Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-site scripting vulnerability in TinyMCE GHSA-5vm8-hhgr-jcjp | Medium | Not scored | 28 May, 2021 | npm tinymce |
Kiali Authentication Bypass vulnerability CVE-2021-20278, GHSA-ggjr-2f7v-vhq4, GO-2022-0700 | Medium | 0.8% | 28 May, 2021 | Go github.com/kiali/kiali |
Permissions bypass in KubeVirt CVE-2020-1701, GHSA-849r-8wvp-4wwg, GO-2024-2765 | Medium | 0.7% | 27 May, 2021 | Go kubevirt.io/kubevirt |
Insufficiently random values in Ansible CVE-2020-10729, GHSA-r6h7-5pq2-j77h, PYSEC-2021-105 | Medium | 0.4% | 27 May, 2021 | PyPI ansible |
Observable Response Discrepancy in Flask-AppBuilder BIT-airflow-2021-29621, CVE-2021-29621, GHSA-434h-p4gx-jm89, PYSEC-2021-90 | Medium | 3.4% | 27 May, 2021 | PyPI Flask-AppBuilder PyPI flask-appbuilder |
Open Redirect CVE-2021-32645, GHSA-4r8q-gv9j-3xx6 | Medium | 1.0% | 27 May, 2021 | Packagist hyn/multi-tenant |
Insertion of Sensitive Information into Log File in ansible CVE-2021-20191, GHSA-8f4m-hccc-8qph, PYSEC-2021-124 | Medium | 0.3% | 26 May, 2021 | PyPI ansible |
ckeditor4 vulnerable to cross-site scripting BIT-drupal-2021-33829, CVE-2021-33829, DRUPAL-CORE-2021-003, GHSA-rgx6-rjj4-c388 | Medium | 3.2% | 26 May, 2021 | Packagist drupal/core Packagist drupal/drupal npm ckeditor4 |
Cross-site scripting in Centreon CVE-2021-27676, GHSA-r5mf-q76q-f2xq | Medium | 0.6% | 26 May, 2021 | Packagist centreon/centreon |
ReDoS in Sec-Websocket-Protocol header CVE-2021-32640, GHSA-6fc8-4gx4-v693 | Medium | 2.8% | 25 May, 2021 | npm ws |
Arm Trusted Firmware Out-of-Bounds Write Vulnerability CVE-2021-27562 | MediumExploited | 3.1% | 25 May, 2021 | |
In github.com/pion/webrtc, failed DTLS certificate verification doesn't stop data channel communication CVE-2021-28681, GHSA-74xm-qj29-cq8p, GO-2021-0104 | Medium | 0.7% | 25 May, 2021 | Go github.com/pion/webrtc/v3 |
Open Redirect in trailing-slash CVE-2021-23387, GHSA-rfhr-62xp-2fp2, SNYK-JS-TRAILINGSLASH-1085707 | Medium | 1.1% | 24 May, 2021 | npm trailing-slash |
Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone CVE-2021-33507, GHSA-35rg-466w-77h3, PYSEC-2021-79, PYSEC-2026-2961, PYSEC-2026-2967 | Medium | 0.8% | 21 May, 2021 | PyPI Plone PyPI Products.CMFCore PyPI Products.PluggableAuthService PyPI plone +2 more |
Cross-site scripting in Plone CVE-2021-33508, GHSA-rmpv-rcp6-v8wc, PYSEC-2021-80 | Medium | 0.6% | 21 May, 2021 | PyPI Plone PyPI plone |
Server-Side Request Forgery in Plone CVE-2021-33510, GHSA-4mg4-wvmx-5332, PYSEC-2021-82 | Medium | 1.0% | 21 May, 2021 | PyPI Plone PyPI plone |
Cross-site scripting in Plone CVE-2021-33512, GHSA-hm2h-f456-6j88, PYSEC-2021-84 | Medium | 0.7% | 21 May, 2021 | PyPI Plone PyPI plone |
Cross-site scripting in Plone CVE-2021-33513, GHSA-fj67-w3m4-rfmp, PYSEC-2021-85 | Medium | 0.7% | 21 May, 2021 | PyPI Plone PyPI plone |
Import of incorrectly embargoed keys could cause early publication GHSA-3wxm-m9m4-cprj, GO-2022-0381 | Medium | Not scored | 21 May, 2021 | Go github.com/google/exposure-notifications-server |
JWT leak via Open Redirect in Programmatic access CVE-2021-29651, GHSA-35vc-w93w-75c2, GO-2022-0783 | Medium | 0.7% | 21 May, 2021 | Go github.com/pomerium/pomerium |
pomerium_signature is not verified in middleware in github.com/pomerium/pomerium CVE-2021-29652, GHSA-fv82-r8qv-ch4v, GO-2022-0827 | Medium | 0.7% | 21 May, 2021 | Go github.com/pomerium/pomerium |
Helm OCI credentials leaked into Argo CD logs GHSA-6w87-g839-9wv7, GO-2022-0387 | Medium | Not scored | 21 May, 2021 | Go github.com/argoproj/argo-cd |
Information leakage in Error Handler GHSA-9vxv-wpv4-f52p | Medium | Not scored | 21 May, 2021 | Packagist shopware/shopware |
Authenticated Stored XSS in Administration GHSA-f6p7-8xfw-fjqq | Medium | Not scored | 21 May, 2021 | Packagist shopware/shopware |
Plone XSS in User Fullname Property and File Upload CVE-2021-3313, GHSA-hprr-4vfq-fcxw, PYSEC-2021-78 | Medium | 1.0% | 20 May, 2021 | PyPI plone |
Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint GHSA-7h5v-85w9-pq6c | Medium | Not scored | 19 May, 2021 | PyPI matrix-synapse |
Cross-site scripting in bluemonday CVE-2021-29272, GHSA-3x58-xr87-2fcj, GO-2022-0762 | Medium | 0.9% | 18 May, 2021 | Go github.com/microcosm-cc/bluemonday |
Lack of protection against cookie tossing attacks in fastify-csrf CVE-2021-29624, GHSA-rc4q-9m69-gqp8 | Medium | 0.8% | 17 May, 2021 | npm fastify-csrf |
Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12 CVE-2021-47996, GHSA-7rrm-v45f-jp64 | Medium | Not scored | 17 May, 2021 | RubyGems nokogiri |
Open Redirect in koa-remove-trailing-slashes CVE-2021-23384, GHSA-r773-pmw3-f4mr | Medium | 0.8% | 17 May, 2021 | npm koa-remove-trailing-slashes |
Open Redirect in Flask-Security-Too CVE-2021-32618, GHSA-6qmf-fj6m-686c, PYSEC-2021-123 | Medium | 2.8% | 17 May, 2021 | PyPI Flask-Security-Too PyPI flask-security-too |
Cross-site Scripting in vmd CVE-2021-33041, GHSA-pfr3-87q3-65rc | Medium | 1.2% | 17 May, 2021 | npm vmd |
Woocommerce Cross-site Scripting via Additional tax classes field when taxes are enabled CVE-2021-24323, GHSA-mp46-7x6q-f28m | Medium | 0.7% | 17 May, 2021 | Packagist woocommerce/woocommerce |
Null pointer dereference via invalid Ragged Tensors BIT-tensorflow-2021-29516, CVE-2021-29516, GHSA-84mw-34w6-2q43, PYSEC-2021-153, PYSEC-2021-444, PYSEC-2021-642 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in `Conv3D` BIT-tensorflow-2021-29517, CVE-2021-29517, GHSA-772p-x54p-hjrv, PYSEC-2021-154, PYSEC-2021-445, PYSEC-2021-643 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in SparseCross due to type confusion BIT-tensorflow-2021-29519, CVE-2021-29519, GHSA-772j-h9xw-ffp5, PYSEC-2021-156, PYSEC-2021-447, PYSEC-2021-645 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in SparseCountSparseOutput BIT-tensorflow-2021-29521, CVE-2021-29521, GHSA-hr84-fqvp-48mm, PYSEC-2021-158, PYSEC-2021-449, PYSEC-2021-647 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `Conv3DBackprop*` BIT-tensorflow-2021-29522, CVE-2021-29522, GHSA-c968-pq7h-7fxv, PYSEC-2021-159, PYSEC-2021-450, PYSEC-2021-648 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in AddManySparseToTensorsMap BIT-tensorflow-2021-29523, CVE-2021-29523, GHSA-2cpx-427x-q2c6, PYSEC-2021-160, PYSEC-2021-451, PYSEC-2021-649 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `Conv2DBackpropFilter` BIT-tensorflow-2021-29524, CVE-2021-29524, GHSA-r4pj-74mg-8868, PYSEC-2021-161, PYSEC-2021-452, PYSEC-2021-650 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `Conv2D` BIT-tensorflow-2021-29526, CVE-2021-29526, GHSA-4vf2-4xcg-65cx, PYSEC-2021-163, PYSEC-2021-454, PYSEC-2021-652 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `QuantizedConv2D` BIT-tensorflow-2021-29527, CVE-2021-29527, GHSA-x4g7-fvjj-prg8, PYSEC-2021-164, PYSEC-2021-455, PYSEC-2021-653 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `QuantizedMul` BIT-tensorflow-2021-29528, CVE-2021-29528, GHSA-6f84-42vf-ppwp, PYSEC-2021-165, PYSEC-2021-456, PYSEC-2021-654 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in tf.raw_ops.EncodePng BIT-tensorflow-2021-29531, CVE-2021-29531, GHSA-3qxp-qjq7-w4hf, PYSEC-2021-168, PYSEC-2021-459, PYSEC-2021-657 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in DrawBoundingBoxes BIT-tensorflow-2021-29533, CVE-2021-29533, GHSA-393f-2jr3-cp69, PYSEC-2021-170, PYSEC-2021-461, PYSEC-2021-659 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in SparseConcat BIT-tensorflow-2021-29534, CVE-2021-29534, GHSA-6j9c-grc6-5m6g, PYSEC-2021-171, PYSEC-2021-462, PYSEC-2021-660 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in `Conv2DBackpropFilter` BIT-tensorflow-2021-29538, CVE-2021-29538, GHSA-j8qc-5fqr-52fp, PYSEC-2021-175, PYSEC-2021-466, PYSEC-2021-664 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in tf.raw_ops.ImmutableConst BIT-tensorflow-2021-29539, CVE-2021-29539, GHSA-g4h2-gqm3-c9wq, PYSEC-2021-176, PYSEC-2021-467, PYSEC-2021-665 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `StringNGrams` BIT-tensorflow-2021-29541, CVE-2021-29541, GHSA-xqfj-35wv-m3cr, PYSEC-2021-178, PYSEC-2021-469, PYSEC-2021-667 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in `StringNGrams` BIT-tensorflow-2021-29542, CVE-2021-29542, GHSA-4hrh-9vmp-2jgg, PYSEC-2021-179, PYSEC-2021-470, PYSEC-2021-668 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |