IndexedVerified
Node.js Security
Node.js, Express, and Electron SAST rules aggregated across verified providers.
Fetch pack
greprules pack fetch nodejs-security --engine opengrepcurl https://api.greprules.io/api/packs/nodejs-security.tar.gz -o nodejs-security.tar.gz- Owner
- Provally
- Total rules
- 91
- Downloads
- 1
- Last updated
- 2026-09-02
- Languages
JS/TS
Included rules
CVE-2026-82456: Mcp Express Unbound Listener
cve-2026-82456-mcp-express-unbound-listenerCVE-2026-82287: Cors Untrusted Origin With Credentialscve-2026-82287-cors-untrusted-origin-with-credentialsCVE-2026-73565: Unrejected Deferred Promise Leakcve-2026-73565-unrejected-deferred-promise-leakCVE-2026-73227: Javascript Path Traversal Unsanitized Filenamecve-2026-73227-javascript-path-traversal-unsanitized-filenameCVE-2026-73086: Javascript Crypto Buffer Pool Unchecked Sizecve-2026-73086-javascript-crypto-buffer-pool-unchecked-sizeCVE-2026-72735: Yaml Stringify Command Injectioncve-2026-72735-yaml-stringify-command-injectionCVE-2026-69114: Spacebar Unfiltered Bulk Delete Eventcve-2026-69114-spacebar-unfiltered-bulk-delete-eventCVE-2026-63643: Socketio Missing Allow Requestcve-2026-63643-socketio-missing-allow-requestCVE-2026-63429: Nestjs Unauthenticated File Uploadcve-2026-63429-nestjs-unauthenticated-file-uploadCVE-2026-61526: Adonisjs Unescaped Error Html Responsecve-2026-61526-adonisjs-unescaped-error-html-responseCVE-2026-60119: Unsafe Replace Ssr Injectioncve-2026-60119-unsafe-replace-ssr-injectionCVE-2026-59871: Blind Regex Type Coercion Dynamic Keycve-2026-59871-blind-regex-type-coercion-dynamic-keyCVE-2026-58192: Unvalidated Req To Deletecve-2026-58192-unvalidated-req-to-deleteCVE-2026-55177: Disable Zip Slip Protection Nodestreamzipcve-2026-55177-disable-zip-slip-protection-nodestreamzipCVE-2026-54745: Http Proxy Middleware Dynamic Ssrfcve-2026-54745-http-proxy-middleware-dynamic-ssrfCVE-2026-52873: Electron Strip Content Security Policycve-2026-52873-electron-strip-content-security-policyCVE-2026-49213: Ssrf Url Validation Without Safe Dispatchercve-2026-49213-ssrf-url-validation-without-safe-dispatcherCVE-2026-48068: Unhandled Stream Error Early Returncve-2026-48068-unhandled-stream-error-early-returnCVE-2026-47669: Yauzl Zip Slipcve-2026-47669-yauzl-zip-slipCVE-2026-44990: Sanitize Html Missing Xmp Nontexttagscve-2026-44990-sanitize-html-missing-xmp-nontexttagsCVE-2026-44695: Archive Manifest Path Traversalcve-2026-44695-archive-manifest-path-traversalCVE-2026-44487: Axios Proxy Authorization Leak On Redirectcve-2026-44487-axios-proxy-authorization-leak-on-redirectCVE-2026-44313: Ssrf Scheme Only Url Guard Before Server Fetchcve-2026-44313-ssrf-scheme-only-url-guard-before-server-fetchCVE-2026-43940: Ai Schema Authtype Missing Profile Constraintcve-2026-43940-ai-schema-authtype-missing-profile-constraint24 of 91 loaded