Skip to content
OpenAdvisories

Package · npm

lockfile-lint-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.3
    CVE-2025-4759

    lockfile-lint-api Vulnerable to Incorrect Behavior Order

    Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which can be bypassed by extending the package name allowing an attacker to install ot…

    lockfile-lint-api npm