Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
h3 H3: Unbounded Chunked Cookie Count in Session Cleanup Loop may Lead to Denial of Service Medium Risk 5.3 6 months ago 7 hours ago
h3 H3 has an Open Redirect via Protocol-Relative Path in redirectBack() Referer Validation Medium Risk 5.4 6 months ago 21 days ago
h3 h3 has a Path Traversal via Percent-Encoded Dot Segments in serveStatic Allows Arbitrary File Read Medium Risk 5.9 6 months ago 21 days ago
h3 h3: SSE Event Injection via Unsanitized Carriage Return (`\r`) in EventStream Data and Comment Fields (Bypass of CVE Fix) Medium Risk 5.3 6 months ago 21 days ago
h3 h3: Double Decoding in `serveStatic` Bypasses `resolveDotSegments` Path Traversal Protection via `%252e%252e` Medium Risk 5.9 6 months ago 21 days ago
h3-codex Malicious code in h3-codex (npm) Unknown 1 month ago 27 days ago
h3client Malicious code in h3client (npm) Unknown 1 month ago 27 days ago
3layerdipstackbgh33k Malicious code in 3layerdipstackbgh33k (npm) Unknown 1 month ago 1 month ago
secure-test-browser-h3vxp8o4 Malicious code in secure-test-browser-h3vxp8o4 (npm) Unknown 1 month ago 1 month ago
classlink-csh3v6cf Malicious code in classlink-csh3v6cf (npm) Unknown 1 month ago 1 month ago
github.com/zxh326/kite Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources Medium Risk 6.5 2 months ago 1 month ago
github.com/zxh326/kite Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources in github.com/zxh326/kite Unknown 1 month ago 1 month ago
bmgki3g6fh3 Malicious code in bmgki3g6fh3 (npm) Unknown 1 month ago 1 month ago
hello-world-test-mh3 Malicious code in hello-world-test-mh3 (PyPI) Unknown 2 months ago 1 month ago
rfetch3 Malicious code in rfetch3 (RubyGems) Unknown 2 months ago 2 months ago
zrgvsearch36dd Malicious code in zrgvsearch36dd (RubyGems) Unknown 2 months ago 2 months ago
github.com/zxh326/kite Kite has an authenticated cluster RBAC bypass in /api/v1/overview Medium Risk 4.3 2 months ago 2 months ago
github.com/zxh326/kite Kite has an authenticated cluster RBAC bypass in /api/v1/overview in github.com/zxh326/kite Unknown 2 months ago 2 months ago
@43uh3ig43/telemetry-client Malicious code in @43uh3ig43/telemetry-client (npm) Unknown 4 months ago 2 months ago
h3-next Malicious code in h3-next (npm) Unknown 5 months ago 5 months ago
h3 h3 v1 has Request Smuggling (TE.TE) issue High Risk 8.9 8 months ago 5 months ago
h3 h3: Missing Path Segment Boundary Check in `mount()` Causes Middleware Execution on Unrelated Prefix-Matching Routes Low Risk 3.7 6 months ago 6 months ago
initial-path32 Malicious code in initial-path32 (npm) Unknown 6 months ago 6 months ago
h3 h3 has a middleware bypass with one gadget High Risk 7.4 6 months ago 6 months ago
h3 h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fields High Risk 7.5 6 months ago 6 months ago
h3 h3 has an observable timing discrepancy in basic auth utils Medium Risk 5.9 6 months ago 6 months ago
sturdyfetch3 Malicious code in sturdyfetch3 (npm) Unknown 9 months ago 9 months ago
asdfgh33 Malicious code in asdfgh33 (npm) Unknown 9 months ago 9 months ago
asdfgh3 Malicious code in asdfgh3 (npm) Unknown 9 months ago 9 months ago
miftah-miftah3 Malicious code in miftah-miftah3 (npm) Unknown 10 months ago 10 months ago
miftah-miftah30 Malicious code in miftah-miftah30 (npm) Unknown 10 months ago 10 months ago
miftah1-miftah30 Malicious code in miftah1-miftah30 (npm) Unknown 10 months ago 10 months ago
miftah20-miftah3 Malicious code in miftah20-miftah3 (npm) Unknown 10 months ago 10 months ago
miftah3-miftah Malicious code in miftah3-miftah (npm) Unknown 10 months ago 10 months ago
teagod-rich3 Malicious code in teagod-rich3 (npm) Unknown 10 months ago 10 months ago
irma-lodeh33-sluey Malicious code in irma-lodeh33-sluey (npm) Unknown 10 months ago 10 months ago
irma-teh37-sumpek Malicious code in irma-teh37-sumpek (npm) Unknown 10 months ago 10 months ago
mulyono-mieaceh38-sluey Malicious code in mulyono-mieaceh38-sluey (npm) Unknown 10 months ago 10 months ago
mulyono-teh38-sluey Malicious code in mulyono-teh38-sluey (npm) Unknown 10 months ago 10 months ago
putri-lodeh36-sluey Malicious code in putri-lodeh36-sluey (npm) Unknown 10 months ago 10 months ago
utomo-teh37-sluey Malicious code in utomo-teh37-sluey (npm) Unknown 10 months ago 10 months ago
wati-teh37-sumpek Malicious code in wati-teh37-sumpek (npm) Unknown 10 months ago 10 months ago
wibowo-teh36-sluey Malicious code in wibowo-teh36-sluey (npm) Unknown 10 months ago 10 months ago
yanti-teh35-sluey Malicious code in yanti-teh35-sluey (npm) Unknown 10 months ago 10 months ago
cici-mieaceh36-riris Malicious code in cici-mieaceh36-riris (npm) Unknown 10 months ago 10 months ago
dewi-lodeh38-riris Malicious code in dewi-lodeh38-riris (npm) Unknown 10 months ago 10 months ago
eka-lodeh35-riris Malicious code in eka-lodeh35-riris (npm) Unknown 10 months ago 10 months ago
fajar-teh31-riris Malicious code in fajar-teh31-riris (npm) Unknown 10 months ago 10 months ago
gilang-mieaceh34-riris Malicious code in gilang-mieaceh34-riris (npm) Unknown 10 months ago 10 months ago
gilang-teh39-riris Malicious code in gilang-teh39-riris (npm) Unknown 10 months ago 10 months ago