Parcel

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-56648 Sep 17, 19:15 npm MEDIUM POC PATCH This Month

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Node.js Red Hat Parcel

NVD GitHub

CVSS 3.1

6.5

EPSS

0.0%

CVE-2018-14731 Sep 21, 17:29 npm HIGH POC PATCH This Week

An issue was discovered in HMRServer.js in Parcel parcel-bundler. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Parcel

NVD GitHub

CVSS 3.0

7.5

EPSS

2.3%

CVE-2025-56648 npm

EPSS 0% CVSS 6.5

MEDIUM POC PATCH This Month

Information Disclosure Node.js Red Hat +1

NVD GitHub

CVE-2018-14731 npm

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

Information Disclosure Parcel

NVD GitHub