Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Authentication Bypass by Spoofing in express-cart CVE-2018-16483, GHSA-wj36-v8j4-pc7c | High | 1.2% | 01 Feb, 2019 | npm express-cart |
mcstatic directory traversal vulnerability CVE-2018-16482, GHSA-cxmj-qjv6-vx9p | High | 1.8% | 01 Feb, 2019 | npm mcstatic |
Path Traversal in http-live-simulator CVE-2018-16479, GHSA-7c9w-qmrq-ff8r | High | 1.7% | 01 Feb, 2019 | npm http-live-simulator |
Path Traversal in cordova-plugin-ionic-webview CVE-2018-16202, GHSA-xwjh-cp99-cj8q | High | 3.3% | 09 Jan, 2019 | npm cordova-plugin-ionic-webview |
xterm vulnerable to remote code execution CVE-2019-0542, GHSA-mc23-976p-j42x | High | 3.2% | 09 Jan, 2019 | npm xterm |
Rendertron discloses absolute paths of files CVE-2017-18355, GHSA-vqmr-957g-r7w3 | High | 1.1% | 17 Dec, 2018 | npm rendertron |
rendertron LFI vulnerability CVE-2017-18354, GHSA-j87c-cj65-vmh5 | High | 1.2% | 17 Dec, 2018 | npm rendertron |
rendertron can remotely shut down Chrome instance CVE-2017-18353, GHSA-4q69-q4q7-x82c | High | 1.2% | 17 Dec, 2018 | npm rendertron |
Denial of Service in ethereumjs-vm CVE-2018-19183, GHSA-2mw7-wggm-m6w3 | High | 3.1% | 12 Nov, 2018 | npm ethereumjs-vm |
Path Traversal in knightjs CVE-2018-16475, GHSA-3hvm-hgpw-rx4j | High | 1.8% | 06 Nov, 2018 | npm knightjs |
Prototype Pollution in cached-path-relative CVE-2018-16472, GHSA-hc9w-4p87-j549 | High | 2.1% | 06 Nov, 2018 | npm cached-path-relative |
Prototype Pollution in merge CVE-2018-16469, GHSA-f9cm-qmx5-m98h | High | 1.7% | 30 Oct, 2018 | npm merge |
Missing Origin Validation in webpack-dev-server CVE-2018-14732, GHSA-cf66-xwfp-gvc4 | High | 2.5% | 21 Sep, 2018 | npm webpack-dev-server |
Missing Origin Validation in parcel-bundler CVE-2018-14731, GHSA-37q6-576q-vgr7 | High | 2.3% | 21 Sep, 2018 | npm parcel-bundler |
Missing Origin Validation in browserify-hmr CVE-2018-14730, GHSA-77q4-m83q-w76v | High | 1.7% | 21 Sep, 2018 | npm browserify-hmr |
simplehttpserver allows directory traversal and file listing CVE-2018-3787, GHSA-gpvj-q7fp-jcch | High | 2.0% | 31 Aug, 2018 | npm simplehttpserver |
Mosca REDoS Vulnerability CVE-2018-11615, GHSA-wqg7-vrj7-v82h | High | 3.3% | 30 Aug, 2018 | npm mosca |
Electron webPreferences vulnerability can be used to perform remote code execution CVE-2018-15685, GHSA-hv9c-qwqg-qj3v | High | 10.3% | 23 Aug, 2018 | npm electron |
Path Traversal in superstatic GHSA-wm77-q74p-5763 | High | Not scored | 27 Jul, 2018 | npm superstatic |
js-bson vulnerable to REDoS CVE-2018-13863, GHSA-8462-q7x7-g2x4 | High | 1.9% | 10 Jul, 2018 | npm bson |
Path Traversal in buttle CVE-2018-3766, GHSA-m8cr-q935-8j67 | High | 1.9% | 05 Jul, 2018 | npm buttle |
SQL Injection in query-mysql CVE-2018-3754, GHSA-9mr8-6prp-gwjv | High | 1.2% | 03 Jul, 2018 | npm query-mysql |
express-cart allows any user to create an admin user CVE-2018-12457, GHSA-hr89-w7p6-pjmq | High | 1.9% | 15 Jun, 2018 | npm express-cart |
Malicious PDF can inject JavaScript into PDF Viewer CVE-2018-5158, GHSA-7jg2-jgv3-fmr4 | High | 10.2% | 11 Jun, 2018 | npm pdfjs-dist |
express-cart unrestricted file upload vulnerability CVE-2018-3758, GHSA-4w62-cq5r-5mmq | High | 27.1% | 07 Jun, 2018 | npm express-cart |
Regular Expression Denial of Service in sshpk CVE-2018-3737, GHSA-2m39-62fm-q8r3 | High | 1.7% | 07 Jun, 2018 | npm sshpk |
Path Traversal in resolve-path CVE-2018-3732, GHSA-62g9-6hw5-rwfp | High | 2.4% | 07 Jun, 2018 | npm resolve-path |
Path Traversal in public CVE-2018-3731, GHSA-rwv8-jvff-jq28 | High | 2.0% | 07 Jun, 2018 | npm public |
Path Traversal in mcstatic CVE-2018-3730, GHSA-3r8f-gphx-9m2c | High | 2.0% | 07 Jun, 2018 | npm mcstatic |
Path Traversal in localhost-now CVE-2018-3729, GHSA-2gjg-5x33-mmp2 | High | 2.0% | 07 Jun, 2018 | npm localhost-now |
Path Traversal in 626 CVE-2018-3727, GHSA-r4r9-mgjc-g6q3 | High | 2.0% | 07 Jun, 2018 | npm 626 |
Path Traversal in hekto CVE-2018-3725, GHSA-x26f-26qw-hhhx | High | 2.0% | 07 Jun, 2018 | npm hekto |
Path Traversal in general-file-server CVE-2018-3724, GHSA-wv2f-3rxv-jqhp | High | 1.7% | 07 Jun, 2018 | npm general-file-server |
Prototype Pollution in defaults-deep CVE-2018-3723, GHSA-cqp5-m4pq-gfgp | High | 2.0% | 07 Jun, 2018 | npm defaults-deep |
Prototype Pollution in merge-deep CVE-2018-3722, GHSA-9g9w-hmvj-5h57 | High | 2.0% | 07 Jun, 2018 | npm merge-deep |
Prototype Pollution in assign-deep CVE-2018-3720, GHSA-xcvv-84j5-jw9h | High | 2.0% | 07 Jun, 2018 | npm assign-deep |
Prototype Pollution in mixin-deep CVE-2018-3719, GHSA-3mpr-hq3p-49h9 | High | 2.1% | 07 Jun, 2018 | npm mixin-deep |
Denial of Service vulnerability with large JSON payloads in fastify CVE-2018-3711, GHSA-mq6c-fh97-4gwv | High | 1.8% | 07 Jun, 2018 | npm fastify |
Github Token Leak in aegir CVE-2017-16225, GHSA-6xhf-x49c-m5m6 | High | 1.2% | 07 Jun, 2018 | npm aegir |
Directory Traversal in nodeaaaaa CVE-2017-16223, GHSA-xj3h-vc9j-j823 | High | 2.0% | 07 Jun, 2018 | npm nodeaaaaa |
Directory Traversal in yzt CVE-2017-16221, GHSA-q48g-p5cx-c7c7 | High | 2.0% | 07 Jun, 2018 | npm yzt |
Directory Traversal in wind-mvc CVE-2017-16220, GHSA-7g8m-5qh9-9pgw | High | 2.0% | 07 Jun, 2018 | npm wind-mvc |
Directory Traversal in yttivy CVE-2017-16219, GHSA-96qc-ghj4-rq27 | High | 2.0% | 07 Jun, 2018 | npm yttivy |
Directory Traversal in dgard8.lab6 CVE-2017-16218, GHSA-xqfm-ff6g-24c7 | High | 2.0% | 07 Jun, 2018 | npm dgard8.lab6 |
Directory Traversal in fbr-client CVE-2017-16217, GHSA-qmhf-qg6f-pc4v | High | 2.0% | 07 Jun, 2018 | npm fbr-client |
Directory Traversal in tencent-server CVE-2017-16216, GHSA-rr77-w4w8-w8wp | High | 2.0% | 07 Jun, 2018 | npm tencent-server |
Directory Traversal in sgqserve CVE-2017-16215, GHSA-m8pw-hgvj-cwcm | High | 2.0% | 07 Jun, 2018 | npm sgqserve |
Directory Traversal in peiserver CVE-2017-16214, GHSA-74f5-4m28-gq5c | High | 2.0% | 07 Jun, 2018 | npm peiserver |
Directory Traversal in mfrserver CVE-2017-16213, GHSA-p2r2-h92r-w2mg | High | 2.0% | 07 Jun, 2018 | npm mfrserver |
Directory Traversal in ltt CVE-2017-16212, GHSA-5jg5-w395-9684 | High | 2.0% | 07 Jun, 2018 | npm ltt |