Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2026-33671 Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReD… Picomatch 2.3.2 / 3.0.2+ Fix from $1,9502026-03-26 MEDIUM 5.3 CVE-2026-33672 Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affectin… Picomatch 2.3.2 / 3.0.2+ Fix from $1,6002026-03-26 HIGH 7.5 CVE-2025-57328 toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A P… Toggle Array after 1.0.1 Fix from $1,9502025-09-24 HIGH 7.5 CVE-2025-25975 An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function Parse Git Config No fix yet Fix from $1,9502025-03-12 HIGH 7.5 CVE-2024-4068 The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `… Braces 3.0.3+ Fix from $1,9502024-05-14 MEDIUM 5.3 CVE-2024-4067 The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.br… Micromatch 4.0.8+ Fix from $1,6002024-05-14