Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Renderers can obtain access to random bluetooth device without permission in Electron CVE-2022-21718, GHSA-3p22-ghq8-v749 | Medium | 0.9% | 22 Mar, 2022 | npm electron |
Possibility for Denial of Service by overwriting PHP files with language exports GHSA-3fvf-2gp4-89wq | Medium | Not scored | 18 Mar, 2022 | Packagist barryvdh/laravel-translation-manager |
Improper Verification of Cryptographic Signature in `node-forge` CVE-2022-24773, GHSA-2r2c-g63r-vccr | Medium | 1.0% | 18 Mar, 2022 | npm node-forge |
Sandbox escape in notevil and argencoders-notevil CVE-2021-23771, GHSA-8g4m-cjm2-96wq | Medium | 1.0% | 17 Mar, 2022 | npm argencoders-notevil npm notevil |
Cross-site Scripting in sanitize-url CVE-2021-23648, GHSA-hqq7-2q2v-82xq, SNYK-JS-BRAINTREESANITIZEURL-2339882 | Medium | 1.4% | 16 Mar, 2022 | npm @braintree/sanitize-url |
pgAdmin 4 Path Traversal vulnerability CVE-2022-0959, GHSA-cr8c-972v-rmp3, PYSEC-2026-729 | Medium | 1.0% | 16 Mar, 2022 | PyPI pgadmin4 |
Insertion of Sensitive Information into Log File in ansible CVE-2021-20180, GHSA-fh5v-5f35-2rv2, PYSEC-2026-618 | Medium | 0.3% | 16 Mar, 2022 | PyPI ansible |
Cross-site Scripting in Pimcore CVE-2022-0705, GHSA-xmq3-hgjx-6997 | Medium | 0.5% | 16 Mar, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in Pimcore CVE-2022-0704, GHSA-pc32-x737-74cv | Medium | 1.3% | 16 Mar, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in Pimcore CVE-2022-0911, GHSA-j29f-m23h-3p8p | Medium | 0.8% | 16 Mar, 2022 | Packagist pimcore/pimcore |
Path Traversal in Gitea BIT-gitea-2021-29134, CVE-2021-29134, GHSA-h3q4-vmw4-cpr5, GO-2022-0353 | Medium | 1.5% | 16 Mar, 2022 | Go code.gitea.io/gitea |
Sysctls applied to containers with host IPC or host network namespaces can affect the host GHSA-w2j5-3rcx-vx7x, GO-2022-0363 | Medium | Not scored | 15 Mar, 2022 | Go github.com/cri-o/cri-o |
Stored Cross-site Scripting in showdoc CVE-2022-0967, GHSA-3pg8-c473-w6rr | Medium | 3.3% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0966, GHSA-g585-j55v-38h7 | Medium | 0.5% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0965, GHSA-v8mp-hhjq-h4cj | Medium | 0.9% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0964, GHSA-xm3x-787m-p66r | Medium | 0.8% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Unrestricted XML files leading to cross-site scripting in Microweber CVE-2022-0963, GHSA-q3x2-jvp3-wj78 | Medium | 1.9% | 15 Mar, 2022 | Packagist microweber/microweber |
Exposure of Sensitive information in httpie CVE-2022-0430, GHSA-6pc9-xqrg-wfqw, PYSEC-2022-167 | Medium | 1.3% | 15 Mar, 2022 | PyPI httpie |
Cross-site Scripting in ShowDoc CVE-2022-0942, GHSA-9fcc-7g44-mxrj | Medium | 0.8% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0957, GHSA-q73m-3q7r-fpf7 | Medium | 0.8% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0956, GHSA-wg8p-w946-c482 | Medium | 0.7% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Stored Cross-site Scripting in Microweber CVE-2022-0954, GHSA-8c76-mxv5-w4g8 | Medium | 3.2% | 15 Mar, 2022 | Packagist microweber/microweber |
Cross-site Scripting in Pimcore CVE-2022-0894, GHSA-22hc-47cc-7x6f | Medium | 0.7% | 15 Mar, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in Pimcore CVE-2022-0893, GHSA-g795-4hxx-qqwm | Medium | 0.8% | 15 Mar, 2022 | Packagist pimcore/pimcore |
File Upload Restriction Bypass leading to Cross-site Scripting in ShowDoc CVE-2022-0951, GHSA-j6jg-w79c-7p8v | Medium | 0.9% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0950, GHSA-v94v-pxqp-5qgj | Medium | 0.6% | 15 Mar, 2022 | Packagist showdoc/showdoc |
XML External Entities Vulnerability in CVRF-CSAF-Converter CVE-2022-27193, GHSA-m8gq-83gh-v42v, PYSEC-2026-627 | Medium | 0.7% | 15 Mar, 2022 | PyPI cvrf2csaf |
Stored Cross-site Scripting in ShowDoc CVE-2022-0945, GHSA-vpwq-6cp4-ffqc | Medium | 0.8% | 15 Mar, 2022 | Packagist showdoc/showdoc |
SSRF in repository migration GHSA-q347-cg56-pcq4, GO-2022-0377 | Medium | Not scored | 14 Mar, 2022 | Go gogs.io/gogs |
Leaking of user information on Cross-Domain communication in sysend CVE-2022-24762, GHSA-4vvg-x86p-mvqc | Medium | 0.7% | 14 Mar, 2022 | npm sysend |
Improper sanitize of SVG files during content upload ('Cross-site Scripting') in sylius/sylius CVE-2022-24749, GHSA-4qrp-27r3-66fj | Medium | 1.1% | 14 Mar, 2022 | Packagist Sylius/Sylius Packagist sylius/sylius |
Sensitive Information Exposure in Sylius CVE-2022-24742, GHSA-7563-75j9-6h5p | Medium | 0.8% | 14 Mar, 2022 | Packagist sylius/sylius |
Improper Restriction of Rendered UI Layers or Frames in Sylius CVE-2022-24733, GHSA-4jp3-q2qm-9fmw | Medium | 0.9% | 14 Mar, 2022 | Packagist sylius/sylius |
Cross-site Scripting in ShowDoc CVE-2022-0962, GHSA-pccm-j6vj-jwwf | Medium | 0.9% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in Zenario CMS CVE-2021-41952, GHSA-x8wj-cqmp-3wmm | Medium | 0.5% | 14 Mar, 2022 | Packagist tribalsystems/zenario |
Cross-site Scripting in ShowDoc CVE-2022-0946, GHSA-qq74-vgcf-54c3 | Medium | 0.8% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0941, GHSA-wg4r-q74r-p7c8 | Medium | 0.6% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0940, GHSA-82j4-vr25-x394 | Medium | 0.5% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0938, GHSA-mw75-qvfr-hpmr | Medium | 0.6% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in vditor CVE-2022-0341, GHSA-pq37-4c4g-v38c | Medium | 0.5% | 14 Mar, 2022 | npm vditor |
Cross-site Scripting in ShowDoc CVE-2022-0937, GHSA-mg5h-9rhq-4cqx | Medium | 0.5% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in Alist CVE-2022-26533, GHSA-jpj5-hg26-6jgc | Medium | 0.7% | 13 Mar, 2022 | Go github.com/Xhofe/alist |
Cross-site Scripting in microweber CVE-2022-0929, GHSA-5fxf-x22x-5q38 | Medium | 1.1% | 12 Mar, 2022 | Packagist microweber/microweber |
Cross-site Scripting in microweber CVE-2022-0926, GHSA-3q55-66g3-p8xq | Medium | 0.8% | 12 Mar, 2022 | Packagist microweber/microweber |
Cross-site Scripting in ShowDoc CVE-2022-0880, GHSA-gq77-3r6x-383w | Medium | 0.7% | 12 Mar, 2022 | Packagist showdoc/showdoc |
SSRF in repository migration CVE-2022-0870, GHSA-7v5r-r995-q2x2, GO-2022-0566 | Medium | 3.4% | 12 Mar, 2022 | Go gogs.io/gogs |
Improper Input Validation in url-js CVE-2022-25839, GHSA-rf54-44jr-q5vf, SNYK-JS-URLJS-2414030 | Medium | 0.8% | 11 Mar, 2022 | npm url-js |
Unrestricted Upload of File with Dangerous Type in Microweber CVE-2022-0921, GHSA-j878-43hm-8gr5 | Medium | 2.2% | 11 Mar, 2022 | Packagist microweber/microweber |
Moodle reflected XSS BIT-moodle-2021-32478, CVE-2021-32478, GHSA-78fm-qhh8-8858 | Medium | 1.1% | 11 Mar, 2022 | Packagist moodle/moodle |
Moodle Exposure of Sensitive Information to an Unauthorized Actor BIT-moodle-2021-32477, CVE-2021-32477, GHSA-vrpr-2xxx-g444 | Medium | 0.7% | 11 Mar, 2022 | Packagist moodle/moodle |