Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Prototype pollution in json-pointer CVE-2020-7709, GHSA-7mg4-w3w5-x5pc | High | 1.8% | 05 Oct, 2020 | Maven org.webjars.npm:json-pointer npm json-pointer |
Code Injection in oauth2-server CVE-2017-18924, GHSA-2fw4-mgq9-39cx | High | 2.2% | 04 Oct, 2020 | npm oauth2-server |
File restriction bypass in socket.io-file CVE-2020-24807, GHSA-6495-8jvh-f28x | High | 2.1% | 02 Oct, 2020 | npm socket.io-file |
Local Privilege Escalation in cloudflared CVE-2020-24356, GHSA-hgwp-4vp4-qmm2, GO-2022-0845 | High | 0.3% | 02 Oct, 2020 | Go github.com/cloudflare/cloudflared |
Arbitrary Code Execution in shiba CVE-2020-7738, GHSA-jvf4-g24p-2qgw | High | 1.6% | 02 Oct, 2020 | npm shiba |
Plaintext password leak in Apache Superset BIT-superset-2020-13952, CVE-2020-13952, GHSA-77pw-c3j2-5fc8, PYSEC-2020-223 | High | 2.0% | 30 Sep, 2020 | PyPI apache-superset |
Ivanti Pulse Connect Secure Code Execution Vulnerability CVE-2020-8243 | HighExploited | 90.8% | 30 Sep, 2020 | |
Authorization bypass in github.com/dgrijalva/jwt-go CVE-2020-26160, GHSA-w73w-5m7g-f7qc, GO-2020-0017, SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515 | High | 2.2% | 30 Sep, 2020 | Go github.com/dgrijalva/jwt-go Go github.com/dgrijalva/jwt-go/v4 |
Sensitive data exposure in NATS CVE-2020-26149, GHSA-82rf-q3pr-4f6p | High | 1.5% | 30 Sep, 2020 | npm nats npm nats.ws |
Regular Expression Denial of Service in Handlebars CVE-2019-20922, GHSA-62gr-4qp9-h98f, SNYK-JS-HANDLEBARS-480388 | High | 3.7% | 30 Sep, 2020 | npm handlebars |
Arbitrary Code Execution in Handlebars CVE-2019-20920, GHSA-3cqr-58rm-57f8, SNYK-JS-HANDLEBARS-534478 | High | 3.2% | 30 Sep, 2020 | npm handlebars |
Potential DoS with NumberFilter conversion to integer values. CVE-2020-15225, GHSA-x7gm-rfgv-w973, PYSEC-2021-64 | High | 1.8% | 28 Sep, 2020 | PyPI django-filter |
OATHAuth extension in MediaWiki is not implementing rate limit BIT-mediawiki-2020-25827, CVE-2020-25827, GHSA-rqvj-fc2x-99q6 | High | 1.7% | 27 Sep, 2020 | Packagist mediawiki/core |
Segmentation fault in tensorflow-lite BIT-tensorflow-2020-15210, CVE-2020-15210, GHSA-x9j7-x98r-r4w2, PYSEC-2020-133, PYSEC-2020-290, PYSEC-2020-325 | High | 0.7% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in tensorflow-lite BIT-tensorflow-2020-15209, CVE-2020-15209, GHSA-qh32-6jjc-qprm, PYSEC-2020-132, PYSEC-2020-289, PYSEC-2020-324 | High | 0.8% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Denial of Service in Tensorflow BIT-tensorflow-2020-15206, CVE-2020-15206, GHSA-w5gh-2wr2-pm6g, PYSEC-2020-129, PYSEC-2020-286, PYSEC-2020-321 | High | 1.0% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Denial of Service in Tensorflow BIT-tensorflow-2020-15203, CVE-2020-15203, GHSA-xmq7-7fxm-rr79, PYSEC-2020-126, PYSEC-2020-283, PYSEC-2020-318 | High | 1.0% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in Tensorflow BIT-tensorflow-2020-15200, CVE-2020-15200, GHSA-x7rp-74x2-mjf3, PYSEC-2020-123, PYSEC-2020-280, PYSEC-2020-315 | High | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in Tensorflow BIT-tensorflow-2020-15195, CVE-2020-15195, GHSA-63xm-rx5p-xvqr, PYSEC-2020-118, PYSEC-2020-275, PYSEC-2020-310 | High | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Memory corruption in Tensorflow BIT-tensorflow-2020-15193, CVE-2020-15193, GHSA-rjjg-hgv6-h69v, PYSEC-2020-116, PYSEC-2020-273, PYSEC-2020-308 | High | 0.8% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Denial of Service in Tensorflow BIT-tensorflow-2020-15199, CVE-2020-15199, GHSA-x5cp-9pcf-pp3h, PYSEC-2020-122, PYSEC-2020-279, PYSEC-2020-314 | High | 0.8% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Improper Certificate Validation in oauth ruby gem CVE-2016-11086, GHSA-7359-3c6r-hfc2 | High | 0.9% | 24 Sep, 2020 | RubyGems oauth |
Ory fosite contains Improper Handling of Exceptional Conditions CVE-2020-15223, GHSA-7mqr-2v3q-v2wm, GO-2021-0109 | High | 1.6% | 24 Sep, 2020 | Go github.com/ory/fosite |
Token reuse in Ory fosite CVE-2020-15222, GHSA-v3q9-2p3m-7g43, GO-2021-0110 | High | 0.9% | 24 Sep, 2020 | Go github.com/ory/fosite |
Improper Verification of Cryptographic Signature in ansible CVE-2020-14365, GHSA-m429-fhmv-c6q2, PYSEC-2020-209 | High | 0.2% | 23 Sep, 2020 | PyPI ansible |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability CVE-2020-3569 | HighExploited | 3.3% | 23 Sep, 2020 | |
Cabot Cross Site Scripting (XSS) vulnerability via Endpoint column CVE-2020-7734, GHSA-mqwh-r366-4224, PYSEC-2020-227, SNYK-PYTHON-CABOT-609862 | High | 1.3% | 22 Sep, 2020 | PyPI cabot |
Uncontrolled Resource Consumption in json-bigint CVE-2020-8237, GHSA-wgfq-7857-4jcc | High | 1.7% | 18 Sep, 2020 | npm json-bigint |
DotPlant2 Improper Restriction of XML External Entity Reference CVE-2020-25750, GHSA-c49v-35ff-q9f7 | High | 1.1% | 18 Sep, 2020 | Packagist devgroup/dotplant |
Apache Superset OS Command Injection BIT-superset-2020-13948, CVE-2020-13948, GHSA-cj7g-h7rf-h8j9, PYSEC-2020-222 | High | 3.2% | 17 Sep, 2020 | PyPI apache-superset |
Insecure permissions on build temporary rootfs in Singularity CVE-2020-25040, GHSA-jv9c-w74q-6762 | High | 2.0% | 16 Sep, 2020 | Go github.com/sylabs/singularity |
Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity CVE-2020-25039, GHSA-w6v2-qchm-grj7 | High | 2.0% | 16 Sep, 2020 | Go github.com/sylabs/singularity |
Exposure of Resource to Wrong Sphere in Drupal Core BIT-drupal-2020-13670, CVE-2020-13670, DRUPAL-CORE-2020-011, GHSA-mmjr-5q74-p3m4 | High | 1.1% | 16 Sep, 2020 | Packagist drupal/core Packagist drupal/drupal |
Regular Expression Denial of Service in ua-parser-js CVE-2020-7733, GHSA-662x-fhqg-9p8v | High | 4.5% | 16 Sep, 2020 | npm ua-parser-js |
Renovate vulnerable to Azure DevOps token leakage in logs CVE-2020-37267, GHSA-36rh-ggpr-j3gj | High | 0.4% | 14 Sep, 2020 | npm renovate |
ThinkAdmin directory traversal vulnerability CVE-2020-25540, GHSA-2qm5-r82g-5hcx | High | 75.3% | 14 Sep, 2020 | Packagist zoujingli/thinkadmin |
SQL Injection in untitled-model GHSA-hq8g-qq57-5275 | High | Not scored | 11 Sep, 2020 | npm untitled-model |
Command Injection in entitlements GHSA-g8vp-6hv4-m67c | High | Not scored | 11 Sep, 2020 | npm entitlements |
Cross-Site Scripting in node-red GHSA-5g6j-8hv4-vfgj | High | Not scored | 11 Sep, 2020 | npm node-red |
Cross-Site Scripting in serve GHSA-xw79-hhv6-578c | High | Not scored | 11 Sep, 2020 | npm serve |
Path Traversal in serve GHSA-48gc-5j93-5cfq | High | Not scored | 11 Sep, 2020 | npm serve |
SQL Injection in resquel GHSA-crpm-fm48-chj7 | High | Not scored | 11 Sep, 2020 | npm resquel |
Unauthorized File Access in atompm GHSA-v86x-f47q-f7f4 | High | Not scored | 11 Sep, 2020 | npm atompm |
Command Injection in soletta-dev-app GHSA-8mgg-5x65-m4m4 | High | Not scored | 11 Sep, 2020 | npm soletta-dev-app |
Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145) CVE-2018-17145, GHSA-hx3r-jv9q-85jw | High | 4.8% | 10 Sep, 2020 | npm bcoin |
Signed to Unsigned Conversion Error in Facebook Hermes CVE-2020-1913, GHSA-gmpm-xp43-f7g6 | High | 1.2% | 09 Sep, 2020 | npm hermes-engine |
Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes CVE-2020-1912, GHSA-pf27-929j-9pmm | High | 1.8% | 09 Sep, 2020 | npm hermes-engine |
Invalid root may become trusted root in The Update Framework (TUF) CVE-2020-15163, GHSA-f8mr-jv2c-v8mg, PYSEC-2020-145 | High | 0.7% | 09 Sep, 2020 | PyPI tuf |
Path Traversal in pip CVE-2019-20916, GHSA-gpvv-69j7-gwj8, PYSEC-2020-173 | High | 3.0% | 04 Sep, 2020 | PyPI pip |
Remote Code Execution in next GHSA-5vj8-3v2h-h38v | High | Not scored | 04 Sep, 2020 | npm next |