Vulnerability Database · npm · Package report
unbounded: vulnerability history, versions and safety
unbounded is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the npm ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on unbounded 6.3.1 i
Updated on 23 Oct 2026
Good news: 6.3.1, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Slowing
- Popularity Little adoption
- Community Quiet
What to do: Stay on 6.3.1 or newer. This can change: a vulnerability disclosed tomorrow can affect 6.3.1 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release 6.3.1 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Depended on by 5 packages i
- Stars 1 i
- OpenSSF scorecard 4/10 i
- Last release 33 months ago i
- Licence Artistic-2.0 i
Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for unbounded, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- 6.3.1 29 Dec 2023
- 6.3.1-next.1703831519.1fa3ac2dd35799623f0f0c83cf7457fb19220e1f 29 Dec 2023
- 6.3.0 28 Dec 2023
- 6.3.0-next.1703780198.a19f9f048f2a8c3f257b337126ff35fc1ac62e4f 28 Dec 2023
- 6.2.0 27 Dec 2023
- 6.2.0-next.1703664355.2f0ee430c737562445f8596d433afc0b066af63c 27 Dec 2023
- 6.1.0 05 Dec 2023
- 6.1.0-next.1701793496.b7a8307ca91727fa1e808d4c297b3d1c6cbcbee9 05 Dec 2023
- 6.0.0-next.1700972251.2650039ae9d6b96aa009e7399338de263ed977bb 26 Nov 2023
- 6.0.0 26 Nov 2023
- 5.4.0-next.1700864934.3c3b5167495a918fa8387fabe586eda8fef58a4a 24 Nov 2023
- 5.4.0 24 Nov 2023
- 5.3.0 21 Nov 2023
- 5.3.0-next.1700543226.a4928270a9b1c70659dc52d141e073541a5cc754 21 Nov 2023
- 5.2.0-next.1699978157.697c3bf0955c224d6072acf9d7df053a8b3f5934 14 Nov 2023
- 5.2.0 14 Nov 2023
- 5.1.0-next.1699876514.82df04fc710ed7752916382d8dc3e93b698942b3 13 Nov 2023
- 5.1.0 13 Nov 2023
- 5.0.0 12 Nov 2023
- 5.0.0-next.1699827224.210bccabfcfad6a03d7d883f891af49a4e2cbc3a 12 Nov 2023
- 4.0.0 12 Nov 2023
- 4.0.0-next.1699812242.13d7c0ec33fa159a6936e1c8452dbd4322f5e279 12 Nov 2023
- 3.16.0 02 Nov 2023
- 3.16.0-next.1698929636.499996fbcab3426a9795718ac1d1e9fe3bc4b52a 02 Nov 2023
- 3.15.0 30 Jul 2021
- 3.15.0-next.1627673316.0eb5a8cb25f3a6bda1c7f5c7e9b0a1e640887c1e 30 Jul 2021
- 3.14.0 28 Jul 2021
- 3.14.0-next.1627432248.50f678d99538d52dddf021af1764833fa8fdaa73 28 Jul 2021
- 3.13.0-next.1604232432.2d46d8729e85d8c94ae9e18876105558c8805e8c 01 Nov 2020
- 3.13.0 29 Oct 2020
- 3.13.0-next.1603943786.7c80415f07e6c32f7924a76d583b15bd46446197 29 Oct 2020
- 3.12.0-next.1603629402.e59eae313cd5c9d0bb8e2d3271a9798a9cc06902 25 Oct 2020
- 3.12.0-next.1603620000.9a1e223641e4335d8e801ecd5ea8fd8644a4b59e 25 Oct 2020
- 3.12.0-next.1603016262.faddeaef278e8c291a14dd6a10d798de464b1e99 18 Oct 2020
- 3.12.0-next.1602405886.c843541ac6a8e6c9174dccb8c54f3d9dab3c8689 11 Oct 2020
- 3.12.0-next.1601205035.029aebd0969afd3e2614e7d6989846da9e43e96e 27 Sep 2020
- 3.12.0-next.1600596137.8afc56f8d5ad10d889938504a94dd3c16f90a041 20 Sep 2020
- 3.12.0-next.1599988998.1bce7ef161aa6d67f455cb6b17043656c7fda8e8 13 Sep 2020
- 3.12.0-next.1599394100.85bd140b851295009779cc45274650ecb1d69b76 06 Sep 2020
- 3.12.0 05 Sep 2020
- 3.12.0-next.1599282377.ac3d05160a27bfdeaacb240263a4b3ab7f2b76ad 05 Sep 2020
- 3.11.0-next.1598187659.c4498df92962608e5483a047840d1e3eb33a8793 23 Aug 2020
- 3.11.0 17 Aug 2020
- 3.11.0-next.1597703092.b6f7ac775ae4df5924d960d75cacad4f74467c29 17 Aug 2020
- 3.10.0 04 Aug 2020
- 3.10.0-next.1596524684.0a3a93fcfff36d62442a6c90ce29a46a47127c56 04 Aug 2020
- 3.9.0 22 Jul 2020
- 3.9.0-next.1595453244.a1b3b298dcfb490f5752d90d3259117d7eb35314 22 Jul 2020
- 3.8.0-next.1595337406.9d03f25b19a5b223c3ebea9063e0d4dd10baacdf 21 Jul 2020
- 3.8.0-next.1593741946.f8dc5f5cb939275fe36536d24806c17f127ee35a 03 Jul 2020
- 3.8.0 25 Jun 2020
- 3.8.0-next.1593061737.5f1459bfbf4fbd6b49838fc9c4eb6c75e70edb57 25 Jun 2020
- 3.7.0 21 Jun 2020
- 3.7.0-next.1592730641.ded5dbdbb9e64a8f7e412b37a2ef209ed2d36069 21 Jun 2020
- 3.6.0 20 Jun 2020
- 3.6.0-next.1592656790.3a852de18c30d6c479c21f8b6f2b721cf7520e8f 20 Jun 2020
- 3.5.0 10 Jun 2020
- 3.5.0-next.1591803704.8320cc54458f33fd5897aa85998199fa67cf260f 10 Jun 2020
- 3.4.0 10 Jun 2020
- 3.4.0-next.1591787819.d1fd7dc5cb6f994198dfbbe28e312f7c8194ba22 10 Jun 2020
- 3.3.0 21 May 2020
- 3.3.0-next.1590083193.6d40cd3e434e0f366c2afdc38b2047a63ca66d21 21 May 2020
- 3.2.0 21 May 2020
- 3.1.0 20 May 2020
- 3.1.0-next.1590011404.3a9ab9a3eb17ee10b6662ad38ab1f8462202c0da 20 May 2020
- 3.0.0 11 May 2020
- 3.0.0-next.1589196829.ddf16d69635ec0199f4dda39564cb8ad83df7a50 11 May 2020
- 2.3.0-next.1584137852.214918e07c0ea3056922b13008bf113089c423e1 13 Mar 2020
- 2.3.0 09 Dec 2019
- 2.3.0-next.1575922704.a6d4291acc93cfa980b912c450d545b06f3edcca 09 Dec 2019
- 2.2.0 01 Dec 2019
- 2.2.0-next.1575219949.c81c860d68208f95aeeb3081e2d526cb7b23b4fa 01 Dec 2019
- 2.1.0 30 Nov 2019
- 2.1.0-next.1575156676.fcadb4aaf71155c727aca4e7840e1c3c69dbba68 30 Nov 2019
- 2.0.0 18 Nov 2019
- 2.0.0-next.1574062176.b11846a2df03b76797cc017f56b5af1d4e90b4a7 18 Nov 2019
- 1.3.0-next.1573740413.0351fe0baf6b0628ace8d039e0d0846041bbd969 14 Nov 2019
- 1.3.0-next.1573632800.8e763ed2e1b3c328b6659f6c16093f8dbed81222 13 Nov 2019
- 1.3.0 13 Nov 2019
- 1.3.0-next.1573626172.160ad2a59b276257efed9cb7a482df23de838d78 13 Nov 2019
- 1.2.0 01 Jan 2019
- 1.1.0 13 Jul 2018
- 1.0.0 13 Jul 2018
All 83 versions Vulert tracks for this package. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
Other ways into the data
03 Vulnerabilities
Recorded vulnerabilities for unbounded
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About unbounded
Is unbounded safe to use?
Vulert has no vulnerabilities on record for unbounded in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is unbounded's Vulert package health score?
Vulert scores unbounded 55/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of unbounded affected?
No. 6.3.1, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of unbounded should I use?
6.3.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does unbounded have?
0 vulnerabilities are recorded for unbounded in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new unbounded vulnerabilities disclosed?
0 vulnerabilities were recorded for unbounded in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of unbounded are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor unbounded for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the unbounded version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.