Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
TYPO3 Information Disclosure of Installed Extensions GHSA-f624-8hfq-5fh3 | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Form Framework validation handling GHSA-v8m4-3w37-ghxx | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Form Framework GHSA-4h5c-5g25-v7fh | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Link Handling GHSA-xgmx-j3hv-jh9x | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Broken Access Control in Localization Handling GHSA-772m-43f3-hmf8 | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Filelist Module GHSA-g7hw-jh4p-75wr | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Fluid ViewHelpers GHSA-85ch-44w7-rf32 | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
Cross-site scripting (XSS) vulnerability in Description metadata CVE-2024-37160, GHSA-5pxr-7m4j-jjc6 | Medium | 0.5% | 07 Jun, 2024 | Packagist getformwork/formwork |
RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability CVE-2024-37383 | MediumExploited | 74.0% | 07 Jun, 2024 | |
Generation of Error Message Containing Sensitive Information in zsa CVE-2024-37162, GHSA-wjmj-h3xc-hxp8 | Medium | 0.3% | 06 Jun, 2024 | npm zsa |
Tornado has a CRLF injection in CurlAsyncHTTPClient headers CVE-2024-58384, GHSA-w235-7p84-xx57 | Medium | 0.2% | 06 Jun, 2024 | PyPI tornado |
Unauthenticated Access to sensitive settings in Argo CD BIT-argo-cd-2024-37152, CVE-2024-37152, GHSA-87p9-x75h-p4j2, GO-2024-2902 | Medium | 2.3% | 06 Jun, 2024 | Go github.com/argoproj/argo-cd Go github.com/argoproj/argo-cd/v2 Go github.com/argoproj/argo-cd/v2/server |
Arbitrary system path lookup in h20 CVE-2024-5550, GHSA-x234-r5fg-x52m, PYSEC-2026-1446 | Medium | 0.8% | 06 Jun, 2024 | PyPI h2o |
SQL injection in litellm CVE-2024-4890, GHSA-8j42-pcfm-3467, PYSEC-2026-1544 | Medium | 0.6% | 06 Jun, 2024 | PyPI litellm |
scikit-learn sensitive data leakage vulnerability CVE-2024-5206, GHSA-jw8x-6495-233v, PYSEC-2024-110 | Medium | 0.2% | 06 Jun, 2024 | PyPI scikit-learn |
Undefined Behavior in mlflow BIT-mlflow-2024-3099, CVE-2024-3099, GHSA-8f8q-q2j7-7j2m, PYSEC-2026-1645 | Medium | 0.4% | 06 Jun, 2024 | PyPI mlflow |
Clickjacking in zenml CVE-2024-2383, GHSA-mq73-g4qr-fgcq, PYSEC-2024-194 | Medium | 0.4% | 06 Jun, 2024 | PyPI zenml |
Improper authorization in zenml CVE-2024-2035, GHSA-9x88-4jg8-4vf7, PYSEC-2024-169 | Medium | 0.6% | 06 Jun, 2024 | PyPI zenml |
Cross site scripting in zenml CVE-2024-2171, GHSA-vwgf-7f9h-h499, PYSEC-2024-170 | Medium | 0.4% | 06 Jun, 2024 | PyPI zenml |
Denial of service in langchain-community CVE-2024-2965, GHSA-3hjh-jh2h-vrg6, PYSEC-2024-118, PYSEC-2026-2561 | Medium | 0.3% | 06 Jun, 2024 | PyPI langchain PyPI langchain-community |
Evmos allows unvested token delegations CVE-2024-37154, GHSA-7hrh-v6wp-53vw, GO-2024-2904 | Medium | 0.4% | 06 Jun, 2024 | Go github.com/evmos/evmos Go github.com/evmos/evmos/v10 Go github.com/evmos/evmos/v11 Go github.com/evmos/evmos/v12 +14 more |
Argo-cd authenticated users can enumerate clusters by name BIT-argo-cd-2024-36106, CVE-2024-36106, GHSA-3cqf-953p-h5cp, GO-2024-2898 | Medium | 0.4% | 06 Jun, 2024 | Go github.com/argoproj/argo-cd Go github.com/argoproj/argo-cd/v2 |
TokenController formName not sanitized in hidden input CVE-2024-37156, GHSA-rrvc-c7xg-7cf3 | Medium | 0.3% | 06 Jun, 2024 | Packagist sulu/form-bundle |
Improper Authentication in CraftCMS two factor authentication plugin CVE-2024-5658, GHSA-96qm-hwhp-2rm8 | Medium | 0.6% | 06 Jun, 2024 | Packagist born05/craft-twofactorauthentication |
Insecure Unserialize Vulnerability in FLOW3 GHSA-m2hp-5x78-74mg | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/flow |
Typo3 Arbitrary file upload and XML External Entity processing GHSA-2p4f-vc9q-r5vp | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/flow |
By-passing Protection of PharStreamWrapper Interceptor GHSA-4v5g-8pq2-32m2 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/phar-stream-wrapper |
Time-Based Information Disclosure Vulnerability in Flow GHSA-r6mm-wmhf-849m | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/flow |
Privilege Escalation in TYPO3 Neos GHSA-wr3c-6c22-m9v6 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/neos |
Typo3 Cross-Site Scripting in Language Pack Handling GHSA-259v-xm34-p7fr | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Broken Access Control in Import Module GHSA-f5rr-9r84-wwqf | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Arbitrary Code Execution and Cross-Site Scripting in Backend API GHSA-hww5-6x85-mc24 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Security Misconfiguration in Frontend Session Handling GHSA-qr5f-6fcv-w69q | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Security Misconfiguration in User Session Handling GHSA-g9rv-6g56-65h8 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Information Disclosure in Backend User Interface GHSA-q9c4-9v5m-597p | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Information Disclosure in User Authentication GHSA-m96r-7vqm-j95g | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in TYPO3 CMS Backend GHSA-v4qr-8h2v-qpjx | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in TYPO3 CMS GHSA-5gr6-97fv-52cc | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Insecure Unserialize in TYPO3 Backend GHSA-c7rj-92xr-wprg | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cache Flooding in TYPO3 Frontend GHSA-pw2q-qwvj-gh43 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Authentication Bypass in TYPO3 Frontend GHSA-mh3r-6cp5-hc2j | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Authentication Bypass in TYPO3 CMS GHSA-6f9m-v7mp-7jjq | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Information Disclosure in TYPO3 CMS GHSA-g46h-v2cc-6c94 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting (XSS) vulnerability in typolinks GHSA-p5c5-gmj4-g48f | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting (XSS) in TYPO3 Backend GHSA-hq37-rfjc-mr8h | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in third party library mso/idna-convert GHSA-qmwf-j7g7-f5jw | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Information Disclosure in TYPO3 Backend GHSA-vpr3-rc99-2wpr | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
SQL Injection in TYPO3 Frontend Login GHSA-j86x-pjmr-9m6w | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Insecure Unserialize in TYPO3 Import/Export GHSA-xvcp-33rc-j8gq | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in TYPO3 Backend GHSA-86r8-4g3w-7xjp | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |