node-modules
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| compressing | 2 | – | Apr 21, 2026 |
| urllib | 1 | – | Aug 25, 2026 |
Exploited and recent CVEs
- CVE-2026-55553 urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage 0.7%
- CVE-2026-40931 Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing 0.3%
- CVE-2026-24884 Compressing Vulnerable to Arbitrary File Write via Symlink Extraction 0.3%