Content pipeline tools for optimizing glTF assets.
80%
Total Score
49
100
100
100
50
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10454 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. gltf-pipeline is vulnerable to Path Traversal in versions 3.0.4 - 4.1.0. | 3.0.4 - 4.1.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
mime Version ^3.0.0 | — | — |
yargs Version ^17.7.2 | — | — |
cesium Version ^1.131.0 | — | — |
draco3d Version ^1.5.7 | — | — |
bluebird Version ^3.7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant