Openjsf

11 CVEs published in the last four months. Exploited flaws first.

Critical1

High10

Medium0

Exploited (KEV)0

All recent CVEs

CVE	CVSS	Severity	Product	Summary	Published
CVE-2026-25244	9.8	critical	webdriverio	WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and	162d ago
CVE-2026-10796	7.5	high	node version manager	nvm (Node Version Manager) through 0.40.4 executes arbitrary commands from version strings supplied by the configu	145d ago
CVE-2026-13676	7.5	high	fast-uri	fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.	120d ago
CVE-2026-16221	7.5	high	fast-uri	Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.	100d ago
CVE-2026-18446	7.5	high	fast-uri	fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a	88d ago
CVE-2026-75899	7.5	high	fast-uri	fast-uri is a URI parser for Node.js.	64d ago
CVE-2026-75931	7.5	high	fast-uri	fast-uri is a URI parser for Node.js.	64d ago
CVE-2026-75975	7.5	high	fast-uri	fast-uri is a URI parser for Node.js.	64d ago
CVE-2026-76172	7.5	high	fast-uri	fast-uri is a URI parser for Node.js.	64d ago
CVE-2026-84292	7.5	high	fast-uri	fast-uri serializes the port component of a URI without validating it.	55d ago
CVE-2026-84394	7.5	high	fast-uri	fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error.	55d ago

Filter the full tracker by Openjsf →