Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Regular Expression Denial of Service in papaparse CVE-2020-36649, GHSA-qvjc-g5vr-mfgr | High | 1.4% | 04 Sep, 2020 | npm papaparse |
Denial of Service in http-proxy GHSA-6x33-pw7p-hmpq | High | Not scored | 04 Sep, 2020 | npm http-proxy |
Denial of Service in @commercial/ammo GHSA-rhc3-76jw-4f2x | High | Not scored | 04 Sep, 2020 | npm @commercial/ammo |
Cross-Site Scripting in markdown-it-katex GHSA-5ff8-jcf9-fw62 | High | Not scored | 04 Sep, 2020 | npm markdown-it-katex |
Hardcoded Initialization Vector in parsel GHSA-q643-w9jp-q2qg | High | Not scored | 04 Sep, 2020 | npm parsel |
Cross-Site Scripting in atlasboard-atlassian-package GHSA-25v4-mcx4-hh35 | High | Not scored | 04 Sep, 2020 | npm atlasboard-atlassian-package |
Server-Side Request Forgery in ftp-srv GHSA-r4m5-47cq-6qg8 | High | Not scored | 04 Sep, 2020 | npm ftp-srv |
Cross-Site Scripting in nextcloud-vue-collections GHSA-whv6-rj84-2vh2 | High | Not scored | 04 Sep, 2020 | npm nextcloud-vue-collections |
Command Injection in treekill GHSA-533p-g2hq-qr26 | High | Not scored | 04 Sep, 2020 | npm treekill |
Cross-Site Scripting in react GHSA-hg79-j56m-fxgv | High | Not scored | 04 Sep, 2020 | npm react |
Server-Side Request Forgery in html-pdf-chrome GHSA-5p98-wpc9-g498 | High | Not scored | 04 Sep, 2020 | npm html-pdf-chrome |
Prototype Pollution in sahmat GHSA-83pq-466j-fc6j | High | Not scored | 04 Sep, 2020 | npm sahmat |
Prototype Pollution in safe-object2 GHSA-qccf-q7p4-3q3j | High | Not scored | 04 Sep, 2020 | npm safe-object2 |
Prototype Pollution in getsetdeep GHSA-8j49-49jq-vwcq | High | Not scored | 04 Sep, 2020 | npm getsetdeep |
Prototype Pollution in deep-setter GHSA-9qrg-h9g8-c65q | High | Not scored | 04 Sep, 2020 | npm deep-setter |
Prototype Pollution in get-setter GHSA-ch82-gqh6-9xj9 | High | Not scored | 04 Sep, 2020 | npm get-setter |
Prototype Pollution in reggae GHSA-q9wr-gcjc-hq52 | High | Not scored | 04 Sep, 2020 | npm reggae |
Prototype Pollution in unflatten GHSA-6fh5-8wq8-w3wr | High | Not scored | 04 Sep, 2020 | npm unflatten |
Prototype Pollution in flat-wrap GHSA-g7h8-p22m-2rvx | High | Not scored | 04 Sep, 2020 | npm flat-wrap |
Arbitrary Code Execution in handlebars GHSA-q2c6-c6pm-g3gh | High | Not scored | 04 Sep, 2020 | npm handlebars |
Prototype Pollution in handlebars GHSA-g9r4-xpmj-mj65 | High | Not scored | 04 Sep, 2020 | npm handlebars |
Arbitrary Code Execution in handlebars GHSA-2cf5-4w76-r9qv | High | Not scored | 04 Sep, 2020 | npm handlebars |
Insecure path handling in Bundler CVE-2019-3881, GHSA-g98m-96g9-wfjq | High | 0.5% | 04 Sep, 2020 | RubyGems bundler |
Improper Input Validation in Laravel BIT-laravel-2020-24941, CVE-2020-24941, GHSA-w68r-5p45-5rqp | High | 1.1% | 04 Sep, 2020 | Packagist laravel/framework |
Guard bypass in Eloquent models affecting Laravel illuminate database component BIT-laravel-2020-24940, CVE-2020-24940, GHSA-c7rm-w2hj-x8g3 | High | 1.2% | 04 Sep, 2020 | Packagist illuminate/database |
Machine-In-The-Middle in airtable GHSA-jrj9-5qp6-2v8q | High | Not scored | 03 Sep, 2020 | npm airtable |
Cross-Site Scripting in markdown-to-jsx GHSA-ccrp-c664-8p4j | High | Not scored | 03 Sep, 2020 | npm markdown-to-jsx |
Unauthorized File Access in node-git-server GHSA-cv3v-7846-6pxm | High | Not scored | 03 Sep, 2020 | npm node-git-server |
Cross-Site Scripting in hexo-admin GHSA-phph-xpj4-wvcv | High | Not scored | 03 Sep, 2020 | npm hexo-admin |
Denial of Service in mongodb GHSA-mh5c-679w-hh4r | High | Not scored | 03 Sep, 2020 | npm mongodb |
Denial of Service in subtext GHSA-2mvq-xp48-4c77 | High | Not scored | 03 Sep, 2020 | npm subtext |
Cross-Site Scripting in snekserve GHSA-hv4w-jhcj-6wfw | High | Not scored | 03 Sep, 2020 | npm snekserve |
Denial of Service in @commercial/subtext GHSA-fvwr-h9xh-m6wc | High | Not scored | 03 Sep, 2020 | npm @commercial/subtext |
Denial of Service in @hapi/subtext GHSA-4rgj-8mq3-hggj | High | Not scored | 03 Sep, 2020 | npm @hapi/subtext |
Regular Expression Denial of Service in sql-injection GHSA-hvxq-j2r4-4jm8 | High | Not scored | 03 Sep, 2020 | npm sql-injection |
Prototype Pollution in mithril GHSA-c3px-v9c7-m734 | High | Not scored | 03 Sep, 2020 | npm mithril |
Sandbox Breakout / Arbitrary Code Execution in notevil GHSA-7r5f-7qr4-pf6q | High | Not scored | 03 Sep, 2020 | npm notevil |
Cross-Site Scripting in console-feed GHSA-g9wg-wq4f-2x5w | High | Not scored | 03 Sep, 2020 | npm console-feed |
Authentication Bypass in otpauth GHSA-rmmc-8cqj-hfp3 | High | Not scored | 03 Sep, 2020 | npm otpauth |
Cross-Site Scripting in dmn-js-properties-panel GHSA-h9wr-xr4r-66fh | High | Not scored | 03 Sep, 2020 | npm dmn-js-properties-panel |
Cross-Site Scripting in cmmn-js-properties-panel GHSA-vmh4-322v-cfpc | High | Not scored | 03 Sep, 2020 | npm cmmn-js-properties-panel |
Cross-Site Scripting in bpmn-js-properties-panel GHSA-vpj4-89q8-rh38 | High | Not scored | 03 Sep, 2020 | npm bpmn-js-properties-panel |
Prototype Pollution in lodash.mergewith GHSA-779f-wgxg-qr8f | High | Not scored | 03 Sep, 2020 | npm lodash.mergewith |
Prototype Pollution in lodash.defaultsdeep GHSA-46fh-8fc5-xcwx | High | Not scored | 03 Sep, 2020 | npm lodash.defaultsdeep |
Prototype Pollution in lodash.mergewith GHSA-5947-m4fg-xhqg | High | Not scored | 03 Sep, 2020 | npm lodash.mergewith |
Prototype Pollution in lodash.defaultsdeep GHSA-h5mp-5q4p-ggf5 | High | Not scored | 03 Sep, 2020 | npm lodash.defaultsdeep |
Prototype Pollution in lodash.merge GHSA-2m96-9w4j-wgv7 | High | Not scored | 03 Sep, 2020 | npm lodash.merge |
Prototype Pollution in lodash.merge GHSA-h726-x36v-rx45 | High | Not scored | 03 Sep, 2020 | npm lodash.merge |
Cross-Site Scripting in takeapeek GHSA-4q2f-8g74-qm56 | High | Not scored | 03 Sep, 2020 | npm takeapeek |
Cross-Site Scripting in jquery.json-viewer GHSA-v9wp-8r97-v6xg | High | Not scored | 03 Sep, 2020 | npm jquery.json-viewer |