Drag to spin · scroll to zoom · hover a node to light up its links · click to open
Critical ≥ 9.0
High 7.0–8.9
Medium 4.0–6.9
Low / unscored
CISA KEV
Exploited (reported)
CVE intelligence · 2025–2026
| CVE | Component | Package | CVSS | KEV | CWE | ATT&CK | Published | Summary |
|---|
CVSS is the base score from the advisory vector (v3.1 or v4.0). Blank means the source publishes a severity label only (Node.js) or the entry comes from KEV without a score. ATT&CK techniques are mapped by rule from each advisory's CWE and summary; treat them as a starting point.