VulertSecurity VulertSecurity

Vulnerability Database · npm · Package report

@module-federation/runtime-core: vulnerability history, versions and safety

@module-federation/runtime-core is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the npm ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all @module-federation/runtime-core vulnerabilities

Vulert verdict on @module-federation/runtime-core 2.9.2 i

Updated on 23 Oct 2026

Good news: 2.9.2, the version you would install today, has no known vulnerabilities.

Package health score 92/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Moderate

What to do: Stay on 2.9.2 or newer. This can change: a vulnerability disclosed tomorrow can affect 2.9.2 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 2.9.2 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Depended on by 309 packages i
  • Stars 2,660 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for @module-federation/runtime-core, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
0.0.0-feat-enhanced-runtime-unification-20261022085654 22 Oct 2026 none MIT — Details →
0.0.0-feat-enhanced-runtime-unification-20261021104729 21 Oct 2026 none MIT — Details →
2.9.2 26 Sep 2026 none MIT — Details →
2.9.1 21 Sep 2026 none MIT — Details →
0.0.0-feat-mf-ssr-clear-cache-20260914081229 14 Sep 2026 none MIT — Details →
0.0.0-perf-website-code-usage-20260914033703 14 Sep 2026 none MIT — Details →
2.9.0 24 Aug 2026 none MIT — Details →
0.0.0-release-v2-9-0-20260824030637 24 Aug 2026 none MIT — Details →
0.0.0-fix-runtime-core-set-shared-lib-20260819111025 19 Aug 2026 none MIT — Details →
0.0.0-feat-preload-asset-url-dedupe-20260819073808 19 Aug 2026 none MIT — Details →
0.0.0-feat-preload-asset-url-dedupe-20260819072341 19 Aug 2026 none MIT — Details →
2.8.2 06 Aug 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260803054425 03 Aug 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260729120109 29 Jul 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260729082849 29 Jul 2026 none MIT — Details →
2.8.1 28 Jul 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260726151341 26 Jul 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260726083609 26 Jul 2026 none MIT — Details →
0.0.0-codex-rspress-codeblock-transform-20260724100038 24 Jul 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260722064424 22 Jul 2026 none MIT — Details →
0.0.0-main-20260720131707 20 Jul 2026 none MIT — Details →
2.8.0 15 Jul 2026 none MIT — Details →
0.0.0-release-v2-8-0-20260715073433 15 Jul 2026 none MIT — Details →
0.0.0-main-20260714111532 14 Jul 2026 none MIT — Details →
0.0.0-codex-node24-dev-node20-compat-ci-20260713063237 13 Jul 2026 none MIT — Details →
0.0.0-chore-bump-node-22-20260710161714 10 Jul 2026 none MIT — Details →
0.0.0-feat-ts7-20260710063742 10 Jul 2026 none MIT — Details →
0.0.0-feat-ts7-20260709074021 09 Jul 2026 none MIT — Details →
2.7.0 08 Jul 2026 none MIT — Details →
0.0.0-release-v2-7-0-20260707070341 07 Jul 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260624071936 24 Jun 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260624070405 24 Jun 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260623134207 23 Jun 2026 none MIT — Details →
0.0.0-feat-mf-ssr-clear-cache-20260623101549 23 Jun 2026 none MIT — Details →
2.6.0 23 Jun 2026 none MIT — Details →
0.0.0-release-v2-6-0-20260622122109 22 Jun 2026 none MIT — Details →
0.0.0-feat-mf-ssr-clear-cache-20260617024751 17 Jun 2026 none MIT — Details →
0.0.0-fix-metro-windows-path-comparisons-20260616022748 16 Jun 2026 none MIT — Details →
0.0.0-feat-operate-openruntime-20260615030101 15 Jun 2026 none MIT — Details →
2.5.1 04 Jun 2026 none MIT — Details →
0.0.0-fix-4748-shared-fallback-versions-20260604072020 04 Jun 2026 none MIT — Details →
0.0.0-fix-4748-shared-fallback-versions-20260529023626 29 May 2026 none MIT — Details →
2.5.0 21 May 2026 none MIT — Details →
0.0.0-pre-release-2-5-20260521095114 21 May 2026 none MIT — Details →
0.0.0-pre-release-2-5-20260520035046 20 May 2026 none MIT — Details →
0.0.0-pre-release-2-5-20260518135705 18 May 2026 none MIT — Details →
0.0.0-feat-federationdiagnosticerror-20260518053736 18 May 2026 none MIT — Details →
0.0.0-feat-federationdiagnosticerror-20260513035644 13 May 2026 none MIT — Details →
0.0.0-feat-federationdiagnosticerror-20260512025420 12 May 2026 none MIT — Details →
0.0.0-feat-federationdiagnosticerror-20260511123257 11 May 2026 none MIT — Details →
0.0.0-feat-federationdiagnosticerror-20260511031552 11 May 2026 none MIT — Details →
0.0.0-main-20260508022256 08 May 2026 none MIT — Details →
0.0.0-main-20260508021121 08 May 2026 none MIT — Details →
2.4.0 29 Apr 2026 none MIT — Details →
0.0.0-fix-valid-same-id-20260429034727 29 Apr 2026 none MIT — Details →
0.0.0-release-v2-4-0-20260428030547 28 Apr 2026 none MIT — Details →
2.3.3 16 Apr 2026 none MIT — Details →
0.0.0-release-v2-3-3-20260415121657 15 Apr 2026 none MIT — Details →
2.3.2 13 Apr 2026 none MIT — Details →
0.0.0-release-v2-3-2-20260413040104 13 Apr 2026 none MIT — Details →
0.0.0-release-v2-3-2-20260410081025 10 Apr 2026 none MIT — Details →
2.3.1 31 Mar 2026 none MIT — Details →
0.0.0-release-v2-3-1-20260331104021 31 Mar 2026 none MIT — Details →
0.0.0-fix-filter-function-20260327073336 27 Mar 2026 none MIT — Details →
2.3.0 26 Mar 2026 none MIT — Details →
0.0.0-feat-one-skill-20260326080456 26 Mar 2026 none MIT — Details →
0.0.0-fix-capture-timeout-20260324112210 24 Mar 2026 none MIT — Details →
0.0.0-feat-await-dev-dts-20260324072937 24 Mar 2026 none MIT — Details →
2.2.3 19 Mar 2026 none MIT — Details →
0.0.0-release-v2-2-3-20260318105109 18 Mar 2026 none MIT — Details →
0.0.0-fix-import-attr-20260318073906 18 Mar 2026 none MIT — Details →
2.2.2 17 Mar 2026 none MIT — Details →
0.0.0-release-v2-2-2-20260317104705 17 Mar 2026 none MIT — Details →
0.0.0-fix-lazy-require-20260317103139 17 Mar 2026 none MIT — Details →
0.0.0-fix-rspack-share-scope-20260317033935 17 Mar 2026 none MIT — Details →
2.2.1 14 Mar 2026 none MIT — Details →
2.2.0 14 Mar 2026 none MIT — Details →
0.0.0-fix-logger-20260313114628 13 Mar 2026 none MIT — Details →
0.0.0-fix-logger-20260313111958 13 Mar 2026 none MIT — Details →
0.0.0-feat-error-capture-20260313091847 13 Mar 2026 none MIT — Details →
0.0.0-feat-error-capture-20260313082109 13 Mar 2026 none MIT — Details →
0.0.0-feat-rspack-async-startup-20260312112551 12 Mar 2026 none MIT — Details →
0.0.0-feat-rspack-async-startup-20260312052016 12 Mar 2026 none MIT — Details →
0.0.0-fix-issue-4503-20260310073121 10 Mar 2026 none MIT — Details →
2.1.0 05 Mar 2026 none MIT — Details →
0.0.0-feat-runtime-010-20260304084757 04 Mar 2026 none MIT — Details →
0.0.0-feat-skill-20260303081221 03 Mar 2026 none MIT — Details →
0.0.0-feat-tsup-20260227105434 27 Feb 2026 none MIT — Details →
0.0.0-docs-enable-llms-20260227090306 27 Feb 2026 none MIT — Details →
0.0.0-fix-rsbuild-plugin-app-ssr-node-env-20260227071107 27 Feb 2026 none MIT — Details →
0.0.0-feat-tsup-20260227061343 27 Feb 2026 none MIT — Details →
0.0.0-fix-provide-external-runtime-20260226124245 26 Feb 2026 none MIT — Details →
0.0.0-fix-array-share-scope-20260226111150 26 Feb 2026 none MIT — Details →
0.0.0-fix-array-share-scope-20260226103428 26 Feb 2026 none MIT — Details →
0.0.0-feat-tsup-20260226081903 26 Feb 2026 none MIT — Details →
0.0.0-fix-array-share-scope-20260225123251 25 Feb 2026 none MIT — Details →
0.0.0-refactor-remove-remote-ip-strategy-20260225075946 25 Feb 2026 none MIT — Details →
0.0.0-fix-rsbuild-plugin-app-ssr-node-env-20260224084926 24 Feb 2026 none MIT — Details →
0.0.0-docs-ssg-mg-fix-20260212083348 12 Feb 2026 none MIT — Details →
2.0.1 12 Feb 2026 none MIT — Details →
2.0.0 06 Feb 2026 none — — Details →
0.0.0-feat-modern-3-0-20260205071220 05 Feb 2026 none — — Details →
0.0.0-feat-modern-3-0-20260205065756 05 Feb 2026 none — — Details →
0.24.1 04 Feb 2026 none — — Details →
0.0.0-fix-loop-load-20260203135642 03 Feb 2026 none — — Details →
0.0.0-feat-modern-3-0-20260203122219 03 Feb 2026 none — — Details →
0.0.0-feat-modern-3-0-20260203081646 03 Feb 2026 none — — Details →
0.24.0 03 Feb 2026 none — — Details →
0.0.0-release-v0-24-0-20260202120652 02 Feb 2026 none — — Details →
0.0.0-fix-record-set-config-field-20260202094853 02 Feb 2026 none — — Details →
0.0.0-fix-webpack-manfest-version-20260202074337 02 Feb 2026 none — — Details →
0.0.0-feat-rspressv2-20260202050929 02 Feb 2026 none — — Details →
0.0.0-feat-rspressv2-20260201063705 01 Feb 2026 none — — Details →
0.0.0-feat-rspressv2-20260130064953 30 Jan 2026 none — — Details →
0.0.0-feat-modern-3-0-20260130025803 30 Jan 2026 none — — Details →
0.0.0-feat-modern-3-0-20260129115806 29 Jan 2026 none — — Details →
0.0.0-release-v0-24-0-20260129083930 29 Jan 2026 none — — Details →
0.0.0-release-v0-24-0-20260127081454 27 Jan 2026 none — — Details →
0.23.0 23 Jan 2026 none — — Details →
0.0.0-release-v0-23-0-20260123023720 23 Jan 2026 none — — Details →

The newest 120 of 562 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for @module-federation/runtime-core

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About @module-federation/runtime-core

Is @module-federation/runtime-core safe to use?

Vulert has no vulnerabilities on record for @module-federation/runtime-core in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is @module-federation/runtime-core's Vulert package health score?

Vulert scores @module-federation/runtime-core 92/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of @module-federation/runtime-core affected?

No. 2.9.2, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of @module-federation/runtime-core should I use?

2.9.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does @module-federation/runtime-core have?

0 vulnerabilities are recorded for @module-federation/runtime-core in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new @module-federation/runtime-core vulnerabilities disclosed?

0 vulnerabilities were recorded for @module-federation/runtime-core in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of @module-federation/runtime-core are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor @module-federation/runtime-core for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @module-federation/runtime-core version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.