🛡️ VulnPilot Security Report

sample-app-project · npm
Generated 2026-07-25 17:20 UTC
Total Packages
5
Vulnerable
5
Immediate
0
Urgent
0
High
0
Normal
36
🟢
Overall Risk: LOW
No high-priority vulnerabilities detected.
📋 Vulnerability Details
Package ▲▼ Version ▲▼ Vuln ID ▲▼ CVE Severity ▲▼ Priority ▲▼ EPSS ▲▼ CISA KEV Reachability Scope Fix Versions Recommended Action
axios 1.13.6 GHSA-35jp-ww65-95wh CVE-2026-44494 HIGH NORMAL 1.0% No Production Production 1.16.0 Upgrade to 1.16.0
axios 1.13.6 GHSA-3g43-6gmg-66jw CVE-2026-44495 HIGH NORMAL 0.5% No Production Production 1.15.2 Upgrade to 1.15.2
axios 1.13.6 GHSA-3p68-rc4w-qgx5 CVE-2025-62718 MODERATE NORMAL 1.2% No Production Production 1.15.0 Upgrade to 1.15.0
axios 1.13.6 GHSA-3w6x-2g7m-8v23 CVE-2026-42044 MODERATE NORMAL 0.6% No Production Production 1.15.2 Upgrade to 1.15.2
axios 1.13.6 GHSA-42h9-826w-cgv3 — MODERATE NORMAL — No Production Production 1.18.0 Upgrade to 1.18.0
axios 1.13.6 GHSA-445q-vr5w-6q77 CVE-2026-42037 MODERATE NORMAL 0.3% No Production Production 1.15.1 Upgrade to 1.15.1
axios 1.13.6 GHSA-5c9x-8gcm-mpgx CVE-2026-42034 MODERATE NORMAL 0.3% No Production Production 1.15.1 Upgrade to 1.15.1
axios 1.13.6 GHSA-62hf-57xw-28j9 CVE-2026-42039 MODERATE NORMAL 0.7% No Production Production 1.15.1 Upgrade to 1.15.1
axios 1.13.6 GHSA-6chq-wfr3-2hj9 CVE-2026-42035 HIGH NORMAL 0.4% No Production Production 1.15.1 Upgrade to 1.15.1
axios 1.13.6 GHSA-777c-7fjr-54vf CVE-2026-44488 HIGH NORMAL 0.6% No Production Production 1.16.0 Upgrade to 1.16.0
axios 1.13.6 GHSA-7q8q-rj6j-mhjq — MODERATE NORMAL — No Production Production 1.18.0 Upgrade to 1.18.0
axios 1.13.6 GHSA-898c-q2cr-xwhg CVE-2026-44490 MODERATE NORMAL 0.3% No Production Production 1.16.0 Upgrade to 1.16.0
axios 1.13.6 GHSA-fvcv-3m26-pcqx CVE-2026-40175 MODERATE NORMAL 1.9% No Production Production 1.15.0 Upgrade to 1.15.0
axios 1.13.6 GHSA-hfxv-24rg-xrqf CVE-2026-44496 HIGH NORMAL 0.6% No Production Production 1.16.0 Upgrade to 1.16.0
axios 1.13.6 GHSA-j5f8-grm9-p9fc CVE-2026-44486 HIGH NORMAL 0.7% No Production Production 1.16.0 Upgrade to 1.16.0
axios 1.13.6 GHSA-jqh4-m9w3-8hp9 — MODERATE NORMAL — No Production Production 1.18.0 Upgrade to 1.18.0
axios 1.13.6 GHSA-m7pr-hjqh-92cm CVE-2026-42038 MODERATE NORMAL 0.3% No Production Production 1.15.1 Upgrade to 1.15.1
axios 1.13.6 GHSA-mmx7-hfxf-jppx — MODERATE NORMAL — No Production Production 1.18.0 Upgrade to 1.18.0
axios 1.13.6 GHSA-mwf2-3pr3-8698 — MODERATE NORMAL — No Production Production 1.18.0 Upgrade to 1.18.0
axios 1.13.6 GHSA-p92q-9vqr-4j8v CVE-2026-44487 HIGH NORMAL 0.7% No Production Production 1.16.0 Upgrade to 1.16.0
axios 1.13.6 GHSA-pf86-5x62-jrwf CVE-2026-42033 HIGH NORMAL 0.8% No Production Production 1.15.1 Upgrade to 1.15.1
axios 1.13.6 GHSA-pmv8-rq9r-6j72 — MODERATE NORMAL — No Production Production 1.18.0 Upgrade to 1.18.0
axios 1.13.6 GHSA-pmwg-cvhr-8vh7 CVE-2026-42043 HIGH NORMAL 0.7% No Production Production 1.15.1 Upgrade to 1.15.1
axios 1.13.6 GHSA-q8qp-cvcw-x6jj CVE-2026-42264 HIGH NORMAL 0.7% No Production Production 1.15.2 Upgrade to 1.15.2
axios 1.13.6 GHSA-vf2m-468p-8v99 CVE-2026-42036 MODERATE NORMAL 0.4% No Production Production 1.15.1 Upgrade to 1.15.1
axios 1.13.6 GHSA-w9j2-pvgh-6h63 CVE-2026-42041 MODERATE NORMAL 0.6% No Production Production 1.15.1 Upgrade to 1.15.1
axios 1.13.6 GHSA-xhmp-p3xf-4c3h CVE-2026-44489 HIGH NORMAL 0.5% No Production Production 1.16.0 Upgrade to 1.16.0
axios 1.13.6 GHSA-xwc5-r5f9-v5mj CVE-2026-42042 MODERATE NORMAL 0.4% No Production Production 1.15.1 Upgrade to 1.15.1
react-router-dom 6.30.3 GHSA-jjmj-jmhj-qwj2 CVE-2026-53668 MODERATE NORMAL — No Production Production 7.13.0 Upgrade to 7.13.0
vite 5.4.21 GHSA-4w7w-66w2-5vf9 CVE-2026-39365 MODERATE NORMAL 0.9% No Production Development 6.4.2, 7.3.2, 8.0.5 Upgrade to 6.4.2
vite 5.4.21 GHSA-fx2h-pf6j-xcff CVE-2026-53571 HIGH NORMAL 0.6% No Production Development 6.4.3, 7.3.5, 8.0.16 Upgrade to 6.4.3
vite 5.4.21 GHSA-v6wh-96g9-6wx3 CVE-2026-53632 MODERATE NORMAL 0.4% No Production Development 6.4.3, 7.3.5, 8.0.16 Upgrade to 6.4.3
postcss 8.5.6 GHSA-6g55-p6wh-862q CVE-2026-45623 HIGH NORMAL — No Not used Development 8.5.12 Upgrade to 8.5.12
postcss 8.5.6 GHSA-qx2v-qp2m-jg93 CVE-2026-41305 MODERATE NORMAL 0.2% No Not used Development 8.5.10 Upgrade to 8.5.10
postcss 8.5.6 GHSA-r28c-9q8g-f849 — HIGH NORMAL — No Not used Development 8.5.18 Upgrade to 8.5.18
vitest 2.1.9 GHSA-5xrq-8626-4rwp CVE-2026-47429 CRITICAL NORMAL 1.0% No Production Development 3.2.6, 4.1.0 Upgrade to 3.2.6
📦 Vulnerable Packages

axios 1.13.6

npm · Production · Production · 28 vuln(s)
NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL NORMAL

react-router-dom 6.30.3

npm · Production · Production · 1 vuln(s)
NORMAL

vite 5.4.21

npm · Development · Production · 3 vuln(s)
NORMAL NORMAL NORMAL

postcss 8.5.6

npm · Development · Not used · 3 vuln(s)
NORMAL NORMAL NORMAL

vitest 2.1.9

npm · Development · Production · 1 vuln(s)
NORMAL
Powered by VulnPilot · Data from OSV, EPSS & CISA KEV · 2026-07-25 17:20 UTC