Cyclonedx Cyclonedx-Node-Npm
2 CVEs affecting Cyclonedx Cyclonedx-Node-Npm. Latest disclosed: 2026-09-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-71538 | | 2026-09-17 | @cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts… | |
CVE-2026-55849 | | 2026-07-08 | @cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. From 2.1.0 before 5.0.0, the CLI passes user-supplied --workspace valu… |