Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.1 CVE-2026-39315 Unhead is a document head and template manager. Prior to 2.1.13, useHeadSafe() is the composable that Nuxt's own documentation explicitly recommends … Unhead 2.1.13+ Fix from $1,6002026-04-09 HIGH 7.5 CVE-2026-35209 defu is software that allows uers to assign default properties recursively. Prior to version 6.1.5, applications that pass unsanitized user input (e.… Defu 6.1.5+ Fix from $1,9502026-04-06 MEDIUM 6.1 CVE-2026-31860 Unhead is a document head and template manager. Prior to 2.1.11, useHeadSafe() can be bypassed to inject arbitrary HTML attributes, including event h… Unhead 2.1.11+ Fix from $1,6002026-03-12 MEDIUM 6.1 CVE-2026-31873 Unhead is a document head and template manager. Prior to 2.1.11, The link.href check in makeTagSafe (safe.ts) uses String.includes(), which is case-s… Unhead 2.1.11+ Fix from $1,6002026-03-12 CRITICAL 9.8 CVE-2025-69874 nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary files outsi… Nanotar after 0.2.0 Fix from $2,3002026-02-11 CRITICAL 9.8 CVE-2025-54387 IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used t… Ipx 1.3.2 / 2.1.1+ Fix from $2,3002025-08-05