Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
SketchSVG Arbitrary Code Injection vulnerability CVE-2023-26107, GHSA-6722-xvq8-3254 | High | 0.4% | 06 Mar, 2023 | npm sketchsvg |
dot-lens vulnerable to Prototype Pollution CVE-2023-26106, GHSA-rmhg-2cvv-q7vx | High | 0.9% | 06 Mar, 2023 | npm dot-lens |
Yapscan Denial of Service vulnerability in report server GHSA-wxwq-525w-hcqx, GO-2023-1607 | High | Not scored | 03 Mar, 2023 | Go github.com/fkie-cad/yapscan |
Directus vulnerable to Server-Side Request Forgery On File Import CVE-2023-26492, GHSA-j3rg-3rgm-537h | High | 1.0% | 03 Mar, 2023 | npm directus |
Opencontainers runc Incorrect Authorization vulnerability CVE-2023-27561, GHSA-vpvm-3wq2-2wvm, GO-2023-1627 | High | 0.4% | 03 Mar, 2023 | Go github.com/opencontainers/runc |
phpseclib Infinite Loop vulnerability CVE-2023-27560, GHSA-hm7p-r324-hhf3 | High | 0.8% | 03 Mar, 2023 | Packagist phpseclib/phpseclib |
Kubernetes vulnerable to validation bypass CVE-2022-3294, GHSA-jh36-q97c-9928, GO-2023-1629 | High | 1.6% | 01 Mar, 2023 | Go github.com/kubernetes/kubernetes Go k8s.io/kubernetes |
Lemur subject to insecure random generation CVE-2023-30797, GHSA-5fqv-mpj8-h7gm, PYSEC-2023-20 | High | 0.8% | 01 Mar, 2023 | PyPI lemur |
Imperative CLI vulnerable to Command Injection CVE-2021-4326, GHSA-6q8m-42qq-64r7 | High | 0.3% | 01 Mar, 2023 | npm @zowe/imperative |
vantage6 refresh tokens do not expire CVE-2023-23929, GHSA-4w59-c3gc-rrhp, PYSEC-2023-54 | High | 0.6% | 28 Feb, 2023 | PyPI vantage6 |
vantage6 vulnerable to Improper Preservation of Permissions CVE-2023-22738, GHSA-vvjv-97j8-94xh, PYSEC-2023-53 | High | 0.4% | 28 Feb, 2023 | PyPI vantage6 |
api-platform/core's secured properties may be accessible within collections CVE-2023-25575, GHSA-vr2x-7687-h6qv | High | 0.6% | 28 Feb, 2023 | Packagist api-platform/core |
nistec has Incorrect Calculation in Multiplication of unreduced P-256 scalars CVE-2023-24533, GHSA-f6hc-9g49-xmx7, GO-2023-1595 | High | 0.7% | 28 Feb, 2023 | Go filippo.io/nistec |
mde utilities contains Prototype Pollution CVE-2023-26105, GHSA-wxfj-84xf-7gxv | High | 1.3% | 28 Feb, 2023 | npm utilities |
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection CVE-2023-26043, GHSA-mcmc-c59m-pqq8, PYSEC-2023-15 | High | 0.8% | 27 Feb, 2023 | PyPI GeoNode PyPI geonode |
Apple Multiple Products WebKit Type Confusion Vulnerability CVE-2023-23529 | HighExploited | 9.4% | 27 Feb, 2023 | |
laravel-admin has Arbitrary File Upload vulnerability CVE-2023-24249, GHSA-g857-47pm-3r32 | High | 2.4% | 27 Feb, 2023 | Packagist encore/laravel-admin |
TeamPass External Control of File Name or Path vulnerability CVE-2023-1070, GHSA-x36g-4629-xp9v | High | 0.8% | 27 Feb, 2023 | Packagist nilsteampassnet/teampass |
Denial of Service vulnerability in lite-web-server CVE-2023-26104, GHSA-8237-3q5g-99fv | High | 1.2% | 25 Feb, 2023 | npm lite-web-server |
Froxlor Cross-Site Request Forgery vulnerability CVE-2023-1033, GHSA-p7qq-rrvw-x55x | High | 0.3% | 25 Feb, 2023 | Packagist froxlor/froxlor |
ecdh vulnerable to Exposure of Resource to Wrong Sphere CVE-2022-44310, GHSA-p2hp-3wv3-4w74 | High | 0.7% | 24 Feb, 2023 | npm ecdh |
Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information CVE-2023-25956, GHSA-w695-p3j5-hrj9, PYSEC-2026-771 | High | 1.5% | 24 Feb, 2023 | PyPI apache-airflow-providers-amazon |
Apache Airflow Google Provider Improper Input Validation vulnerability CVE-2023-25692, GHSA-h8p2-8g72-qpgh, PYSEC-2026-774 | High | 1.8% | 24 Feb, 2023 | PyPI apache-airflow-providers-google |
rangy vulnerable to Prototype Pollution CVE-2023-26102, GHSA-65rp-mhqf-8gj3 | High | 0.8% | 24 Feb, 2023 | npm rangy |
RosarioSIS Improper Access Control vulnerability CVE-2023-0994, GHSA-prjg-28jg-m3p5 | High | 1.0% | 24 Feb, 2023 | Packagist francoisjacquet/rosariosis |
markdown-it-py Denial of Service vulnerability CVE-2023-26303, GHSA-vrjv-mxr7-vjf8, PYSEC-2023-24 | High | 0.2% | 23 Feb, 2023 | PyPI markdown-it-py |
markdown-it-py Denial of Service vulnerability in the command line interface CVE-2023-26302, GHSA-jrwr-5x3p-hvc3, PYSEC-2023-23 | High | 0.2% | 22 Feb, 2023 | PyPI markdown-it-py |
notation-go has excessive memory allocation on verification CVE-2023-25656, GHSA-87x9-7grx-m28v, GO-2023-1589 | High | 0.4% | 22 Feb, 2023 | Go github.com/notaryproject/notation-go |
Codiad information disclosure vulnerability CVE-2017-20178, GHSA-2q79-56rq-8v3c | High | 0.7% | 21 Feb, 2023 | Packagist codiad/codiad |
GoPistolet vulnerable to Improper Resource Shutdown or Release CVE-2015-10085, GHSA-wr8h-w969-36m8, GO-2023-1590 | High | 0.9% | 21 Feb, 2023 | Go github.com/gopistolet/gopistolet |
User data in TPM attestation vulnerable to MITM GHSA-r2h5-3hgw-8j34, GO-2023-1583 | High | Not scored | 17 Feb, 2023 | Go github.com/edgelesssys/constellation Go github.com/edgelesssys/constellation/v2 |
Moodle Improper Access Control vulnerability BIT-moodle-2023-23923, CVE-2023-23923, GHSA-32jc-9p58-p82x | High | 1.0% | 17 Feb, 2023 | Packagist moodle/moodle |
Server-Side Request Forgery in Plone CMS CVE-2021-33926, GHSA-47p5-p3jw-w78w, PYSEC-2023-289 | High | 1.0% | 17 Feb, 2023 | PyPI Plone PyPI plone |
Code Injection in froxlor/froxlor CVE-2023-0877, GHSA-vp4r-h765-5mwp | High | 3.9% | 17 Feb, 2023 | Packagist froxlor/froxlor |
golang.org/x/net vulnerable to Uncontrolled Resource Consumption BIT-golang-2022-41723, CVE-2022-41723, GHSA-vvpx-j8f3-3w6h, GO-2023-1571 | High | 4.6% | 16 Feb, 2023 | Go golang.org/x/net Go stdlib |
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS) CVE-2023-25653, GHSA-5h4j-qrvg-9xhw | High | 0.6% | 16 Feb, 2023 | npm node-jose |
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler CVE-2025-27098, GHSA-j2wh-wrv3-4x4g | High | 0.4% | 16 Feb, 2023 | npm @graphql-mesh/cli npm @graphql-mesh/http |
Regular Expression Denial of Service in Headers CVE-2023-24807, GHSA-r6ch-mqf9-qc9w | High | 1.3% | 16 Feb, 2023 | npm undici |
Sequelize information disclosure vulnerability CVE-2023-22580, GHSA-8c25-f3mj-v6h8 | High | 0.6% | 16 Feb, 2023 | npm @sequelize/core npm sequelize |
Improper Restriction of Excessive Authentication Attempts in modoboa CVE-2023-0860, GHSA-q9ww-gjpw-p9g6, PYSEC-2026-849 | High | 0.7% | 16 Feb, 2023 | PyPI modoboa |
rttys SQL Injection vulnerability CVE-2022-38867, GHSA-54q4-74p3-mgcw | High | 0.9% | 16 Feb, 2023 | Go github.com/zhaojh329/rttys |
Denial of service vulnerability on Password reset page CVE-2023-25171, GHSA-7j9h-3jxf-3vrf, PYSEC-2026-836 | High | 0.9% | 15 Feb, 2023 | PyPI kiwitcms |
Denial of service vulnerability when parsing multipart request body CVE-2023-25578, GHSA-p24m-863f-fm6q, PYSEC-2023-49 | High | 1.0% | 15 Feb, 2023 | PyPI starlite |
Resource exhaustion in Django BIT-django-2023-24580, CVE-2023-24580, GHSA-2hrw-hx67-34x6, PYSEC-2023-13 | High | 62.6% | 15 Feb, 2023 | PyPI Django PyPI django |
MultipartParser denial of service with too many fields or files CVE-2023-30798, GHSA-74m5-2c7w-9w3x, PYSEC-2023-48 | High | 1.3% | 14 Feb, 2023 | PyPI starlette |
Microsoft Windows Graphic Component Privilege Escalation Vulnerability CVE-2023-21823 | HighExploited | 5.6% | 14 Feb, 2023 | |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability CVE-2023-23376 | HighExploited | 10.9% | 14 Feb, 2023 | |
Microsoft Office Publisher Security Feature Bypass Vulnerability CVE-2023-21715 | HighExploited | 12.0% | 14 Feb, 2023 | |
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability CVE-2023-21529 | HighExploited | 59.3% | 14 Feb, 2023 | |
High resource usage when parsing multipart form data with many fields CVE-2023-25577, GHSA-xg9f-g7g7-2323, PYSEC-2023-58 | High | 1.4% | 14 Feb, 2023 | PyPI Werkzeug PyPI werkzeug |