Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-Site Scripting in bootstrap-vue GHSA-c7pp-x73h-4m2v | High | Not scored | 02 Sep, 2020 | npm bootstrap-vue |
NoSQL Injection in loopback-connector-mongodb GHSA-hxwc-5vw9-2w4w | High | Not scored | 02 Sep, 2020 | npm loopback-connector-mongodb |
Cross-Site Scripting in semantic-ui-search GHSA-p9vv-3945-x93h | High | Not scored | 02 Sep, 2020 | npm semantic-ui-search |
Sandbox Breakout / Arbitrary Code Execution in static-eval GHSA-x9hc-rw35-f44h | High | Not scored | 02 Sep, 2020 | npm static-eval |
Remote Code Execution in office-converter GHSA-9p64-h5q4-phpm | High | Not scored | 02 Sep, 2020 | npm office-converter |
Remote Code Execution in pomelo-monitor GHSA-m5ch-gx8g-rg73 | High | Not scored | 02 Sep, 2020 | npm pomelo-monitor |
Sensitive Data Exposure in rails-session-decoder GHSA-44vf-8ffm-v2qh | High | Not scored | 02 Sep, 2020 | npm rails-session-decoder |
Cross-Site Scripting in mermaid GHSA-w32g-5hqp-gg6q | High | Not scored | 02 Sep, 2020 | npm mermaid |
Denial of Service in markdown-it-toc-and-anchor GHSA-x6m6-5hrf-fh6r | High | Not scored | 01 Sep, 2020 | npm markdown-it-toc-and-anchor |
Cross-Site Scripting in jingo GHSA-mpjf-8cmf-p789 | High | Not scored | 01 Sep, 2020 | npm jingo |
Cross-Site Scripting in md-data-table GHSA-hgr5-82rc-p936 | High | Not scored | 01 Sep, 2020 | npm md-data-table |
Cross-Site Scripting in buefy GHSA-xwqw-rf2q-xmhf | High | Not scored | 01 Sep, 2020 | npm buefy |
Entropy Backdoor in text-qrcode GHSA-h5vj-f7r9-w564 | High | Not scored | 01 Sep, 2020 | npm text-qrcode |
NoSQL injection in express-cart GHSA-f5cv-xrv9-r8w7 | High | Not scored | 01 Sep, 2020 | npm express-cart |
Cross-Site Request Forgery in MAGMI CVE-2020-5776, GHSA-cv7m-wc7g-7gfp | High | 14.7% | 01 Sep, 2020 | Packagist dweeves/magmi |
Path Traversal in express-cart GHSA-8h8v-6qqm-fwpq | High | Not scored | 01 Sep, 2020 | npm express-cart |
Cross-Site Scripting in react-marked-markdown GHSA-m7qm-r2r5-f77q | High | Not scored | 01 Sep, 2020 | npm react-marked-markdown |
Byass due to validation before canonicalization in serve GHSA-wm7q-rxch-43mx | High | Not scored | 01 Sep, 2020 | npm serve |
Cross-Site Scripting in mrk.js GHSA-hpr5-wp7c-hh5q | High | Not scored | 01 Sep, 2020 | npm mrk.js |
Trend Micro Multiple Products Improper Access Control Vulnerability CVE-2020-24557 | HighExploited | 2.7% | 01 Sep, 2020 | |
Directory Traversal in @vivaxy/here GHSA-m4vv-p6fq-jhqp | High | Not scored | 01 Sep, 2020 | npm @vivaxy/here |
Directory Traversal in yjmyjmyjm GHSA-g376-whg7-896m | High | Not scored | 01 Sep, 2020 | npm yjmyjmyjm |
Directory Traversal in nodeload-nmickuli GHSA-wmcq-3wfx-qjx5 | High | Not scored | 01 Sep, 2020 | npm nodeload-nmickuli |
Directory Traversal in wenluhong1 GHSA-224h-p7p5-rh85 | High | Not scored | 01 Sep, 2020 | npm wenluhong1 |
fury-adapter-swagger allows arbitrary file read from system CVE-2016-1000249, GHSA-2r7f-4h2c-5x73 | High | Not scored | 01 Sep, 2020 | npm fury-adapter-swagger |
Denial of Service in mqtt CVE-2016-1000242, GHSA-hg78-c92r-hvwr | High | Not scored | 01 Sep, 2020 | npm mqtt |
Cross-Site Scripting (XSS) in pivottable CVE-2016-1000241, GHSA-cjj8-wfrx-jqcf | High | Not scored | 01 Sep, 2020 | npm pivottable |
fuelux vulnerable to Cross-Site Scripting in Pillbox feature CVE-2016-1000235, GHSA-fwcw-5qw2-87mp | High | Not scored | 01 Sep, 2020 | npm fuelux |
Cross-Site Scripting in swagger-ui CVE-2016-1000233, GHSA-mrx7-8hxf-f853 | High | Not scored | 01 Sep, 2020 | npm swagger-ui |
Cross-Site Scripting in jqtree CVE-2016-1000234, GHSA-gjhx-gxwx-jx9j | High | Not scored | 01 Sep, 2020 | npm jqtree |
Cross-Site Scripting in emojione CVE-2016-1000231, GHSA-46m8-42hm-wvvw | High | Not scored | 01 Sep, 2020 | npm emojione |
XSS in client rendered block templates in rendr CVE-2016-1000230, GHSA-v5hp-35hw-cw5x | High | Not scored | 01 Sep, 2020 | npm rendr |
DOM-based XSS in gmail-js CVE-2016-1000228, GHSA-c7pp-g2v2-2766 | High | Not scored | 01 Sep, 2020 | npm gmail-js |
Cross-Site Scripting in bootstrap-tagsinput CVE-2016-1000227, GHSA-v2jq-9475-r5g8 | High | Not scored | 01 Sep, 2020 | npm bootstrap-tagsinput |
Forgeable Public/Private Tokens in jws CVE-2016-1000223, GHSA-gjcw-v447-2w7q | High | Not scored | 01 Sep, 2020 | npm jws |
Denial of Service in yar CVE-2014-4179, GHSA-gg6m-fhqv-hg56 | High | Not scored | 01 Sep, 2020 | npm yar |
github.com/u-root/u-root/pkg/tarutil Arbitrary File Write via Archive Extraction (Zip Slip) CVE-2020-7669, GHSA-75qf-wgfj-v652, GO-2022-0805 | High | 1.8% | 01 Sep, 2020 | Go github.com/u-root/u-root |
github.com/u-root/u-root/pkg/cpio Arbitrary File Write via Archive Extraction (Zip Slip) CVE-2020-7666, GHSA-mq35-x99r-54fc | High | 1.5% | 01 Sep, 2020 | Go github.com/u-root/u-root/pkg/cpio |
Path traversal in u-root CVE-2020-7665, GHSA-58pf-pcwv-qg85, GO-2022-0793 | High | 1.8% | 01 Sep, 2020 | Go github.com/u-root/u-root |
Django Incorrect Default Permissions BIT-django-2020-24583, CVE-2020-24583, GHSA-m6gj-h9gm-gw44, PYSEC-2020-33 | High | 4.0% | 01 Sep, 2020 | PyPI Django PyPI django |
Django Incorrect Default Permissions BIT-django-2020-24584, CVE-2020-24584, GHSA-fr28-569j-53c4, PYSEC-2020-34 | High | 3.3% | 01 Sep, 2020 | PyPI django |
Prototype Pollution in node-forge CVE-2020-7720, GHSA-92xj-mqp7-vmcj | High | 3.2% | 01 Sep, 2020 | npm node-forge |
Regular Expression Denial of Service in validator CVE-2014-8882, GHSA-f5w6-r7rg-mcgq | High | Not scored | 31 Aug, 2020 | npm validator |
Unauthenticated Remote Command Injection in ep_imageconvert CVE-2013-3364, GHSA-28gr-86hg-r48w | High | Not scored | 31 Aug, 2020 | npm ep_imageconvert |
TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability CVE-2020-24363 | HighExploited | 22.2% | 31 Aug, 2020 | |
Flask-Cors Directory Traversal vulnerability CVE-2020-25032, GHSA-xc3p-ff3m-f46v, PYSEC-2020-43 | High | 3.9% | 31 Aug, 2020 | PyPI Flask-Cors PyPI flask-cors |
trentm/json vulnerable to command injection CVE-2020-7712, GHSA-3c6g-pvg8-gqw2 | High | 3.1% | 30 Aug, 2020 | Maven org.webjars.npm:json npm json |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability CVE-2020-3566 | HighExploited | 3.7% | 29 Aug, 2020 | |
Cross Site Scripting and RCE in baserCMS CVE-2020-15159, GHSA-673x-f5wx-fxpw | High | 2.2% | 28 Aug, 2020 | Packagist baserproject/basercms |
Cross Site Scripting(XSS) Vulnerability in Latest Release 4.3.6 Site basic settings CVE-2020-15155, GHSA-4r3m-j6x5-48m3 | High | 1.3% | 28 Aug, 2020 | Packagist baserproject/basercms |