Aikido Intel
Secure My Code
Package Health

unhead

Full-stack manager built for any framework.

Latest 3.4.2NPMNPM

90%

Total Score

healthy

Healthy release with current maintenance, signed provenance, and an active organization-backed repository.

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-463850 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
unhead is vulnerable to Cross-Site Scripting (XSS) in versions 3.0.0 - 3.1.6.
3.0.0 - 3.1.6
Medium
CVE-2026-39315
unhead is vulnerable to Incomplete List of Disallowed Inputs in versions 0.0.0 - 2.1.13.
0.0.0 - 2.1.13
Medium
AIKIDO-2026-10361 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
unhead is vulnerable to Prototype Pollution in versions 0.0.1 - 2.1.11.
0.0.1 - 2.1.11
Medium
AIKIDO-2026-10348
unhead is vulnerable to Cross-Site Scripting in versions 0.0.1 - 2.1.10.
0.0.1 - 2.1.10
High
CVE-2026-31873
unhead is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 2.1.10.
0.0.0 - 2.1.10
Low

Package versions

Maintainers

harlan_zw

Direct Dependencies

DependencyLast ReleaseScore
hookable
Version ^6.1.1
—
—
unplugin
Version ^3.3.0
—
—

Weekly Downloads

Info

Last Published
10 days ago
Created
3 years ago
Unpacked Size
0.7 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free
Book a Demo

Free. No credit card required.

Aikido Platform
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Ghent, Belgium | San Francisco, US
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPImplementing

© All Intel data is openly available and commercially licensed.