Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0107, GHSA-pcvh-px2p-vmxw | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0108, GHSA-fpjc-cxr6-w6h8, GO-2023-1462 | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0110, GHSA-x22v-qgm2-7qc7, GO-2023-1469 | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0111, GHSA-h2ph-9r76-37v5, GO-2023-1465 | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0112, GHSA-9h7x-9pmh-7gg8, GO-2023-1461 | Medium | 0.6% | 07 Jan, 2023 | Go github.com/usememos/memos |
Vercel ms Inefficient Regular Expression Complexity vulnerability CVE-2017-20162, GHSA-w9mr-4mfr-499f | Medium | 1.1% | 05 Jan, 2023 | npm ms |
go-ipld-prime/codec/json may panic if asked to encode bytes CVE-2023-22460, GHSA-c653-6hhg-9x92, GO-2023-1269 | Medium | 1.2% | 05 Jan, 2023 | Go github.com/ipld/go-ipld-prime |
Xataface vulnerable to Cross-site Scripting CVE-2021-4303, GHSA-64wv-c7jw-jw2q | Medium | 0.6% | 05 Jan, 2023 | Packagist xataface/xataface |
django-ucamlookup Cross-site Scripting vulnerability CVE-2016-15010, GHSA-pjx4-3f3p-29v3, PYSEC-2023-14 | Medium | 0.6% | 05 Jan, 2023 | PyPI django-ucamlookup |
LdapCherry Cross-site Scripting vulnerbaility CVE-2019-25095, GHSA-vq8w-x8v7-f88m, PYSEC-2023-19 | Medium | 0.6% | 05 Jan, 2023 | PyPI ldapcherry |
pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames CVE-2023-0057, GHSA-h8r9-467r-vjjf, PYSEC-2026-904 | Medium | 0.5% | 05 Jan, 2023 | PyPI pyload-ng |
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2023-0055, GHSA-m3g7-wrrq-v5c8, PYSEC-2026-905 | Medium | 0.5% | 04 Jan, 2023 | PyPI pyload-ng |
typo3-appointments vulnerable to Cross-site Scripting CVE-2019-25094, GHSA-cf5r-3pvm-w64w | Medium | 0.6% | 04 Jan, 2023 | Packagist innologi/typo3-appointments |
httparty has multipart/form-data request tampering vulnerability CVE-2024-22049, GHSA-5pq7-52mg-hr42 | Medium | 1.3% | 03 Jan, 2023 | RubyGems httparty |
SimpleSAMLphp simplesamlphp-module-openid CVE-2010-10002, GHSA-ggj9-6x8j-49w9 | Medium | 0.7% | 01 Jan, 2023 | Packagist simplesamlphp/simplesamlphp-module-openid |
keynote Cross-site Scripting vulnerability CVE-2017-20159, GHSA-399p-vq28-5hg8 | Medium | 0.7% | 31 Dec, 2022 | RubyGems keynote |
Yii2 FileAPI Widget vulnerable to Cross-site Scripting CVE-2017-20158, GHSA-j82x-fh8h-326g | Medium | 0.6% | 31 Dec, 2022 | Packagist vova07/yii2-fileapi-widget |
Froxlor Improper Authorization vulnerability CVE-2022-4868, GHSA-w6qf-j4qr-f946 | Medium | 0.7% | 31 Dec, 2022 | Packagist froxlor/froxlor |
Froxlor vulnerable to Cross-Site Request Forgery CVE-2022-4867, GHSA-6gwx-gw56-qhf7 | Medium | 0.4% | 31 Dec, 2022 | Packagist froxlor/froxlor |
Froxlor vulnerable to Argument Injection CVE-2022-4864, GHSA-3v7m-2jrh-vc93 | Medium | 0.5% | 30 Dec, 2022 | Packagist froxlor/froxlor |
usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges CVE-2022-4863, GHSA-6whj-8g9g-5jvx, GO-2023-1270 | Medium | 0.7% | 30 Dec, 2022 | Go github.com/usememos/memos |
efs-utils and aws-efs-csi-driver have race condition during concurrent TLS mounts CVE-2022-46174, GHSA-4fv8-w65m-3932 | Medium | 0.6% | 30 Dec, 2022 | Go github.com/kubernetes-sigs/aws-efs-csi-driver |
pastebinit Path Traversal vulnerability CVE-2018-25059, GHSA-cwh7-28vg-jmpr, GO-2022-1212 | Medium | 0.8% | 30 Dec, 2022 | Go github.com/jessfraz/pastebinit |
gotify/server vulnerable to Cross-site Scripting in the application image file upload CVE-2022-46181, GHSA-xv6x-456v-24xh, GO-2022-1208 | Medium | 0.5% | 30 Dec, 2022 | Go github.com/gotify/server Go github.com/gotify/server/v2 |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4839, GHSA-gxqf-4g4p-q3hc | Medium | 0.8% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4840, GHSA-pwhr-p68w-296x | Medium | 0.7% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4841, GHSA-rmhx-9h5h-3xh3 | Medium | 0.6% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4845, GHSA-gw9m-2m5v-c6x5, GO-2022-1257 | Medium | 0.3% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4846, GHSA-cwrm-33qq-4w2x | Medium | 0.3% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos has Incorrectly Specified Destination in a Communication Channel CVE-2022-4847, GHSA-r7hg-2cpp-8wqq, GO-2022-1264 | Medium | 0.7% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel CVE-2022-4848, GHSA-vh43-cc6x-prpr, GO-2022-1266 | Medium | 0.6% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4849, GHSA-642q-2q68-9j3p, GO-2022-1250 | Medium | 0.4% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4850, GHSA-c5hq-35h7-r9x4 | Medium | 0.4% | 29 Dec, 2022 | Go github.com/usememos/memos |
sememos/memos vulnerable to Improper Handling of Values CVE-2022-4851, GHSA-42q2-m54f-jh95, GO-2023-1285 | Medium | 0.8% | 29 Dec, 2022 | Go github.com/usememos/memos |
Twitter-Post-Fetcher vulnerable to Use of Web Link to Untrusted Target with window.opener Access CVE-2018-25058, GHSA-m688-cx2p-rgq9 | Medium | 0.6% | 29 Dec, 2022 | npm twitter-fetcher-js |
CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation CVE-2022-4318, GHSA-cm9x-c3rh-7rc4, GO-2022-1206 | Medium | 0.3% | 29 Dec, 2022 | Go github.com/cri-o/cri-o |
OpenShift OSIN vulnerable to Observable Timing Discrepancy CVE-2021-4294, GHSA-m7qp-cj9p-gj85, GO-2022-1201 | Medium | 0.7% | 28 Dec, 2022 | Go github.com/openshift/osin |
usememos/memos Incorrect Use of Privileged APIs vulnerability CVE-2022-4805, GHSA-mq5q-gpgv-pwxw, GO-2023-1292 | Medium | 0.5% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4806, GHSA-pp3p-6jjh-rmg7, GO-2022-1261 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4807, GHSA-gfj4-wg89-m22r, GO-2022-1256 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4810, GHSA-qf9q-3wwx-8qjv, GO-2022-1263 | Medium | 0.5% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authorization vulnerability CVE-2022-4811, GHSA-hc5q-26h8-r9wf, GO-2022-1259 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Comparison of Object References Instead of Object Contents CVE-2022-4812, GHSA-m5pr-wm6q-x4g2, GO-2022-1260 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos has Insufficient Granularity of Access Control CVE-2022-4813, GHSA-7qpw-2j9m-rw8c, GO-2022-1253 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4814, GHSA-6fx9-29x2-fmfj, GO-2022-1251 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts CVE-2022-4797, GHSA-qrrf-xvcf-p64q, GO-2022-1244 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authorization vulnerability CVE-2022-4798, GHSA-qcf5-m2c6-89f2, GO-2022-1243 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authentication vulnerability CVE-2022-4799, GHSA-jvq8-w7qv-hqp6, GO-2022-1239 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel CVE-2022-4800, GHSA-mfvq-m3jj-8864, GO-2022-1240 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos has Insufficient Granularity of Access Control CVE-2022-4801, GHSA-f83p-pg86-p922, GO-2022-1235 | Medium | 0.7% | 28 Dec, 2022 | Go github.com/usememos/memos |