A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized parser input.
Node.js released updates fixing a critical DoS flaw caused by async_hooks stack crashes, tracked as CVE-2025-59466, impacting ...
The path traversal bug allows attackers to include arbitrary filesystem content in generated PDFs when file paths are not properly validated.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results