Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-site Scripting in pimcore CVE-2022-0565, GHSA-h9vc-2p9g-63gp | Medium | 1.0% | 14 Feb, 2022 | Packagist pimcore/pimcore |
Symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations in dbdeployer CVE-2020-26277, GHSA-47wr-426j-fr82, GO-2022-0787 | Medium | 1.2% | 12 Feb, 2022 | Go github.com/datacharmer/dbdeployer |
"catalog's registry v2 api exposed on unauthenticated path in Harbor" BIT-harbor-2020-29662, CVE-2020-29662, GHSA-38r5-34mr-mvm7, GO-2022-0785 | Medium | 0.7% | 12 Feb, 2022 | Go github.com/goharbor/harbor |
Improper Validation of Certificate with Host Mismatch in mellium.im/xmpp/websocket CVE-2022-24968, GHSA-h289-x5wc-xcv8, GHSA-m658-p24x-p74r, GO-2022-0370 | Medium | 0.5% | 12 Feb, 2022 | Go mellium.im/xmpp |
GitHub CLI can execute a git binary from the current directory GHSA-fqfh-778m-2v32, GO-2022-0395 | Medium | Not scored | 11 Feb, 2022 | Go github.com/cli/cli |
CBC padding oracle issue in AWS S3 Crypto SDK for golang CVE-2020-8911, GHSA-f5pg-7wfw-84q9, GO-2022-0646 | Medium | 0.3% | 11 Feb, 2022 | Go github.com/aws/aws-sdk-go |
AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field CVE-2022-2582, GHSA-6jvc-q2x7-pchv, GHSA-76wf-9vgp-pj7w, GO-2022-0391 | Medium | 0.5% | 11 Feb, 2022 | Go github.com/aws/aws-sdk-go |
Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) CVE-2019-19030, GHSA-q9x4-q76f-5h5j, GO-2022-0704 | Medium | 2.0% | 11 Feb, 2022 | Go github.com/goharbor/harbor |
Path Traversal in S-Cart CVE-2021-44111, GHSA-h676-pjr4-hgqx | Medium | 0.5% | 11 Feb, 2022 | Packagist s-cart/s-cart |
Cross-site Scripting in Drupal Core BIT-drupal-2020-13668, CVE-2020-13668, GHSA-m6q5-wv4x-fv6h | Medium | 0.8% | 11 Feb, 2022 | Packagist drupal/core Packagist drupal/drupal |
Open redirect in microweber CVE-2022-0560, GHSA-r992-xph6-h7x2 | Medium | 1.0% | 11 Feb, 2022 | Packagist microweber/microweber |
Incorrect Permission Assignment for Critical Resource in CRI-O CVE-2022-0532, GHSA-jqmc-79gx-7g8p, GO-2022-0608 | Medium | 0.8% | 11 Feb, 2022 | Go github.com/cri-o/cri-o |
Cross-site Scripting in microweber CVE-2022-0558, GHSA-wmj9-xh24-j4gx | Medium | 0.9% | 10 Feb, 2022 | Packagist microweber/microweber |
Cross-site Scripting in Gitea BIT-gitea-2021-45329, CVE-2021-45329, GHSA-r3gq-wxqf-q4gh, GO-2022-0314 | Medium | 0.8% | 10 Feb, 2022 | Go github.com/go-gitea/gitea |
Integer Overflow or Wraparound in TensorFlow GHSA-wcv5-vrvr-3rx2 | Medium | Not scored | 09 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Signatures are mistakenly recognized to be valid in jsrsasign GHSA-h87q-g2wp-47pj | Medium | Not scored | 09 Feb, 2022 | npm jsrsasign |
User object created with invalid provider data in GoTrue GHSA-wpfr-6297-9v57, GO-2022-0365 | Medium | Not scored | 09 Feb, 2022 | Go github.com/netlify/gotrue |
Incorrect Calculation in github.com/open-policy-agent/opa CVE-2022-23628, GHSA-hcw3-j74m-qc58, GO-2022-0316 | Medium | 1.0% | 09 Feb, 2022 | Go github.com/open-policy-agent/opa |
Cross-site Scripting in Beanstalk console CVE-2022-0539, GHSA-2cjf-w7c4-fhf6 | Medium | 0.6% | 09 Feb, 2022 | Packagist ptrofimov/beanstalk_console |
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects CVE-2022-0536, GHSA-pw2r-vq6v-hr8c | Medium | 1.3% | 09 Feb, 2022 | npm follow-redirects |
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability CVE-2022-24682 | MediumExploited | 30.9% | 09 Feb, 2022 | |
Gitea displaying raw OpenID error in UI BIT-gitea-2021-45325, CVE-2021-45325, GHSA-8h8p-x289-vvqr, GO-2022-0308 | Medium | 1.0% | 09 Feb, 2022 | Go github.com/go-gitea/gitea |
Open redirect in Gitea BIT-gitea-2021-45328, CVE-2021-45328, GHSA-36h2-95gj-w488, GO-2022-0579 | Medium | 1.0% | 09 Feb, 2022 | Go github.com/go-gitea/gitea |
Studio 42 elFinder allows stored XSS CVE-2021-45919, GHSA-c3j8-q5x6-2855 | Medium | 0.6% | 08 Feb, 2022 | Packagist studio-42/elfinder |
Unverified Ownership in Kubernetes CVE-2020-8554, GHSA-j9wf-vvm6-4r9w | Medium | 8.7% | 08 Feb, 2022 | Go k8s.io/kubernetes |
Cross-site Scripting pimcore CVE-2022-0510, GHSA-mxh3-2699-98g9 | Medium | 0.6% | 08 Feb, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in pimcore CVE-2022-0509, GHSA-cg3h-rc9q-g8v9 | Medium | 1.4% | 08 Feb, 2022 | Packagist pimcore/pimcore |
Server-Side Request Forgery in @peertube/embed-api CVE-2022-0508, GHSA-mv26-cx23-vrfg | Medium | 0.9% | 08 Feb, 2022 | npm @peertube/embed-api |
Cross-site Scripting in microweber CVE-2022-0506, GHSA-jjvm-3mfq-7gc7 | Medium | 0.6% | 08 Feb, 2022 | Packagist microweber/microweber |
Cross-Site Request Forgery in microweber CVE-2022-0505, GHSA-7x2h-3v2v-24p9 | Medium | 0.7% | 08 Feb, 2022 | Packagist microweber/microweber |
Generation of Error Message Containing Sensitive Information in microweber CVE-2022-0504, GHSA-xxq4-3742-3h28 | Medium | 1.2% | 08 Feb, 2022 | Packagist microweber/microweber |
Limited ability to spoof SAML authentication with missing audience verification in Fleet CVE-2022-23600, GHSA-ch68-7cf4-35vr | Medium | 0.9% | 07 Feb, 2022 | Go github.com/fleetdm/fleet/v4 |
Cross-site Scripting in LiveHelperChat BIT-livehelperchat-2022-0502, CVE-2022-0502, GHSA-57qf-82hh-2hmc | Medium | 0.6% | 06 Feb, 2022 | Packagist remdex/livehelperchat |
Business Logic Errors in SilverStripe Framework CVE-2022-0227, GHSA-32m2-9f76-4gv8 | Medium | Not scored | 06 Feb, 2022 | Packagist silverstripe/framework |
Cross-site Scripting in Beanstalk console CVE-2022-0501, GHSA-gj85-pvp5-mvf9 | Medium | 0.9% | 05 Feb, 2022 | Packagist ptrofimov/beanstalk_console |
Cross-site Scripting in karma CVE-2022-0437, GHSA-7x7c-qm48-pq9c | Medium | 15.1% | 05 Feb, 2022 | npm karma |
Unrestricted Upload of File with Dangerous Type in jsdecena/laracom CVE-2022-0472, GHSA-5q5w-mqp6-g2gh | Medium | 0.8% | 04 Feb, 2022 | Packagist jsdecena/laracom |
Memory leak in Tensorflow BIT-tensorflow-2022-23578, CVE-2022-23578, GHSA-8r7c-3cm2-3h8f, PYSEC-2022-142, PYSEC-2022-87, PYSEC-2026-3138 | Medium | 0.7% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow BIT-tensorflow-2022-23579, CVE-2022-23579, GHSA-5f2r-qp73-37mr, PYSEC-2022-143, PYSEC-2022-88, PYSEC-2026-3108 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Abort caused by allocating a vector that is too large in Tensorflow BIT-tensorflow-2022-23580, CVE-2022-23580, GHSA-627q-g293-49q7, PYSEC-2022-144, PYSEC-2022-89, PYSEC-2026-3113 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow BIT-tensorflow-2022-23581, CVE-2022-23581, GHSA-fq86-3f29-px2c, PYSEC-2022-145, PYSEC-2022-90, PYSEC-2026-3175 | Medium | 1.2% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures in `TensorByteSize` in Tensorflow BIT-tensorflow-2022-23582, CVE-2022-23582, GHSA-4j82-5ccr-4r8v, PYSEC-2022-146, PYSEC-2022-91, PYSEC-2026-3100 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-failures in binary ops in Tensorflow BIT-tensorflow-2022-23583, CVE-2022-23583, GHSA-gjqc-q9g6-q2j3, PYSEC-2022-147, PYSEC-2022-92, PYSEC-2026-3191 | Medium | 0.9% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Memory leak in decoding PNG images BIT-tensorflow-2022-23585, CVE-2022-23585, GHSA-fq6p-6334-8gr4, PYSEC-2022-149, PYSEC-2022-94, PYSEC-2026-3174 | Medium | 1.0% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Multiple `CHECK`-fails in `function.cc` in TensowFlow BIT-tensorflow-2022-23586, CVE-2022-23586, GHSA-43jf-985q-588j, PYSEC-2022-150, PYSEC-2022-95, PYSEC-2026-3096 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-fails due to attempting to build a reference tensor BIT-tensorflow-2022-23588, CVE-2022-23588, GHSA-fx5c-h9f6-rv7c, PYSEC-2022-152, PYSEC-2022-97, PYSEC-2026-3181 | Medium | 0.9% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in Grappler's `IsConstant` BIT-tensorflow-2022-23589, CVE-2022-23589, GHSA-9px9-73fg-3fqp, PYSEC-2022-153, PYSEC-2022-98, PYSEC-2026-3154 | Medium | 1.1% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in TensorFlow BIT-tensorflow-2022-23595, CVE-2022-23595, GHSA-fpcp-9h7m-ffpx, PYSEC-2022-103, PYSEC-2022-158, PYSEC-2026-3173 | Medium | 0.8% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in Tensorflow BIT-tensorflow-2022-21725, CVE-2022-21725, GHSA-v3f7-j968-4h5f, PYSEC-2022-104, PYSEC-2022-49, PYSEC-2026-3242 | Medium | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Memory exhaustion in Tensorflow BIT-tensorflow-2022-21732, CVE-2022-21732, GHSA-c582-c96p-r5cq, PYSEC-2022-111, PYSEC-2022-56, PYSEC-2026-3158 | Medium | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |