Components Vulnerabilities Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

sonatype-2025-005861 | Security Details | Sonatype Guide | Sonatype Guide

Vulnerabilities

sonatype-2025-005861

sonatype-2025-005861

NPM Security Holding Packages - Fri Nov 14 2025

Published Nov 14, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-101919.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-102768.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-105228.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-109671.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-111159.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-121335.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-51326.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-53567.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54258.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-56628.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-58539.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-59105.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-59407.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-67783.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-68092.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-72564.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-73040.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-73273.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-73418.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-74073.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-75581.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-81189.json

CVSS ScoreCritical

10.0

sonatype-2025-005861 Security Details

CVE ID: sonatype-2025-005861
CWE: N/A
CVE Description: NPM Security Holding Packages - Fri Nov 14 2025
Published: Nov 14, 2025
CVSS Score & Severity: 10.0Critical
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score: 0%
Malware: malware
KEV Status: Not in KEV Catalog: No known exploits
Affected Ecosystems: affected
Source: Sonatype
References: https://help.sonatype.com/en/sonatype-malware-data.htmlTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-101919.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-102768.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-105228.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-109671.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-111159.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-121335.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-51326.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-53567.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54258.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-56628.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-58539.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-59105.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-59407.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-67783.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-68092.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-72564.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-73040.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-73273.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-73418.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-74073.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-75581.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-81189.jsonTHIRD_PARTY