Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Insecure Comparison in secure-compare CVE-2015-9238, GHSA-h9x2-5rm7-x4gm | High | 1.5% | 31 May, 2018 | npm secure-compare |
Directory Traversal in fancy-server CVE-2014-10066, GHSA-m273-wwfv-h6jp | High | 1.6% | 31 May, 2018 | npm fancy-server |
Content Injection in remarkable CVE-2014-10065, GHSA-f9vc-q3hh-qhfv | High | 1.0% | 31 May, 2018 | npm remarkable |
Denial-of-Service Extended Event Loop Blocking in qs CVE-2014-10064, GHSA-f9cm-p3w6-xvr3 | High | 1.4% | 31 May, 2018 | npm qs |
Path Traversal in stattic CVE-2018-3734, GHSA-w4pv-w56c-mg4v | High | 1.9% | 29 May, 2018 | npm stattic |
Path Traversal in crud-file-server CVE-2018-3733, GHSA-vfp9-gwrh-wq9g | High | 2.2% | 29 May, 2018 | npm crud-file-server |
Directory Traversal in gaoxuyan CVE-2017-16153, GHSA-j9wj-26p5-fj2v | High | 1.7% | 29 May, 2018 | npm gaoxuyan |
node-tkinter is malware CVE-2017-16062, GHSA-mwcv-m549-5cm8 | High | 1.1% | 29 May, 2018 | npm node-tkinter |
tkinter is malware CVE-2017-16061, GHSA-rwg6-3fmj-w4wx | High | 1.1% | 29 May, 2018 | npm tkinter |
mysqljs is malware CVE-2017-16047, GHSA-8gv6-g7vp-hr34 | High | 1.3% | 29 May, 2018 | npm mysqljs |
windows-build-tools downloads Resources over HTTP CVE-2017-16003, GHSA-9p47-w5xp-f4xr | High | 2.2% | 29 May, 2018 | npm windows-build-tools |
Downloads Resources over HTTP in mystem-fix CVE-2016-10698, GHSA-j3wh-5m26-2pf7 | High | 1.7% | 29 May, 2018 | npm mystem-fix |
Downloads Resources over HTTP in massif CVE-2016-10682, GHSA-4v2c-g2xc-47fv | High | 1.7% | 29 May, 2018 | npm massif |
Downloads Resources over HTTP in roslib-socketio CVE-2016-10681, GHSA-xq8r-r72r-pqwm | High | 1.7% | 29 May, 2018 | npm roslib-socketio |
Downloads Resources over HTTP in adamvr-geoip-lite CVE-2016-10680, GHSA-h2jv-5v3f-7m7j | High | 0.7% | 29 May, 2018 | npm adamvr-geoip-lite |
Downloads Resources over HTTP in selenium-standalone-painful CVE-2016-10679, GHSA-3x83-p476-vv95 | High | 2.0% | 29 May, 2018 | npm selenium-standalone-painful |
Downloads Resources over HTTP in limbus-buildgen CVE-2016-10674, GHSA-rj38-87f3-93p6 | High | 1.7% | 29 May, 2018 | npm limbus-buildgen |
Downloads Resources over HTTP in tomita-parser CVE-2016-10666, GHSA-722q-3g9x-vp8q | High | 1.7% | 29 May, 2018 | npm tomita-parser |
poco downloads Resources over HTTP CVE-2016-10659, GHSA-f757-9c4x-chff | High | 1.7% | 29 May, 2018 | npm poco |
Downloads Resources over HTTP in native-opencv CVE-2016-10658, GHSA-mpww-j7xj-cj35 | High | 1.7% | 29 May, 2018 | npm native-opencv |
Downloads Resources over HTTP in ntfserver CVE-2016-10650, GHSA-476p-r2wx-2wch | High | 1.7% | 29 May, 2018 | npm ntfserver |
Downloads Resources over HTTP in broccoli-closure CVE-2016-10635, GHSA-vvwp-3f54-xc39 | High | 1.7% | 29 May, 2018 | npm broccoli-closure |
Downloads Resources over HTTP in scala-bin CVE-2016-10627, GHSA-3vv5-42wr-m32g | High | 1.7% | 29 May, 2018 | npm scala-bin |
Downloads Resources over HTTP in strider-sauce CVE-2016-10611, GHSA-8gf4-pcj6-54rp | High | 1.7% | 29 May, 2018 | npm strider-sauce |
Downloads Resources over HTTP in webdrvr CVE-2016-10601, GHSA-wr2c-ppj9-f2fv | High | 1.7% | 29 May, 2018 | npm webdrvr |
ibapi downloads Resources over HTTP CVE-2016-10593, GHSA-92qm-hc53-jjrj | High | 2.3% | 29 May, 2018 | npm ibapi |
Downloads Resources over HTTP in prince CVE-2016-10591, GHSA-cr79-9pwf-r6f5 | High | 1.7% | 29 May, 2018 | npm prince |
Downloads Resources over HTTP in cue-sdk-node CVE-2016-10590, GHSA-p2hm-8725-c8x8 | High | 1.7% | 29 May, 2018 | npm cue-sdk-node |
selenium-binaries downloads resources over HTTP CVE-2016-10589, GHSA-h4mc-r4f4-hcf4 | High | 1.7% | 29 May, 2018 | npm selenium-binaries |
Downloads Resources over HTTP in macaca-chromedriver CVE-2016-10586, GHSA-769c-qphh-g3wm | High | 1.7% | 29 May, 2018 | npm macaca-chromedriver |
Downloads Resources over HTTP in dalek-browser-chrome-canary CVE-2016-10584, GHSA-8mrf-g42m-5qc8 | High | 2.0% | 29 May, 2018 | npm dalek-browser-chrome-canary |
Downloads Resources over HTTP in unicode CVE-2016-10578, GHSA-qjf4-7642-c57p | High | 0.6% | 29 May, 2018 | npm unicode |
ibm_db downloads Resources over HTTP CVE-2016-10577, GHSA-c4qp-h3m6-785f | High | 1.5% | 29 May, 2018 | npm ibm_db |
Downloads Resources over HTTP in baryton-saxophone CVE-2016-10573, GHSA-6pwf-whc8-hjf6 | High | 2.1% | 29 May, 2018 | npm baryton-saxophone |
pngcrush-installer downloads Resources over HTTP CVE-2016-10570, GHSA-g93h-75m9-3qq4 | High | 1.7% | 29 May, 2018 | npm pngcrush-installer |
Downloads Resources over HTTP in geoip-lite-country CVE-2016-10568, GHSA-ff29-f57w-2mm3 | High | 0.6% | 29 May, 2018 | npm geoip-lite-country |
Downloads Resources over HTTP in product-monitor CVE-2016-10567, GHSA-h2r4-4xgf-3865 | High | 1.7% | 29 May, 2018 | npm product-monitor |
install-nw downloads Resources over HTTP CVE-2016-10566, GHSA-wq7q-7vfh-2x3h | High | 1.7% | 29 May, 2018 | npm install-nw |
Downloads Resources over HTTP in selenium-download CVE-2016-10559, GHSA-2mvm-66q7-m256 | High | 1.7% | 29 May, 2018 | npm selenium-download |
Downloads Resources over HTTP in aerospike CVE-2016-10558, GHSA-v5v3-8jqf-vg27 | High | 1.7% | 29 May, 2018 | npm aerospike |
SQL Injection in sequelize CVE-2016-10556, GHSA-9c2p-jw8p-f84v | High | 1.3% | 29 May, 2018 | npm sequelize |
Denial of Service in ecstatic CVE-2015-9242, GHSA-vwjc-q9px-r9vq | High | 2.1% | 29 May, 2018 | npm ecstatic |
Denial of Service in hapi CVE-2015-9241, GHSA-rc8h-3fv6-pxv8 | High | 2.1% | 29 May, 2018 | npm hapi |
Authentication Weakness in keystone CVE-2015-9240, GHSA-39pj-gq8q-9pfj | High | 0.9% | 29 May, 2018 | npm keystone |
Hidden Directories Always Served in inert CVE-2014-10068, GHSA-g4xp-36c3-f7mr | High | 1.9% | 29 May, 2018 | npm inert |
Withdrawn Advisory: Node.js Inspector RCE via DNS Rebinding CVE-2018-7160, GHSA-wq4c-wm6x-jw44 | High | 9.5% | 17 May, 2018 | npm node-inspector |
Cross-Site Request Forgery (CSRF) in Auth0 CVE-2018-6874, GHSA-wv26-rj8c-4r33 | High | 0.7% | 04 Apr, 2018 | npm auth0-js |
Prototype Pollution in hoek CVE-2018-3728, GHSA-jp4x-w63m-7wgm | High | 4.2% | 30 Mar, 2018 | npm hoek |
Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration CVE-2018-1000136, GHSA-8xwg-wv7v-4vqp | High | 5.1% | 23 Mar, 2018 | npm electron |
pym.js CSRF Vulnerability CVE-2018-1000086, GHSA-82gw-pqf7-q3j2 | High | 1.0% | 13 Mar, 2018 | npm pym.js |