Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
tiny-json-http missing SSL certificate validation CVE-2018-1000096, GHSA-7h42-5vj2-cq39 | High | 0.7% | 13 Mar, 2018 | npm tiny-json-http |
Electron protocol handler browser vulnerable to Command Injection CVE-2018-1000118, GHSA-fjqr-fx3f-g4rv | High | 2.4% | 07 Mar, 2018 | npm electron |
Auth0-js bypasses CSRF checks CVE-2018-7307, GHSA-wpq7-q8j4-72jg | High | 0.5% | 06 Mar, 2018 | npm auth0-js |
Regular Expression Denial of Service in moment CVE-2017-18214, GHSA-446m-mv8f-q348 | High | 3.6% | 04 Mar, 2018 | npm moment |
AWS Lambda parser is vulnerable to Regular Expression Denial of Service CVE-2018-7560, GHSA-6jqp-j69q-pm62 | High | 1.4% | 04 Mar, 2018 | npm aws-lambda-multipart-parser |
Incorrect Permission Assignment for Critical Resource in NPM CVE-2018-7408, GHSA-ph34-pc88-72gc | High | 0.3% | 22 Feb, 2018 | npm npm |
ReDoS in brace-expansion CVE-2017-18077, GHSA-832h-xg76-4gv6 | High | 2.6% | 27 Jan, 2018 | npm brace-expansion |
Directory traversal vulnerability in Next.js CVE-2018-6184, GHSA-m34x-wgrh-g897 | High | 9.1% | 24 Jan, 2018 | npm next |
Remote Code Execution in electron CVE-2018-1000006, GHSA-w222-53c6-c86p | High | 88.8% | 23 Jan, 2018 | npm electron |
Denial of Service in jquery CVE-2016-10707, GHSA-mhpp-875w-9cpv | High | 3.2% | 18 Jan, 2018 | Maven org.webjars.npm:jquery NuGet jQuery RubyGems jquery-rails npm jquery |
Cisco node-jose improper validation of JWT signature CVE-2018-0114, GHSA-jfxm-w8g2-4rcv | High | 42.7% | 04 Jan, 2018 | npm node-jose |
Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernames CVE-2017-1000452, GHSA-8jjf-w7j6-323c | High | 1.4% | 02 Jan, 2018 | npm samlify |
fs-git command injection vulnerability CVE-2017-1000451, GHSA-wp3j-gv53-4pg8 | High | 0.8% | 02 Jan, 2018 | npm fs-git |
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token CVE-2017-16897, GHSA-77fw-rf4v-vfp9 | High | 1.4% | 27 Dec, 2017 | npm passport-wsfed-saml2 |
Denial of Service in ecstatic CVE-2016-10703, GHSA-pm9p-9926-w68m | High | 2.6% | 14 Dec, 2017 | npm ecstatic |
auth0-js Privilege Escalation Vulnerability CVE-2017-17068, GHSA-3rpr-mg43-xhq4 | High | 1.4% | 06 Dec, 2017 | npm auth0-js |
Arbitrary JavaScript Execution in typed-function CVE-2017-1001004, GHSA-3qh4-r86r-grvm | High | 1.9% | 27 Nov, 2017 | npm typed-function |
jqueryFileTree vulnerable to Directory Traversal CVE-2017-1000170, GHSA-p739-9479-5wr2 | High | 59.1% | 17 Nov, 2017 | npm jqueryfiletree |
Next.js Directory Traversal Vulnerability CVE-2017-16877, GHSA-3f5c-4qxj-vmpf | High | 14.1% | 17 Nov, 2017 | npm next |
ejs vulnerable to DoS due to weak input validation CVE-2017-1000189, GHSA-6x77-rpqf-j6mw | High | 2.3% | 17 Nov, 2017 | npm ejs |
Cross-Site Request Forgery (CSRF) in keystone CVE-2017-16570, GHSA-q43c-g2g7-6gxj | High | 2.2% | 06 Nov, 2017 | npm keystone |
Keystone is vulnerable to CSV injection CVE-2017-15879, GHSA-6494-v9fq-fgq2 | High | 7.2% | 24 Oct, 2017 | npm keystone |
Directory Traversal in st CVE-2014-3744, GHSA-69rr-wvh9-6c4q | High | 34.0% | 23 Oct, 2017 | npm st |
Potential Command Injection in codem-transcode CVE-2013-7377, GHSA-rph7-j9qr-h8q8 | High | 2.0% | 23 Oct, 2017 | npm codem-transcode |
Regular Expression Denial of Service in tough-cookie CVE-2017-15010, GHSA-g7q5-pjjr-gqvp | High | 3.3% | 04 Oct, 2017 | npm tough-cookie |
LDAP Injection in ldapauth CVE-2015-7294, GHSA-82mg-x548-gq3j | High | 2.1% | 06 Sep, 2017 | npm ldapauth npm ldapauth-fork |
Electron vulnerable to remote command execution CVE-2017-12581, GHSA-7fv9-m79r-j9x8 | High | 6.7% | 06 Aug, 2017 | npm electron |
OpenPGP 1.2.0 and earlier decrypts arbitrary messages CVE-2015-8013, GHSA-qmvq-f3fj-m3wg | High | 3.9% | 25 Jul, 2017 | npm openpgp |
Prototype Pollution Protection Bypass in qs CVE-2017-1000048, GHSA-gqgv-6jq5-jjj9 | High | 2.4% | 17 Jul, 2017 | npm qs |
Information Exposure in cordova-android CVE-2016-6799, GHSA-gwpf-62xp-vrg6 | High | 2.6% | 09 May, 2017 | npm cordova-android |
Cross-Site Scripting in mustache CVE-2015-8862, GHSA-w3w8-37jv-2c58 | High | 1.7% | 23 Jan, 2017 | npm mustache |
Symlink Arbitrary File Overwrite in tar CVE-2015-8860, GHSA-gfjr-3jmm-4g9v | High | 4.0% | 23 Jan, 2017 | npm tar |
Regular Expression Denial of Service in uglify-js CVE-2015-8858, GHSA-c9f4-xj24-8jqx | High | 2.4% | 23 Jan, 2017 | npm uglify-js |
Regular Expression Denial of Service in semver CVE-2015-8855, GHSA-x6fg-f45m-jf5q | High | 6.9% | 23 Jan, 2017 | npm semver |
Regular Expression Denial of Service in marked CVE-2015-8854, GHSA-hjcp-j389-59ff | High | 4.4% | 23 Jan, 2017 | npm marked |
Regular Expression Denial of Service in ms CVE-2015-8315, GHSA-3fx5-fwvr-xrjg | High | 7.0% | 23 Jan, 2017 | npm ms |
Authentication Bypass in passport-azure-ad CVE-2016-7191, GHSA-73jp-3c67-hjfv | High | 29.4% | 28 Sep, 2016 | npm passport-azure-ad |
npm Token Leak in npm CVE-2016-3956, GHSA-m5h6-hr3q-22h5 | High | 5.5% | 02 Jul, 2016 | npm npm |
High severity vulnerability that affects electron CVE-2016-1202, GHSA-gvcj-pfq2-wxj7 | High | 0.4% | 25 Apr, 2016 | npm electron |
Regular Expression Denial of Service in hawk CVE-2016-2515, GHSA-jcpv-g9rr-qxrc | High | 3.4% | 13 Apr, 2016 | npm hawk |
Regular Expression Denial of Service in is-my-json-valid CVE-2016-2537, GHSA-f522-ffg8-j8r6 | High | 1.8% | 23 Feb, 2016 | npm is-my-json-valid |
DataTable Vulnerable to Cross-Site Scripting CVE-2015-6584, GHSA-4mv4-gmmf-q382 | High | 2.7% | 11 Sep, 2015 | Packagist datatables/datatables npm datatables |
Directory Traversal in geddy CVE-2015-5688, GHSA-333x-9vgq-v2j4 | High | 9.4% | 04 Sep, 2015 | npm geddy |
SQL Injection in sequelize CVE-2015-1369, GHSA-xqg8-cv3h-xppv | High | 2.1% | 27 Jan, 2015 | npm sequelize |
Potential for Script Injection in syntax-error CVE-2014-7192, GHSA-5726-g6r9-5f22 | High | 13.0% | 11 Dec, 2014 | npm syntax-error |
Denial-of-Service Memory Exhaustion in qs CVE-2014-7191, GHSA-jjv7-qpx3-h62q | High | 8.3% | 19 Oct, 2014 | npm qs |
Directory Traversal in send CVE-2014-6394, GHSA-xwg4-93c6-3h42 | High | 4.3% | 08 Oct, 2014 | npm send |
File Descriptor Leak Can Cause DoS Vulnerability in hapi CVE-2014-3742, GHSA-cqr7-78pj-3g7j | High | 2.4% | 16 May, 2014 | npm hapi |