Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
usememos/memos vulnerable to Improper Authorization CVE-2022-4802, GHSA-rx2m-xr4x-54hh, GO-2022-1248 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authorization vulnerability CVE-2022-4804, GHSA-qw36-rw5q-gxcq, GO-2022-1245 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
Json2html vulnerable to cross-site scripting CVE-2018-25053, GHSA-79mp-cxp4-9p6r | Medium | 0.6% | 28 Dec, 2022 | npm node-json2html |
Harvest Chosen vulnerable to Cross-site Scripting CVE-2018-25050, GHSA-x5q4-m45m-fm94 | Medium | 0.7% | 28 Dec, 2022 | Packagist harvesthq/chosen |
nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag CVE-2019-25091, GHSA-mwvp-qr62-cvjx, PYSEC-2026-885 | Medium | 0.7% | 27 Dec, 2022 | PyPI nsupdate |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4691, GHSA-97rc-mm5j-f6rj, GO-2022-1225 | Medium | 0.7% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4694, GHSA-v92p-phmp-xffr | Medium | 0.6% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4695, GHSA-c2v4-8r9g-g5xj | Medium | 0.7% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos may leak user information to an authenticated user CVE-2022-4734, GHSA-j593-h5v3-45x6, GO-2022-1220 | Medium | 0.8% | 27 Dec, 2022 | Go github.com/usememos/memos |
Graphite Web Cross-site Scripting vulnerability CVE-2022-4730, GHSA-m973-4vpc-x43c, PYSEC-2026-819 | Medium | 0.8% | 27 Dec, 2022 | PyPI graphite-web |
Graphite Web Cross-site Scripting vulnerability CVE-2022-4729, GHSA-q99p-78hp-xg5c, PYSEC-2026-820 | Medium | 0.8% | 27 Dec, 2022 | PyPI graphite-web |
Graphite Web Cross-site Scripting vulnerability CVE-2022-4728, GHSA-3c5x-4hvx-qrrr, PYSEC-2026-818 | Medium | 0.8% | 27 Dec, 2022 | PyPI graphite-web |
rdiffweb vulnerable to Special Element Injection CVE-2022-4721, GHSA-83pm-7v48-5jp4, PYSEC-2022-43007 | Medium | 0.5% | 27 Dec, 2022 | PyPI rdiffweb |
Oxidized Web vulnerable to Cross-site Scripting CVE-2019-25088, GHSA-8qwh-rm6c-jv96 | Medium | 0.6% | 27 Dec, 2022 | RubyGems oxidized-web |
binwalk vulnerable to UNIX Symbolic Link (Symlink) Following CVE-2021-4287, GHSA-8m3f-g62j-3vx8, PYSEC-2026-788 | Medium | 2.1% | 27 Dec, 2022 | PyPI binwalk |
php-mod/curl allows Cross-site Scripting CVE-2021-30134, GHSA-f8p3-q834-q9cj | Medium | 1.3% | 26 Dec, 2022 | Packagist php-mod/curl |
docconv vulnerable to Memory Allocation with Excessive Size Value CVE-2022-4741, GHSA-qvx2-59g8-8hph, GO-2022-1188 | Medium | 0.8% | 25 Dec, 2022 | Go code.sajari.com/docconv Go github.com/sajari/docconv |
Macaron i18n Open Redirect vulnerability CVE-2020-36627, GHSA-jwrv-x6rx-8vfm, GO-2022-1187 | Medium | 0.6% | 25 Dec, 2022 | Go github.com/go-macaron/i18n |
Snipe-IT allows attackers to check whether a user account exists CVE-2022-44381, GHSA-qqv9-gqh5-7h99 | Medium | 0.7% | 25 Dec, 2022 | Packagist snipe/snipe-it |
Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets CVE-2022-44380, GHSA-363q-j92x-7543 | Medium | 0.5% | 25 Dec, 2022 | Packagist snipe/snipe-it |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4692, GHSA-f552-97qx-c694, GO-2022-1216 | Medium | 0.6% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos missing Secure cookie attribute CVE-2022-4683, GHSA-qcw2-492v-57xj, GO-2022-1192 | Medium | 0.4% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to improper access control CVE-2022-4685, GHSA-9v48-2h5x-fvpm, GO-2022-1205 | Medium | Not scored | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored cross-site scripting (XSS) CVE-2022-4690, GHSA-c8jh-vcjh-fx2w, GO-2022-1189 | Medium | 0.6% | 23 Dec, 2022 | Go github.com/usememos/memos |
text_helpers uses web link to untrusted target with window.opener access CVE-2020-36624, GHSA-74hc-57m5-83ch | Medium | 0.6% | 22 Dec, 2022 | RubyGems text_helpers |
liquidjs may leak properties of a prototype CVE-2022-25948, GHSA-45rm-2893-5f49 | Medium | 1.0% | 22 Dec, 2022 | npm liquidjs |
jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC CVE-2022-23541, GHSA-hjrf-2m68-5959 | Medium | 0.8% | 22 Dec, 2022 | npm jsonwebtoken |
Microweber vulnerable to Stored Cross-Site Scripting CVE-2022-4647, GHSA-9cmm-52cv-6hvc | Medium | 0.6% | 22 Dec, 2022 | Packagist microweber/microweber |
rdiffweb Open Redirect vulnerability CVE-2022-4644, GHSA-639f-hxcv-84mc, PYSEC-2022-43003 | Medium | 0.6% | 22 Dec, 2022 | PyPI rdiffweb |
collective.contact.widget is vulnerable to cross-site scripting CVE-2022-4638, GHSA-5pqf-rvm7-3wgw, PYSEC-2022-42988 | Medium | 0.4% | 21 Dec, 2022 | PyPI collective-contact-widget PyPI collective.contact.widget |
leanote vulnerable to cross-site scripting CVE-2021-4263, GHSA-6cmv-2548-82v4 | Medium | 0.6% | 21 Dec, 2022 | Go github.com/leanote/leanote |
studygolang vulnerable to cross-site scripting CVE-2021-4272, GHSA-gw62-c7w4-x449 | Medium | 0.4% | 21 Dec, 2022 | Go github.com/studygolang/studygolang |
AAD Pod Identity obtaining token with backslash CVE-2022-23551, GHSA-p82q-rxpm-hjpc, GO-2022-1181 | Medium | 0.8% | 21 Dec, 2022 | Go github.com/Azure/aad-pod-identity |
Smoothie vulnerable to Cross-site Scripting when tooltipLabel or strokeStyle are controlled by users CVE-2022-25929, GHSA-g662-qq45-ppwm | Medium | 0.9% | 21 Dec, 2022 | npm smoothie |
Microweber vulnerable to Reflected Cross-site Scripting CVE-2022-4617, GHSA-3mmh-vq9w-4c3g | Medium | 0.7% | 21 Dec, 2022 | Packagist microweber/microweber |
ghinstallation returns app JWT in error responses CVE-2022-39304, GHSA-h4q8-96p6-jcgr, GO-2022-1178 | Medium | 0.4% | 19 Dec, 2022 | Go github.com/bradleyfalzon/ghinstallation |
Cortex's Alertmanager can expose local files content via specially crafted config CVE-2022-23536, GHSA-cq2g-pw6q-hf7j, GO-2022-1175 | Medium | 0.8% | 19 Dec, 2022 | Go github.com/cortexproject/cortex |
Oils JS vulnerable to Open Redirect CVE-2021-4260, GHSA-v279-v2xm-whq9 | Medium | 0.4% | 19 Dec, 2022 | npm oils |
Memos Cross-site Scripting vulnerability CVE-2022-4609, GHSA-rgj5-jj5q-v3v7 | Medium | 0.8% | 19 Dec, 2022 | Go github.com/usememos/memos |
Terms and Conditions Module vulnerable to Open Redirect CVE-2022-4589, GHSA-6rmf-cv6p-4h27, PYSEC-2026-805 | Medium | 0.5% | 17 Dec, 2022 | PyPI django-termsandconditions |
Roots Soil plugin vulnerable to Cross-site Scripting CVE-2022-4524, GHSA-jw6x-4h8h-569x | Medium | 0.6% | 15 Dec, 2022 | Packagist roots/soil |
django-photologue vulnerable to Cross-site Scripting CVE-2022-4526, GHSA-287q-jfcp-9vhv, PYSEC-2022-43061 | Medium | 0.6% | 15 Dec, 2022 | PyPI django-photologue |
collective.task Cross-site Scripting vulnerability CVE-2022-4527, GHSA-4r9h-x77w-mffv, PYSEC-2022-42990 | Medium | 0.6% | 15 Dec, 2022 | PyPI collective-task PyPI collective.task |
FeehiCMS Cross Site Scripting vulnerability CVE-2022-40373, GHSA-xv8h-43h9-v3jq | Medium | 0.5% | 15 Dec, 2022 | Packagist feehi/feehicms |
FeehiCMS Cross Site Scripting vulnerability CVE-2022-40002, GHSA-6vh6-72g6-xqx2 | Medium | 0.5% | 15 Dec, 2022 | Packagist feehi/feehicms |
FeehiCMS Cross Site Scripting vulnerability CVE-2022-40001, GHSA-gqgq-784q-v9xp | Medium | 0.5% | 15 Dec, 2022 | Packagist feehi/feehicms |
FeehiCMS Cross Site Scripting vulnerability CVE-2022-40000, GHSA-8vjp-hfgh-68rj | Medium | 0.5% | 15 Dec, 2022 | Packagist feehi/feehicms |
Editor.js vulnerable to Code Injection CVE-2022-23474, GHSA-6mvj-2569-3mcm | Medium | 0.6% | 15 Dec, 2022 | npm @editorjs/editorjs |
FeehiCMS Unrestricted Upload vulnerability CVE-2021-36573, GHSA-67mh-hw8v-x8v9 | Medium | 0.5% | 15 Dec, 2022 | Packagist feehi/feehicms |
FeehiCMS Cross Site Scripting vulnerability CVE-2021-36572, GHSA-m54v-gv8p-9pqp | Medium | 0.4% | 15 Dec, 2022 | Packagist feehi/feehicms |