Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
`CHECK`-failures in Tensorflow BIT-tensorflow-2022-21734, CVE-2022-21734, GHSA-gcvh-66ff-4mwm, PYSEC-2022-113, PYSEC-2022-58, PYSEC-2026-3187 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in Tensorflow BIT-tensorflow-2022-21735, CVE-2022-21735, GHSA-87v6-crgm-2gfj, PYSEC-2022-114, PYSEC-2022-59, PYSEC-2026-3134 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-fails when building invalid tensor shapes in Tensorflow BIT-tensorflow-2022-23569, CVE-2022-23569, GHSA-qj5r-f9mv-rffh, PYSEC-2022-133, PYSEC-2022-78, PYSEC-2026-3230 | High | 0.5% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Type confusion leading to segfault in Tensorflow BIT-tensorflow-2022-21731, CVE-2022-21731, GHSA-m4hf-j54p-p353, PYSEC-2022-110, PYSEC-2022-55, PYSEC-2026-3211 | High | 0.9% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Undefined behavior in `SparseTensorSliceDataset` BIT-tensorflow-2022-21736, CVE-2022-21736, GHSA-pfjj-m3jj-9jc9, PYSEC-2022-115, PYSEC-2022-60, PYSEC-2026-3223 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflows in Tensorflow BIT-tensorflow-2022-23567, CVE-2022-23567, GHSA-rrx2-r989-2c43, PYSEC-2022-131, PYSEC-2022-76, PYSEC-2026-3240 | High | 1.1% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflows in Tensorflow BIT-tensorflow-2022-23568, CVE-2022-23568, GHSA-6445-fm66-fvq2, PYSEC-2022-132, PYSEC-2022-77, PYSEC-2026-3114 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds read in Tensorflow BIT-tensorflow-2022-21726, CVE-2022-21726, GHSA-23hm-7w47-xw72, PYSEC-2022-105, PYSEC-2022-50, PYSEC-2026-3082 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in Tensorflow BIT-tensorflow-2022-21727, CVE-2022-21727, GHSA-c6fh-56w7-fvjw, PYSEC-2022-106, PYSEC-2022-51, PYSEC-2026-3159 | High | 0.7% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds read in Tensorflow BIT-tensorflow-2022-21728, CVE-2022-21728, GHSA-6gmv-pjp9-p8w8, PYSEC-2022-107, PYSEC-2022-52, PYSEC-2026-3121 | High | 1.1% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds read in Tensorflow BIT-tensorflow-2022-21730, CVE-2022-21730, GHSA-vjg4-v33c-ggc4, PYSEC-2022-109, PYSEC-2022-54, PYSEC-2026-3247 | High | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Infinite Loop in Django BIT-django-2022-23833, CVE-2022-23833, GHSA-6cw3-g6wv-c2xv, PYSEC-2022-20 | High | 49.5% | 03 Feb, 2022 | PyPI Django PyPI django |
Insufficiently Protected Credentials in Apache Superset BIT-superset-2021-44451, CVE-2021-44451, GHSA-hhm3-48h2-597v, PYSEC-2022-36 | High | 7.9% | 01 Feb, 2022 | PyPI apache-superset |
CSRF token missing in Symfony BIT-symfony-2022-23601, CVE-2022-23601, GHSA-vvmr-8829-6whx | High | 0.6% | 01 Feb, 2022 | Packagist symfony/framework-bundle |
Unsafe handling of user-specified cookies in treq CVE-2022-23607, GHSA-fhpf-pp6p-55qc, PYSEC-2022-26 | High | 1.1% | 01 Feb, 2022 | PyPI treq |
Unrestricted Upload of File with Dangerous Type in motionEye CVE-2021-44255, GHSA-m2c7-42rf-c62f, PYSEC-2026-681 | High | 3.1% | 31 Jan, 2022 | PyPI motioneye |
Incorrect Authorization in calibreweb CVE-2022-0273, GHSA-vgmw-9cww-qq99, PYSEC-2022-22 | High | 0.7% | 30 Jan, 2022 | PyPI calibreweb |
SQL Injection in Casdoor CVE-2022-24124, GHSA-m358-g4rp-533r, GO-2022-0303, PYSEC-2022-43189 | High | 55.3% | 29 Jan, 2022 | Go github.com/casdoor/casdoor PyPI casdoor |
Denial of Service Vulnerability in next.js CVE-2022-21721, GHSA-wr66-vrwm-5g5x | High | 2.2% | 28 Jan, 2022 | npm next |
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability CVE-2021-4034 | HighExploited | 94.9% | 28 Jan, 2022 | |
Reolink RLC-410W IP Camera OS Command Injection Vulnerability CVE-2021-40407 | HighExploited | 47.6% | 28 Jan, 2022 | |
Denial of service in sidekiq CVE-2022-23837, GHSA-jrfj-98qg-qjgv | High | 5.2% | 27 Jan, 2022 | RubyGems sidekiq |
Linux Kernel Privilege Escalation Vulnerability CVE-2021-22600 | HighExploited | 6.6% | 26 Jan, 2022 | |
Withdrawn Advisory: NULL Pointer Dereference in Protocol Buffers CVE-2021-22570, GHSA-77rm-9x9h-xj3g, PYSEC-2022-48 | High | 2.7% | 26 Jan, 2022 | Go github.com/protocolbuffers/protobuf Maven com.google.protobuf:protobuf-java NuGet Google.Protobuf Packagist google/protobuf +1 more |
Exposure of Sensitive Information in simple-get CVE-2022-0355, GHSA-wpg7-2c88-r8xv | High | 2.0% | 26 Jan, 2022 | npm simple-get |
Cross Site Request Forgery in Moodle BIT-moodle-2022-0335, CVE-2022-0335, GHSA-xpfv-89vg-r562 | High | 0.6% | 25 Jan, 2022 | Packagist moodle/moodle |
SSRF vulnerability in jupyter-server-proxy CVE-2022-21697, GHSA-gcv9-6737-pjqw, PYSEC-2022-16 | High | 1.1% | 25 Jan, 2022 | PyPI jupyter-server-proxy |
Cross-Site Request Forgery in yetiforce CVE-2022-0269, GHSA-7g7r-gr46-q4p5 | High | 0.5% | 24 Jan, 2022 | Packagist yetiforce/yetiforce-crm |
Panic due to crafted inputs in archive/zip BIT-golang-2021-39293, CVE-2021-39293, GO-2022-0273 | High | 6.9% | 24 Jan, 2022 | Go stdlib |
IBX-1392: Image filenames sanitization GHSA-44m4-9cjp-j587 | High | Not scored | 21 Jan, 2022 | Packagist ezsystems/ezpublish-kernel |
Unhandled exception when decoding form response JSON CVE-2022-51014, GHSA-wjfq-88q2-r34j | High | 0.5% | 21 Jan, 2022 | Packagist pocketmine/pocketmine-mp |
Server side request forgery in @isomorphic-git/cors-proxy CVE-2021-23664, GHSA-v82v-rq72-phq9, SNYK-JS-ISOMORPHICGITCORSPROXY-1734788 | High | 1.4% | 21 Jan, 2022 | npm @isomorphic-git/cors-proxy |
Path Traversal in convert-svg packages CVE-2021-23631, GHSA-jv7g-9g6q-cxvw | High | 2.0% | 21 Jan, 2022 | npm convert-svg-core npm convert-svg-to-jpeg npm convert-svg-to-png |
Prototype pollution in min-dash CVE-2021-23460, GHSA-2m53-83f3-562j | High | 2.2% | 21 Jan, 2022 | Maven org.webjars.npm:min-dash npm min-dash |
Mustache remote code injection vulnerability CVE-2022-0323, GHSA-4rmr-c2jx-vx27 | High | 0.7% | 21 Jan, 2022 | Packagist mustache/mustache |
Code Injection in microweber CVE-2022-0282, GHSA-p5hj-xxfr-pwc3 | High | 1.4% | 20 Jan, 2022 | Packagist microweber/microweber |
Exposure of Sensitive Information to an Unauthorized Actor in microweber CVE-2022-0281, GHSA-7wv8-g97r-432h | High | 10.5% | 20 Jan, 2022 | Packagist microweber/microweber |
Execution with Unnecessary Privileges in ipython CVE-2022-21699, GHSA-pq7m-3gw7-gq5x, PYSEC-2022-12 | High | 0.7% | 19 Jan, 2022 | PyPI ipython |
Out-of-bounds Read in Onionshare CVE-2022-21688, GHSA-x7wr-283h-5h2v, PYSEC-2022-39 | High | 0.9% | 18 Jan, 2022 | PyPI onionshare-cli |
Denial of Service in Onionshare CVE-2022-21689, GHSA-jh82-c5jw-pxpc, PYSEC-2022-40 | High | 1.3% | 18 Jan, 2022 | PyPI onionshare-cli |
Unrestricted Upload of File with Dangerous Type in pimcore CVE-2022-0263, GHSA-c697-r227-pq6h | High | 1.1% | 18 Jan, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in HTML2PDF CVE-2021-45394, GHSA-6m93-343m-3jrc | High | 1.6% | 18 Jan, 2022 | Packagist spipu/html2pdf |
Unrestricted Upload of File with Dangerous Type in Crater CVE-2022-0242, GHSA-728c-42pc-fwxg | High | 1.4% | 17 Jan, 2022 | Packagist bytefury/crater |
pimcore is vulnerable to SQL Injection CVE-2022-0258, GHSA-vj9x-w7ch-f46p | High | 1.7% | 17 Jan, 2022 | Packagist pimcore/pimcore |
calibre-web is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-4164, GHSA-wxr6-29pv-ch68, PYSEC-2026-621 | High | 0.5% | 17 Jan, 2022 | PyPI calibreweb |
node-fetch forwards secure headers to untrusted sites CVE-2022-0235, GHSA-r683-j2x4-v87g | High | 1.7% | 16 Jan, 2022 | npm node-fetch |
Infinite Loop in colors.js CVE-2021-23567, GHSA-gh88-3pxp-6fm8 | High | 1.8% | 14 Jan, 2022 | npm colors |
Inefficient Regular Expression Complexity in marked CVE-2022-21681, GHSA-5v2h-r2cx-5xgj | High | 2.9% | 14 Jan, 2022 | npm marked |
Inefficient Regular Expression Complexity in marked CVE-2022-21680, GHSA-rrrm-qjm4-v8hf | High | 3.0% | 14 Jan, 2022 | npm marked |
october/system arbitrary code execution CVE-2021-32650, GHSA-5hfj-r725-wpc4 | High | 2.2% | 14 Jan, 2022 | Packagist october/system |