Security

Vulnerabilities

Real-time alerts of vulnerabilities across monitored open-source ecosystems.

Ecosystems covered

13

Alpine, Alpm, Cargo & more

Total vulnerabilities tracked

1,424

From global vulnerability databases

Exclude malware
Package ash

5.2

Medium

Ecosystem: Npm

Package: ethers-hash

5.2

Medium

Ecosystem: Npm

Package: unleash-js

5.2

Medium

Ecosystem: Npm

Package: mcp-dashboards-shared

1.3

Low

Ecosystem: Debian

Package: libcrypt-saltedhash-perl

1.7

Low

Ecosystem: Debian

Package: libcrypt-saltedhash-perl

5.2

Medium

Ecosystem: Npm

Package: crypto-hash-sdk

5.2

Medium

Ecosystem: Npm

Package: @apps-home-dashboard/events

5.2

Medium

Ecosystem: PyPI

Package: crypto-hash-utils

5.4

Medium

Ecosystem: Go

Package: github.com/hashicorp/nomad-driver-exec2

5.4

Medium

Ecosystem: Go

Package: github.com/hashicorp/nomad

7.7

High

Ecosystem: Go

Package: github.com/hashicorp/nomad

5.9

Medium

Ecosystem: PyPI

Package: flash-attn

7.5

High

Ecosystem: Packagist

Package: prestashop/prestashop

FLAT-5QLY9 (CVE-2026-38361)

Lack of data validation In dash-uploader

9.1

Critical

Ecosystem: PyPI

Package: dash-uploader

3.8

Low

Ecosystem: Go

Package: github.com/kubetail-org/kubetail/modules/dashboard

6.3

Medium

Ecosystem: Go

Package: github.com/hashicorp/boundary

FLAT-BO8VP (CVE-2026-42483)

Out-of-bounds read In hashcat

7.4

High

Ecosystem: Debian

Package: hashcat

5.6

Medium

Ecosystem: Debian

Package: hashcat

FLAT-LUV9S (CVE-2026-42484)

Out-of-bounds read In hashcat

7.6

High

Ecosystem: Debian

Package: hashcat

FLAT-DTQJA (GHSA-mqq7-wxx5-mp8h)

Lack of data validation In prestashop/ps_checkout

2.7

Low

Ecosystem: Packagist

Package: prestashop/ps_checkout

7.7

High

Ecosystem: Go

Package: github.com/hashicorp/vault

4.3

Medium

Ecosystem: Go

Package: github.com/hashicorp/vault

1.7

Low

Ecosystem: Go

Package: github.com/hashicorp/vault

5.9

Medium

Ecosystem: Go

Package: github.com/hashicorp/vault

5.2

Medium

Ecosystem: Npm

Package: conventional-changelog-dash

5.2

Medium

Ecosystem: Npm

Package: @athena-ui-components/dashboard-widget

5.2

Medium

Ecosystem: Npm

Package: upstartadmindashboard-

5.2

Medium

Ecosystem: Npm

Package: @cash-web/no-hardcoded-font-styles

7.7

High

Ecosystem: Go

Package: github.com/hashicorp/go-getter

5.1

Medium

Ecosystem: Alpm

Package: squashfs-tools

4.8

Medium

Ecosystem: Alpm

Package: squashfs-tools

FLAT-0JWXY (CVE-2014-6277)

Lack of data validation In bash

1.3

Low

Ecosystem: Alpm

Package: bash

5.2

Medium

Ecosystem: Npm

Package: strapi-plugin-blurhash

FLAT-GDHXG (GHSA-3hfp-gqgh-xc5g)

Use of software with malware In @lightdash/cli

6.1

Medium

Ecosystem: Npm

Package: @lightdash/cli

6.1

Medium

Ecosystem: Npm

Package: lodash-es

FLAT-12T0Z (CVE-2026-2950)

Prototype Pollution In lodash.unset

2.7

Low

Ecosystem: Npm

Package: lodash.unset

FLAT-DEJF9 (CVE-2026-34593)

Improper resource allocation In ash

4.6

Medium

Ecosystem: Hex

Package: ash

5.7

Medium

Ecosystem: Packagist

Package: prestashop/prestashop

1.0

Low

Ecosystem: Packagist

Package: prestashop/prestashop

5.2

Medium

Ecosystem: PyPI

Package: hash-utils-py

FLAT-QT1XW (MAL-2026-1956)

Use of software with malware In llmstash

5.2

Medium

Ecosystem: Npm

Package: llmstash

5.2

Medium

Ecosystem: Npm

Package: client-hash-sdk

5.2

Medium

Ecosystem: Npm

Package: dns-filter-dashboard

5.2

Medium

Ecosystem: Npm

Package: @upstashed/context7-mcp

5.2

Medium

Ecosystem: Npm

Package: twitch.dashboard-v2.core

3.6

Low

Ecosystem: Go

Package: github.com/hashicorp/consul

1.7

Low

Ecosystem: Packagist

Package: drupal/ajax_dashboard

5.2

Medium

Ecosystem: Npm

Package: loadash-lint

5.2

Medium

Ecosystem: PyPI

Package: hashtools32

3.8

Low

Ecosystem: Npm

Package: parse-dashboard

5.7

Medium

Ecosystem: Npm

Package: parse-dashboard

7.5

High

Ecosystem: Npm

Package: parse-dashboard

8.9

High

Ecosystem: Npm

Package: parse-dashboard

5.2

Medium

Ecosystem: PyPI

Package: cryptowallethash

5.2

Medium

Ecosystem: Npm

Package: @hashicorp-internal/vault-reporting

5.2

Medium

Ecosystem: Npm

Package: 0xhash-utils

FLAT-8KGF8 (JS-LODASHSET-1320032)

Prototype Pollution In lodash.set

0.6

Low

Ecosystem: Npm

Package: lodash.set

2.7

Low

Ecosystem: Packagist

Package: prestashop/prestashop

5.2

Medium

Ecosystem: Npm

Package: chai-as-hashed

5.2

Medium

Ecosystem: PyPI

Package: cflashfiles

5.2

Medium

Ecosystem: Npm

Package: pay-by-bank-dashboard-server

FLAT-CT3XH (CVE-2025-13465)

Prototype Pollution In lodash.unset

5.0

Medium

Ecosystem: Npm

Package: lodash.unset

5.2

Medium

Ecosystem: PyPI

Package: ziphash

5.2

Medium

Ecosystem: Npm

Package: parashaxmgflhg

5.2

Medium

Ecosystem: Npm

Package: kashif-mallah-fca

5.7

Medium

Ecosystem: Maven

Package: com.datapipe.jenkins.plugins:hashicorp-vault-plugin

FLAT-TPW9Z (CVE-2025-65548)

Improper resource allocation In cashu

7.9

High

Ecosystem: PyPI

Package: cashu

5.2

Medium

Ecosystem: Npm

Package: gs-uitk-lodash

5.2

Medium

Ecosystem: Npm

Package: tensorfi-secure-hash

5.2

Medium

Ecosystem: Npm

Package: eslint-lodash

6.0

Medium

Ecosystem: Debian

Package: mistral-dashboard

5.2

Medium

Ecosystem: Npm

Package: dashboard-empty-state

5.2

Medium

Ecosystem: Npm

Package: @posthog/siphash

5.2

Medium

Ecosystem: Npm

Package: @ensdomains/eth-ens-namehash

5.2

Medium

Ecosystem: Npm

Package: @ensdomains/content-hash

FLAT-6H0EE (MAL-2025-190628)

Use of software with malware In hash-guard

5.2

Medium

Ecosystem: Npm

Package: hash-guard

FLAT-MF43Z (MAL-2025-190617)

Use of software with malware In doordash-ui

5.2

Medium

Ecosystem: Npm

Package: doordash-ui

8.1

High

Ecosystem: Go

Package: github.com/hashicorp/terraform-provider-vault

5.2

Medium

Ecosystem: Npm

Package: cat-void-bash-cache-bundle

5.2

Medium

Ecosystem: Npm

Package: good-chi-nu-info-hash

5.2

Medium

Ecosystem: Npm

Package: auriga-parcel-soap-nashira

5.2

Medium

Ecosystem: Npm

Package: hash-uglify-cluster-info-orchestrate

5.2

Medium

Ecosystem: Npm

Package: serialize-bash-authenticate-execute-cloud

5.2

Medium

Ecosystem: Npm

Package: hugo-nashira-boson-passport

5.2

Medium

Ecosystem: Npm

Package: cron-kappa-bash-serialize-beta

5.2

Medium

Ecosystem: Npm

Package: cosmos-yonder-grunt-nashira

5.2

Medium

Ecosystem: Npm

Package: brane-nashira-cluster-spawn

5.2

Medium

Ecosystem: Npm

Package: sun-cold-upsilon-deploy-hash

5.2

Medium

Ecosystem: Npm

Package: taphonomy-commitlint-kardashevscale-loglevel

5.2

Medium

Ecosystem: Npm

Package: catch-bash-mu-daemon-slow

5.2

Medium

Ecosystem: Npm

Package: analyze-abstract-hash-code-iota

5.2

Medium

Ecosystem: Npm

Package: electron-tool-nashira-gemini

5.2

Medium

Ecosystem: Npm

Package: nashira-betelgeuse-astrometry-callback

5.2

Medium

Ecosystem: Npm

Package: try-alert-hash-catch-index

5.2

Medium

Ecosystem: Npm

Package: planetology-borealis-nashira-celeste

5.2

Medium

Ecosystem: Npm

Package: lint-antares-luna-nashira

5.2

Medium

Ecosystem: Npm

Package: fork-crust-filament-kardashevscale

5.2

Medium

Ecosystem: Npm

Package: uglify-bash-index-beta-interface

5.2

Medium

Ecosystem: Npm

Package: fomalhaut-nashira-webdriverio-init

5.2

Medium

Ecosystem: Npm

Package: daemon-epsilon-hash-link-slow