Components
Vulnerabilities
Pricing
MCP
API
Docs
Sign up
Login
@cypress-bin/binary-win32-x64 13.15.1 | Vu… | Sonatype Guide
npm
@cypress-bin/binary-win32-x64
13.15.1
@cypress-bin/binary-win32-x64 13.15.1
Published
Oct 25, 2024
•
Policy
compliance
npm Registry
Developer Trust Score
N/A
Recommended Version:
x.y.z
Latest version with 0 known vulnerabilities that meets your policy.
Compare Versions
Overview
Overview
Versions
150
Versions
150
Vulnerabilities
79
Vulnerabilities
79
Dependencies
0
Dependencies
0
Reset filters
Severity
Critical
(8)
High
(0)
Medium
(0)
Low
(0)
CVSS Score
0.0
10.0
EPSS Score
0.0
1.0
Malware
KEV Status
Published
Filter
Sort: Published (Newest first)
9.8
CVE-2026-27699
The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2.0 in the `downloadToDir()` method. A malicious FTP server can send directory listings with filenames containing path traversal sequences (`../`) that cause files to be written outside the intended download directory. Version 5.2.0 patches the issue.
affected
Severity
Critical
Published
Feb 26, 2026
9.1
CVE-2025-9288
Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
affected
Severity
Critical
Published
9.4
CVE-2025-7783
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.
affected
Severity
Critical
9.1
CVE-2025-6545
Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js. This issue affects pbkdf2: from 3.0.10 through 3.1.2.
affected
Severity
Critical
Published
9.0
sonatype-2025-000528
elliptic - Exposure of Sensitive Information to an Unauthorized Actor
affected
Severity
Critical
Published
Feb 13, 2025
9.8
CVE-2023-42282
The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.
affected
Severity
Critical
Published
9.4
sonatype-2021-0459
unset-value - Prototype Pollution
affected
Severity
Critical
Published
Apr 19, 2021
9.8
sonatype-2021-0457
filelist, utilities - Prototype Pollution
affected
Severity
Critical
Published
Apr 19, 2021
Aug 21, 2025
Published
Jul 23, 2025
Jun 24, 2025
Feb 12, 2024
