---
title: "Critical npm advisories (page 6)"
url: https://erroneo.us/security/ecosystem/npm/6/
description: "All 503 critical GitHub-reviewed npm security advisories since October 2023, newest first, with vulnerable ranges and fixed versions. Page 6 of 6."
type: ecosystem
section: "Security Digest"
date_modified: 2023-10-16
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Critical npm advisories (page 6)

- 2023-10-16 [CVE-2023-45133](https://erroneo.us/security/cve/CVE-2023-45133/index.md) Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code — @babel/traverse < 7.23.2 → 7.23.2; @babel/traverse >= 8.0.0-alpha.0, < 8.0.0-alpha.4 → 8.0.0-alpha.4; babel-traverse < 7.23.2 → no fix
- 2023-10-13 [CVE-2023-5572](https://erroneo.us/security/cve/CVE-2023-5572/index.md) Server-Side Request Forgery (SSRF) in vriteio/vrite — @vrite/sdk < 0.3.0 → 0.3.0
- 2023-10-06 [CVE-2023-45311](https://erroneo.us/security/cve/CVE-2023-45311/index.md) Code injection in fsevents — fsevents <= 1.2.10 → 1.2.11

Pages: https://erroneo.us/security/ecosystem/npm/index.md · https://erroneo.us/security/ecosystem/npm/2/index.md · https://erroneo.us/security/ecosystem/npm/3/index.md · https://erroneo.us/security/ecosystem/npm/4/index.md · https://erroneo.us/security/ecosystem/npm/5/index.md · https://erroneo.us/security/ecosystem/npm/6/index.md

---
Source page: https://erroneo.us/security/ecosystem/npm/6/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt