Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Rebuild-bot workflow may allow unauthorised repository modifications CVE-2021-21423, GHSA-gg2g-m5wc-vccq, PYSEC-2021-111 | High | 1.4% | 06 Apr, 2021 | PyPI projen npm projen |
Command injection vulnerability in @prisma/sdk in getPackedPackage function CVE-2021-21414, GHSA-pxcc-hj8w-fmm7 | High | 2.1% | 06 Apr, 2021 | npm @prisma/sdk |
ApiKey secret could be revelated on network issue CVE-2021-21421, GHSA-xw22-wv29-3299 | High | 1.1% | 01 Apr, 2021 | npm node-etsy-client |
Arbitrary Command Injection in portprocesses CVE-2021-23348, GHSA-vm67-7vmg-66vm, SNYK-JS-PORTPROCESSES-1078536 | High | 1.8% | 31 Mar, 2021 | npm portprocesses |
[thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values CVE-2021-21412, GHSA-rj44-gpjc-29r7 | High | 1.3% | 30 Mar, 2021 | npm @thi.ng/egf |
Arbitrary code execution in kill-by-port CVE-2021-23363, GHSA-mm4f-47ch-f7hx, SNYK-JS-KILLBYPORT-1078531 | High | 1.8% | 30 Mar, 2021 | npm kill-by-port |
Regular Expression Denial of Service (ReDoS) in es6-crawler-detect CVE-2020-28501, GHSA-jxg6-fhwc-9v9c | High | 1.5% | 22 Mar, 2021 | npm es6-crawler-detect |
Command Injection in killport CVE-2021-23360, GHSA-fc42-h7q4-qp8h, SNYK-JS-KILLPORT-1078535 | High | 2.3% | 21 Mar, 2021 | npm killport |
Regular Expression Denial-of-Service in npm schema-inspector CVE-2021-21267, GHSA-f38p-c2gq-4pmr | High | 2.1% | 19 Mar, 2021 | npm schema-inspector |
Null characters not escaped CVE-2021-21384, GHSA-f2rp-38vg-j3gh | High | 0.6% | 18 Mar, 2021 | npm shescape |
Code injection in port-killer CVE-2021-23359, GHSA-2548-q746-x5x6 | High | 1.7% | 18 Mar, 2021 | npm port-killer |
Regular Expression Denial of Service (ReDoS) in ua-parser-js CVE-2021-27292, GHSA-78cj-fxph-m83p | High | 3.4% | 17 Mar, 2021 | npm ua-parser-js |
Vulnerability allowing for reading internal HTTP resources GHSA-hfwx-c7q6-g54c | High | Not scored | 12 Mar, 2021 | npm highcharts-export-server |
Regular Expression Denial of Service (ReDoS) CVE-2021-28092, GHSA-7r28-3m3f-r2pr | High | 2.0% | 12 Mar, 2021 | npm is-svg |
Regular Expression Denial of Service (ReDoS) CVE-2021-27290, GHSA-vx3p-948g-6vhq | High | 4.7% | 12 Mar, 2021 | npm ssri |
Prototype poisoning CVE-2021-21368, GHSA-gmjw-49p4-pcfm | High | 1.6% | 12 Mar, 2021 | npm msgpack5 |
printf vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2021-23354, GHSA-xfhp-gmh8-r8v2, SNYK-JS-PRINTF-1072096 | High | 2.2% | 12 Mar, 2021 | npm printf |
jspdf vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2021-23353, GHSA-57f3-gghm-9mhc | High | 2.6% | 09 Mar, 2021 | npm jspdf |
Improper Input Validation (RCE) CVE-2021-26814, GHSA-w36g-q975-37rg | High | 8.7% | 06 Mar, 2021 | npm wazuh |
Prototype Pollution in Node-Red CVE-2021-21297, GHSA-xp9c-82x8-7f67 | High | 1.4% | 26 Feb, 2021 | npm @node-red/runtime |
Denial of Service (DoS) in restify-paginate CVE-2020-27543, GHSA-qr9h-vr5p-pwwx | High | 2.6% | 25 Feb, 2021 | npm restify-paginate |
URIjs Hostname spoofing via backslashes in URL CVE-2021-27516, GHSA-p6j9-7xhc-rhwp | High | 2.5% | 22 Feb, 2021 | npm urijs |
Integer Overflow in png-img CVE-2020-28248, GHSA-q5wr-fvpq-p67g | High | 2.2% | 20 Feb, 2021 | npm png-img |
Regular expression Denial of Service in @progfay/scrapbox-parser CVE-2021-27405, GHSA-9fhw-r42p-5c7r | High | 1.8% | 19 Feb, 2021 | npm @progfay/scrapbox-parser |
Denial of service in prismjs CVE-2021-23341, GHSA-h4hr-7fg3-h35w | High | 3.2% | 18 Feb, 2021 | npm prismjs |
Denial of service in three CVE-2020-28496, GHSA-fq6p-x6j3-cmmq | High | 2.5% | 18 Feb, 2021 | npm three |
Command Injection Vulnerability CVE-2021-21315, GHSA-2m8v-572m-ff2v | HighExploited | 90.7% | 16 Feb, 2021 | npm systeminformation |
Command Injection in lodash CVE-2021-23337, GHSA-35jh-r3h4-6jhm | High | 21.3% | 15 Feb, 2021 | RubyGems lodash-rails npm lodash npm lodash-es npm lodash-template +1 more |
Denial of Service in get-ip-range CVE-2021-27191, GHSA-6q4w-3wp4-q5wf | High | 2.0% | 11 Feb, 2021 | npm get-ip-range |
LDAP Injection in is-user-valid CVE-2021-23335, GHSA-22cm-3qf2-2wc7 | High | 1.4% | 11 Feb, 2021 | npm is-user-valid |
Regular Expression Denial of Service (REDoS) in Marked CVE-2021-21306, GHSA-4r62-v4vq-hr96 | High | 2.5% | 08 Feb, 2021 | npm marked |
Prototype Pollution in decal CVE-2020-28450, GHSA-j32x-j8pj-pg2h | High | 1.8% | 04 Feb, 2021 | npm decal |
Prototype Pollution in decal CVE-2020-28449, GHSA-vp77-fqqp-79j8 | High | 1.8% | 04 Feb, 2021 | npm decal |
Denial of Service in uap-core CVE-2021-21317, GHSA-p4pj-mg4r-x6v4 | High | 2.5% | 02 Feb, 2021 | npm uap-core |
Prototype pollution in total.js CVE-2020-28495, GHSA-6cf8-qhqj-vjqm, SNYK-JS-TOTALJS-1046671 | High | 3.8% | 02 Feb, 2021 | npm total.js |
Command injection in total.js CVE-2020-28494, GHSA-4449-hg37-77v8, SNYK-JS-TOTALJS-1046672 | High | 1.7% | 02 Feb, 2021 | npm total.js |
Command injection in kill-process-on-port CVE-2020-28426, GHSA-5wqj-f379-6jh4 | High | 2.0% | 01 Feb, 2021 | npm kill-process-on-port |
Angular Expressions - Remote Code Execution CVE-2021-21277, GHSA-j6px-jwvv-vpwq | High | 2.8% | 01 Feb, 2021 | npm angular-expressions |
Prototype pollution in nested-object-assign CVE-2021-23329, GHSA-c497-v8pv-ch6x, SNYK-JS-NESTEDOBJECTASSIGN-1065977 | High | 1.5% | 31 Jan, 2021 | npm nested-object-assign |
Processing untrusted theming resources might execute arbitrary code (ACE) CVE-2021-21316, GHSA-3crj-w4f5-gwh4 | High | 1.0% | 29 Jan, 2021 | npm less-openui5 |
Path traversal in Node-RED-Dashboard CVE-2021-3223, GHSA-2hw7-mxvj-m455 | High | 18.9% | 26 Jan, 2021 | npm node-red-dashboard |
Path Traversal in node-red-contrib-huemagic CVE-2021-25864, GHSA-frpw-jrwx-hcfv | High | 9.3% | 26 Jan, 2021 | npm node-red-contrib-huemagic |
Command Injection in @graphql-tools/git-loader CVE-2021-23326, GHSA-vhhw-xjvf-wprr, SNYK-JS-GRAPHQLTOOLSGITLOADER-1062543 | High | 2.8% | 20 Jan, 2021 | npm @graphql-tools/git-loader |
Cross-site Request Forgery in fastify-csrf CVE-2020-28482, GHSA-49wp-qq6x-g2rf, SNYK-JS-FASTIFYCSRF-1062044 | High | 1.0% | 19 Jan, 2021 | npm fastify-csrf |
Denial of Service (DoS) via the unsetByPath function in jsjoints CVE-2020-28479, GHSA-cq8r-fc3q-6hg2 | High | 2.1% | 19 Jan, 2021 | npm jointjs |
Prototype pollution in gsap CVE-2020-28478, GHSA-6g8v-hpgw-h2v7 | High | 1.6% | 19 Jan, 2021 | npm gsap |
Prototype Pollution in immer CVE-2020-28477, GHSA-9qmh-276g-x5pj | High | 2.3% | 19 Jan, 2021 | npm immer |
Cross-site Scripting (XSS) in @scullyio/scully CVE-2020-28470, GHSA-r96p-v3cr-gfv8 | High | 0.8% | 14 Jan, 2021 | npm @scullyio/ng-lib npm @scullyio/scully |
Regular Expression Denial of Service in jquery-validation CVE-2021-21252, GHSA-jxwx-85vp-gvwm | High | 3.6% | 13 Jan, 2021 | NuGet jQuery.Validation npm jquery-validation |
botframework-connector vulnerable to Improper Authentication CVE-2021-1725, GHSA-cqff-fx2x-p86v, GHSA-fvcj-hvfw-7f2v, PYSEC-2021-422 | High | 1.1% | 12 Jan, 2021 | PyPI botframework-connector npm botframework-connector |