Vulnerabilities
Summary — last 7 days
New vulnerabilities5,380▲ 2,536 vs. last week
Critical / high2,999▲ 1,644 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)180▼ 26 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.5) | 1.0% | — | Argencoders-notevil Project Argencoders-notevilNotevil Project Notevil | 3/17/2022 | 6/17/2026 | This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. **Note:** This vulnerability derives from… |