Search for packages
| purl | pkg:npm/%40cap-js/postgres@2.3.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-uc8t-1eay-4yfu | Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service) |
CVE-2026-46421
GHSA-pvw4-cvr4-97p8 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T07:52:09.199561+00:00 | GithubOSV Importer | Fixing | VCID-uc8t-1eay-4yfu | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-pvw4-cvr4-97p8/GHSA-pvw4-cvr4-97p8.json | 38.6.0 |
| 2026-06-11T20:38:47.194654+00:00 | GHSA Importer | Fixing | VCID-uc8t-1eay-4yfu | https://github.com/advisories/GHSA-pvw4-cvr4-97p8 | 38.6.0 |