Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Moodle stored Cross-site Scripting BIT-moodle-2021-32475, CVE-2021-32475, GHSA-5wjh-v7c8-wrhx | Medium | 0.6% | 11 Mar, 2022 | Packagist moodle/moodle |
Moodle Information Disclosure vulnerability BIT-moodle-2021-32473, CVE-2021-32473, GHSA-wx87-h539-4775 | Medium | 1.0% | 11 Mar, 2022 | Packagist moodle/moodle |
Moodle Exposure of Sensitive Information to an Unauthorized Actor BIT-moodle-2021-32472, CVE-2021-32472, GHSA-454r-jccq-96q8 | Medium | 0.8% | 11 Mar, 2022 | Packagist moodle/moodle |
saleor Missing Authorization vulnerability CVE-2022-0932, GHSA-mcgw-5fhw-3fq8, PYSEC-2026-746 | Medium | 1.0% | 11 Mar, 2022 | PyPI saleor |
Cross-site Scripting in microweber CVE-2022-0928, GHSA-jjp3-m93h-5jm4 | Medium | 2.4% | 11 Mar, 2022 | Packagist microweber/microweber |
Unrestricted Upload of File with Dangerous Type in microweber CVE-2022-0912, GHSA-6vx5-cg2p-7g5v | Medium | 0.5% | 11 Mar, 2022 | Packagist microweber/microweber |
Spoofing attack in swagger-ui-dist CVE-2021-46708, GHSA-6c9x-mj3g-h47x | Medium | 1.5% | 11 Mar, 2022 | npm swagger-ui-dist |
Spoofing attack in swagger-ui CVE-2018-25031, GHSA-cr3q-pqgq-m8c2 | Medium | 42.3% | 11 Mar, 2022 | Maven org.webjars:swagger-ui npm swagger-ui |
Path traversal in FreeTAKServer-UI CVE-2022-25511, GHSA-7cr9-rmqr-fpqp, PYSEC-2026-637 | Medium | 0.7% | 11 Mar, 2022 | PyPI FreeTAKServer-UI PyPI freetakserver-ui |
Cross-site Scripting in FreeTAKServer-UI CVE-2022-25507, GHSA-gjh6-wvhq-h4qx, PYSEC-2026-639 | Medium | 0.5% | 11 Mar, 2022 | PyPI FreeTAKServer-UI PyPI freetakserver-ui |
SQL Injection in FreeTAKServer-UI CVE-2022-25506, GHSA-jr2m-29wj-w9qc, PYSEC-2026-640 | Medium | 0.9% | 11 Mar, 2022 | PyPI FreeTAKServer-UI PyPI freetakserver-ui |
Improper Restriction of XML External Entity Reference in trytond and proteus CVE-2022-26661, GHSA-cj78-rgw3-4h5p, PYSEC-2022-43170, PYSEC-2026-3391, PYSEC-2026-740 | Medium | 1.4% | 10 Mar, 2022 | PyPI proteus PyPI tryton PyPI trytond |
Unrestricted file upload leads to stored cross-site scripting in Microweber CVE-2022-0906, GHSA-hf4q-52x6-4p57 | Medium | 0.6% | 10 Mar, 2022 | Packagist microweber/microweber |
HTTP caching is marking private HTTP headers as public in Shopware CVE-2022-24747, GHSA-6wrh-279j-6hvw | Medium | 1.1% | 09 Mar, 2022 | Packagist shopware/core Packagist shopware/platform Packagist shopware/storefront |
HTML injection possibility in voucher code form in Shopware CVE-2022-24746, GHSA-952p-fqcp-g8pc | Medium | 0.8% | 09 Mar, 2022 | Packagist shopware/core Packagist shopware/platform Packagist shopware/storefront |
Shopware guest session is shared between customers CVE-2022-24745, GHSA-jp6h-mxhx-pgqh | Medium | 0.5% | 09 Mar, 2022 | Packagist shopware/platform Packagist shopware/storefront |
Cross-site Scripting in BookStack CVE-2022-0877, GHSA-5rcc-6cmj-7728 | Medium | 0.8% | 08 Mar, 2022 | Packagist ssddanbrown/bookstack |
Exposure of Sensitive Information to an Unauthorized Actor in httpie CVE-2022-24737, GHSA-9w4w-cpc8-h2fq, PYSEC-2022-34 | Medium | 1.7% | 07 Mar, 2022 | PyPI httpie |
Use of a Key Past its Expiration Date and Insufficient Session Expiration in Maddy Mail Server CVE-2022-24732, GHSA-6cp7-g972-w9m9 | Medium | 0.4% | 07 Mar, 2022 | Go github.com/foxcpp/maddy |
Open Redirect in archivy CVE-2022-0697, GHSA-28mg-98xm-q493, PYSEC-2022-161 | Medium | 0.6% | 06 Mar, 2022 | PyPI archivy |
Open Redirect in urijs CVE-2022-0868, GHSA-8h2f-7jc4-7m3m | Medium | 0.7% | 06 Mar, 2022 | npm urijs |
Open Redirect in django-spirit CVE-2022-0869, GHSA-5p9j-w2wx-qx4c, PYSEC-2026-631 | Medium | 2.6% | 06 Mar, 2022 | PyPI django-spirit |
Cross-site Scripting in intelliants/subrion CVE-2020-18325, GHSA-pcwq-7wrw-r8jv | Medium | 1.6% | 04 Mar, 2022 | Packagist intelliants/subrion |
Cross-site Scripting in Subrion CMS CVE-2020-18324, GHSA-xj7h-g7rh-gjcw | Medium | 2.2% | 04 Mar, 2022 | Packagist intelliants/subrion |
Cross-site Scripting in Pimcore CVE-2022-0832, GHSA-6qcc-whgp-pjj2 | Medium | 66.6% | 04 Mar, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in Pimcore CVE-2022-0831, GHSA-q67f-3jq4-mww2 | Medium | 1.3% | 04 Mar, 2022 | Packagist pimcore/pimcore |
Exposure of home directory through shescape on Unix with Bash CVE-2022-24725, GHSA-446w-rrm4-r47f | Medium | 0.5% | 03 Mar, 2022 | npm shescape |
Leading white space bypasses protocol validation CVE-2022-24723, GHSA-gmv4-r438-p67f | Medium | 1.9% | 03 Mar, 2022 | npm urijs |
Ansible discloses sensitive information in traceback error message CVE-2021-3620, GHSA-4r65-35qq-ch8j, PYSEC-2022-164 | Medium | 0.4% | 03 Mar, 2022 | PyPI ansible |
Cross-site Scripting in GeniXCMS CVE-2022-24563, GHSA-5mwx-f6w6-7w5r | Medium | 0.9% | 03 Mar, 2022 | Packagist genix/cms |
Open Redirect in CPython that affects users of OpenStack Nova CVE-2021-3654, GHSA-vqp6-j452-j6wp, PYSEC-2026-693 | Medium | 26.8% | 02 Mar, 2022 | PyPI nova |
Scrapy cookie-setting is not restricted based on the public suffix list GHSA-mfjm-vh54-3f96 | Medium | Not scored | 01 Mar, 2022 | PyPI scrapy |
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy CVE-2022-0577, GHSA-cjvr-mfj7-j4j8, PYSEC-2022-159 | Medium | 1.2% | 01 Mar, 2022 | PyPI scrapy |
Multiple security issues in Pomerium's embedded envoy GHSA-j34v-3552-5r7j | Medium | Not scored | 01 Mar, 2022 | Go github.com/pomerium/pomerium |
Forwarding of confidentials headers to third parties in fluture-node CVE-2022-24719, GHSA-32x6-qvw6-mxj4, PYSEC-2022-43051, PYSEC-2022-43052 | Medium | 0.8% | 01 Mar, 2022 | PyPI pyquest PyPI request-util npm fluture-node |
Possible privilege escalation via bash completion script GHSA-w4f8-fxq2-j35v | Medium | Not scored | 01 Mar, 2022 | Go github.com/google/fscrypt |
Improper random number generation in github.com/coredns/coredns GHSA-gv9j-4w24-q7vx, GO-2022-0368 | Medium | Not scored | 01 Mar, 2022 | Go github.com/coredns/coredns |
Cross Site Scripting (XSS) in @finastra/ssr-pages CVE-2022-24717, GHSA-7f63-h6g3-7cwm | Medium | 0.9% | 01 Mar, 2022 | npm @finastra/ssr-pages |
Cross site scripting in reveal.js CVE-2022-0776, GHSA-hhqj-cfjx-vj25 | Medium | 3.7% | 01 Mar, 2022 | npm reveal.js |
Cross-site Scripting in Cipi CVE-2022-26332, GHSA-vpmw-77vm-4mjg | Medium | 0.7% | 01 Mar, 2022 | Packagist andreapollastri/cipi |
Cross site scripting in getgrav/grav CVE-2022-0743, GHSA-2p89-ppc2-mrq4 | Medium | 1.4% | 28 Feb, 2022 | Packagist getgrav/grav |
Cross site scripting in LibreNMS CVE-2022-0772, GHSA-vhm6-gw82-6f8j | Medium | 0.6% | 27 Feb, 2022 | Packagist librenms/librenms |
Command injection in strapi CVE-2022-0764, GHSA-xrjf-phvv-r4vr | Medium | 0.7% | 26 Feb, 2022 | npm strapi |
Cross-site Scripting in microweber CVE-2022-0723, GHSA-4p92-fv6v-fhfj | Medium | 0.9% | 26 Feb, 2022 | Packagist microweber/microweber |
Cross-site Scripting in microweber CVE-2022-0763, GHSA-6m26-25q2-cq46 | Medium | 0.6% | 26 Feb, 2022 | Packagist microweber/microweber |
Exposure of Resource to Wrong Sphere in microweber CVE-2022-0762, GHSA-5875-p652-2ppm | Medium | 0.7% | 26 Feb, 2022 | Packagist microweber/microweber |
Possible filesystem space exhaustion by local users CVE-2022-25326, GHSA-chxf-fjcf-7fwp, GHSA-mpq4-rjj8-fjph, GO-2022-0339 | Medium | 0.1% | 26 Feb, 2022 | Go github.com/google/fscrypt |
User login denial of service in github.com/google/fscrypt CVE-2022-25327, GHSA-8vwm-8vj8-rqjf, GHSA-p93v-m2r2-4387, GO-2022-0340 | Medium | 0.1% | 26 Feb, 2022 | Go github.com/google/fscrypt |
Command injection in github.com/google/fscrypt CVE-2022-25328, GHSA-wxjg-p59j-6c92 | Medium | 0.2% | 26 Feb, 2022 | Go github.com/google/fscrypt |
Cross-site Scripting in Weblate BIT-weblate-2022-24710, CVE-2022-24710, GHSA-6jp6-9rf9-gc66, PYSEC-2022-35 | Medium | 0.8% | 25 Feb, 2022 | PyPI Weblate PyPI weblate |