Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OS Command Injection in serial-number CVE-2019-10804, GHSA-3fw4-4h3m-892h, SNYK-JS-SERIALNUMBER-559010 | Critical | 2.8% | 28 Feb, 2020 | npm serial-number |
push-dir Enables OS Command Injection CVE-2019-10803, GHSA-926x-m6m5-3mmp, SNYK-JS-PUSHDIR-559009 | Critical | 2.8% | 28 Feb, 2020 | npm push-dir |
OS Command Injection in giting CVE-2019-10802, GHSA-53xj-v576-3ch2 | Critical | 2.5% | 28 Feb, 2020 | npm giting |
OS Command Injection in enpeem CVE-2019-10801, GHSA-hmw2-mvvh-jf5j, SNYK-JS-ENPEEM-559007 | Critical | 2.8% | 28 Feb, 2020 | npm enpeem |
Improper Input Validation and Code Injection in pdf-image CVE-2020-8132, GHSA-rv7p-mmwq-x674 | Critical | 2.0% | 28 Feb, 2020 | npm pdf-image |
OS Command Injection and Command Injection in kill-port-process CVE-2019-15609, GHSA-xp4x-j9vh-c3wf | Critical | 4.0% | 28 Feb, 2020 | npm kill-port-process |
OS Command Injection in rpi CVE-2019-10796, GHSA-vf26-7gjf-f92r | Critical | 2.8% | 24 Feb, 2020 | npm rpi |
promise-probe OS command injection vulnerability CVE-2019-10791, GHSA-vmqq-7qvx-68qx | Critical | 2.0% | 18 Feb, 2020 | npm promise-probe |
Code Injection in script-manager CVE-2020-8129, GHSA-rhwf-hqpr-q8g2 | Critical | 2.9% | 14 Feb, 2020 | npm script-manager |
Server-Side Request Forgery and Inclusion of Functionality from Untrusted Control Sphere in jsreport CVE-2020-8128, GHSA-5fjj-cfh2-ghc5 | Critical | 2.7% | 14 Feb, 2020 | npm jsreport |
Potential Command Injection in libnotify CVE-2013-7381, GHSA-6898-wx94-8jq8 | Critical | 2.7% | 12 Feb, 2020 | npm libnotify |
Potential Command Injection in hubot-scripts CVE-2013-7378, GHSA-hwch-749c-rv63 | Critical | 2.7% | 12 Feb, 2020 | npm hubot-scripts |
OS Command Injection in curling CVE-2019-10789, GHSA-xmxh-g7wj-8m4m | Critical | 4.9% | 06 Feb, 2020 | npm curling |
OS Command Injection in im-metadata CVE-2019-10788, GHSA-qfxv-qqvg-24pg, SNYK-JS-IMMETADATA-544184 | Critical | 2.4% | 04 Feb, 2020 | npm im-metadata |
OS Command Injection in im-resize CVE-2019-10787, GHSA-r9vm-rhmf-7hxx, SNYK-JS-IMRESIZE-544183 | Critical | 3.8% | 04 Feb, 2020 | npm im-resize |
Improper Input Validation in network-manager CVE-2019-10786, GHSA-ph32-23p8-9rw5 | Critical | 2.1% | 04 Feb, 2020 | npm network-manager |
Improper Input Validation in klona CVE-2020-8125, GHSA-8f89-2fwj-5v5r | Critical | 4.1% | 04 Feb, 2020 | npm klona |
OS Command Injection in lsof CVE-2019-10783, GHSA-whq6-mj2r-mjqc | Critical | 2.6% | 29 Jan, 2020 | npm lsof |
Validation Bypass in schema-inspector CVE-2019-10781, GHSA-r24h-634p-m72x, SNYK-JS-SCHEMAINSPECTOR-536970 | Critical | 1.4% | 22 Jan, 2020 | npm schema-inspector |
Privilege Escalation in cordova-plugin-inappbrowser CVE-2019-0219, GHSA-c6pw-q7f2-97hv | Critical | 7.8% | 14 Jan, 2020 | npm cordova-plugin-inappbrowser |
HashBrown CMS RCE CVE-2020-6948, GHSA-4gjv-5jjp-rcgh | Critical | 2.8% | 13 Jan, 2020 | npm hashbrown-cms |
Command Injection in hot-formula-parser CVE-2020-6836, GHSA-rc77-xxq6-4mff | Critical | 2.1% | 11 Jan, 2020 | npm hot-formula-parser |
OS command injection in aws-lambda CVE-2019-10777, GHSA-934x-72xh-5hrg | Critical | 1.6% | 08 Jan, 2020 | npm aws-lambda |
OS Command Injection in devcert-sanscache CVE-2019-10778, GHSA-4gp3-p7ph-x2jr | Critical | 3.5% | 08 Jan, 2020 | npm devcert-sanscache |
OS command injection in git-diff-apply CVE-2019-10776, GHSA-84cm-v6jp-gjmr | Critical | 2.1% | 07 Jan, 2020 | npm git-diff-apply |
Remote Code Execution Vulnerability in NPM mongo-express CVE-2019-10758, GHSA-h47j-hc6x-h3qq, SNYK-JS-MONGOEXPRESS-473215 | CriticalExploited | 84.7% | 24 Dec, 2019 | npm mongo-express |
Prototype Pollution in handlebars CVE-2019-19919, GHSA-w457-6q6x-cgp9 | Critical | 7.1% | 20 Dec, 2019 | RubyGems bootstrap-wysihtml5-rails npm handlebars |
Command Injection in tree-kill CVE-2019-15599, GHSA-884p-74jh-xrg2 | Critical | 2.7% | 18 Dec, 2019 | npm tree-kill |
Treekill Enables OS Command Injection CVE-2019-15598, GHSA-j7fq-p9q7-5wfv | Critical | 2.7% | 18 Dec, 2019 | npm tree-kill |
Command Injection in node-df CVE-2019-15597, GHSA-wp7m-mrvf-599c | Critical | 2.7% | 18 Dec, 2019 | npm node-df |
Sandbox Breakout / Arbitrary Code Execution in safer-eval CVE-2019-10769, GHSA-v63x-xc9j-hhvq | Critical | 2.6% | 06 Dec, 2019 | npm safer-eval |
Arbitrary File Write in iobroker.admin CVE-2019-10765, GHSA-54xj-q58h-9x57, SNYK-JS-IOBROKERADMIN-534634 | Critical | 1.7% | 20 Nov, 2019 | npm iobroker.admin |
Critical severity vulnerability that affects slpjs CVE-2019-16762, GHSA-425c-ccf3-3jrr | Critical | 1.1% | 15 Nov, 2019 | npm slpjs |
Validation Bypass in slp-validate CVE-2019-16761, GHSA-wmx6-vxcf-c3gr | Critical | 1.0% | 15 Nov, 2019 | npm slp-validate |
Strapi allows unauthenticated attacker to reset admin password without valid reset token CVE-2019-18818, GHSA-6xc2-mj39-q599 | Critical | 97.6% | 07 Nov, 2019 | npm strapi |
SQL Injection in sequelize CVE-2019-10749, GHSA-2598-2f59-rmhq, SNYK-JS-SEQUELIZE-450222 | Critical | 1.2% | 29 Oct, 2019 | npm sequelize |
SQL Injection in sequelize CVE-2019-10748, GHSA-j9xp-92vc-559j, SNYK-JS-SEQUELIZE-450221 | Critical | 1.3% | 29 Oct, 2019 | npm sequelize |
SQL Injection and Cross-site Scripting in class-validator CVE-2019-18413, GHSA-fj58-h2fr-3pp2 | Critical | 2.0% | 24 Oct, 2019 | npm class-validator |
Sandbox Breakout in realms-shim GHSA-7cg8-pq9v-x98q | Critical | Not scored | 21 Oct, 2019 | npm realms-shim |
SQL Injection in sequelize CVE-2019-10752, GHSA-m9jw-237r-gvfv | Critical | 1.5% | 17 Oct, 2019 | npm sequelize |
Rambox RCE Vulnerability CVE-2019-17625, GHSA-2gc6-2h2g-ph48 | Critical | 3.0% | 16 Oct, 2019 | npm Rambox |
Sandbox Breakout / Arbitrary Code Execution in safer-eval CVE-2019-10760, GHSA-hgch-jjmr-gp7w, SNYK-JS-SAFEREVAL-473029 | Critical | 2.9% | 15 Oct, 2019 | npm safer-eval |
Sandbox Breakout / Arbitrary Code Execution in safer-eval CVE-2019-10759, GHSA-r3x4-wr4h-pw33, SNYK-JS-SAFEREVAL-173772 | Critical | 1.8% | 15 Oct, 2019 | npm safer-eval |
Cross-site scripting in Swagger-UI CVE-2019-17495, GHSA-c427-hjc3-wrfw | Critical | 5.7% | 10 Oct, 2019 | Maven io.springfox:springfox-swagger-ui Maven org.webjars.npm:swagger-ui Maven org.webjars:swagger-ui npm swagger-ui |
Improper Input Validation in Automattic Mongoose CVE-2019-17426, GHSA-8687-vv9j-hgph | Critical | 1.5% | 10 Oct, 2019 | npm mongoose |
SQL Injection in knex CVE-2019-10757, GHSA-58v4-qwx5-7f59, SNYK-JS-KNEX-471962 | Critical | 1.2% | 08 Oct, 2019 | npm knex |
Sandbox Breakout in realms-shim GHSA-6jg8-7333-554w | Critical | Not scored | 04 Oct, 2019 | npm realms-shim npm ses |
JHipster Kotlin using insecure source of randomness `RandomStringUtils` before v1.2.0 CVE-2019-16303, GHSA-j3rh-8vwq-wh84, GHSA-mwp6-j9wf-968c | Critical | 3.7% | 13 Sep, 2019 | npm generator-jhipster npm generator-jhipster-kotlin |
Command Injection in gitlabhook CVE-2019-5485, GHSA-549f-73hh-mj38 | Critical | 58.8% | 13 Sep, 2019 | npm gitlabhook |
Total.js CMS RCE Vulnerability CVE-2019-15954, GHSA-v287-9w3v-x5c5 | Critical | 78.7% | 05 Sep, 2019 | npm total4 |