Components Vulnerabilities Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

sonatype-2025-005410 | Security Details | Sonatype Guide | Sonatype Guide

Vulnerabilities

sonatype-2025-005410

sonatype-2025-005410

NPM Security Holding Packages - Thu Nov 13 2025

Published Nov 13, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-107601.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-108357.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-113073.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-115188.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-115777.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-120072.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-121512.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-123814.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-130422.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54229.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54527.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-55428.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-56604.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-57206.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-58971.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-59886.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-64371.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-75196.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-75317.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-89976.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-90608.json

CVSS ScoreCritical

10.0

sonatype-2025-005410 Security Details

CVE ID: sonatype-2025-005410
CWE: N/A
CVE Description: NPM Security Holding Packages - Thu Nov 13 2025
Published: Nov 13, 2025
CVSS Score & Severity: 10.0Critical
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score: 0%
Malware: malware
KEV Status: Not in KEV Catalog: No known exploits
Affected Ecosystems: affected
Source: Sonatype
References: https://help.sonatype.com/en/sonatype-malware-data.htmlTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-107601.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-108357.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-113073.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-115188.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-115777.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-120072.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-121512.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-123814.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-130422.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54229.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54527.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-55428.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-56604.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-57206.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-58971.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-59886.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-64371.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-75196.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-75317.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-89976.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-90608.jsonTHIRD_PARTY