Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Auth0 Passport-SharePoint does not validate JWT signature CVE-2019-13483, GHSA-45fh-g845-pj9w | High | 0.6% | 25 Jul, 2019 | npm passport-sharepoint |
Path Traversal in serve-here.js GHSA-g8m7-qhv7-9h5x | High | Not scored | 05 Jul, 2019 | npm serve-here |
Directory Traversal in lactate GHSA-68gr-cmcp-g3mj | High | Not scored | 14 Jun, 2019 | npm lactate |
Prototype Pollution in @apollo/gateway GHSA-74cr-77xc-8g6r | High | Not scored | 13 Jun, 2019 | npm @apollo/gateway |
Cross-Site Scripting in ids-enterprise GHSA-49r3-3h96-rwj6 | High | Not scored | 13 Jun, 2019 | npm ids-enterprise |
Cross-Site Scripting in ids-enterprise GHSA-hpfq-8wx8-cgqw | High | Not scored | 13 Jun, 2019 | npm ids-enterprise |
Cross-Site Scripting in ids-enterprise GHSA-crfx-5phg-hmw9 | High | Not scored | 13 Jun, 2019 | npm ids-enterprise |
Command Injection in wiki-plugin-datalog GHSA-pm52-wwrw-c282 | High | Not scored | 13 Jun, 2019 | npm wiki-plugin-datalog |
Regular Expression Denial of Service (ReDoS) GHSA-h6ch-v84p-w6p9 | High | Not scored | 13 Jun, 2019 | npm diff |
Parse Server before v3.4.1 vulnerable to Denial of Service CVE-2019-1020012, GHSA-2479-qvv7-47qq | High | 1.4% | 13 Jun, 2019 | npm parse-server |
Command Injection in fs-path GHSA-gc94-6w89-hpqr | High | Not scored | 12 Jun, 2019 | npm fs-path |
Path Traversal in localhost-now GHSA-73cw-jxmm-qpgh | High | Not scored | 11 Jun, 2019 | npm localhost-now |
Remote Code Execution in node-os-utils GHSA-j9f8-8h89-j69x | High | Not scored | 11 Jun, 2019 | npm node-os-utils |
Denial of Service in http-proxy-agent GHSA-8w57-jfpm-945m | High | Not scored | 11 Jun, 2019 | npm http-proxy-agent |
Prototype Pollution in querystringify GHSA-hxcm-v35h-mg2x | High | Not scored | 07 Jun, 2019 | npm querystringify |
Signature Verification Bypass in jwt-simple GHSA-8v5f-hp78-jgxq | High | Not scored | 06 Jun, 2019 | npm jwt-simple |
Prototype Pollution in handlebars GHSA-q42p-pg8m-cqh6 | High | Not scored | 05 Jun, 2019 | npm handlebars |
High severity vulnerability that affects gun GHSA-886v-mm6p-4m66 | High | Not scored | 05 Jun, 2019 | npm gun |
Code Injection in js-yaml GHSA-8j8c-7jfh-h6hx | High | Not scored | 04 Jun, 2019 | npm js-yaml |
NoSQL Injection in sequelize GHSA-wfp9-vr4j-f49j | High | Not scored | 04 Jun, 2019 | npm sequelize |
Denial of Service in ws GHSA-5v72-xg48-5rpm | High | Not scored | 04 Jun, 2019 | npm ws |
NoSQL Injection in loopback-connector-mongodb GHSA-m734-r4g6-34f9 | High | Not scored | 04 Jun, 2019 | npm loopback-connector-mongodb |
Cross-Site Scripting (XSS) in cloudcmd GHSA-m8fw-534v-xm85 | High | Not scored | 04 Jun, 2019 | npm cloudcmd |
Cross-Site Scripting in react-svg GHSA-8xqr-4cpm-wx7g | High | Not scored | 31 May, 2019 | npm react-svg |
Out-of-bounds Read in base64-url GHSA-j4mr-9xw3-c9jx | High | Not scored | 31 May, 2019 | npm base64-url |
Path Traversal in angular-http-server GHSA-vmhw-fhj6-m3g5 | High | Not scored | 31 May, 2019 | npm angular-http-server |
Prototype Pollution in deap GHSA-xrmp-99wj-p6jc | High | Not scored | 31 May, 2019 | npm deap |
Denial of Service in foreman GHSA-xm28-fw2x-fqv2 | High | Not scored | 31 May, 2019 | npm foreman |
Cross-Site Scripting in bracket-template GHSA-jj6g-7j8p-7gf2 | High | Not scored | 30 May, 2019 | npm bracket-template |
Improper Key Verification in ipns GHSA-j59f-6m4q-62h6 | High | Not scored | 30 May, 2019 | npm ipns |
Arbitrary File Overwrite in fstream CVE-2019-13173, GHSA-xf7w-r453-m56c | High | 2.4% | 30 May, 2019 | npm fstream |
Directory Traversal in ltt.js GHSA-6qh5-wx38-q92g | High | Not scored | 30 May, 2019 | npm ltt.js |
Server-Side Request Forgery in terriajs-server GHSA-p72p-rjr2-r439 | High | Not scored | 29 May, 2019 | npm terriajs-server |
Regular Expression Denial of Service in remarkable CVE-2019-12041, GHSA-q22g-8fr4-qpj4 | High | 1.3% | 13 May, 2019 | npm remarkable |
Denial of Service in axios CVE-2019-10742, GHSA-42xw-2xvc-qx8m | High | 6.1% | 07 May, 2019 | npm axios |
Improper Input Validation and Buffer Over-read in mqtt-packet CVE-2019-5432, GHSA-wv67-9jq7-8r69 | High | 1.8% | 06 May, 2019 | npm mqtt-packet |
Improper Input Validation in tar-fs CVE-2018-20835, GHSA-x2mc-8fgj-3wmr | High | 2.4% | 30 Apr, 2019 | npm tar-fs |
Arbitrary File Overwrite in tar CVE-2018-20834, GHSA-j44m-qm6p-hp7m | High | 3.1% | 30 Apr, 2019 | npm tar |
SQL Injection in sequelize CVE-2019-11069, GHSA-2777-2vq8-c4v4 | High | 1.8% | 10 Apr, 2019 | npm sequelize |
Path Traversal in http-live-simulator CVE-2019-5423, GHSA-2hhw-p8mg-jrm6 | High | 2.8% | 03 Apr, 2019 | npm http-live-simulator |
Cross-Site Scripting in buttle CVE-2019-5422, GHSA-gm29-35c7-8cfw | High | 1.2% | 03 Apr, 2019 | npm buttle |
Directory Traversal in serve CVE-2019-5417, GHSA-xg75-3277-gvvj | High | 2.3% | 21 Mar, 2019 | npm serve |
Path Traversal in localhost-now CVE-2019-5416, GHSA-qwj8-p662-3m7x | High | 2.2% | 21 Mar, 2019 | npm localhost-now |
Path Traversal in serve CVE-2019-5415, GHSA-v588-qcp3-jv46 | High | 1.6% | 21 Mar, 2019 | npm serve |
Command Injection in kill-port CVE-2019-5414, GHSA-pmv6-gf98-p3r5 | High | 1.9% | 21 Mar, 2019 | npm kill-port |
Regular Expression Denial of Service in highcharts CVE-2018-20801, GHSA-xmc8-cjfr-phx3 | High | 3.2% | 14 Mar, 2019 | npm highcharts |
Path Traversal in total.js CVE-2019-8903, GHSA-3q32-j57w-q4w7 | High | 72.1% | 18 Feb, 2019 | npm total.js |
Path Traversal in simplehttpserver CVE-2018-16493, GHSA-45j8-pm75-5v8x | High | 1.8% | 01 Feb, 2019 | npm static-resource-server |
Prototype Pollution in mpath CVE-2018-16490, GHSA-h466-j336-74wx | High | 1.1% | 01 Feb, 2019 | npm mpath |
Prototype Pollution in lodash CVE-2018-16487, GHSA-4xc9-xhrj-v574 | High | 1.5% | 01 Feb, 2019 | RubyGems lodash-rails npm lodash |