CVE HUNTERLibraries
CVE HUNTER / Libraries
Public campaign

RESEARCH TO PROTECT

Find flaws. Validate carefully. Report responsibly.

CVE Hunter researches libraries and applications, gathers evidence and tracks coordinated vulnerability disclosure with human review.

Security starts before production.

Want to reduce the risk of shipping vulnerabilities to production? Explore Agentes de Segurança and see how to bring security into development.

Explore Agentes de Segurança

VULNERABILITY INTELLIGENCE

Libraries

Discover, investigate and track vulnerabilities with evidence.

Actual campaign results from 10/18/2026. Public view; new analyses require the API.
Curated catalog, not a download ranking. Heuristic leads are not confirmed vulnerabilities. No CVE candidate was validated in this campaign.

npm

lodash 4.18.1

1000 files reviewed · 7 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

Analysis limit reached; partial coverage.

npm

axios 1.20.0

71 files reviewed · 21 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

npm

express 5.3.0

7 files reviewed · 3 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

npm

jsonwebtoken 9.0.3

12 files reviewed · 0 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

npm

qs 6.16.1

6 files reviewed · 3 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

npm

yaml 2.9.1

3 files reviewed · 0 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

requests 2.34.2

20 files reviewed · 0 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

urllib3 2.8.0

43 files reviewed · 0 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

PyYAML 6.0.3

19 files reviewed · 0 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

Jinja2 3.1.6

25 files reviewed · 3 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

Django 6.1.2

499 files reviewed · 0 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

Analysis limit reached; partial coverage.

PyPI

Pillow 13.0.0

Archive/metadata exceeds limit

Analysis incomplete

npm

react 19.3.1

24 files reviewed · 0 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

npm

zod 4.6.7

497 files reviewed · 66 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

npm

ajv 8.20.0

107 files reviewed · 4 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

npm

semver 7.8.5

49 files reviewed · 1 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

npm

undici 8.12.2

163 files reviewed · 24 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

npm

ws 8.22.0

16 files reviewed · 2 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

cryptography 50.0.2

106 files reviewed · 1 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

pydantic 2.14.1

105 files reviewed · 3 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

Flask 3.1.3

24 files reviewed · 2 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

Werkzeug 3.1.9

53 files reviewed · 2 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

aiohttp 3.14.5

60 files reviewed · 2 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.

PyPI

setuptools 84.0.0

213 files reviewed · 6 unconfirmed leads

0 advisories returned by OSV for the queried version. Excludes transitive dependencies.