Spin.Js

First CVE: Mar 11, 2026Active for: 1 yearTotal CVEs: 1

1

Total CVEs

Bottom 1%

1.0

Avg CVEs / Product / Year

More Avg CVEs / Product / Year than 12% of tracked vendors

6.1

Avg CVSS Score

Higher Avg CVSS Score than 30% of tracked vendors

0.0%

In CISA KEV

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Spin.Js over time

Volume of CVEsAvg CVSS Base Score

First CVE

Mar 11, 2026

4 months ago

Most Recent CVE

Mar 11, 2026

136 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (1 CVEs).

1 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2026-3884MEDIUM Versions of the package spin.js before 3.0.0 are vulnerable to Cross-site Scripting (XSS) via the spin() function that allows a creation of more than 1 alert for each 'target' elem	Mar 11, 2026	6.1	21	NO	NO

View all 1 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products1 CVEs

100%

Severity distribution among all CVEs352,708 CVEs

45%

40%

11%

Medium

Attack Vector

Local0 (0.0%)

Network1 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None0 (0.0%)

Unknown0 (0.0%)

Required1 (100.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None1 (100.0%)

Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (1 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Spin.Js.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Spin.Js — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Spin.Js's Products

View all 1 CNAs →

Top CWEs