Cyclonedx

6 CVEs across 5 Cyclonedx products. Browse Cyclonedx vulnerabilities, severities, and proof-of-concept exploits.

Cyclonedx products with known CVEs

ProductCVEs
Cyclonedx-Core-Java2
Cyclonedx-Node-Npm2
Bill Of Materials Repository Server1
Cyclonedx-Bom-Repo-Server1
Cyclonedx-Javascript-Library1
Cyclonedx CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-715382026-09-17@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts…
CVE-2026-558492026-07-08@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. From 2.1.0 before 5.0.0, the CLI passes user-supplied --workspace valu…
CVE-2025-64518High7.52025-11-10The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Starting in ve…
CVE-2024-38374High7.52024-06-28The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Before deseria…
CVE-2024-34345High8.12024-05-14The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, whe…
CVE-2022-24774High7.12022-03-22CycloneDX BOM Repository Server is a bill of materials (BOM) repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version…