Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Command Injection in entitlements GHSA-g8vp-6hv4-m67c | High | Not scored | 11 Sep, 2020 | npm entitlements |
Cross-Site Scripting in node-red GHSA-5g6j-8hv4-vfgj | High | Not scored | 11 Sep, 2020 | npm node-red |
Cross-Site Scripting in serve GHSA-xw79-hhv6-578c | High | Not scored | 11 Sep, 2020 | npm serve |
Path Traversal in serve GHSA-48gc-5j93-5cfq | High | Not scored | 11 Sep, 2020 | npm serve |
SQL Injection in resquel GHSA-crpm-fm48-chj7 | High | Not scored | 11 Sep, 2020 | npm resquel |
Unauthorized File Access in atompm GHSA-v86x-f47q-f7f4 | High | Not scored | 11 Sep, 2020 | npm atompm |
Command Injection in soletta-dev-app GHSA-8mgg-5x65-m4m4 | High | Not scored | 11 Sep, 2020 | npm soletta-dev-app |
Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145) CVE-2018-17145, GHSA-hx3r-jv9q-85jw | High | 4.8% | 10 Sep, 2020 | npm bcoin |
Signed to Unsigned Conversion Error in Facebook Hermes CVE-2020-1913, GHSA-gmpm-xp43-f7g6 | High | 1.2% | 09 Sep, 2020 | npm hermes-engine |
Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes CVE-2020-1912, GHSA-pf27-929j-9pmm | High | 1.8% | 09 Sep, 2020 | npm hermes-engine |
Remote Code Execution in next GHSA-5vj8-3v2h-h38v | High | Not scored | 04 Sep, 2020 | npm next |
Regular Expression Denial of Service in papaparse CVE-2020-36649, GHSA-qvjc-g5vr-mfgr | High | 1.4% | 04 Sep, 2020 | npm papaparse |
Denial of Service in http-proxy GHSA-6x33-pw7p-hmpq | High | Not scored | 04 Sep, 2020 | npm http-proxy |
Denial of Service in @commercial/ammo GHSA-rhc3-76jw-4f2x | High | Not scored | 04 Sep, 2020 | npm @commercial/ammo |
Cross-Site Scripting in markdown-it-katex GHSA-5ff8-jcf9-fw62 | High | Not scored | 04 Sep, 2020 | npm markdown-it-katex |
Hardcoded Initialization Vector in parsel GHSA-q643-w9jp-q2qg | High | Not scored | 04 Sep, 2020 | npm parsel |
Cross-Site Scripting in atlasboard-atlassian-package GHSA-25v4-mcx4-hh35 | High | Not scored | 04 Sep, 2020 | npm atlasboard-atlassian-package |
Server-Side Request Forgery in ftp-srv GHSA-r4m5-47cq-6qg8 | High | Not scored | 04 Sep, 2020 | npm ftp-srv |
Cross-Site Scripting in nextcloud-vue-collections GHSA-whv6-rj84-2vh2 | High | Not scored | 04 Sep, 2020 | npm nextcloud-vue-collections |
Command Injection in treekill GHSA-533p-g2hq-qr26 | High | Not scored | 04 Sep, 2020 | npm treekill |
Cross-Site Scripting in react GHSA-hg79-j56m-fxgv | High | Not scored | 04 Sep, 2020 | npm react |
Server-Side Request Forgery in html-pdf-chrome GHSA-5p98-wpc9-g498 | High | Not scored | 04 Sep, 2020 | npm html-pdf-chrome |
Prototype Pollution in sahmat GHSA-83pq-466j-fc6j | High | Not scored | 04 Sep, 2020 | npm sahmat |
Prototype Pollution in safe-object2 GHSA-qccf-q7p4-3q3j | High | Not scored | 04 Sep, 2020 | npm safe-object2 |
Prototype Pollution in getsetdeep GHSA-8j49-49jq-vwcq | High | Not scored | 04 Sep, 2020 | npm getsetdeep |
Prototype Pollution in deep-setter GHSA-9qrg-h9g8-c65q | High | Not scored | 04 Sep, 2020 | npm deep-setter |
Prototype Pollution in get-setter GHSA-ch82-gqh6-9xj9 | High | Not scored | 04 Sep, 2020 | npm get-setter |
Prototype Pollution in reggae GHSA-q9wr-gcjc-hq52 | High | Not scored | 04 Sep, 2020 | npm reggae |
Prototype Pollution in unflatten GHSA-6fh5-8wq8-w3wr | High | Not scored | 04 Sep, 2020 | npm unflatten |
Prototype Pollution in flat-wrap GHSA-g7h8-p22m-2rvx | High | Not scored | 04 Sep, 2020 | npm flat-wrap |
Arbitrary Code Execution in handlebars GHSA-q2c6-c6pm-g3gh | High | Not scored | 04 Sep, 2020 | npm handlebars |
Prototype Pollution in handlebars GHSA-g9r4-xpmj-mj65 | High | Not scored | 04 Sep, 2020 | npm handlebars |
Arbitrary Code Execution in handlebars GHSA-2cf5-4w76-r9qv | High | Not scored | 04 Sep, 2020 | npm handlebars |
Machine-In-The-Middle in airtable GHSA-jrj9-5qp6-2v8q | High | Not scored | 03 Sep, 2020 | npm airtable |
Cross-Site Scripting in markdown-to-jsx GHSA-ccrp-c664-8p4j | High | Not scored | 03 Sep, 2020 | npm markdown-to-jsx |
Unauthorized File Access in node-git-server GHSA-cv3v-7846-6pxm | High | Not scored | 03 Sep, 2020 | npm node-git-server |
Cross-Site Scripting in hexo-admin GHSA-phph-xpj4-wvcv | High | Not scored | 03 Sep, 2020 | npm hexo-admin |
Denial of Service in mongodb GHSA-mh5c-679w-hh4r | High | Not scored | 03 Sep, 2020 | npm mongodb |
Denial of Service in subtext GHSA-2mvq-xp48-4c77 | High | Not scored | 03 Sep, 2020 | npm subtext |
Cross-Site Scripting in snekserve GHSA-hv4w-jhcj-6wfw | High | Not scored | 03 Sep, 2020 | npm snekserve |
Denial of Service in @commercial/subtext GHSA-fvwr-h9xh-m6wc | High | Not scored | 03 Sep, 2020 | npm @commercial/subtext |
Denial of Service in @hapi/subtext GHSA-4rgj-8mq3-hggj | High | Not scored | 03 Sep, 2020 | npm @hapi/subtext |
Regular Expression Denial of Service in sql-injection GHSA-hvxq-j2r4-4jm8 | High | Not scored | 03 Sep, 2020 | npm sql-injection |
Prototype Pollution in mithril GHSA-c3px-v9c7-m734 | High | Not scored | 03 Sep, 2020 | npm mithril |
Sandbox Breakout / Arbitrary Code Execution in notevil GHSA-7r5f-7qr4-pf6q | High | Not scored | 03 Sep, 2020 | npm notevil |
Cross-Site Scripting in console-feed GHSA-g9wg-wq4f-2x5w | High | Not scored | 03 Sep, 2020 | npm console-feed |
Authentication Bypass in otpauth GHSA-rmmc-8cqj-hfp3 | High | Not scored | 03 Sep, 2020 | npm otpauth |
Cross-Site Scripting in dmn-js-properties-panel GHSA-h9wr-xr4r-66fh | High | Not scored | 03 Sep, 2020 | npm dmn-js-properties-panel |
Cross-Site Scripting in cmmn-js-properties-panel GHSA-vmh4-322v-cfpc | High | Not scored | 03 Sep, 2020 | npm cmmn-js-properties-panel |
Cross-Site Scripting in bpmn-js-properties-panel GHSA-vpj4-89q8-rh38 | High | Not scored | 03 Sep, 2020 | npm bpmn-js-properties-panel |