Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Denial of service in github.com/ethereum/go-ethereum CVE-2020-26264, GHSA-r33q-22hv-j29q, GO-2021-0063 | Medium | 1.9% | 11 Dec, 2020 | Go github.com/ethereum/go-ethereum |
Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944 BIT-airflow-2020-17515, CVE-2020-17515, GHSA-86vp-x3pr-79rx, PYSEC-2020-21 | Medium | 16.2% | 11 Dec, 2020 | PyPI apache-airflow |
browsershot local file inclusion vulnerability CVE-2020-7790, GHSA-rv74-mh27-4jpv | Medium | 1.0% | 11 Dec, 2020 | Packagist spatie/browsershot |
OS Command Injection in node-notifier CVE-2020-7789, GHSA-5fw9-fq32-wv5p | Medium | 1.6% | 11 Dec, 2020 | npm node-notifier |
Cross-Site Scripting in Grav CVE-2020-37256, GHSA-cvmr-6428-87w9 | Medium | 0.3% | 10 Dec, 2020 | Packagist getgrav/grav |
Heap out of bounds access in MakeEdge in TensorFlow BIT-tensorflow-2020-26271, CVE-2020-26271, GHSA-q263-fvxm-m5mw, PYSEC-2020-257, PYSEC-2020-302, PYSEC-2020-337 | Medium | 0.2% | 10 Dec, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in LSTM with zero-length input in TensorFlow BIT-tensorflow-2020-26270, CVE-2020-26270, GHSA-m648-33qf-v3gp, PYSEC-2020-256, PYSEC-2020-301, PYSEC-2020-336 | Medium | 0.2% | 10 Dec, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Write to immutable memory region in TensorFlow BIT-tensorflow-2020-26268, CVE-2020-26268, GHSA-hhvc-g5hv-48c6, PYSEC-2020-255, PYSEC-2020-299, PYSEC-2020-334 | Medium | 0.2% | 10 Dec, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Uninitialized memory access in TensorFlow BIT-tensorflow-2020-26266, CVE-2020-26266, GHSA-qhxx-j73r-qpm2, PYSEC-2020-254, PYSEC-2020-297, PYSEC-2020-332 | Medium | 0.3% | 10 Dec, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Cross-site scripting in phpoffice/phpspreadsheet CVE-2020-7776, GHSA-4mqv-gcr3-pff9, SNYK-PHP-PHPOFFICEPHPSPREADSHEET-1048856 | Medium | 1.3% | 09 Dec, 2020 | Packagist phpoffice/phpexcel Packagist phpoffice/phpspreadsheet |
Moodle stored Cross-site Scripting (XSS) BIT-moodle-2020-25627, CVE-2020-25627, GHSA-mgfp-qcf2-pw3m | Medium | 3.7% | 09 Dec, 2020 | Packagist moodle/moodle |
Denial of service in fast-csv CVE-2020-26256, GHSA-8cv5-p934-3hwp | Medium | 1.5% | 08 Dec, 2020 | npm @fast-csv/parse npm fast-csv |
Apple Multiple Products Memory Initialization Vulnerability CVE-2020-27950 | MediumExploited | 16.5% | 08 Dec, 2020 | |
Kirby .dev domains and some reverse proxy setups were treated as local CVE-2020-26253, GHSA-2ccx-2gf3-8xvv | Medium | 0.6% | 08 Dec, 2020 | Packagist getkirby/cms Packagist getkirby/panel |
Moodle Cross-site Scripting (XSS) BIT-moodle-2020-25631, CVE-2020-25631, GHSA-4w4j-9533-82qg | Medium | 0.9% | 08 Dec, 2020 | Packagist moodle/moodle |
Cross site-scripting (XSS) moodle BIT-moodle-2020-25628, CVE-2020-25628, GHSA-5x33-h32w-6vr2 | Medium | 1.0% | 08 Dec, 2020 | Packagist moodle/moodle |
Sensitive Information leak via Log File in Kubernetes CVE-2020-8566, GHSA-5x96-j797-5qqw, GO-2024-2754 | Medium | 0.5% | 07 Dec, 2020 | Go github.com/kubernetes/kubernetes Go k8s.io/kubernetes |
Kubernetes client-go vulnerable to Sensitive Information Leak via Log File CVE-2020-8565, GHSA-8cfg-vx93-jvxw, GO-2021-0064 | Medium | 0.5% | 07 Dec, 2020 | Go k8s.io/client-go Go k8s.io/kubernetes |
Kubernetes Sensitive Information leak via Log File CVE-2020-8564, GHSA-8mjg-8c8g-6h85, GO-2021-0066 | Medium | 0.5% | 07 Dec, 2020 | Go github.com/kubernetes/kubernetes Go k8s.io/kubernetes |
Sensitive Information leak via Log File in Kubernetes CVE-2020-8563, GHSA-5xfg-wv98-264m, GO-2024-2755 | Medium | 0.5% | 07 Dec, 2020 | Go github.com/kubernetes/kubernetes Go k8s.io/kubernetes |
Cabot Cross Site Scripting (XSS) vulnerability via Address column CVE-2020-25449, GHSA-8q2h-4mq6-396j, PYSEC-2020-226 | Medium | 1.1% | 04 Dec, 2020 | PyPI cabot |
ReDOS vulnerabities: multiple grammars GHSA-7wwv-vh3v-89cq | Medium | Not scored | 04 Dec, 2020 | npm @highlightjs/cdn-assets npm highlight.js |
OpenStack Horizon Open redirect in workflow forms CVE-2020-29565, GHSA-f8fh-xp28-q59m, PYSEC-2020-45 | Medium | 1.4% | 04 Dec, 2020 | PyPI horizon |
snapcraft Access Restriction Bypass CVE-2020-27348, GHSA-qxm5-vx5j-pp6w, PYSEC-2020-109 | Medium | 0.7% | 04 Dec, 2020 | PyPI snapcraft |
lxml vulnerable to Cross-site Scripting CVE-2020-27783, GHSA-pgww-xf46-h92r, PYSEC-2020-62 | Medium | 4.0% | 03 Dec, 2020 | PyPI lxml |
EC-CUBE Improper Restriction of Rendered UI Layers or Frames CVE-2020-5679, GHSA-rwh8-h525-4jvj | Medium | 0.7% | 03 Dec, 2020 | Packagist ec-cube/ec-cube |
Cross-site scripting in papermerge CVE-2020-29456, GHSA-9w49-m7xh-5r39, PYSEC-2020-74 | Medium | 1.6% | 02 Dec, 2020 | PyPI papermerge |
Cross-site scripting in ThinkAdmin CVE-2020-29315, GHSA-v47f-vp3p-5j6h | Medium | 1.0% | 01 Dec, 2020 | Packagist zoujingli/thinkadmin |
containerd-shim API Exposed to Host Network Containers CVE-2020-15257, GHSA-36xw-fx78-c5r4, GO-2022-0784 | Medium | 3.1% | 01 Dec, 2020 | Go github.com/containerd/containerd |
Open redirect in Jupyter Server CVE-2020-26232, GHSA-grfj-wjv9-4f9v, PYSEC-2020-234 | Medium | 1.0% | 24 Nov, 2020 | PyPI jupyter-server |
Heketi logs sensitive information CVE-2020-10763, GHSA-rm7c-x6gj-2mr8 | Medium | 0.4% | 24 Nov, 2020 | Go github.com/heketi/heketi |
Path Traversal in HashiCorp Nomad CVE-2020-28348, GHSA-5x92-p4p5-33c4, GO-2022-0770 | Medium | 1.7% | 24 Nov, 2020 | Go github.com/hashicorp/nomad |
Cross-Site Scripting in Fluid view helpers BIT-typo3-2020-26227, CVE-2020-26227, GHSA-vqqx-jw6p-q3rf | Medium | 0.7% | 23 Nov, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Bypass of fix for CVE-2020-15247, Twig sandbox escape CVE-2020-26231, GHSA-r89v-cgv7-3jhx | Medium | 0.3% | 23 Nov, 2020 | Packagist october/cms |
Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled. CVE-2020-15247, GHSA-94vp-rmqv-5875 | Medium | 0.3% | 23 Nov, 2020 | Packagist october/cms |
Stored XSS by authenticated backend user with access to upload files CVE-2020-15249, GHSA-fx3v-553x-3c4q | Medium | 0.5% | 23 Nov, 2020 | Packagist october/backend |
Privilege escalation by backend users assigned to the default "Publisher" system role CVE-2020-15248, GHSA-rfjc-xrmf-5vvw | Medium | 0.3% | 23 Nov, 2020 | Packagist october/backend |
Privilege Escalation in HashiCorp Consul BIT-consul-2020-28053, CVE-2020-28053, GHSA-6m72-467w-94rh, GO-2024-2505 | Medium | 1.5% | 23 Nov, 2020 | Go github.com/hashicorp/consul |
Exposure of Sensitive Information to an Unauthorized Actor in Moodle BIT-moodle-2020-25703, CVE-2020-25703, GHSA-c7v4-m269-4995 | Medium | 1.5% | 19 Nov, 2020 | Packagist moodle/moodle |
Cross-site Scripting (XSS) in moodle BIT-moodle-2020-25702, CVE-2020-25702, GHSA-pgcp-m69h-p2gr | Medium | 1.3% | 19 Nov, 2020 | Packagist moodle/moodle |
Privilage Escalation in moodle BIT-moodle-2020-25701, CVE-2020-25701, GHSA-c9hq-g4q8-w893 | Medium | 1.4% | 19 Nov, 2020 | Packagist moodle/moodle |
SQL Injection in moodle BIT-moodle-2020-25700, CVE-2020-25700, GHSA-7h8v-2v8x-h264 | Medium | 1.3% | 19 Nov, 2020 | Packagist moodle/moodle |
Open redirect in Jupyter Notebook BIT-jupyter-base-notebook-2020-26215, BIT-jupyter-notebook-2020-26215, CVE-2020-26215, GHSA-c7vm-f5p4-8fqh, PYSEC-2020-215 | Medium | 1.2% | 18 Nov, 2020 | PyPI notebook |
Open Redirect in werkzeug CVE-2020-28724, GHSA-3p3h-qghp-hvh2, PYSEC-2020-157 | Medium | 1.7% | 18 Nov, 2020 | PyPI werkzeug |
Reflected XSS with parameters in PostComment CVE-2020-26225, GHSA-58w4-w77w-qv3w | Medium | 0.9% | 16 Nov, 2020 | Packagist prestashop/productcomments |
Cross-site Scripting in markdown-it-highlightjs CVE-2020-7773, GHSA-f246-xrrj-g8j6, SNYK-JS-MARKDOWNITHIGHLIGHTJS-1040461 | Medium | 1.4% | 16 Nov, 2020 | npm markdown-it-highlightjs |
Uncontrolled Resource Consumption in firebase CVE-2020-7765, GHSA-fpm5-vv97-jfwg, SNYK-JS-FIREBASEUTIL-1038324 | Medium | 0.6% | 16 Nov, 2020 | npm @firebase/util |
Improper Neutralization of Input During Web Page Generation in CKEditor4 CVE-2020-27193, GHSA-4m44-5j2g-xf64 | Medium | 2.1% | 12 Nov, 2020 | npm ckeditor4 |
malicious SVG attachment causing stored XSS vulnerability CVE-2020-15275, GHSA-4q96-6xhq-ff43, PYSEC-2020-241 | Medium | 1.7% | 11 Nov, 2020 | PyPI moin |
Regular expression deinal of service in express-validators CVE-2020-7767, GHSA-cf2x-rqc8-grfq | Medium | 1.6% | 11 Nov, 2020 | npm express-validators |