VulertSecurity VulertSecurity

Vulnerability Database · npm · Package report

@novnc/novnc: vulnerability history, versions and safety

@novnc/novnc is a package in the npm ecosystem. Vulert records 1 vulnerability for it across 0 release, first recorded in Aug 2020. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded M1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all @novnc/novnc vulnerabilities

Vulert verdict on @novnc/novnc 1.7.0 i

Updated on 23 Oct 2026

Good news: 1.7.0, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 1.

Package health score 80/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Moderate

What to do: Stay on 1.7.0 or newer. This can change: a vulnerability disclosed tomorrow can affect 1.7.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 1.7.0 — unaffected i
  • Vulnerabilities on record 1 over 1 year · 0 in the last year i
  • Latest disclosure 28 Aug 2020 i
  • Highest CVSS 6.1 i
  • With no published fix 0 i
  • Depended on by 63 packages i
  • Stars 14,122 i
  • OpenSSF scorecard 3/10 i
  • Last release 5 months ago i
  • Licence MPL-2.0 i

Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for @novnc/novnc, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
1.7.0-ge0785b0 21 Oct 2026 none MPL-2.0 — Details →
1.7.0-g4a2cc17 16 Oct 2026 none MPL-2.0 — Details →
1.7.0-gb17d04c 05 Oct 2026 none MPL-2.0 — Details →
1.7.0-gacca57b 07 Sep 2026 none MPL-2.0 — Details →
1.7.0-gbef170e 01 Sep 2026 none MPL-2.0 — Details →
1.7.0-gac861f9 20 Aug 2026 none MPL-2.0 — Details →
1.7.0-g7c36fab 06 Jun 2026 none MPL-2.0 — Details →
1.7.0-gfc5b83c 23 May 2026 none MPL-2.0 — Details →
1.7.0-g2ea0e7d 23 May 2026 none MPL-2.0 — Details →
1.6.0-g7834e66 23 May 2026 none MPL-2.0 — Details →
1.7.0-g094fd05 23 May 2026 none MPL-2.0 — Details →
1.6.0-gfb8f30a 23 May 2026 none MPL-2.0 — Details →
1.6.0-g5c2025d 22 May 2026 none MPL-2.0 — Details →
1.6.0-g4bce309 22 May 2026 none MPL-2.0 — Details →
1.6.0-g816a4c7 22 May 2026 none MPL-2.0 — Details →
1.7.0 28 Apr 2026 none MPL-2.0 — Details →
1.6.0-g8e1ebdf 13 Feb 2026 none MPL-2.0 — Details →
1.6.0-g1640a5e 11 Feb 2026 none MPL-2.0 — Details →
1.6.0-g6d0a974 10 Jan 2026 none MPL-2.0 — Details →
1.6.0-gd1a1244 10 Jan 2026 none MPL-2.0 — Details →
1.6.0-g40cc574 10 Jan 2026 none MPL-2.0 — Details →
1.7.0-beta 04 Nov 2025 none MPL-2.0 — Details →
1.6.0-gd44f7e0 04 Nov 2025 none MPL-2.0 — Details →
1.6.0-gfb97e0f 04 Nov 2025 none MPL-2.0 — Details →
1.6.0-gd3d69a8 03 Nov 2025 none MPL-2.0 — Details →
1.6.0-gb29cc64 03 Nov 2025 none MPL-2.0 — Details →
1.6.0-gc2d8973 31 Oct 2025 none MPL-2.0 — Details →
1.6.0-g63c2c14 31 Oct 2025 none MPL-2.0 — Details →
1.6.0-g91d1210 30 Oct 2025 none MPL-2.0 — Details →
1.6.0-gfb7e891 22 Oct 2025 none MPL-2.0 — Details →
1.6.0-g71d0bfa 20 Oct 2025 none MPL-2.0 — Details →
1.6.0-g44b7489 15 Sep 2025 none MPL-2.0 — Details →
1.6.0-g356eab4 10 Sep 2025 none MPL-2.0 — Details →
1.6.0-g23b7219 10 Sep 2025 none MPL-2.0 — Details →
1.6.0-g8ebd9dd 08 Sep 2025 none MPL-2.0 — Details →
1.6.0-gd49d2b3 05 Sep 2025 none MPL-2.0 — Details →
1.6.0-g4cb5aa4 07 May 2025 none MPL-2.0 — Details →
1.6.0-g88749fc 28 Apr 2025 none MPL-2.0 — Details →
1.6.0-gd7a3773 15 Apr 2025 none MPL-2.0 — Details →
1.6.0-g980a49e 15 Apr 2025 none MPL-2.0 — Details →
1.6.0-g8edb3d2 08 Apr 2025 none MPL-2.0 — Details →
1.6.0-g1546535 25 Mar 2025 none MPL-2.0 — Details →
1.6.0-g6010c9d 24 Mar 2025 none MPL-2.0 — Details →
1.6.0-gf0a39cd 24 Mar 2025 none MPL-2.0 — Details →
1.6.0 12 Mar 2025 none MPL-2.0 — Details →
1.6.0-ga8dfd6a 12 Mar 2025 none MPL-2.0 — Details →
1.6.0-beta-g59b674d 12 Mar 2025 none MPL-2.0 — Details →
1.6.0-beta-gb25675e 28 Feb 2025 none MPL-2.0 — Details →
1.6.0-beta 14 Feb 2025 none MPL-2.0 — Details →
1.6.0-beta-gb45f35c 14 Feb 2025 none MPL-2.0 — Details →
1.5.0-gd5315eb 14 Feb 2025 none MPL-2.0 — Details →
1.5.0-gbb797dc 06 Feb 2025 none MPL-2.0 — Details →
1.5.0-g4e410a0 04 Feb 2025 none MPL-2.0 — Details →
1.5.0-gb9f172d 28 Jan 2025 none MPL-2.0 — Details →
1.5.0-g9f727b7 28 Jan 2025 none MPL-2.0 — Details →
1.5.0-g4f284c2 17 Jan 2025 none MPL-2.0 — Details →
1.5.0-g83a5e9e 15 Jan 2025 none MPL-2.0 — Details →
1.5.0-gc7bd247 15 Jan 2025 none MPL-2.0 — Details →
1.5.0-g9cdbd28 14 Jan 2025 none MPL-2.0 — Details →
1.5.0-g3193f80 27 Dec 2024 none MPL-2.0 — Details →
1.5.0-g673cb34 17 Dec 2024 none MPL-2.0 — Details →
1.5.0-g52392ec 17 Dec 2024 none MPL-2.0 — Details →
1.5.0-g52ddb20 27 Nov 2024 none MPL-2.0 — Details →
1.5.0-g7335bb4 27 Nov 2024 none MPL-2.0 — Details →
1.5.0-g2463ccd 21 Nov 2024 none MPL-2.0 — Details →
1.5.0-g43326eb 20 Nov 2024 none MPL-2.0 — Details →
1.5.0-g88a5a59 13 Nov 2024 none MPL-2.0 — Details →
1.5.0-ged1fef4 09 Oct 2024 none MPL-2.0 — Details →
1.5.0-g047531e 29 Aug 2024 none MPL-2.0 — Details →
1.5.0-g50e4685 29 Aug 2024 none MPL-2.0 — Details →
1.5.0-gbbb6a5b 19 Aug 2024 none MPL-2.0 — Details →
1.5.0-gc6c8e5e 19 Aug 2024 none MPL-2.0 — Details →
1.5.0-g96c76f7 08 Aug 2024 none MPL-2.0 — Details →
1.5.0-g06f14a5 05 Aug 2024 none MPL-2.0 — Details →
1.5.0-g1b2fe33 05 Aug 2024 none MPL-2.0 — Details →
1.5.0-g1230a4c 22 Jul 2024 none MPL-2.0 — Details →
1.5.0 18 Jun 2024 none MPL-2.0 — Details →
1.5.0-g7fcf9dc 18 Jun 2024 none MPL-2.0 — Details →
1.5.0-beta-gfb1817c 13 Jun 2024 none MPL-2.0 — Details →
1.5.0-beta 03 Jun 2024 none MPL-2.0 — Details →
1.5.0-beta-gaead0b2 03 Jun 2024 none MPL-2.0 — Details →
1.4.0-g68e09ee 03 Jun 2024 none MPL-2.0 — Details →
1.4.0-gf28e9da 03 Jun 2024 none MPL-2.0 — Details →
1.4.0-gd80e3bf 16 May 2024 none MPL-2.0 — Details →
1.4.0-g10ee10c 30 Apr 2024 none MPL-2.0 — Details →
1.4.0-gc998c72 26 Apr 2024 none MPL-2.0 — Details →
1.4.0-g92c8a91 24 Apr 2024 none MPL-2.0 — Details →
1.4.0-g9a1b1f0 26 Mar 2024 none MPL-2.0 — Details →
1.4.0-g786aba6 22 Feb 2024 none MPL-2.0 — Details →
1.4.0-g65e9ecd 05 Feb 2024 none MPL-2.0 — Details →
1.4.0-ge75938b 02 Feb 2024 none MPL-2.0 — Details →
1.4.0-g48c8e41 23 Jan 2024 none MPL-2.0 — Details →
1.4.0-gfca48df 19 Jan 2024 none MPL-2.0 — Details →
1.4.0-gb35cf6d 17 Jan 2024 none MPL-2.0 — Details →
1.4.0-gd3aaf4d 10 Jan 2024 none MPL-2.0 — Details →
1.4.0-g796e924 10 Jan 2024 none MPL-2.0 — Details →
1.4.0-g829725b 05 Dec 2023 none MPL-2.0 — Details →
1.4.0-g7d2dad0 27 Oct 2023 none MPL-2.0 — Details →
1.4.0-g85a4652 29 Sep 2023 none MPL-2.0 — Details →
1.4.0-gbf12c24 29 Sep 2023 none MPL-2.0 — Details →
1.4.0-g370f21b 07 Sep 2023 none — — Details →
1.4.0-ge81602d 29 Aug 2023 none — — Details →
1.4.0-gb40a45a 29 Aug 2023 none — — Details →
1.4.0-g295004c 18 Jul 2023 none — — Details →
1.4.0-gca6527c 30 Jun 2023 none — — Details →
1.4.0-ge8ad466 04 Jun 2023 none — — Details →
1.4.0-gc2d6a06 11 May 2023 none — — Details →
1.4.0-ga565ae5 10 May 2023 none — — Details →
1.4.0-gcbbd9ab 30 Apr 2023 none — — Details →
1.4.0-g747603c 04 Apr 2023 none — — Details →
1.4.0-g4629247 02 Apr 2023 none — — Details →
1.4.0-g8decca7 23 Mar 2023 none — — Details →
1.4.0-g6751cc1 23 Mar 2023 none — — Details →
1.4.0-g9985950 26 Jan 2023 none — — Details →
1.4.0-ga0e6e7b 20 Jan 2023 none — — Details →
1.4.0 20 Jan 2023 none — — Details →
1.4.0-g90455ee 20 Jan 2023 none — — Details →
1.4.0-beta-g5b7d2a6 02 Jan 2023 none — — Details →
1.4.0-beta-g3553a45 29 Dec 2022 none — — Details →
1.4.0-beta 27 Dec 2022 none — — Details →

The newest 120 of 203 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2020 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for @novnc/novnc

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2017-18635: Cross-Site Scripting in @novnc/novnc 6.1 medium 0.6.2 28 Aug 2020

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About @novnc/novnc

Is @novnc/novnc safe to use?

Vulert records 1 vulnerabilities for @novnc/novnc in npm: 0 critical, 0 high, 1 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is @novnc/novnc's Vulert package health score?

Vulert scores @novnc/novnc 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of @novnc/novnc affected?

No. 1.7.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of @novnc/novnc should I use?

1.7.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does @novnc/novnc have?

1 vulnerability is recorded for @novnc/novnc in the npm ecosystem: 0 critical, 0 high, 1 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new @novnc/novnc vulnerabilities disclosed?

0 vulnerabilities were recorded for @novnc/novnc in the last 12 months, and the oldest entry in this database dates to 28 Aug 2020. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of @novnc/novnc are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor @novnc/novnc for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @novnc/novnc version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.