Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698965 source statements · aliases may refer to the same vulnerabilityMalicious code in utils-bundle (npm)
osv · GHSA-w78x-223m-8f3j
npm: utils-bundle
Malicious code in savant-listing (npm)
osv · GHSA-j69h-7gg8-2fxp · GHSA-j9c7-3gvf-x8xg
npm: savant-listing
Malicious code in saps_secplayground_npm_ai (npm)
osv · GHSA-637f-42g5-85p4
npm: saps_secplayground_npm_ai
Malicious code in mcp-server-sequential-thinking (npm)
osv · GHSA-hrmj-jj6j-m2m2 · GHSA-w69h-vf37-j4w6
npm: mcp-server-sequential-thinking
Malicious code in fflc-updated (npm)
osv · GHSA-95g2-38r2-hcj9
npm: fflc-updated
Malicious code in lowkirkuenly (npm)
osv · GHSA-78qq-4g2g-jp36
npm: lowkirkuenly
Malicious code in omglucidesotuff (npm)
osv · GHSA-w7g9-q298-vp9x
npm: omglucidesotuff
Malicious code in dip.infrastructure.context (NuGet)
osv ·
NuGet: dip.infrastructure.context
Malicious code in howmanygreatbritain (npm)
osv · GHSA-fqc5-3x3h-cwmh
npm: howmanygreatbritain
Malicious code in mw-filesystem-events-nodream-es6 (npm)
osv · GHSA-2cr5-3f7h-7vv6
npm: mw-filesystem-events-nodream-es6
Malicious code in ethers-wallet-packages (npm)
osv · GHSA-gm49-5q33-vf6f
npm: ethers-wallet-packages
Malicious code in rimo-env-validator (npm)
osv · GHSA-vxrx-29h5-w69f
npm: rimo-env-validator
Malicious code in lowkeybored (npm)
osv · GHSA-5qp2-5jqf-v9h3
npm: lowkeybored
Malicious code in heft-storybook-v6-react-tutorial-storykit (npm)
osv · GHSA-p9w8-w4px-249v
npm: heft-storybook-v6-react-tutorial-storykit
Malicious code in rtms-manager-dev (npm)
osv · GHSA-88hw-5c75-wg74
npm: rtms-manager-dev
Malicious code in fatfingers-vroooom (npm)
osv · GHSA-6rrv-rg7x-p6vh
npm: fatfingers-vroooom
Malicious code in expect-bundle (npm)
osv · GHSA-f24w-wg35-f2f2
npm: expect-bundle
Malicious code in elf-stats-caroling-stocking-510 (npm)
osv · GHSA-ggp7-664r-m55m
npm: elf-stats-caroling-stocking-510
Malicious code in eslint-angular-react (npm)
osv · GHSA-jp3x-3mrw-3vwf
npm: eslint-angular-react
Malicious code in game_overlay (npm)
osv · GHSA-8g9r-jp73-9wqr
npm: game_overlay
Malicious code in omgyesyesyes (npm)
osv · GHSA-cmv4-jj53-2277
npm: omgyesyesyes
Malicious code in elf-stats-cranberry-wishlist-933 (npm)
osv · GHSA-6hmg-xwg7-v3gq
npm: elf-stats-cranberry-wishlist-933
Malicious code in miguelphonk (npm)
osv · GHSA-w3fq-5v4w-qqcv
npm: miguelphonk
Malicious code in bomboclatwallahi (npm)
osv · GHSA-p2r6-86wx-rc38
npm: bomboclatwallahi
Malicious code in @mep-exp/api-tools (npm)
osv · GHSA-g5jc-gx32-75x7 · GHSA-q2pc-rvw2-7v5m
npm: @mep-exp/api-tools
Malicious code in aave-improvement-process (npm)
osv · GHSA-rpx3-2gxg-jh9c
npm: aave-improvement-process
Malicious code in @patternfly-4/react-core (npm)
osv · GHSA-qvfg-h978-mrfg
npm: @patternfly-4/react-core
Malicious code in @zhiend989/asdfqwer (npm)
osv · GHSA-ff8m-jm5x-h5fr
npm: @zhiend989/asdfqwer
Malicious code in 0vulns-dependency-confusion-poc (npm)
osv · GHSA-r9cf-374f-9q9v · GHSA-wwc9-c8g2-66r2
npm: 0vulns-dependency-confusion-poc
Malicious code in dinotech-auth-utils (npm)
osv · GHSA-xhcw-fx9m-56pc
npm: dinotech-auth-utils
Malicious code in captainindia (npm)
osv · GHSA-j4pr-j9jm-rj9c
npm: captainindia
Malicious code in chai-as-reddit (npm)
osv · GHSA-vc32-h28h-pmhm
npm: chai-as-reddit
Malicious code in bismillahitidakimas (npm)
osv · GHSA-wxph-qcjv-r95v
npm: bismillahitidakimas
Malicious code in @zarafront/lib-zds (npm)
osv · GHSA-j325-j3fc-vvcr
npm: @zarafront/lib-zds
Malicious code in abdulla-chat-api (npm)
osv · GHSA-ppj7-7mr9-vwc9
npm: abdulla-chat-api
Malicious code in @zettle-bo/apps (npm)
osv · GHSA-7h58-7xq3-v4q6
npm: @zettle-bo/apps
Malicious code in aaaa89852889 (npm)
osv · GHSA-48vf-x4r9-55c8
npm: aaaa89852889
Malicious code in asdsafsadad (npm)
osv · GHSA-7j38-gr5c-v4mv
npm: asdsafsadad
Malicious code in ab-test-wordpress (npm)
osv · GHSA-723w-q738-h5hr
npm: ab-test-wordpress
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.