Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code CVE-2025-54313, GHSA-f29h-pxvx-f335 | HighExploited | 5.1% | 19 Jul, 2025 | npm @pkgr/core npm eslint-config-prettier npm eslint-plugin-prettier npm got-fetch +2 more |
Google Chromium ANGLE and GPU Improper Input Validation Vulnerability CVE-2025-6558 | HighExploited | 10.9% | 15 Jul, 2025 | |
Git Link Following Vulnerability CVE-2025-48384 | HighExploited | 4.4% | 08 Jul, 2025 | |
Microsoft SharePoint Code Injection Vulnerability CVE-2025-49704 | HighExploited | 100.0% | 08 Jul, 2025 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2025-6554 | HighExploited | 14.1% | 30 Jun, 2025 | |
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability CVE-2025-32463 | HighExploited | 55.5% | 30 Jun, 2025 | |
RARLAB WinRAR Path Traversal Vulnerability CVE-2025-6218 | HighExploited | 90.5% | 21 Jun, 2025 | |
Microsoft Windows SMB Client Improper Access Control Vulnerability CVE-2025-33073 | HighExploited | 82.7% | 10 Jun, 2025 | |
Microsoft Windows External Control of File Name or Path Vulnerability CVE-2025-33053 | HighExploited | 87.0% | 10 Jun, 2025 | |
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability CVE-2025-21479 | HighExploited | 0.8% | 03 Jun, 2025 | |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability CVE-2025-27038 | HighExploited | 1.1% | 03 Jun, 2025 | |
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability CVE-2025-21480 | HighExploited | 0.5% | 03 Jun, 2025 | |
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CVE-2025-5419 | HighExploited | 7.8% | 03 Jun, 2025 | |
Smartbedded Meteobridge Command Injection Vulnerability CVE-2025-4008 | HighExploited | 93.3% | 21 May, 2025 | |
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability CVE-2025-32709 | HighExploited | 1.8% | 13 May, 2025 | |
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability CVE-2025-32706 | HighExploited | 2.3% | 13 May, 2025 | |
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability CVE-2025-32701 | HighExploited | 1.4% | 13 May, 2025 | |
Microsoft Windows DWM Core Library Use-After-Free Vulnerability CVE-2025-30400 | HighExploited | 1.9% | 13 May, 2025 | |
Microsoft Windows Scripting Engine Type Confusion Vulnerability CVE-2025-30397 | HighExploited | 27.3% | 13 May, 2025 | |
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CVE-2025-4428 | HighExploited | 88.0% | 13 May, 2025 | |
Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability CVE-2025-4427 | HighExploited | 99.9% | 13 May, 2025 | |
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CVE-2025-2775 | HighExploited | 42.6% | 07 May, 2025 | |
Srimax Output Messenger Directory Traversal Vulnerability CVE-2025-27920 | HighExploited | 1.9% | 05 May, 2025 | |
ConnectWise ScreenConnect Improper Authentication Vulnerability CVE-2025-3935 | HighExploited | 3.6% | 25 Apr, 2025 | |
Commvault Web Server Unspecified Vulnerability CVE-2025-3928 | HighExploited | 2.5% | 25 Apr, 2025 | |
Broadcom Brocade Fabric OS Code Injection Vulnerability CVE-2025-1976 | HighExploited | 0.7% | 24 Apr, 2025 | |
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability CVE-2025-29824 | HighExploited | 19.3% | 08 Apr, 2025 | |
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query CVE-2025-31125, GHSA-4r4m-qw57-chr8 | HighExploited | 65.8% | 31 Mar, 2025 | npm vite |
Google Chromium Mojo Sandbox Escape Vulnerability CVE-2025-2783 | HighExploited | 9.2% | 26 Mar, 2025 | |
D-Link DIR-823X Command Injection Vulnerability CVE-2025-29635 | HighExploited | 87.9% | 25 Mar, 2025 | |
Kentico Xperience Path Traversal Vulnerability CVE-2025-2749 | HighExploited | 4.0% | 24 Mar, 2025 | |
reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability CVE-2025-30154 | HighExploited | 2.5% | 19 Mar, 2025 | |
tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability CVE-2025-30066 | HighExploited | 72.1% | 15 Mar, 2025 | |
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability CVE-2025-26633 | HighExploited | 30.4% | 11 Mar, 2025 | |
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability CVE-2025-24993 | HighExploited | 2.2% | 11 Mar, 2025 | |
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability CVE-2025-24985 | HighExploited | 3.9% | 11 Mar, 2025 | |
Microsoft Windows Win32k Use-After-Free Vulnerability CVE-2025-24983 | HighExploited | 1.9% | 11 Mar, 2025 | |
FreeType Out-of-Bounds Write Vulnerability CVE-2025-27363 | HighExploited | 27.8% | 11 Mar, 2025 | |
VMware ESXi Arbitrary Write Vulnerability CVE-2025-22225 | HighExploited | 1.0% | 04 Mar, 2025 | |
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability CVE-2025-22224 | HighExploited | 1.6% | 04 Mar, 2025 | |
NAKIVO Backup and Replication Absolute Path Traversal Vulnerability CVE-2024-48248 | HighExploited | 94.4% | 04 Mar, 2025 | |
Palo Alto Networks PAN-OS File Read Vulnerability CVE-2025-0111 | HighExploited | 2.0% | 12 Feb, 2025 | |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CVE-2025-0108 | HighExploited | 98.1% | 12 Feb, 2025 | |
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability CVE-2025-21418 | HighExploited | 2.1% | 11 Feb, 2025 | |
Microsoft Windows Storage Link Following Vulnerability CVE-2025-21391 | HighExploited | 2.3% | 11 Feb, 2025 | |
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CVE-2025-24472 | HighExploited | 7.2% | 11 Feb, 2025 | |
Trimble Cityworks Deserialization Vulnerability CVE-2025-0994 | HighExploited | 31.1% | 06 Feb, 2025 | |
Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40891 | HighExploited | 22.9% | 04 Feb, 2025 | |
Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40890 | HighExploited | 20.7% | 04 Feb, 2025 | |
Digiever DS-2105 Pro Missing Authorization Vulnerability CVE-2023-52163 | HighExploited | 96.9% | 03 Feb, 2025 |