Components Vulnerabilities Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

sonatype-2025-005359 | Security Details | Sonatype Guide | Sonatype Guide

Vulnerabilities

sonatype-2025-005359

sonatype-2025-005359

NPM Security Holding Packages - Thu Nov 13 2025

Published Nov 13, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-113721.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-115527.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-116360.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-126802.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127732.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-131041.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-132451.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-132881.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-49777.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-52487.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-52631.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-53044.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-59398.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-62247.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-63572.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-64281.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-64328.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-72182.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-74789.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-85190.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-86020.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-88353.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-88982.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-90934.json

CVSS ScoreCritical

10.0

sonatype-2025-005359 Security Details

CVE ID: sonatype-2025-005359
CWE: N/A
CVE Description: NPM Security Holding Packages - Thu Nov 13 2025
Published: Nov 13, 2025
CVSS Score & Severity: 10.0Critical
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score: 0%
Malware: malware
KEV Status: Not in KEV Catalog: No known exploits
Affected Ecosystems: affected
Source: Sonatype
References: https://help.sonatype.com/en/sonatype-malware-data.htmlTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-113721.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-115527.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-116360.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-126802.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127732.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-131041.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-132451.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-132881.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-49777.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-52487.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-52631.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-53044.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-59398.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-62247.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-63572.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-64281.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-64328.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-72182.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-74789.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-85190.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-86020.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-88353.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-88982.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-90934.jsonTHIRD_PARTY