Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    renovate

    Summary

    ### Summary `qs

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, renovate

    Summary

    launch-editor allows users to open files with line numbers in editor from Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Vite is a frontend tooling framework for JavaScript

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe ...

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    undici's dump interceptor reads and discards a response body up to a configurable maximum size

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    undici's experimental WebSocketStream client crashes the whole Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    undici's retry handler can leave an already-exposed response body pending forever

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    tmp is a temporary file and directory creator for node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    tmp is a temporary file and directory creator for node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    source-map-js through 1

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    smol-toml is a small, fast, and correct TOML parser and serializer

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    shell-quote prior to 1

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs-cli is the command line add-on for protobuf

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs-cli is the command line add-on for protobuf

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    protobufjs compiles protobuf definitions into JavaScript (JS) functions

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    nanoid (Nano ID) before 3

    Published
    30 Oct 2026
    Packages

    n8n, renovate

    Summary

    nanoid (Nano ID) before 5

    Published
    30 Oct 2026
    Packages

    renovate, renovate, renovate

    Summary

    Vitest is a testing framework powered by Vite

    Published
    30 Oct 2026
    Packages

    argo-workflows, renovate

    Summary

    linkify-it is a links recognition library with full Unicode support

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    linkify-it is a links recognition library with full Unicode support

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    weakness has been identified in jsonata-js jsonata up to 2

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    JSONata is a JSON query and transformation language

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    fast-uri is a dependency-free RFC 3986 URI parser for Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    fast-uri serializes the port component of a URI without validating it

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    fast-uri is a URI parser for Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    fast-uri is a URI parser for Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    fast-uri is a URI parser for Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    fast-uri before 4

    Published
    30 Oct 2026
    Packages

    argo-workflows, renovate

    Summary

    Impact: fast-uri versions from 2

    Published
    30 Oct 2026
    Packages

    argo-workflows, renovate

    Summary

    fast-uri versions 2

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    opentelemetry-js is the OpenTelemetry JavaScript Client

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Browserslist is a configuration tool for sharing target browsers and Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Browserslist is a configuration tool for sharing target browsers and Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Security fix for GHSA-p634-w6r4-rjp2 applied in: renovate 43.181.2-r1

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Security fix for GHSA-c6fg-446q-cg94 applied in: renovate 43.181.2-r1

    Published
    30 Oct 2026