Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Prototype Pollution in lodash.mergewith GHSA-779f-wgxg-qr8f | High | Not scored | 03 Sep, 2020 | npm lodash.mergewith |
Prototype Pollution in lodash.defaultsdeep GHSA-46fh-8fc5-xcwx | High | Not scored | 03 Sep, 2020 | npm lodash.defaultsdeep |
Prototype Pollution in lodash.mergewith GHSA-5947-m4fg-xhqg | High | Not scored | 03 Sep, 2020 | npm lodash.mergewith |
Prototype Pollution in lodash.defaultsdeep GHSA-h5mp-5q4p-ggf5 | High | Not scored | 03 Sep, 2020 | npm lodash.defaultsdeep |
Prototype Pollution in lodash.merge GHSA-2m96-9w4j-wgv7 | High | Not scored | 03 Sep, 2020 | npm lodash.merge |
Prototype Pollution in lodash.merge GHSA-h726-x36v-rx45 | High | Not scored | 03 Sep, 2020 | npm lodash.merge |
Cross-Site Scripting in takeapeek GHSA-4q2f-8g74-qm56 | High | Not scored | 03 Sep, 2020 | npm takeapeek |
Cross-Site Scripting in jquery.json-viewer GHSA-v9wp-8r97-v6xg | High | Not scored | 03 Sep, 2020 | npm jquery.json-viewer |
Path Traversal in restify-swagger-jsdoc GHSA-gvff-25cc-4f66 | High | Not scored | 03 Sep, 2020 | npm restify-swagger-jsdoc |
Cross-Site Scripting in bleach GHSA-5634-rv46-48jf | High | Not scored | 03 Sep, 2020 | npm bleach |
Sandbox Breakout / Arbitrary Code Execution in safe-eval GHSA-9pcf-h8q9-63f6 | High | Not scored | 03 Sep, 2020 | npm safe-eval |
Cross-Site Scripting in graylog-web-interface GHSA-9qgh-7pgp-hp7r | High | Not scored | 03 Sep, 2020 | npm graylog-web-interface |
Path Traversal in zero GHSA-crf7-fvjx-863q | High | Not scored | 03 Sep, 2020 | npm zero |
Cross-Site Scripting in eco GHSA-r32x-jhw5-g48p | High | Not scored | 03 Sep, 2020 | npm eco |
Cross-Site Scripting in @ionic/core GHSA-r3xc-47qg-h929 | High | Not scored | 03 Sep, 2020 | npm @ionic/core |
Command Injection in local-devices GHSA-w725-67p7-xv22 | High | Not scored | 03 Sep, 2020 | npm local-devices |
Path Traversal in file-static-server GHSA-qjfh-xc44-rm9x | High | Not scored | 03 Sep, 2020 | npm file-static-server |
Path Traversal in ponse GHSA-wfhx-6pcm-7m55 | High | Not scored | 03 Sep, 2020 | npm ponse |
Path Traversal in bruteser GHSA-v7cp-5326-54fh | High | Not scored | 03 Sep, 2020 | npm bruteser |
Improper Authorization in @sap-cloud-sdk/core GHSA-r2vw-jgq9-jqx2 | High | Not scored | 03 Sep, 2020 | npm @sap-cloud-sdk/core |
Cross-site scripting in bootstrap-select CVE-2019-20921, GHSA-7c82-mp33-r854, GHSA-9r7h-6639-v5mw, SNYK-JS-BOOTSTRAPSELECT-570457 | High | 1.7% | 03 Sep, 2020 | NuGet bootstrap-select npm bootstrap-select |
Cross-Site Scripting in @toast-ui/editor GHSA-cr56-66mx-293v | High | Not scored | 03 Sep, 2020 | npm @toast-ui/editor |
Cross-Site Scripting in htmr GHSA-f8rq-m28h-8hxj | High | Not scored | 03 Sep, 2020 | npm htmr |
Cross-Site Scripting in lazysizes GHSA-w4vp-3mq7-7v82 | High | Not scored | 03 Sep, 2020 | npm lazysizes |
Cross-Site Scripting in ngx-md GHSA-xr53-m937-jr9c | High | Not scored | 03 Sep, 2020 | npm ngx-md |
Prototype Pollution in @commercial/subtext GHSA-36c4-4r89-6whg | High | Not scored | 03 Sep, 2020 | npm @commercial/subtext |
Denial of Service in @commercial/hapi GHSA-66mv-xh68-h6v2 | High | Not scored | 03 Sep, 2020 | npm @commercial/hapi |
Denial of Service in @hapi/hapi GHSA-23vw-mhv5-grv5 | High | Not scored | 03 Sep, 2020 | npm @hapi/hapi |
Denial of Service in hapi GHSA-7hx8-2rxv-66xv | High | Not scored | 03 Sep, 2020 | npm hapi |
Prototype Pollution in @hapi/subtext GHSA-g9cg-h3jm-cwrc | High | Not scored | 03 Sep, 2020 | npm @hapi/pez |
Prototype Pollution in pez GHSA-g64q-3vg8-8f93 | High | Not scored | 03 Sep, 2020 | npm pez |
Denial of Service in content GHSA-5854-jvxx-2cg9 | High | Not scored | 03 Sep, 2020 | npm content |
Denial of Service in @commercial/subtext GHSA-cvfm-xjc8-f2vm | High | Not scored | 03 Sep, 2020 | npm @commercial/subtext |
Denial of Service in @hapi/content GHSA-3wqh-h42r-x8fq | High | Not scored | 03 Sep, 2020 | npm @hapi/content |
Denial of Service in @hapi/ammo GHSA-gjph-xf5q-6mfq | High | Not scored | 03 Sep, 2020 | npm @hapi/ammo |
Denial of Service in @hapi/accept GHSA-9vrw-m88g-w75q | High | Not scored | 03 Sep, 2020 | npm @hapi/accept |
Denial of Service in ammo GHSA-mg85-8mv5-ffjr | High | Not scored | 03 Sep, 2020 | npm ammo |
HTML Injection in marky-markdown GHSA-mg69-6j3m-jvgw | High | Not scored | 03 Sep, 2020 | npm marky-markdown |
Arbitrary Code Execution in grunt CVE-2020-7729, GHSA-m5pj-vjjf-4m3h | High | 2.3% | 03 Sep, 2020 | npm grunt |
Command Injection in addax GHSA-4q8f-5xxj-946r | High | Not scored | 03 Sep, 2020 | npm addax |
Command Injection in expressfs GHSA-mxmj-84q8-34r7 | High | Not scored | 03 Sep, 2020 | npm expressfs |
SQL Injection in sails-mysql GHSA-hx5x-49mm-vmhw | High | Not scored | 03 Sep, 2020 | npm sails-mysql |
ag-grid Cross-Site Scripting vulnerability GHSA-7p6w-x2gr-rrf8 | High | Not scored | 02 Sep, 2020 | npm ag-grid |
Cross-Site Scripting in fomantic-ui GHSA-788m-pj96-7w2c | High | Not scored | 02 Sep, 2020 | npm fomantic-ui |
Cross-Site Scripting in jquery-mobile GHSA-fj93-7wm4-8x2g | High | Not scored | 02 Sep, 2020 | npm jquery-mobile |
Cross-Site Scripting in wangeditor GHSA-g7mw-5cq6-fv82 | High | Not scored | 02 Sep, 2020 | npm wangeditor |
Insecure Default Configuration in graphql-code-generator GHSA-9w87-4j72-gcv7 | High | Not scored | 02 Sep, 2020 | npm graphql-code-generator |
Command Injection in cocos-utils GHSA-rffp-mc78-wjf7 | High | Not scored | 02 Sep, 2020 | npm cocos-utils |
Command Injection in tomato GHSA-wqhw-frpx-5mmp | High | Not scored | 02 Sep, 2020 | npm tomato |
Improper Authorization in googleapis GHSA-7543-mr7h-6v86 | High | Not scored | 02 Sep, 2020 | npm googleapis |