Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
CRLF injection in urllib3 CVE-2020-26137, GHSA-wqvq-5m8c-6g24, PYSEC-2020-148 | Medium | 2.3% | 30 Sep, 2020 | PyPI urllib3 |
github.com/russellhaering/goxmldsig vulnerable to Signature Validation Bypass CVE-2020-15216, GHSA-q547-gmf8-8jr7, GO-2020-0050 | Medium | 0.9% | 29 Sep, 2020 | Go github.com/russellhaering/goxmldsig |
MediaWiki Cross-site Scripting (XSS) vulnerability BIT-mediawiki-2020-25828, CVE-2020-25828, GHSA-h8qx-mj6v-2934 | Medium | 1.1% | 27 Sep, 2020 | Packagist mediawiki/core |
MediaWiki Cross-site Scripting (XSS) vulnerability BIT-mediawiki-2020-25815, CVE-2020-25815, GHSA-2f58-vf6g-6p8x | Medium | 1.1% | 27 Sep, 2020 | Packagist mediawiki/core |
MediaWiki Cross-site Scripting (XSS) vulnerability BIT-mediawiki-2020-25814, CVE-2020-25814, GHSA-4vr7-m8p8-434h | Medium | 1.4% | 27 Sep, 2020 | Packagist mediawiki/core |
MediaWiki Special:UserRights exposes the existence of hidden users BIT-mediawiki-2020-25813, CVE-2020-25813, GHSA-c4rj-wrmq-52rj | Medium | 1.3% | 27 Sep, 2020 | Packagist mediawiki/core |
MediaWiki Cross-site Scripting (XSS) vulnerability BIT-mediawiki-2020-25812, CVE-2020-25812, GHSA-rj9p-8jxj-2ch4 | Medium | 1.1% | 27 Sep, 2020 | Packagist mediawiki/core |
Denial of service in tensorflow-lite BIT-tensorflow-2020-15213, CVE-2020-15213, GHSA-hjmq-236j-8m87, PYSEC-2020-136, PYSEC-2020-293, PYSEC-2020-328 | Medium | 0.8% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds access in tensorflow-lite BIT-tensorflow-2020-15211, CVE-2020-15211, GHSA-cvpc-8phh-8f45, PYSEC-2020-134, PYSEC-2020-291, PYSEC-2020-326 | Medium | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in Tensorflow BIT-tensorflow-2020-15204, CVE-2020-15204, GHSA-q8gv-q7wr-9jf8, PYSEC-2020-127, PYSEC-2020-284, PYSEC-2020-319 | Medium | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in Tensorflow BIT-tensorflow-2020-15201, CVE-2020-15201, GHSA-p5f8-gfw5-33w4, PYSEC-2020-124, PYSEC-2020-281, PYSEC-2020-316 | Medium | 0.6% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Denial of Service in Tensorflow BIT-tensorflow-2020-15197, CVE-2020-15197, GHSA-qc53-44cj-vfvx, PYSEC-2020-120, PYSEC-2020-277, PYSEC-2020-312 | Medium | 0.7% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Undefined behavior in Tensorflow BIT-tensorflow-2020-15191, CVE-2020-15191, GHSA-q8qj-fc9q-cphr, PYSEC-2020-114, PYSEC-2020-271, PYSEC-2020-306 | Medium | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in Tensorflow BIT-tensorflow-2020-15198, CVE-2020-15198, GHSA-jc87-6vpp-7ff3, PYSEC-2020-121, PYSEC-2020-278, PYSEC-2020-313 | Medium | 0.5% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Denial of Service in Tensorflow BIT-tensorflow-2020-15194, CVE-2020-15194, GHSA-9mqp-7v2h-2382, PYSEC-2020-117, PYSEC-2020-274, PYSEC-2020-309 | Medium | 1.0% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Memory leak in Tensorflow BIT-tensorflow-2020-15192, CVE-2020-15192, GHSA-8fxw-76px-3rxv, PYSEC-2020-115, PYSEC-2020-272, PYSEC-2020-307 | Medium | 0.8% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in Tensorflow BIT-tensorflow-2020-15190, CVE-2020-15190, GHSA-4g9f-63rx-5cw4, PYSEC-2020-113, PYSEC-2020-270, PYSEC-2020-305 | Medium | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
OS Command Injection in ng-packagr CVE-2020-7735, GHSA-qm28-7hqv-wg5j, SNYK-JS-NGPACKAGR-1012427 | Medium | 2.4% | 25 Sep, 2020 | npm ng-packagr |
Cross-site Scripting in Joplin CVE-2020-15930, GHSA-cgc7-mwp4-3ccx | Medium | 4.4% | 24 Sep, 2020 | npm joplin |
Contao Insert tag injection in forms CVE-2020-25768, GHSA-f7wm-x4gw-6m23 | Medium | 0.8% | 24 Sep, 2020 | Packagist contao/contao Packagist contao/core-bundle |
Gon gem lack of escaping certain input when outputting as JSON CVE-2020-25739, GHSA-78vq-9j56-wrfr | Medium | 1.4% | 23 Sep, 2020 | RubyGems gon |
Information disclosure in podman CVE-2020-14370, GHSA-c3wv-qmjj-45r6, GO-2024-2766 | Medium | 1.4% | 23 Sep, 2020 | Go github.com/containers/libpod Go github.com/containers/libpod/v2 Go github.com/containers/podman/v2 |
Potential XSS in jQuery dependency in Mirador GHSA-hgwm-pv9h-q5m7 | Medium | Not scored | 18 Sep, 2020 | npm mirador |
plugin.yaml file allows for duplicate entries in helm BIT-helm-2020-15187, CVE-2020-15187, GHSA-c52f-pq47-2r9j | Medium | 1.5% | 17 Sep, 2020 | Go helm.sh/helm Go helm.sh/helm/v3 |
Apache Airflow Cross-site Scripting BIT-airflow-2020-13944, CVE-2020-13944, GHSA-4pwq-fj89-6rjc, PYSEC-2020-19 | Medium | 25.1% | 17 Sep, 2020 | PyPI apache-airflow |
Drupal Core Access bypass vulnerability BIT-drupal-2020-13667, CVE-2020-13667, DRUPAL-CORE-2020-008, GHSA-x2q9-r8gm-f657 | Medium | 0.9% | 16 Sep, 2020 | Packagist drupal/core Packagist drupal/drupal |
Drupal core Cross-site Scripting (XSS) vulnerability in ckeditor BIT-drupal-2020-13669, CVE-2020-13669, DRUPAL-CORE-2020-010, GHSA-c533-c843-67h8 | Medium | 0.7% | 16 Sep, 2020 | Packagist drupal/core Packagist drupal/drupal |
Drupal Core Cross-site scripting vulnerability BIT-drupal-2020-13688, CVE-2020-13688, DRUPAL-CORE-2020-009, GHSA-qf2g-mrrx-rr5p | Medium | 0.7% | 16 Sep, 2020 | Packagist drupal/core |
Drupal Core Cross-site scripting vulnerability BIT-drupal-2020-13666, CVE-2020-13666, DRUPAL-CORE-2020-007, GHSA-8jj2-x2gc-ggm7 | Medium | 2.9% | 16 Sep, 2020 | Packagist drupal/core Packagist drupal/drupal |
Cross-Site Scripting in swagger-ui GHSA-w992-2gmj-9xxj | Medium | Not scored | 11 Sep, 2020 | npm swagger-ui |
Cross-Site Scripting in swagger-ui GHSA-22q9-hqm5-mhmc | Medium | Not scored | 11 Sep, 2020 | npm swagger-ui |
Prototype Pollution in mergify GHSA-3f95-w5h5-fq86 | Medium | Not scored | 11 Sep, 2020 | npm mergify |
Cross-Site Scripting in swagger-ui GHSA-vp93-gcx5-4w52 | Medium | Not scored | 11 Sep, 2020 | npm swagger-ui |
Cross-Site Scripting in swagger-ui GHSA-388g-jwpg-x6j4 | Medium | Not scored | 11 Sep, 2020 | npm swagger-ui |
Cross-Site Scripting in swagger-ui GHSA-4f9m-pxwh-68hg | Medium | Not scored | 11 Sep, 2020 | npm swagger-ui |
Cross-Site Scripting in serve GHSA-cpgr-wmr9-qxv4 | Medium | Not scored | 11 Sep, 2020 | npm serve |
Cross-Site Scripting in diagram-js-direct-editing GHSA-j8r2-2x94-2q67 | Medium | Not scored | 11 Sep, 2020 | npm diagram-js-direct-editing |
Cross-Site Scripting in diagram-js GHSA-8fw4-xh83-3j6q | Medium | Not scored | 11 Sep, 2020 | npm diagram-js |
Command Injection in wizard-syncronizer GHSA-wgw3-gf4p-62xc | Medium | Not scored | 11 Sep, 2020 | npm wizard-syncronizer |
Denial of Service in node-sass GHSA-9v62-24cr-58cx | Medium | Not scored | 11 Sep, 2020 | npm node-sass |
Command Injection in wxchangba GHSA-j6v9-xgvh-f796 | Medium | Not scored | 11 Sep, 2020 | npm wxchangba |
Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible CVE-2020-14330, GHSA-785x-qw4v-6872, PYSEC-2020-3 | Medium | 0.6% | 11 Sep, 2020 | PyPI ansible |
Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible CVE-2020-14332, GHSA-j667-c2hm-f2wp, PYSEC-2020-4 | Medium | 0.4% | 11 Sep, 2020 | PyPI ansible |
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability CVE-2020-0878 | MediumExploited | 2.7% | 11 Sep, 2020 | |
XSS in Action View CVE-2020-15169, GHSA-cfjv-5498-mph5 | Medium | 2.4% | 11 Sep, 2020 | RubyGems actionview |
The `size` option isn't honored after following a redirect in node-fetch CVE-2020-15168, GHSA-w7rc-rwvf-8q5r | Medium | 1.7% | 10 Sep, 2020 | npm node-fetch |
Cross-Site Scripting in @hapi/boom GHSA-2ggq-vfcp-gwhj | Medium | Not scored | 04 Sep, 2020 | npm @hapi/boom |
Outdated Static Dependency in vue-moment GHSA-hrpp-f84w-xhfg | Medium | Not scored | 04 Sep, 2020 | npm vue-moment |
Cross-Site Scripting in react CVE-2013-7035, GHSA-g53w-52xc-2j85 | Medium | Not scored | 04 Sep, 2020 | npm react |
Sandbox Breakout / Prototype Pollution in notevil GHSA-9gxr-rhx6-4jgv | Medium | Not scored | 04 Sep, 2020 | npm notevil |