Security Digest · page 6 of 6
Critical npm advisories (page 6)
503 critical advisories for npm packages since October 2023, newest first. Check your project with npm audit (or: npm ls <package>).
- Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code CVE-2023-45133 CVSS 9.3 Critical
@babel/traverse< 7.23.2 → fixed in 7.23.2;@babel/traverse>= 8.0.0-alpha.0, < 8.0.0-alpha.4 → fixed in 8.0.0-alpha.4;babel-traverse< 7.23.2 → no fix listed - Server-Side Request Forgery (SSRF) in vriteio/vrite CVE-2023-5572 CVSS 10.0 Critical
@vrite/sdk< 0.3.0 → fixed in 0.3.0 - Code injection in fsevents CVE-2023-45311 CVSS 9.8 Critical
fsevents<= 1.2.10 → fixed in 1.2.11