Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Denial of Service in handlebars GHSA-f52g-6jhx-586p | Medium | Not scored | 03 Sep, 2020 | npm handlebars |
Authentication Bypass in saml2-js GHSA-mfcp-34xw-p57x | Medium | Not scored | 03 Sep, 2020 | npm saml2-js |
Insecure Cryptography Algorithm in simple-crypto-js GHSA-5v7r-jg9r-vq44 | Medium | Not scored | 03 Sep, 2020 | npm simple-crypto-js |
Denial of Service in http-live-simulator GHSA-xgp2-cc4r-7vf6 | Medium | Not scored | 03 Sep, 2020 | npm http-live-simulator |
Sensitive Data Exposure in ibm_db GHSA-p77h-hv6g-fmfp | Medium | Not scored | 03 Sep, 2020 | npm ibm_db |
Configuration Override in helmet-csp GHSA-c3m8-x3cg-qm2c | Medium | Not scored | 03 Sep, 2020 | npm helmet-csp |
Cross-Site Scripting in mavon-editor GHSA-jfcc-rm7f-xgf8 | Medium | Not scored | 03 Sep, 2020 | npm mavon-editor |
Unintended Require in larvitbase-www GHSA-88h9-fc6v-jcw7 | Medium | Not scored | 03 Sep, 2020 | npm larvitbase-www |
Path Traversal in public GHSA-4vvp-x9h2-x2vf | Medium | Not scored | 03 Sep, 2020 | npm public |
Denial of Service in sequelize GHSA-fw4p-36j9-rrj3 | Medium | Not scored | 03 Sep, 2020 | npm sequelize |
Local File Inclusion in domokeeper GHSA-cr67-78jr-j94p | Medium | Not scored | 03 Sep, 2020 | npm domokeeper |
Reverse Tabnabbing in quill GHSA-588m-9qg5-35pq | Medium | Not scored | 03 Sep, 2020 | npm quill |
silverstripe-advancedreports vulnerable to XSS CVE-2020-25102, GHSA-8f2x-hv9r-mh9r | Medium | 0.9% | 03 Sep, 2020 | Packagist silverstripe-australia/advancedreports |
Open Redirect in apostrophe GHSA-h97g-4mx7-5p2p | Medium | Not scored | 03 Sep, 2020 | npm apostrophe |
Cross-Site Scripting in @berslucas/liljs GHSA-c53x-wwx2-pg96 | Medium | Not scored | 03 Sep, 2020 | npm @berslucas/liljs |
Buffer Overflow in node-weakauras-parser GHSA-86mr-6m89-vgj3 | Medium | Not scored | 03 Sep, 2020 | npm node-weakauras-parser |
HTML Injection in marky-markdown GHSA-pxmp-fwjc-4x7q | Medium | Not scored | 03 Sep, 2020 | npm marky-markdown |
Denial of Service in ipfs-bitswap GHSA-6fcr-9h9g-23fq | Medium | Not scored | 02 Sep, 2020 | npm ipfs-bitswap |
Sandbox Breakout / Arbitrary Code Execution in value-censorship GHSA-xrr6-6ww3-f3qm | Medium | Not scored | 02 Sep, 2020 | npm value-censorship |
Cross-Site Scripting in google-closure-library GHSA-r9q4-w3fm-wrm2 | Medium | Not scored | 02 Sep, 2020 | npm google-closure-library |
HTML Injection in preact GHSA-cg48-9hh2-x6mx | Medium | Not scored | 02 Sep, 2020 | npm preact |
Unauthorized File Access in glance GHSA-vw7g-jq9m-3q9v | Medium | Not scored | 02 Sep, 2020 | npm glance |
Cross-Site Scripting in buttle GHSA-pqpp-2363-649v | Medium | Not scored | 02 Sep, 2020 | npm buttle |
Information Disclosure in TYPO3 extension sf_event_mgt CVE-2020-25026, GHSA-g8rg-7rpr-cwr2 | Medium | 0.8% | 02 Sep, 2020 | Packagist derhansen/sf_event_mgt |
Incorrect Authorization in TYPO3 extension CVE-2020-25025, GHSA-cv9j-78f7-w6v9 | Medium | 0.8% | 02 Sep, 2020 | Packagist localizationteam/l10nmgr |
Cross-site scripting in net/http/cgi and net/http/fcgi BIT-golang-2020-24553, CVE-2020-24553, GO-2021-0226 | Medium | 3.6% | 02 Sep, 2020 | Go stdlib |
Prototype Pollution in smart-extend GHSA-f8h3-rqrm-47v9 | Medium | Not scored | 02 Sep, 2020 | npm smart-extend |
Sandbox Breakout / Arbitrary Code Execution in sandbox GHSA-fm4j-4xhm-xpwx | Medium | Not scored | 02 Sep, 2020 | npm sandbox |
Out-of-bounds Read in base64url GHSA-rvg8-pwq2-xj7q | Medium | Not scored | 01 Sep, 2020 | npm base64url |
Remote Memory Exposure in openwhisk GHSA-53mj-mc38-q894 | Medium | Not scored | 01 Sep, 2020 | npm openwhisk |
Remote Memory Exposure in mongoose GHSA-r5xw-q988-826m | Medium | Not scored | 01 Sep, 2020 | npm mongoose |
Directory Traversal in featurebook GHSA-7x92-2j68-h32c | Medium | Not scored | 01 Sep, 2020 | npm featurebook |
Cross-Site Scripting in c3 CVE-2016-1000240, GHSA-gvg7-pp82-cff3 | Medium | Not scored | 01 Sep, 2020 | npm c3 |
Spoofing attack due to unvalidated KDC in node-krb5 CVE-2016-1000238, GHSA-4v9q-hm2p-68c4 | Medium | Not scored | 01 Sep, 2020 | npm node-krb5 |
Insecure Defaults Leads to Potential MITM in ezseed-transmission CVE-2016-1000224, GHSA-p788-rj37-357w | Medium | Not scored | 01 Sep, 2020 | npm ezseed-transmission |
Template Injection in jsrender CVE-2016-3942, GHSA-r87w-47m8-22w3 | Medium | Not scored | 01 Sep, 2020 | npm jsrender |
Regular Expression Denial of Service in bleach CVE-2014-8881, GHSA-mvmf-cvfx-qg55 | Medium | Not scored | 01 Sep, 2020 | npm bleach |
Directory Traversal in nhouston CVE-2014-8883, GHSA-44g9-w23c-5rw7 | Medium | Not scored | 31 Aug, 2020 | npm nhouston |
CSRF Vulnerability in jquery-ujs GHSA-6qqj-rx4w-r3cj | Medium | Not scored | 31 Aug, 2020 | npm jquery-ujs |
Dolibarr stored Cross-Site Scripting (XSS) vulnerability BIT-dolibarr-2020-13828, CVE-2020-13828, GHSA-8r2w-phx4-mgpv | Medium | 0.8% | 31 Aug, 2020 | Packagist dolibarr/dolibarr |
Remote Memory Exposure in bl CVE-2020-8244, GHSA-pp7h-53gx-mx7r | Medium | 2.1% | 30 Aug, 2020 | npm bl |
Grafana Arbitrary File Read CVE-2019-19499, GHSA-4pwp-cx67-5cpx, GO-2024-2661 | Medium | 3.5% | 28 Aug, 2020 | Go github.com/grafana/grafana |
Codiad Cross-site Scripting Vulnerability CVE-2020-14042, GHSA-g2x4-256v-5pvx | Medium | 1.2% | 25 Aug, 2020 | Packagist codiad/codiad |
Dolibarr CRM allows Privilege Escalation CVE-2020-14201, GHSA-25h3-mw3p-w8r7 | Medium | 1.6% | 21 Aug, 2020 | Packagist dolibarr/dolibarr |
DOM-based XSS in auth0-lock CVE-2020-15119, GHSA-6gg3-pmm7-97xc | Medium | 0.5% | 19 Aug, 2020 | npm auth0-lock |
Microsoft Netlogon Privilege Escalation Vulnerability CVE-2020-1472 | MediumExploited | 99.4% | 17 Aug, 2020 | |
phpBB Server-Side Request Forgery Vulnerability BIT-phpbb-2020-8226, CVE-2020-8226, GHSA-jhm9-h84h-rw83 | Medium | 1.0% | 17 Aug, 2020 | Packagist phpbb/phpbb |
Path Traversal in openapi-python-client CVE-2020-15141, GHSA-7wgr-7666-7pwj, PYSEC-2020-70 | Medium | 1.1% | 14 Aug, 2020 | PyPI openapi-python-client |
Fortinet FortiOS Default Configuration Vulnerability CVE-2019-5591 | MediumExploited | 18.6% | 14 Aug, 2020 | |
Reflected cross-site scripting in francoisjacquet/rosariosis CVE-2020-13278, GHSA-4cx9-7xqc-2jxm | Medium | 1.4% | 12 Aug, 2020 | Packagist francoisjacquet/rosariosis |