5, < 7.0.8 → fixed in 7.0.8 - MCP Inspector proxy server lacks authentication between the Inspector client and proxy CVE-2025-49596 CVSS 9.4 Critical
@modelcontextprotocol/inspector< 0.14.1 → fixed in 0.14.1 - @nx/azure-cache Vulnerable to Build Cache Poisoning via Untrusted Pull Requests CVE-2025-36852 CVSS 9.4 Critical
@nx/azure-cache<= 4.0.0 → no fix listed - billboard.js allows prototype pollution via the function generate CVE-2025-49223 CVSS 9.8 Critical
billboard.js< 3.15.1 → fixed in 3.15.1 - samlify SAML Signature Wrapping attack CVE-2025-47949 CVSS 9.9 Critical
samlify< 2.10.0 → fixed in 2.10.0 - Passport-wsfed-saml2 allows SAML Authentication Bypass via Signature Wrapping CVE-2025-46572 CVSS 9.3 Critical
passport-wsfed-saml2>= 3.0.5, <= 4.6.3 → fixed in 4.6.4 - Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2 CVE-2025-32965 CVSS 9.3 Critical
xrpl>= 4.2.1, < 4.2.5 → fixed in 4.2.5;xrpl= 2.14.2 → fixed in 2.14.3 - Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell` CVE-2025-31477 CVSS 9.3 Critical
tauri-plugin-shell< 2.2.1 → fixed in 2.2.1;@tauri-apps/plugin-shell< 2.2.1 → fixed in 2.2.1 - Authorization Bypass in Next.js Middleware CVE-2025-29927 CVSS 9.1 Critical
next>= 13.0.0, < 13.5.9 → fixed in 13.5.9;next>= 14.0.0, < 14.2.25 → fixed in 14.2.25;next>= 15.0.0, < 15.2.3 → fixed in 15.2.3; +1 more packages - xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment CVE-2025-29775 CVSS 9.3 Critical
xml-crypto>= 4.0.0, < 6.0.1 → fixed in 6.0.1;xml-crypto>= 3.0.0, < 3.2.1 → fixed in 3.2.1;xml-crypto< 2.1.6 → fixed in 2.1.6 - xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References CVE-2025-29774 CVSS 9.3 Critical
xml-crypto>= 4.0.0, < 6.0.1 → fixed in 6.0.1;xml-crypto>= 3.0.0, < 3.2.1 → fixed in 3.2.1;xml-crypto< 2.1.6 → fixed in 2.1.6 - Flowise allows arbitrary file write to RCE GHSA-8vvx-qvq9-5948 CVSS 10.0 Critical
flowise<= 2.2.7 → no fix listed - Flowise Pre-auth Arbitrary File Upload GHSA-h42x-xx2q-6v6g CVSS 9.3 Critical
flowise<= 2.2.7 → no fix listed - DocsGPT Allows Remote Code Execution CVE-2025-0868 CVSS 9.3 Critical
docsgpt>= 0.8.1, <= 0.12.0 → no fix listed - Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string) GHSA-vjh7-7g9h-fjfh CVSS 9.0 Critical
elliptic<= 6.6.0 → fixed in 6.6.1 - Inefficient Regular Expression Complexity in koa CVE-2025-25200 CVSS 9.2 Critical
koa>= 2.0.0, < 2.15.4 → fixed in 2.15.4;koa>= 3.0.0-alpha.0, < 3.0.0-alpha.3 → fixed in 3.0.0-alpha.3;koa>= 1.0.0, < 1.7.1 → fixed in 1.7.1; +1 more packages - Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc CVE-2025-24981 CVSS 9.3 Critical
@nuxtjs/mdc<= 0.13.2 → fixed in 0.13.3 - utils-extend Prototype Pollution CVE-2024-57077 CVSS 9.1 Critical
utils-extend<= 1.0.8 → no fix listed - Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening CVE-2025-24964 CVSS 9.6 Critical
vitest>= 1.0.0, < 1.6.1 → fixed in 1.6.1;vitest>= 2.0.0, < 2.1.9 → fixed in 2.1.9;vitest>= 3.0.0, < 3.0.5 → fixed in 3.0.5; +1 more packages - Mongoose search injection vulnerability CVE-2025-23061 CVSS 9.0 Critical
mongoose>= 8.0.0-rc0, < 8.9.5 → fixed in 8.9.5;mongoose>= 7.0.0-rc0, < 7.8.4 → fixed in 7.8.4;mongoose< 6.13.6 → fixed in 6.13.6 - path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability CVE-2024-56198 CVSS 9.3 Critical
path-sanitizer< 3.1.0 → fixed in 3.1.0 - Angular Expressions - Remote Code Execution when using locals CVE-2024-54152 CVSS 9.3 Critical
angular-expressions< 1.4.3 → fixed in 1.4.3 - hull.js Code Injection Vulnerability GHSA-q849-wxrc-vqrp
hull.js>= 0.2.2, < 1.0.10 → fixed in 1.0.10 - happy-dom allows for server side code to be executed by a <script> tag CVE-2024-51757 CVSS 9.3 Critical
happy-dom< 15.10.2 → fixed in 15.10.2 - DOMPurify vulnerable to tampering by prototype polution CVE-2024-48910 CVSS 9.3 Critical
dompurify< 2.4.2 → fixed in 2.4.2 - Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy CVE-2024-48914 CVSS 9.1 Critical
@vendure/asset-server-plugin< 2.3.3 → fixed in 2.3.3;@vendure/asset-server-plugin>= 3.0.0, < 3.0.5 → fixed in 3.0.5 - angular-base64-upload vulnerable to unauthenticated remote code execution CVE-2024-42640 CVSS 9.3 Critical
angular-base64-upload< 0.1.21 → fixed in 0.1.21 - JSONPath Plus Remote Code Execution (RCE) Vulnerability CVE-2024-21534 CVSS 9.3 Critical
org.webjars.npm:jsonpath-plus<= 6.0.1 → no fix listed;jsonpath-plus< 10.2.0 → fixed in 10.2.0 - Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal CVE-2024-47169 CVSS 9.0 Critical
agnai< 1.0.330 → fixed in 1.0.330 - Prototype pollution in izatop bunt CVE-2024-38989 CVSS 9.8 Critical
@bunt/app< 0.29.26 → fixed in 0.29.26 - Nuxt vulnerable to remote code execution via the browser when running the test locally CVE-2024-34344 CVSS 9.2 Critical
nuxt>= 3.4.0, < 3.12.4 → fixed in 3.12.4 - NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint CVE-2023-49785 CVSS 9.3 Critical
nextchat<= 2.11.2 → no fix listed - ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability CVE-2024-39309 CVSS 9.8 Critical
parse-server< 6.5.7 → fixed in 6.5.7;parse-server>= 7.0.0, < 7.1.0 → fixed in 7.1.0 - obx Prototype Pollution CVE-2024-36573 CVSS 9.3 Critical
@almela/obx< 0.0.4 → fixed in 0.0.4 - Jan path traversal vulnerability CVE-2024-36858 CVSS 9.8 Critical
@janhq/core<= 0.1.11 → no fix listed - Jan path traversal vulnerability CVE-2024-37273 CVSS 9.8 Critical
@janhq/core<= 0.1.11 → no fix listed - Blackprint @blackprint/engine Prototype Pollution issue CVE-2024-24294 CVSS 9.8 Critical
@blackprint/engine>= 0.8.12, < 0.9.2 → fixed in 0.9.2 - @valtimo/components exposes access token to form.io CVE-2024-34706 CVSS 9.8 Critical
@valtimo/components< 10.8.4 → fixed in 10.8.4;@valtimo/components>= 11.0.0, < 11.1.6 → fixed in 11.1.6;@valtimo/components>= 11.2.0, < 11.2.2 → fixed in 11.2.2 - lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability CVE-2024-32964 CVSS 9.0 Critical
@lobehub/chat<= 0.150.5 → fixed in 0.150.6 - libxmljs2 type confusion vulnerability when parsing specially crafted XML CVE-2024-34393 CVSS 9.2 Critical
libxmljs2<= 0.33.0 → no fix listed - libxmljs vulnerable to type confusion when parsing specially crafted XML CVE-2024-34392 CVSS 9.3 Critical
libxmljs<= 1.0.11 → no fix listed - libxmljs2 vulnerable to type confusion when parsing specially crafted XML CVE-2024-34394 CVSS 9.2 Critical
libxmljs2<= 0.35.0 → no fix listed - libxmljs vulnerable to type confusion when parsing specially crafted XML CVE-2024-34391 CVSS 9.2 Critical
libxmljs<= 1.0.11 → no fix listed - xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing CVE-2024-32962 CVSS 10.0 Critical
xml-crypto>= 4.0.0, < 6.0.0 → fixed in 6.0.0 - MySQL2 for Node Arbitrary Code Injection CVE-2024-21511 CVSS 9.8 Critical
mysql2< 3.9.7 → fixed in 3.9.7 - @andrei-tatar/nora-firebase-common Prototype Pollution vulnerability CVE-2024-30564 CVSS 9.8 Critical
@andrei-tatar/nora-firebase-common>= 1.0.41, < 1.12.3 → fixed in 1.12.3 - AWS Amplify CLI has incorrect trust policy management CVE-2024-28056 CVSS 9.8 Critical
@aws-amplify/cli< 12.10.1 → fixed in 12.10.1 - mysql2 Remote Code Execution (RCE) via the readCodeFor function CVE-2024-21508 CVSS 9.8 Critical
mysql2< 3.9.4 → fixed in 3.9.4 - MailDev Remote Code Execution CVE-2024-27448 CVSS 9.8 Critical
maildev>= 2.0.0-beta1, <= 2.1.0 → no fix listed - @thi.ng/paths Prototype Pollution vulnerability CVE-2024-29650 CVSS 9.3 Critical
@thi.ng/paths< 5.1.63 → fixed in 5.1.63 - Server crashes on invalid Cloud Function or Cloud Job name CVE-2024-29027 CVSS 9.0 Critical
parse-server< 6.5.5 → fixed in 6.5.5;parse-server>= 7.0.0-alpha.1, < 7.0.0-alpha.29 → fixed in 7.0.0-alpha.29 - HTTP Handling Vulnerability in the Bare server CVE-2024-27922 CVSS 9.8 Critical
@tomphttp/bare-server-node< 2.0.2 → fixed in 2.0.2 - JSONata expression can pollute the "Object" prototype CVE-2024-27307 CVSS 9.8 Critical
jsonata>= 1.4.0, < 1.8.7 → fixed in 1.8.7;jsonata>= 2.0.0, < 2.0.4 → fixed in 2.0.4 - ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection CVE-2024-27298 CVSS 10.0 Critical
parse-server< 6.5.0 → fixed in 6.5.0;parse-server>= 7.0.0-alpha.1, < 7.0.0-alpha.20 → fixed in 7.0.0-alpha.20 - Budibase affected by VM2 Constructor Escape Vulnerability GHSA-4g2x-vq5p-5vj6 CVSS 9.8 Critical
@budibase/server< 2.20.0 → fixed in 2.20.0 - @nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys GHSA-84c3-j8r2-mcm8 CVSS 9.1 Critical
@nfid/embed>= 0.10.0, < 0.10.1-alpha.6 → fixed in 0.10.1-alpha.6 - agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate` CVE-2024-1631 CVSS 9.1 Critical
@dfinity/identity>= 0.20.0-beta.0, < 1.0.1 → fixed in 1.0.1;@dfinity/auth-client>= 0.20.0-beta.0, < 1.0.1 → fixed in 1.0.1 - Stimulsoft Dashboard.JS directory traversal vulnerability CVE-2024-24398 CVSS 9.1 Critical
stimulsoft-dashboards-js< 2024.1.3 → fixed in 2024.1.3 - Ylianst MeshCentral Missing SSL Certificate Validation CVE-2023-51837 CVSS 9.8 Critical
meshcentral<= 1.1.16 → no fix listed - DeviceFarmer stf uses DES-ECB CVE-2023-51839 CVSS 9.1 Critical
@devicefarmer/stf<= 3.6.6 → no fix listed - @clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR) CVE-2024-22206 CVSS 9.0 Critical
@clerk/nextjs>= 4.7.0, < 4.29.3 → fixed in 4.29.3 - EverShop at risk to unauthorized access via weak HMAC secret CVE-2023-46943 CVSS 9.1 Critical
@evershop/evershop< 1.0.0-rc.9 → fixed in 1.0.0-rc.9 - Arbitrary remote code execution within `wrangler dev` Workers sandbox CVE-2023-7080 CVSS 9.3 Critical
wrangler>= 3.0.0, < 3.19.0 → fixed in 3.19.0;wrangler>= 2.0.0, < 2.20.2 → fixed in 2.20.2 - plotly.js prototype pollution vulnerability CVE-2023-46308 CVSS 9.8 Critical
plotly/plotly.js< 2.25.2 → fixed in 2.25.2;plotly.js< 2.25.2 → fixed in 2.25.2 - bsock uses weak hashing algorithms CVE-2023-50475 CVSS 9.1 Critical
bsock<= 0.1.11 → no fix listed - Pedroetb TTS-API OS Command Injection CVE-2019-25158 CVSS 9.8 Critical
tts-api< 2.2.0 → fixed in 2.2.0 - Cross-site Scripting in @spscommerce/ds-react GHSA-cfxh-frx4-9gjg
@spscommerce/ds-react>= 4.12.2, < 7.17.4 → fixed in 7.17.4 - Escalation of privileges in @sap/xssec CVE-2023-49583 CVSS 9.1 Critical
@sap/xssec< 3.6.0 → fixed in 3.6.0 - Code execution in evershop CVE-2023-46498 CVSS 9.8 Critical
@evershop/evershop< 1.0.0-rc.8 → fixed in 1.0.0-rc.8 - openssl npm package vulnerable to command execution CVE-2023-49210 CVSS 9.8 Critical
openssl<= 2.0.0 → no fix listed - crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard CVE-2023-46233 CVSS 9.1 Critical
crypto-js< 4.2.0 → fixed in 4.2.0 - crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard CVE-2023-46133 CVSS 9.1 Critical
crypto-es< 2.1.0 → fixed in 2.1.0 - Prototype Pollution in ali-security/mongoose GHSA-rc4v-99cr-pjcm CVSS 10.0 Critical
@seal-security/mongoose-fixed= 5.3.3 → fixed in 5.3.4 - Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code CVE-2023-45133 CVSS 9.3 Critical
@babel/traverse< 7.23.2 → fixed in 7.23.2;@babel/traverse>= 8.0.0-alpha.0, < 8.0.0-alpha.4 → fixed in 8.0.0-alpha.4;babel-traverse< 7.23.2 → no fix listed - Server-Side Request Forgery (SSRF) in vriteio/vrite CVE-2023-5572 CVSS 10.0 Critical
@vrite/sdk< 0.3.0 → fixed in 0.3.0 - Code injection in fsevents CVE-2023-45311 CVSS 9.8 Critical
fsevents<= 1.2.10 → fixed in 1.2.11