Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

serverless

Ecosystem:
npm
Package URL:
pkg:npm/serverless
Total PRs:
532 Dependabot PRs
Latest PR:
9 days ago
Unique Repositories:
137 repositories
Unique Repos (30 days):
4 repositories
Security Advisories
serverless MCP Server vulnerable to Command Injection in list-projects tool
GHSA-rwc2-f344-q6w6 CVE-2025-69256 HIGH published 6 months ago • updated 3 days ago
### Summary A command injection vulnerability exists in the Serverless Framework's built-in MCP server package (@serverless/mcp). This vulnerabili...
Recent PRs (filtered by: Closed , Patch PRs )
RSS Feed Clear filter
build(deps-dev): bump serverless from 4.29.0 to 4.29.3

kaidouji85/gbraver-burst-network #474

4.29.0 → 4.29.3 Patch PR
Closed 6 months ago 1 comment
kaidouji85
Bump serverless from 4.18.0 to 4.18.1

mhero/js-serverless #1383

4.18.0 → 4.18.1 Patch PR
Closed 10 months ago 1 comment
mhero
Bump serverless from 4.14.2 to 4.14.3

yuto-moriizumi/nh-bookmark #476

4.14.2 → 4.14.3 Patch PR
Closed about 1 year ago 1 comment
yuto-moriizumi
Package Details
Name: serverless
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/serverless
JSON API: View JSON
Security Advisories

1

Active advisories
HIGH 1
View All npm Advisories
Package Information
Description:

[![Serverless Framework AWS Lambda AWS DynamoDB AWS API Gateway](https://github.com/serverless/serverless/assets/2752551/66a8c6a9-bc4a-4116-b139-90c12963337e)](https://serverless.com)

Repository:
Latest Release: 4.4.11
over 1 year ago
Dependent Repos: 12,543
Dependent Packages: 988
Downloads: 5,110,764
Ranking: Top 0.2396% by dependent repos Top 0.1269% by downloads Top 0.0704% by dependent pkgs
PR Status
Open 161 (30.3%)
Merged 61 (11.5%)
Closed 258 (48.5%)
PR Types
Major 294 (55.3%)
Minor 130 (24.4%)
Patch 56 (10.5%)