Components Vulnerabilities Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

sonatype-2025-005902 | Security Details | Sonatype Guide | Sonatype Guide

Vulnerabilities

sonatype-2025-005902

sonatype-2025-005902

NPM Security Holding Packages - Fri Nov 14 2025

Published Nov 14, 2025

https://help.sonatype.com/en/sonatype-malware-data.html https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-101718.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-108095.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-114021.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-114125.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-116216.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-117494.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-121105.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-122937.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-123013.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-126230.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127071.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127170.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-128140.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-129135.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-129609.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54209.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-57869.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-66756.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-67009.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-67363.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-69349.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-70292.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-76645.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-78442.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-78493.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-79069.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-79653.json https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-81125.json

CVSS ScoreCritical

10.0

sonatype-2025-005902 Security Details

CVE ID: sonatype-2025-005902
CWE: N/A
CVE Description: NPM Security Holding Packages - Fri Nov 14 2025
Published: Nov 14, 2025
CVSS Score & Severity: 10.0Critical
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score: 0%
Malware: malware
KEV Status: Not in KEV Catalog: No known exploits
Affected Ecosystems: affected
Source: Sonatype
References: https://help.sonatype.com/en/sonatype-malware-data.htmlTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-101718.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-108095.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-114021.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-114125.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-116216.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-117494.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-121105.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-122937.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-123013.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-126230.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127071.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-127170.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-128140.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-129135.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-129609.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-54209.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-57869.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-66756.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-67009.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-67363.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-69349.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-70292.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-76645.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-78442.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-78493.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-79069.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-79653.jsonTHIRD_PARTY
https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-81125.jsonTHIRD_PARTY