Product

npm store2 vulnerabilities

1 published CVE affecting npm store2, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest npm store2 CVEs

Newest publication first

CVE-2024-57556 Cross Site Scripting vulnerability in store2
Published 2025-01-23

MediumCVSS 6.1 EPSS 0.36%

Cross Site Scripting vulnerability in nbubna store v.2.14.2 and before allows a remote attacker to execute arbitrary code via the store.deep.js component

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

npm store2 vulnerabilities

Latest npm store2 CVEs

CVE-2024-57556 Cross Site Scripting vulnerability in store2