Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
mise mise permits untrusted local configuration to override default shell arguments High Risk 7.8 6 hours ago 6 hours ago
hardhat-promised Malicious code in hardhat-promised (npm) Unknown 7 days ago 7 days ago
promises-dotenv3 Malicious code in promises-dotenv3 (npm) Unknown 11 days ago 11 days ago
dotenv-promises Malicious code in dotenv-promises (npm) Unknown 11 days ago 11 days ago
roblox-lua-promise Malicious code in roblox-lua-promise (npm) Unknown 3 months ago 1 month ago
chai-as-promised-plus Malicious code in chai-as-promised-plus (npm) Unknown 2 months ago 2 months ago
opencode-optimised-toolings Malicious code in opencode-optimised-toolings (npm) Unknown 2 months ago 2 months ago
mise mise HTTP backend uses raw version path for install symlink destination Medium Risk 5.5 3 months ago 2 months ago
mise Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass) Critical 9.6 3 months ago 2 months ago
crypto-promiser Malicious code in crypto-promiser (npm) Unknown 3 months ago 3 months ago
chai-promised-test Malicious code in chai-promised-test (npm) Unknown 3 months ago 3 months ago
chain-promised-await Malicious code in chain-promised-await (npm) Unknown 7 months ago 3 months ago
js-crypto-promise Malicious code in js-crypto-promise (npm) Unknown 4 months ago 3 months ago
mise Mise's local credential_command executes untrusted config Medium Risk 6.3 3 months ago 3 months ago
mise Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository High Risk 8.6 3 months ago 3 months ago
mise Local settings bypass config trust checks High Risk 7.7 6 months ago 4 months ago
crypto-promise-js Malicious code in crypto-promise-js (npm) Unknown 4 months ago 4 months ago
picnic-react-mise-en-place Malicious code in picnic-react-mise-en-place (npm) Unknown 4 months ago 4 months ago
nf-promise-state-machine Malicious code in nf-promise-state-machine (npm) Unknown 6 months ago 6 months ago
dotenv-node-promised Malicious code in dotenv-node-promised (npm) Unknown 7 months ago 6 months ago
chain-promised-cli Malicious code in chain-promised-cli (npm) Unknown 7 months ago 6 months ago
chai-promised-tools Malicious code in chai-promised-tools (npm) Unknown 7 months ago 6 months ago
chain-promised Malicious code in chain-promised (npm) Unknown 7 months ago 6 months ago
chain-promised-async Malicious code in chain-promised-async (npm) Unknown 7 months ago 6 months ago
chain-cli-promised Malicious code in chain-cli-promised (npm) Unknown 7 months ago 6 months ago
chai-chai-chain-promised Malicious code in chai-chai-chain-promised (npm) Unknown 7 months ago 6 months ago
chai-promised-async Malicious code in chai-promised-async (npm) Unknown 7 months ago 6 months ago
chai-await-promised Malicious code in chai-await-promised (npm) Unknown 7 months ago 6 months ago
chai-promised-await Malicious code in chai-promised-await (npm) Unknown 7 months ago 6 months ago
chai-promised-cli Malicious code in chai-promised-cli (npm) Unknown 7 months ago 6 months ago
chai-promised-plugin Malicious code in chai-promised-plugin (npm) Unknown 7 months ago 6 months ago
chai-promised-chain Malicious code in chai-promised-chain (npm) Unknown 10 months ago 7 months ago
chai-promised-chains Malicious code in chai-promised-chains (npm) Unknown 9 months ago 7 months ago
chai-promise-chain Malicious code in chai-promise-chain (npm) Unknown 10 months ago 7 months ago
chai-promise-tools Malicious code in chai-promise-tools (npm) Unknown 8 months ago 7 months ago
chai-async-promised Malicious code in chai-async-promised (npm) Unknown 8 months ago 7 months ago
promise-probe promise-probe OS command injection vulnerability Critical 9.8 4 years ago 7 months ago
mised-discordjs-selfbot-v14 Malicious code in mised-discordjs-selfbot-v14 (npm) Unknown 8 months ago 8 months ago
arcturus-phenomic-glaciology-promise Malicious code in arcturus-phenomic-glaciology-promise (npm) Unknown 11 months ago 11 months ago
array-stack-awk-emulate-promise Malicious code in array-stack-awk-emulate-promise (npm) Unknown 11 months ago 11 months ago
beta-key-promise-socket-file Malicious code in beta-key-promise-socket-file (npm) Unknown 11 months ago 11 months ago
biosignature-jasmine-solis-promise Malicious code in biosignature-jasmine-solis-promise (npm) Unknown 11 months ago 11 months ago
borealis-promise-spinner-ora Malicious code in borealis-promise-spinner-ora (npm) Unknown 11 months ago 11 months ago
bulma-promise-redgiant-xenobiology Malicious code in bulma-promise-redgiant-xenobiology (npm) Unknown 11 months ago 11 months ago
byte-runtime-easy-promise-transpile Malicious code in byte-runtime-easy-promise-transpile (npm) Unknown 11 months ago 11 months ago
cloud-user-static-promise-stub Malicious code in cloud-user-static-promise-stub (npm) Unknown 11 months ago 11 months ago
cluster-sirius-promise-neutrino Malicious code in cluster-sirius-promise-neutrino (npm) Unknown 11 months ago 11 months ago
config-pipe-promise-start Malicious code in config-pipe-promise-start (npm) Unknown 11 months ago 11 months ago
encode-promise-cold-awk-easy Malicious code in encode-promise-cold-awk-easy (npm) Unknown 11 months ago 11 months ago
figures-mantle-docusaurus-promise Malicious code in figures-mantle-docusaurus-promise (npm) Unknown 11 months ago 11 months ago