Vulnerabilities

Summary — last 7 days

New vulnerabilities2,726▼ 504 vs. last week
Critical / high1,294▼ 196 vs. last week
New active exploitation (KEV)4▼ 5 vs. last week
Unscored (no CVSS)229▼ 273 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)2.2%—Date-and-time Project Date-and-time12/28/20206/17/2026
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2.
Orbitaley — Vulnerabilities