Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Resource exhaustion in socket.io-parser CVE-2020-36049, GHSA-xfhh-g9f5-x4m4 | High | 2.7% | 08 Jan, 2021 | npm socket.io-parser |
Resource exhaustion in engine.io CVE-2020-36048, GHSA-j4f2-536g-r55m | High | 3.3% | 08 Jan, 2021 | npm engine.io |
XSS in Vega CVE-2020-26296, GHSA-r2qc-w64x-6j54 | High | 1.7% | 30 Dec, 2020 | npm vega |
regular expression denial of service (ReDoS) CVE-2020-26289, GHSA-r92x-f52r-x54g | High | 2.2% | 24 Dec, 2020 | npm date-and-time |
Prototype pollution in multi-ini CVE-2020-28460, GHSA-67mq-h2r9-rh2m, SNYK-JS-MULTIINI-1053229 | High | 1.5% | 22 Dec, 2020 | npm multi-ini |
Command Injection Vulnerability in systeminformation CVE-2020-26274, GHSA-m57p-p67h-mq74 | High | 2.7% | 16 Dec, 2020 | npm systeminformation |
datatables.net vulnerable to Prototype Pollution due to incomplete fix CVE-2020-28458, GHSA-m7j4-fhg6-xf5v | High | 3.7% | 16 Dec, 2020 | npm datatables.net |
ua-parser-js Regular Expression Denial of Service vulnerability CVE-2020-7793, GHSA-394c-5j6w-4xmx | High | 3.9% | 11 Dec, 2020 | npm ua-parser-js |
Prototype Pollution in mout CVE-2020-7792, GHSA-pc58-wgmc-hfjr | High | 2.1% | 11 Dec, 2020 | npm mout |
Improper Authentication in react-adal CVE-2020-7787, GHSA-7mpx-vg3c-cmr4 | High | 1.3% | 09 Dec, 2020 | npm react-adal |
Cross-Site Scripting bypass in html-purify GHSA-5p28-63mc-cgr9 | High | Not scored | 04 Dec, 2020 | npm html-purify |
Regular Expression Denial of Service in djvalidator CVE-2020-7779, GHSA-v6wh-2wvh-c8x5 | High | 1.8% | 26 Nov, 2020 | npm djvalidator |
OS Command Injection in systeminformation CVE-2020-7778, GHSA-8j36-q8x7-pm6q, SNYK-JS-SYSTEMINFORMATION-1043753 | High | 2.4% | 26 Nov, 2020 | npm systeminformation |
Prototype Pollution in highlight.js CVE-2020-26237, GHSA-vfrc-7r7c-w9mx | High | 1.3% | 24 Nov, 2020 | npm highlight.js |
Code Injection in jsen CVE-2020-7777, GHSA-vm64-cfqx-3698 | High | 2.1% | 23 Nov, 2020 | npm jsen |
Secret disclosure when containing characters that become URI encoded CVE-2020-26226, GHSA-r2j6-p67h-q639 | High | 1.4% | 18 Nov, 2020 | npm semantic-release |
Prototype pollution in controlled-merge CVE-2020-28268, GHSA-5pg7-v24c-9rp9 | High | 3.6% | 15 Nov, 2020 | npm controlled-merge |
Prototype Pollution in json-logic-js GHSA-m9hw-7xfv-wqg7 | High | Not scored | 12 Nov, 2020 | npm json-logic-js |
Prototype pollution in @strikeentco/set CVE-2020-28267, GHSA-wwg2-2crq-6grr | High | 2.3% | 10 Nov, 2020 | npm @strikeentco/set |
Prototype pollution in json8-merge-patch CVE-2020-8268, GHSA-8v9x-9xqg-r8mr | High | 1.3% | 09 Nov, 2020 | npm json8-merge-patch |
Web Cache Poisoning in find-my-way CVE-2020-7764, GHSA-jgrh-5m3h-9c5f, SNYK-JS-FINDMYWAY-1038269 | High | 1.8% | 08 Nov, 2020 | npm find-my-way |
Arbitrary File Read in phantom-html-to-pdf CVE-2020-7763, GHSA-6h7f-qwqm-35pp, SNYK-JS-PHANTOMHTMLTOPDF-1023598 | High | 1.6% | 05 Nov, 2020 | npm phantom-html-to-pdf |
Path Traversal in browserless-chrome CVE-2020-7758, GHSA-8p9r-f949-699g, SNYK-JS-BROWSERLESSCHROME-1023657 | High | 2.2% | 02 Nov, 2020 | npm browserless-chrome |
Regular expression denial of service in codemirror CVE-2020-7760, GHSA-4gw3-8f77-f72c | High | 5.3% | 30 Oct, 2020 | npm codemirror |
xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion GHSA-c27r-x354-4m68 | High | Not scored | 27 Oct, 2020 | npm xml-crypto |
Regular Expression Denial of Service in dat.gui CVE-2020-7755, GHSA-chwr-hf3w-c984, SNYK-JS-DATGUI-1016275 | High | 2.1% | 27 Oct, 2020 | npm dat.gui |
Regular Expression Denial of Service in trim CVE-2020-7753, GHSA-w5p7-h5w8-2hfq | High | 3.8% | 27 Oct, 2020 | npm trim |
Out-of-bounds Read in Facebook Hermes CVE-2020-1915, GHSA-x4cf-6jr3-3qvp | High | 1.6% | 26 Oct, 2020 | npm hermes-engine |
systeminformation command injection vulnerability CVE-2020-7752, GHSA-94xh-2fmc-xf5j, SNYK-JS-SYSTEMINFORMATION-1021909 | High | 6.7% | 26 Oct, 2020 | npm systeminformation |
Prototype pollution in pathval CVE-2020-7751, GHSA-g6ww-v8xp-vmwg, SNYK-JS-PATHVAL-596926 | High | 1.5% | 26 Oct, 2020 | npm pathval |
Improper Authorization in Strapi CVE-2020-27665, GHSA-4p55-xj37-fx7g | High | 1.2% | 22 Oct, 2020 | npm strapi-plugin-content-type-builder |
Injection and Cross-site Scripting in osm-static-maps CVE-2020-7749, GHSA-pxcf-v868-m492 | High | 1.6% | 20 Oct, 2020 | npm osm-static-maps |
Prototype pollution in @tsed/core CVE-2020-7748, GHSA-77xq-cpvg-7xm2, SNYK-JS-TSEDCORE-1019382 | High | 1.7% | 20 Oct, 2020 | npm @tsed/core |
Regular expression denial of service in npm-user-validate CVE-2020-7754, GHSA-pw54-mh39-w3hc, GHSA-xgh6-85xh-479p | High | 3.5% | 16 Oct, 2020 | npm npm-user-validate |
Prototype Pollution in mathjs CVE-2020-7743, GHSA-x2fc-mxcx-w4mf | High | 3.9% | 13 Oct, 2020 | npm mathjs |
Prototype Pollution in simpl-schema CVE-2020-7742, GHSA-9mx2-prfp-8hqp, SNYK-JS-SIMPLSCHEMA-1016157 | High | 1.5% | 07 Oct, 2020 | npm simpl-schema |
Server-Side Request Forgery in node-pdf-generator CVE-2020-7740, GHSA-hcq6-h8v2-r5wm | High | 2.0% | 06 Oct, 2020 | npm node-pdf-generator |
Server-Side Request Forgery in phantomjs-seo CVE-2020-7739, GHSA-j9pj-hx76-92v6 | High | 1.4% | 06 Oct, 2020 | npm phantomjs-seo |
Unpreventable top-level navigation CVE-2020-15174, GHSA-2q4g-w47c-4674 | High | 1.3% | 06 Oct, 2020 | npm electron |
Prototype pollution in json-pointer CVE-2020-7709, GHSA-7mg4-w3w5-x5pc | High | 1.8% | 05 Oct, 2020 | Maven org.webjars.npm:json-pointer npm json-pointer |
Code Injection in oauth2-server CVE-2017-18924, GHSA-2fw4-mgq9-39cx | High | 2.2% | 04 Oct, 2020 | npm oauth2-server |
File restriction bypass in socket.io-file CVE-2020-24807, GHSA-6495-8jvh-f28x | High | 2.1% | 02 Oct, 2020 | npm socket.io-file |
Arbitrary Code Execution in shiba CVE-2020-7738, GHSA-jvf4-g24p-2qgw | High | 1.6% | 02 Oct, 2020 | npm shiba |
Sensitive data exposure in NATS CVE-2020-26149, GHSA-82rf-q3pr-4f6p | High | 1.5% | 30 Sep, 2020 | npm nats npm nats.ws |
Regular Expression Denial of Service in Handlebars CVE-2019-20922, GHSA-62gr-4qp9-h98f, SNYK-JS-HANDLEBARS-480388 | High | 3.7% | 30 Sep, 2020 | npm handlebars |
Arbitrary Code Execution in Handlebars CVE-2019-20920, GHSA-3cqr-58rm-57f8, SNYK-JS-HANDLEBARS-534478 | High | 3.2% | 30 Sep, 2020 | npm handlebars |
Uncontrolled Resource Consumption in json-bigint CVE-2020-8237, GHSA-wgfq-7857-4jcc | High | 1.7% | 18 Sep, 2020 | npm json-bigint |
Regular Expression Denial of Service in ua-parser-js CVE-2020-7733, GHSA-662x-fhqg-9p8v | High | 4.5% | 16 Sep, 2020 | npm ua-parser-js |
Renovate vulnerable to Azure DevOps token leakage in logs CVE-2020-37267, GHSA-36rh-ggpr-j3gj | High | 0.4% | 14 Sep, 2020 | npm renovate |
SQL Injection in untitled-model GHSA-hq8g-qq57-5275 | High | Not scored | 11 Sep, 2020 | npm untitled-model |