Node, React, Headless CMS and Application Framework built on Next.js
77%
Total Score
73
100
100
100
10
| Title | Versions | Severity |
|---|---|---|
CVE-2026-34749 payload is vulnerable to Cross-Site Request Forgery (CSRF) in versions 0.0.0 - 3.79.1. | 0.0.0 - 3.79.1 | Medium |
CVE-2026-34746 payload is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 3.79.1. | 0.0.0 - 3.79.1 | High |
CVE-2026-34747 payload is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 3.79.1. | 0.0.0 - 3.79.1 | High |
CVE-2026-34751 payload is vulnerable to External Control of Assumed-Immutable Web Parameter in versions 0.0.0 - 3.79.1. | 0.0.0 - 3.79.1 | Critical |
AIKIDO-2026-10411 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. payload is vulnerable to Cross-Site Request Forgery (CSRF) in versions 3.0.0 - 3.79.0. | 3.0.0 - 3.79.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
ws Version ^8.16.0 | — | — |
ajv Version 8.18.0 | — | — |
tsx Version 4.21.0 | — | — |
jose Version 5.10.0 | — | — |
pino Version 9.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant