npm find-my-way

Name: npm find-my-way
Brand: npm

productUS

pkg:npm/find-my-way

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical1high0medium0low

updated 2026-10-28

vulnerabilities (3)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-7764US	high7.5	1.78% (78th)	—	3.0.5	2020-11-08	2 versions
CVE-2024-45813US	—	0.68% (52nd)	—	8.2.2	2024-09-18	2 versions
CVE-2026-47219US	—	0.46% (40th)	—	9.7.0	2026-07-28	< 9.7.0

The flaw types (CWEs) most of these CVEs share.

CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-248Uncaught Exception1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.