Browse / Node.js third-party modules

Node.js third-party modules

See its reports on the map

What gets reported to Node.js third-party modules

• Code Execution70
• Path Traversal63
• Cross-site Scripting49
• Denial of Service39
• Business Logic16
• Other weaknesses16

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Server-side Template Injection in lodash.js InformativeCode Injection · high
   8 votes
2. Lodash "difference" (possibly others) Function Denial of Service Through Unvalidated InputInformativeUncontrolled Resource Consumption · critical
   6 votes
3. [uppy] Stored XSS due to crafted SVG fileInformativeCross-site Scripting (XSS) - Stored · medium
   6 votes
4. stored xss in scrape-metadata when reading metadata from an html pageInformativeCross-site Scripting (XSS) - Stored · high
   5 votes
5. `indexFile` option passed as an argument to node-server can lead to arbitrary file readInformativePath Traversal · low
   3 votes
6. XSS in express-useragent through HTTP User-AgentInformativeCross-site Scripting (XSS) - Generic
   3 votes
7. Privilage escalation with malicious .npmrcInformativePrivilege Escalation · high
   3 votes
8. Command Injection Vulnerability in win-fork/win-spawn PackagesInformativeCommand Injection - Generic · high
   1 votes
9. npm packages that overlap with core node packagesInformativePhishing · high