Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OS Command Injection in wifiscanner CVE-2020-15362, GHSA-m6rw-m2v9-7hx4 | Critical | 2.5% | 29 Jun, 2020 | npm wifiscanner |
Node-Traceroute RCE Vulnerability CVE-2018-21268, GHSA-8j9v-qhp4-wv55 | Critical | 4.3% | 25 Jun, 2020 | npm traceroute |
RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign CVE-2020-14968, GHSA-q3gh-5r98-j4h3 | Critical | 2.9% | 22 Jun, 2020 | npm jsrsasign |
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign CVE-2020-14967, GHSA-xxxq-chmp-67g4 | Critical | 2.3% | 22 Jun, 2020 | npm jsrsasign |
Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs CVE-2020-7679, GHSA-vrr3-5r3v-7xfw | Critical | 2.0% | 19 Jun, 2020 | npm casperjs |
Code Injection in cd-messenger CVE-2020-7675, GHSA-v756-4whv-48vc, SNYK-JS-CDMESSENGER-571493 | Critical | 2.6% | 10 Jun, 2020 | npm cd-messenger |
Improper Input Validation in access-policy CVE-2020-7674, GHSA-fw2f-7f87-5r6c, SNYK-JS-ACCESSPOLICY-571490 | Critical | 2.6% | 10 Jun, 2020 | npm access-policy |
Code Injection in node-extend CVE-2020-7673, GHSA-cg42-4wrc-gp47 | Critical | 2.6% | 10 Jun, 2020 | npm node-extend |
Command injection in node-dns-sync CVE-2020-11079, GHSA-wh69-wc6q-7888 | Critical | 2.7% | 28 May, 2020 | npm dns-sync |
Exposure of Sensitive Information to an Unauthorized Actor in AEgir CVE-2020-11059, GHSA-qfcv-5whw-7pcw | Critical | 1.1% | 27 May, 2020 | npm aegir |
Arbitrary shell command execution in logkitty CVE-2020-8149, GHSA-v8v8-6859-qxm4 | Critical | 2.0% | 15 May, 2020 | npm logkitty |
False-negative validation results in MINT transactions with invalid baton CVE-2020-11072, GHSA-4w97-57v2-3w44 | Critical | 1.0% | 12 May, 2020 | npm slp-validate |
False-negative validation results in MINT transactions with invalid baton CVE-2020-11071, GHSA-jc83-cpf9-q7c6 | Critical | 0.9% | 12 May, 2020 | npm slpjs |
curlrequest allows execution of arbitrary commands CVE-2020-7646, GHSA-m8xj-5v73-3hh8, SNYK-JS-CURLREQUEST-568274 | Critical | 1.9% | 07 May, 2020 | npm curlrequest |
chrome-launcher subject to OS Command Injection CVE-2020-7645, GHSA-gp2j-mg4w-2rh5, SNYK-JS-CHROMELAUNCHER-537575 | Critical | 1.0% | 02 May, 2020 | npm chrome-launcher |
OS Command Injection in pixl-class CVE-2020-7640, GHSA-vm5j-vqr6-v7v8, SNYK-JS-PIXLCLASS-564968 | Critical | 2.1% | 27 Apr, 2020 | npm pixl-class |
Code Injection in node-rules CVE-2020-7609, GHSA-f78f-353m-cf4j, SNYK-JS-NODERULES-560426 | Critical | 1.6% | 27 Apr, 2020 | npm node-rules |
Path Traversal in decompress CVE-2020-12265, GHSA-qgfr-5hqp-vrw9 | Critical | 2.1% | 26 Apr, 2020 | npm decompress |
Incorrect Calculation in the MSR JavaScript Cryptography Library CVE-2020-1026, GHSA-9x9j-836w-8f55 | Critical | 2.6% | 15 Apr, 2020 | npm msrcrypto |
Command Injection in npm-programmatic CVE-2020-7614, GHSA-426h-24vj-qwxf | Critical | 3.6% | 07 Apr, 2020 | npm npm-programmatic |
OS Command Injection in adb-driver CVE-2020-7636, GHSA-4m6q-rxhm-675w | Critical | 4.4% | 06 Apr, 2020 | npm adb-driver |
Command Injection in compass-compile CVE-2020-7635, GHSA-7q9f-x6rm-qmxr | Critical | 4.4% | 06 Apr, 2020 | npm compass-compile |
OS Command Injection in heroku-addonpool CVE-2020-7634, GHSA-3q9x-w53p-jg53 | Critical | 2.8% | 06 Apr, 2020 | npm heroku-addonpool |
apiconnect-cli-plugins vulnerable to OS Command Injection CVE-2020-7633, GHSA-c9m9-48pw-6mpv | Critical | 4.4% | 06 Apr, 2020 | npm apiconnect-cli-plugins |
OS Command Injection in node-mpv CVE-2020-7632, GHSA-cqr2-xhg6-p268 | Critical | 4.4% | 06 Apr, 2020 | npm node-mpv |
OS Command Injection in diskusage-ng CVE-2020-7631, GHSA-3269-x4pw-vffg | Critical | 3.9% | 06 Apr, 2020 | npm diskusage-ng |
Prototype Pollution CVE-2020-8147, GHSA-6pq3-928q-x6w6 | Critical | 3.1% | 03 Apr, 2020 | npm utils-extend |
OS Command Injection in git-add-remote CVE-2020-7630, GHSA-h9v8-rm3m-5h5f, SNYK-JS-GITADDREMOTE-564269 | Critical | 4.2% | 02 Apr, 2020 | npm git-add-remote |
OS Command Injection in install-package CVE-2020-7629, GHSA-6m4r-m3gc-h4r5, SNYK-JS-INSTALLPACKAGE-564267 | Critical | 4.2% | 02 Apr, 2020 | npm install-package |
Command Injection in umount CVE-2020-7628, GHSA-6q48-vjq2-mwcj | Critical | 1.8% | 02 Apr, 2020 | npm umount |
OS Command Injection in node-key-sender CVE-2020-7627, GHSA-4xrw-wvmq-8jmh | Critical | 4.2% | 02 Apr, 2020 | npm node-key-sender |
karma-mojo enables OS Command Injection CVE-2020-7626, GHSA-pf8j-vhg8-xmc3 | Critical | 4.3% | 02 Apr, 2020 | npm karma-mojo |
Injection in op-browser CVE-2020-7625, GHSA-3hq6-rmv7-39vh | Critical | 4.2% | 02 Apr, 2020 | npm op-browser |
Withdrawn Advisory: OS Command Injection in effect CVE-2020-7624, GHSA-6hr9-4692-fch9 | Critical | 4.2% | 02 Apr, 2020 | npm effect |
OS Command Injection in jscover CVE-2020-7623, GHSA-c5hm-xc74-pqrg, SNYK-JS-JSCOVER-564250 | Critical | 3.6% | 02 Apr, 2020 | npm jscover |
OS Command Injection in strong-nginx-controller CVE-2020-7621, GHSA-4v9w-pvwr-38h3, SNYK-JS-STRONGNGINXCONTROLLER-564248 | Critical | 3.0% | 02 Apr, 2020 | npm strong-nginx-controller |
OS Command Injection in pomelo-monitor CVE-2020-7620, GHSA-4j54-mxf6-wxx2 | Critical | 2.2% | 02 Apr, 2020 | npm pomelo-monitor |
Command injection in get-git-data CVE-2020-7619, GHSA-wj6h-7chw-x4h2 | Critical | 2.2% | 02 Apr, 2020 | npm get-git-data |
Prototype Pollution in ini-parser CVE-2020-7617, GHSA-96r7-mrqf-jhcc | Critical | 0.9% | 02 Apr, 2020 | npm ini-parser |
Deserialization of Untrusted Data in bson CVE-2020-7610, GHSA-v8w9-2789-6hhr, SNYK-JS-BSON-561052 | Critical | 2.3% | 30 Mar, 2020 | npm bson |
Code injection in blamer CVE-2020-8137, GHSA-7vm7-j8p7-h346 | Critical | 4.3% | 20 Mar, 2020 | npm blamer |
Server-Side Request Forgery in @uppy/companion CVE-2020-8135, GHSA-mm7r-265w-jv6f | Critical | 1.3% | 20 Mar, 2020 | npm @uppy/companion |
OS Command Injection in gulkp-styledocco CVE-2020-7607, GHSA-h33p-5j96-w8qh, SNYK-JS-GULPSTYLEDOCCO-560126 | Critical | 2.6% | 15 Mar, 2020 | npm gulp-styledocco |
OS Command Injection in docker-compose-remote-api CVE-2020-7606, GHSA-q6pj-jh94-5fpr | Critical | 2.7% | 15 Mar, 2020 | npm docker-compose-remote-api |
OS Command Injection in gulp-tape CVE-2020-7605, GHSA-x67x-98x7-wv26, SNYK-JS-GULPTAPE-560124 | Critical | 2.6% | 15 Mar, 2020 | npm gulp-tape |
OS Command Injection in pulverizr CVE-2020-7604, GHSA-fmf5-j5j9-99pp | Critical | 2.6% | 15 Mar, 2020 | npm pulverizr |
OS Command Injection in closure-compiler-stream CVE-2020-7603, GHSA-m647-5wf9-3jp3 | Critical | 2.6% | 15 Mar, 2020 | npm closure-compiler-stream |
OS Command Injection in node-prompt-here CVE-2020-7602, GHSA-f8fh-8rgm-227h, SNYK-JS-NODEPROMPTHERE-560115 | Critical | 2.7% | 15 Mar, 2020 | npm node-prompt-here |
OS Command Injection in gulp-scss-lint CVE-2020-7601, GHSA-g4hj-r7r3-9rwv, SNYK-JS-GULPSCSSLINT-560114 | Critical | 2.7% | 15 Mar, 2020 | npm gulp-scss-lint |
Improper Neutralization of Special Elements used in an OS Command in Blamer CVE-2019-10807, GHSA-8cxp-cjm8-fj36, SNYK-JS-BLAMER-559541 | Critical | 2.4% | 11 Mar, 2020 | npm blamer |