Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Answer vulnerable to Cross-site Scripting CVE-2023-1237, GHSA-9v4v-9fj5-p982, GO-2023-1616 | Medium | 0.4% | 07 Mar, 2023 | Go github.com/answerdev/answer |
Answer vulnerable to Cross-site Scripting CVE-2023-1238, GHSA-5w78-v688-cx9q, GO-2023-1614 | Medium | 0.6% | 07 Mar, 2023 | Go github.com/answerdev/answer |
Answer vulnerable to Cross-site Scripting CVE-2023-1239, GHSA-vxhr-p2vp-7gf8, GO-2023-1620 | Medium | 0.5% | 07 Mar, 2023 | Go github.com/answerdev/answer |
Answer vulnerable to Cross-site Scripting CVE-2023-1240, GHSA-55vm-3vq3-4jpc, GO-2023-1613 | Medium | 0.6% | 07 Mar, 2023 | Go github.com/answerdev/answer |
Answer vulnerable to Cross-site Scripting CVE-2023-1241, GHSA-ff27-hrmr-ggpj, GO-2023-1617 | Medium | 0.6% | 07 Mar, 2023 | Go github.com/answerdev/answer |
Answer vulnerable to Cross-site Scripting CVE-2023-1242, GHSA-qrwm-xqfr-4vhv, GO-2023-1619 | Medium | 0.6% | 07 Mar, 2023 | Go github.com/answerdev/answer |
Answer vulnerable to Cross-site Scripting CVE-2023-1243, GHSA-8jh8-33f5-cgfp, GO-2023-1615 | Medium | 0.5% | 07 Mar, 2023 | Go github.com/answerdev/answer |
Answer vulnerable to Cross-site Scripting CVE-2023-1244, GHSA-h85v-cx5m-78wj, GO-2023-1618 | Medium | 0.5% | 07 Mar, 2023 | Go github.com/answerdev/answer |
Answer vulnerable to Cross-site Scripting CVE-2023-1245, GHSA-6c32-3x46-m9rh, GO-2023-1612 | Medium | 0.5% | 07 Mar, 2023 | Go github.com/answerdev/answer |
openstack-neutron uncontrolled resource consumption flaw CVE-2022-3277, GHSA-w446-h7vg-wv3p, PYSEC-2026-855 | Medium | 1.1% | 06 Mar, 2023 | PyPI neutron |
Moodle has a Hidden Functionality vulnerability BIT-moodle-2021-36403, CVE-2021-36403, GHSA-j9cw-5cpj-9qj5 | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle Improper Input Validation vulnerability BIT-moodle-2021-36402, CVE-2021-36402, GHSA-gv8f-43pg-c5qw | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle vulnerable to Stored Cross-site Scripting BIT-moodle-2021-36401, CVE-2021-36401, GHSA-g6h6-4fp6-w33w | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle has Incorrect Default Permissions BIT-moodle-2021-36400, CVE-2021-36400, GHSA-35wf-3wq2-r3hx | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle Cross-site Scripting vulnerability BIT-moodle-2021-36399, CVE-2021-36399, GHSA-79jp-m64f-pgrc | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle Cross-site Scripting vulnerability BIT-moodle-2021-36398, CVE-2021-36398, GHSA-786g-xv8v-9h93 | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle has Incorrect Default Permissions BIT-moodle-2021-36397, CVE-2021-36397, GHSA-2wmj-8mqg-r9q8 | Medium | 0.6% | 06 Mar, 2023 | Packagist moodle/moodle |
uvdesk/community-skeleton vulnerable to Stored Cross-site Scripting CVE-2023-1197, GHSA-hfxp-j95j-cwrp | Medium | 0.4% | 06 Mar, 2023 | Packagist uvdesk/community-skeleton |
@nestjs/core vulnerable to Information Exposure via StreamableFile pipe CVE-2023-26108, GHSA-4jpv-8r57-pv7j | Medium | 0.7% | 06 Mar, 2023 | npm @nestjs/core |
Open redirect in web2py CVE-2023-22432, GHSA-w4r7-vm83-q2c7, PYSEC-2026-1064 | Medium | 2.4% | 06 Mar, 2023 | PyPI web2py |
Wallabag Improper Authorization vulnerability CVE-2023-0734, GHSA-8ccw-f83g-v7g3 | Medium | 0.5% | 05 Mar, 2023 | Packagist wallabag/wallabag |
Artesãos SEOTools Open Redirect vulnerability CVE-2020-36665, GHSA-w2x5-hpmg-j98h | Medium | 0.6% | 04 Mar, 2023 | Packagist artesaos/seotools |
Artesãos SEOTools Open Redirect vulnerability CVE-2020-36664, GHSA-w745-xjqx-7wp8 | Medium | 0.6% | 04 Mar, 2023 | Packagist artesaos/seotools |
Artesãos SEOTools Open Redirect vulnerability CVE-2020-36663, GHSA-wjg8-pxqj-c3c7 | Medium | 0.6% | 04 Mar, 2023 | Packagist artesaos/seotools |
Craft CMS Stored Cross-site Scripting Injection Vulnerability CVE-2023-23927, GHSA-qcrj-6ffc-v7hq | Medium | 0.8% | 03 Mar, 2023 | Packagist craftcms/cms |
OpenZeppelin Contracts contains Incorrect Calculation CVE-2023-26488, GHSA-878m-3g6q-594q | Medium | 0.7% | 03 Mar, 2023 | npm @openzeppelin/contracts npm @openzeppelin/contracts-upgradeable |
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints CVE-2022-2835, GHSA-ch7v-37xg-75ph | Medium | 0.2% | 03 Mar, 2023 | Go github.com/coredns/coredns |
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints CVE-2022-2837, GHSA-h828-v5pv-33qx | Medium | 0.4% | 03 Mar, 2023 | Go github.com/coredns/coredns |
Cockpit Uses Platform-Dependent Third Party Components CVE-2023-1160, GHSA-p8cq-pv6w-6rwx | Medium | 0.3% | 03 Mar, 2023 | Packagist cockpit-hq/cockpit |
Vega vulnerable to arbitrary code execution when clicking href links GHSA-cp47-r258-q626 | Medium | Not scored | 02 Mar, 2023 | npm vega |
keycloak-connect contains Open redirect vulnerability in the Node.js adapter CVE-2022-2237, GHSA-59fq-727j-hm3f | Medium | 0.4% | 02 Mar, 2023 | npm keycloak-connect |
gosaml2 vulnerable to Denial Of Service Via Deflate Decompression Bomb CVE-2023-26483, GHSA-6gc3-crp7-25w5, GO-2023-1602 | Medium | 1.0% | 02 Mar, 2023 | Go github.com/russellhaering/gosaml2 |
Vega Expression Language `scale` expression function Cross Site Scripting CVE-2023-26486, GHSA-4vq7-882g-wcg4 | Medium | 0.8% | 02 Mar, 2023 | npm vega npm vega-functions |
Vega has Cross-site Scripting vulnerability in `lassoAppend` function CVE-2023-26487, GHSA-w5m3-xh75-mp55 | Medium | 0.8% | 02 Mar, 2023 | npm vega npm vega-functions |
Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions CVE-2023-26052, GHSA-3hvj-3cg9-v242, PYSEC-2026-915 | Medium | 0.8% | 02 Mar, 2023 | PyPI saleor |
Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions CVE-2023-26051, GHSA-r8qr-wwg3-2r85, PYSEC-2026-917 | Medium | 0.8% | 02 Mar, 2023 | PyPI Saleor PyPI saleor |
Kubernetes vulnerable to path traversal CVE-2022-3162, GHSA-2394-5535-8j88, GO-2023-1628 | Medium | 1.4% | 01 Mar, 2023 | Go github.com/kubernetes/kubernetes Go k8s.io/kubernetes |
Grafana vulnerable to Stored Cross-site Scripting in Text plugin BIT-grafana-2023-22462, CVE-2023-22462, GHSA-7rqg-hjwc-6mjf | Medium | 1.6% | 01 Mar, 2023 | Go github.com/grafana/grafana |
teler-waf contains detection rule bypass via Entities payload CVE-2023-26047, GHSA-p2pf-g8cq-3gq5, GO-2023-1600 | Medium | 0.5% | 01 Mar, 2023 | Go github.com/kitabisa/teler-waf |
teler-waf subject to Bypass of Common Web Attack Threat Rule with HTML Entities Payload CVE-2023-26046, GHSA-9f95-hhg4-pg4f, GO-2023-1597 | Medium | 0.5% | 01 Mar, 2023 | Go github.com/kitabisa/teler-waf |
Juju controller - Arbitrary file reading vulnerability CVE-2023-0092, GHSA-x5rv-w9pm-8qp8 | Medium | 0.6% | 01 Mar, 2023 | Go github.com/juju/juju |
Grafana vulnerable to Cross-site Scripting BIT-grafana-2023-0594, CVE-2023-0594, GHSA-xw5p-hw8j-xg4q | Medium | 9.2% | 01 Mar, 2023 | Go github.com/grafana/grafana |
rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters CVE-2023-26491, GHSA-32gr-4cq6-5w5q | Medium | 0.4% | 01 Mar, 2023 | npm rsshub |
Grafana vulnerable to Cross-site Scripting BIT-grafana-2023-0507, CVE-2023-0507, GHSA-hjv9-hm2f-rpcj | Medium | 15.5% | 01 Mar, 2023 | Go github.com/grafana/grafana |
Pimcore vulnerable to Cross Site Scripting in image/video thumbnail config CVE-2023-1117, GHSA-qxcw-rf4v-hp26 | Medium | 0.4% | 01 Mar, 2023 | Packagist pimcore/pimcore |
Pimcore vulnerable to Cross Site Scripting in Email Blacklist CVE-2023-1116, GHSA-96hp-38wx-j3wc | Medium | 0.5% | 01 Mar, 2023 | Packagist pimcore/pimcore |
Pimcore vulnerable to Cross Site Scripting in Documents Link Editable CVE-2023-1115, GHSA-97cp-8873-v2gf | Medium | 0.6% | 01 Mar, 2023 | Packagist pimcore/pimcore |
vantage6 vulnerable to Observable Response Discrepancy CVE-2022-39228, GHSA-36gx-9q6h-g429, PYSEC-2023-313, PYSEC-2023-52 | Medium | 0.6% | 28 Feb, 2023 | PyPI vantage6 |
Microweber Cross-site Scripting vulnerability CVE-2023-1081, GHSA-c2rc-8m9f-g4fh | Medium | 0.4% | 28 Feb, 2023 | Packagist microweber/microweber |
Pimcore vulnerable to Cross-site Scripting CVE-2023-1067, GHSA-f2jh-mf2c-8278 | Medium | 0.4% | 27 Feb, 2023 | Packagist pimcore/pimcore |