Browse CVEs by Ecosystem and Severity
5 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2026-45321KEV
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
CRITICAL
CVE-2025-68613KEV
n8n Vulnerable to Remote Code Execution via Expression Injection
CRITICAL
CVE-2025-55182KEV
React Server Components are Vulnerable to RCE
CRITICAL
CVE-2025-11953KEV
@react-native-community/cli has arbitrary OS command injection
MEDIUM
CVE-2020-11023KEV
Potential XSS vulnerability in jQuery