L
Vendor security profile
ljharb
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical0
CISA KEV0
Public exploit2
Patch rate%100
Avg. CVSS5.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
0
1
CVE KEV
CVE severity distribution
3toplam CVE
Medium2 (67%)
Low1 (33%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%67
Public exploit
1Patch available
2Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
6.9
CVE-2026-107353
traverse: set() can write to built-in prototypes via an untrusted path
L
Patch verifiedEPSS %0
3.7
CVE-2026-82562
qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)
L
Partial patchEPSS %1
5.3
CVE-2026-82417
qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property
L
Partial patchEPSS %0