Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Unprotected dynamically loaded chunks CVE-2020-15262, GHSA-4fc4-chg7-h8gh | Low | 0.5% | 19 Oct, 2020 | npm webpack-subresource-integrity |
Incorrect Calculation in bigint-money GHSA-9r3m-mhfm-39cm | Low | Not scored | 11 Sep, 2020 | npm bigint-money |
personnummer/js vulnerable to Improper Input Validation GHSA-vpgc-7h78-gx8f | Low | Not scored | 04 Sep, 2020 | npm personnummer |
Prototype Pollution in @hapi/hoek GHSA-22h7-7wwg-qmgg | Low | Not scored | 04 Sep, 2020 | npm @hapi/hoek |
Information Exposure in type-graphql GHSA-xf64-2f9p-6pqq | Low | Not scored | 04 Sep, 2020 | npm type-graphql |
Global node_modules Binary Overwrite in bin-links GHSA-v45m-2wcp-gg98 | Low | Not scored | 04 Sep, 2020 | npm bin-links |
Symlink reference outside of node_modules in bin-links GHSA-2mj8-pj3j-h362 | Low | Not scored | 04 Sep, 2020 | npm bin-links |
Arbitrary File Write in bin-links GHSA-gqf6-75v8-vr26 | Low | Not scored | 04 Sep, 2020 | npm bin-links |
Regular Expression Denial of Service in markdown GHSA-wx77-rp39-c6vg | Low | Not scored | 04 Sep, 2020 | npm markdown |
Reverse Tabnabbing in showdown GHSA-h6mq-3cj6-h738 | Low | Not scored | 03 Sep, 2020 | npm showdown |
Denial of Service in express-fileupload GHSA-q3w9-g74q-vp5f | Low | Not scored | 03 Sep, 2020 | npm express-fileupload |
Denial of Service in apostrophe GHSA-pv6r-vchh-cxg9 | Low | Not scored | 03 Sep, 2020 | npm apostrophe |
Authorization Bypass in graphql-shield GHSA-hx78-272p-mqqh | Low | Not scored | 03 Sep, 2020 | npm graphql-shield |
Denial of Service in grpc-ts-health-check GHSA-m86m-5m44-pc93 | Low | Not scored | 03 Sep, 2020 | npm grpc-ts-health-check |
Regular Expression Denial of Service in marked GHSA-ch52-vgq2-943f | Low | Not scored | 03 Sep, 2020 | npm marked |
Sensitive Data Exposure in put GHSA-v6gv-fg46-h89j | Low | Not scored | 03 Sep, 2020 | npm put |
Sensitive Data Exposure in loopback GHSA-724c-6vrf-99rq | Low | Not scored | 02 Sep, 2020 | npm loopback |
Cross-Site Scripting in express-cart GHSA-9pr3-7449-977r | Low | Not scored | 02 Sep, 2020 | npm express-cart |
Command Injection in ascii-art GHSA-9hqj-38j2-5jgm | Low | Not scored | 01 Sep, 2020 | npm ascii-art |
Prototype Pollution in merge-objects GHSA-992f-wf4w-x36v | Low | Not scored | 01 Sep, 2020 | npm merge-objects |
Out-of-bounds Read in njwt GHSA-g3qw-9pgp-xpj4 | Low | Not scored | 01 Sep, 2020 | npm njwt |
Reflected Cross-Site Scripting in redis-commander GHSA-8c8c-4vfj-rrpc | Low | Not scored | 01 Sep, 2020 | npm redis-commander |
Silently Runs Cryptocoin Miner in hooka-tools GHSA-m36m-x4c5-rjxj | Low | Not scored | 01 Sep, 2020 | npm hooka-tools |
Time-of-check Time-of-use (TOCTOU) Race Condition in chownr CVE-2017-18869, GHSA-c6rq-rjc2-86v2 | Low | 0.3% | 15 Jun, 2020 | npm chownr |
Low severity vulnerability that affects eye.js GHSA-mgv2-57vj-99xc | Low | Not scored | 07 Oct, 2019 | npm eye.js |
smartbanner.js rel noopener vulnerability CVE-2025-25300, GHSA-9mrq-cjgh-32g2 | Low | 0.4% | 13 Sep, 2019 | npm smartbanner.js |
Undefined Behavior in sailsjs-cacheman GHSA-5w65-6875-rhq8 | Low | Not scored | 11 Sep, 2019 | npm sailsjs-cacheman |
express-basic-auth Timing Attack due to native string comparison instead of constant time string comparison GHSA-c35v-qwqg-87jc | Low | Not scored | 06 Jun, 2019 | npm express-basic-auth |
Regular Expression Denial of Service in clean-css GHSA-wxhq-pm8v-cw75 | Low | Not scored | 05 Jun, 2019 | npm clean-css |
Sensitive Data Exposure in sequelize-cli GHSA-3xc7-xg67-pw99 | Low | Not scored | 05 Jun, 2019 | npm sequelize-cli |
Command Injection in opencv GHSA-f698-m2v9-5fh3 | Low | Not scored | 04 Jun, 2019 | npm opencv |
ircdkit vulnerable to Denial of Service due to unhandled connection end event GHSA-f7r3-p866-q9qr | Low | Not scored | 03 Jun, 2019 | npm ircdkit |
Cross-Site Scripting in public GHSA-7jfh-2xc9-ccv7 | Low | Not scored | 31 May, 2019 | npm public |
Insecure Credential Storage in web3 GHSA-27v7-qhfv-rqq8 | Low | Not scored | 30 May, 2019 | npm web3 |
Arbitrary File Write in cli CVE-2016-10538, GHSA-6cpc-mj5c-m9rq | Low | 1.0% | 31 May, 2018 | npm cli |
Local Privilege Escalation in npm CVE-2013-4116, GHSA-v3jv-wrf4-5845 | Low | 0.4% | 22 Apr, 2014 | npm npm |