Vulnerabilities

TI-2025-36893 CVE-2025-59331 · GHSA-frh7-2f84-v9mw

[email protected] contains malware after npm account takeover

MEDIUM 44

is-arrayish checks if an object can be used like an Array.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00426 Published 2025-09-15 Fixed in 0.3.4 CWE-506

TI-2025-36892 CVE-2025-59330 · GHSA-6jp5-hh4c-8c5h

MEDIUM 44

error-ex allows error subclassing and stack customization.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00426 Published 2025-09-15 Fixed in 1.3.4 CWE-506

TI-2025-36766 CVE-2025-59162 · GHSA-pxx3-g568-hxr4

MEDIUM 44

color-convert provides plain color conversion functions in JavaScript.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00426 Published 2025-09-15 Fixed in 3.1.2 CWE-506

TI-2025-36747 CVE-2025-59142 · GHSA-286p-vc9p-p5qv

MEDIUM 44

color-string is a parser and generator for CSS color strings.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00426 Published 2025-09-15 Fixed in 2.1.2 CWE-506

TI-2025-36748 CVE-2025-59143 · GHSA-qrmh-qg46-72pp

MEDIUM 44

color is a Javascript color conversion and manipulation library.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00426 Published 2025-09-15 Fixed in 5.0.2 CWE-506

TI-2025-36746 CVE-2025-59141 · GHSA-9g9j-rggx-7fmg

MEDIUM 44

simple-swizzle swizzles function arguments.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00406 Published 2025-09-15 Fixed in 0.2.4 CWE-506

TI-2025-36745 CVE-2025-59140 · GHSA-53mq-f4w3-f7qv

MEDIUM 44

backlash parses collected strings with escapes.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00406 Published 2025-09-15 Fixed in 0.2.2 CWE-506