stack alerts
Know when something you built on gets a serious vulnerability
Pick what your app uses. You'll see the latest critical and high severity advisories for those packages, the version that fixes each one, and a prompt you can paste into Cursor, Claude Code, Lovable or any AI agent to check your project and upgrade it.
1. pick what your app is built with
built with
2. get an email when a new one lands
Email alerts are coming soon. The list on this page updates every hour.
$ recent serious advisories
Pick a tool to see its latest critical and high severity advisories, with the version that fixes each one.
How the alerts work
- We read GitHub's reviewed advisory database for npm every hour and match each advisory to the tools you picked.
- You get an email for critical and high severity advisories, and for any advisory whose CVE is in CISA's catalog of vulnerabilities exploited in the wild. Lower severity ones stay on this page.
- Each email lists the affected versions, the fixed version and one prompt for your AI agent that checks your lockfile first and only changes what's affected.
- We email you a link to confirm first, and nothing else until you do. Every alert has a link to change your tools or unsubscribe, and unsubscribing deletes your address.
Source: the GitHub Advisory Database (reviewed npm advisories) and the CISA Known Exploited Vulnerabilities catalog.