Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Excessive CPU usage BIT-envoy-2021-39204, CVE-2021-39204, GHSA-5wjf-62hw-q78r | High | 1.7% | 09 Sep, 2021 | Go github.com/pomerium/pomerium |
Incorrect handling of H2 GOAWAY + SETTINGS frames BIT-envoy-2021-39162, CVE-2021-39162, GHSA-gjcg-vrxg-xmgv, GO-2022-0933 | High | 1.6% | 09 Sep, 2021 | Go github.com/pomerium/pomerium |
OpenStack Neutron Denial of Service vulnerability CVE-2021-40797, GHSA-cpx3-696p-3cw9, PYSEC-2021-329 | High | 1.8% | 08 Sep, 2021 | PyPI neutron |
Regular Expression Denial of Service in flask-restx CVE-2021-32838, GHSA-3q6g-vf58-7m4g, PYSEC-2021-325 | High | 1.9% | 08 Sep, 2021 | PyPI flask-restx |
Apple macOS Unspecified Vulnerability CVE-2021-30713 | HighExploited | 7.0% | 08 Sep, 2021 | |
Apple iOS WebKit Buffer Overflow Vulnerability CVE-2021-30666 | HighExploited | 3.0% | 08 Sep, 2021 | |
Apple Multiple Products WebKit Memory Corruption Vulnerability CVE-2021-30665 | HighExploited | 3.7% | 08 Sep, 2021 | |
Apple Multiple Products WebKit Integer Overflow Vulnerability CVE-2021-30663 | HighExploited | 3.5% | 08 Sep, 2021 | |
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability CVE-2021-30661 | HighExploited | 4.5% | 08 Sep, 2021 | |
Exposure of Resource to Wrong Sphere in salt CVE-2021-21996, GHSA-pf7h-h2wq-m7pg, PYSEC-2021-318 | High | 3.4% | 08 Sep, 2021 | PyPI salt |
Improper Authentication in SaltStack Salt CVE-2021-22004, GHSA-xf37-qcvf-7m57, PYSEC-2021-346 | High | 0.4% | 08 Sep, 2021 | PyPI salt |
Apple iOS WebKit Use-After-Free Vulnerability CVE-2021-30762 | HighExploited | 11.0% | 08 Sep, 2021 | |
Apple iOS WebKit Memory Corruption Vulnerability CVE-2021-30761 | HighExploited | 10.5% | 08 Sep, 2021 | |
Cross-Site Request Forgery in sqlite-web CVE-2021-23404, GHSA-2j58-pwwv-x666, PYSEC-2021-332, SNYK-PYTHON-SQLITEWEB-1316324 | High | 0.5% | 08 Sep, 2021 | PyPI sqlite-web |
OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values CVE-2021-3761, GHSA-c8xp-8mf3-62h9, GO-2022-0246 | High | 1.2% | 07 Sep, 2021 | Go github.com/cloudflare/cfrpki |
Incorrect version tags linked to external repository BIT-parse-2021-47986, BIT-parse-2021-47987, CVE-2021-47986, CVE-2021-47987, GHSA-593v-wcqx-hq2w | High | 0.2% | 07 Sep, 2021 | npm parse-server |
Content object state fetch functions open to SQL injection GHSA-jpwx-ffjq-wr4w | High | Not scored | 07 Sep, 2021 | Packagist ezsystems/ezpublish-legacy |
Older releases of better_errors open to Cross-Site Request Forgery attack CVE-2021-39197, GHSA-w3j4-76qw-wwjm | High | 0.6% | 07 Sep, 2021 | RubyGems better_errors |
HashiCorp Consul Privilege Escalation Vulnerability BIT-consul-2021-37219, CVE-2021-37219, GHSA-ccw8-7688-vqx4, GO-2022-0593 | High | 1.1% | 07 Sep, 2021 | Go github.com/hashicorp/consul |
Privilege escalation in Hashicorp Nomad CVE-2021-37218, GHSA-c8x3-rg72-fwwg, GO-2022-0591 | High | 0.7% | 07 Sep, 2021 | Go github.com/hashicorp/nomad |
Uncontrolled Resource Consumption in pillow BIT-pillow-2021-23437, CVE-2021-23437, GHSA-98vv-pw6r-q6q4, PYSEC-2021-317, SNYK-PYTHON-PILLOW-1319443 | High | 3.2% | 03 Sep, 2021 | PyPI pillow |
Adobe Acrobat and Reader Use-After-Free Vulnerability CVE-2021-28550 | HighExploited | 52.1% | 02 Sep, 2021 | |
Parse Server crashes with query parameter BIT-parse-2021-39187, CVE-2021-39187, GHSA-xqp8-w826-hh6x | High | 1.8% | 02 Sep, 2021 | npm parse-server |
Remote code execution in Eclipse Theia CVE-2021-34435, GHSA-v9w2-v7j9-rjpr | High | 0.6% | 01 Sep, 2021 | npm @theia/mini-browser |
Magento affected by a server-side denial-of-service using a GraphQL field CVE-2021-36044, GHSA-wr57-3h2f-3q95 | High | 2.0% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento affected by a blind SSRF vulnerability in the bundled dotmailer extension CVE-2021-36043, GHSA-36xq-7w8w-xp68 | High | 1.9% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento vulnerable to file upload attack CVE-2021-36041, GHSA-mx5m-j5xr-jg8c | High | 2.4% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento affected by remote code execution via a file upload CVE-2021-36034, GHSA-j46h-qjjv-cxfj | High | 2.4% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento is affected by an improper input validation vulnerability CVE-2021-36032, GHSA-5vw8-r55w-f4q4 | High | 2.2% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Path Traversal vulnerability via the `theme[preview_image]` parameter CVE-2021-36031, GHSA-7w95-qwhh-q9p3 | High | 3.1% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento allows attackers to alter the price of items CVE-2021-36030, GHSA-rhff-65hp-55rw | High | 2.3% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento improper authorization vulnerability CVE-2021-36029, GHSA-m8wx-whpp-q283 | High | 2.5% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento is affected by an os command injection via the Data collection endpoint CVE-2021-36024, GHSA-qmq6-jpvg-j547 | High | 2.9% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento XML Injection vulnerability in the Widgets Update Layout CVE-2021-36022, GHSA-3x9x-vhqj-cv27 | High | 3.4% | 01 Sep, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Prototype Pollution in Proto CVE-2021-23426, GHSA-58g2-9fqr-36q2 | High | 0.9% | 01 Sep, 2021 | npm Proto |
Improper Encoding or Escaping of Output in Asset Metadata Component CVE-2021-39170, GHSA-2v88-qq7x-xq5f | High | 1.2% | 01 Sep, 2021 | Packagist pimcore/pimcore |
Improper Neutralization of Text-Values in Object Version Preview CVE-2021-39166, GHSA-w6j8-jc36-x5q9 | High | 0.8% | 01 Sep, 2021 | Packagist pimcore/pimcore |
Path traversal in atlasboard CVE-2021-39109, GHSA-25pr-6pr6-68v7 | High | 1.7% | 01 Sep, 2021 | npm atlasboard |
Missing Release of Memory after Effective Lifetime in detect-character-encoding CVE-2021-39176, GHSA-5rwj-j5m3-3chj | High | 1.9% | 31 Aug, 2021 | npm detect-character-encoding |
OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value CVE-2021-40085, GHSA-fh73-gjvg-349c, PYSEC-2021-361 | High | 1.9% | 31 Aug, 2021 | PyPI neutron |
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links CVE-2021-37701, GHSA-9r2w-394v-53qc | High | 3.3% | 31 Aug, 2021 | npm tar |
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links CVE-2021-37712, GHSA-qq89-hq3f-393p | High | 1.9% | 31 Aug, 2021 | npm tar |
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization CVE-2021-37713, GHSA-5955-9wpr-37jh | High | 1.3% | 31 Aug, 2021 | npm tar |
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following CVE-2021-39134, GHSA-2h3h-q99f-3fhc | High | 0.6% | 31 Aug, 2021 | npm @npmcli/arborist |
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist CVE-2021-39135, GHSA-gmw6-94gg-2rc2 | High | 0.6% | 31 Aug, 2021 | npm @npmcli/arborist |
axios Inefficient Regular Expression Complexity vulnerability CVE-2021-3749, GHSA-cph5-m8f7-6c5x | High | 8.5% | 31 Aug, 2021 | npm axios |
XSS in Image Optimization API for Next.js CVE-2021-39178, GHSA-9gr3-7897-pp7m | High | 1.1% | 31 Aug, 2021 | npm next |
Code Injection in total.js CVE-2021-32831, GHSA-vwhc-pww7-72x6 | High | 1.5% | 30 Aug, 2021 | npm total.js |
XSS vulnerability on asset view CVE-2021-27912, GHSA-rh5w-82wh-jhr8 | High | 0.6% | 30 Aug, 2021 | Packagist mautic/core |
XSS vulnerability on contacts view CVE-2021-27911, GHSA-72hm-fx78-xwhc | High | 0.6% | 30 Aug, 2021 | Packagist mautic/core |