Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Marked ReDoS due to email addresses being evaluated in quadratic time GHSA-xf5p-87ch-gxw2 | Medium | Not scored | 05 Jun, 2019 | npm marked |
phpMyAdmin CSRF Vulnerability CVE-2019-12616, GHSA-mfr9-pcm3-6mwc | Medium | 20.2% | 05 Jun, 2019 | Packagist phpmyadmin/phpmyadmin |
Out-of-bounds Read in byte GHSA-xm7f-x4wx-wmgv | Medium | Not scored | 04 Jun, 2019 | npm byte |
Remote Memory Exposure in floody GHSA-3p92-886g-qxpq | Medium | Not scored | 04 Jun, 2019 | npm floody |
Django Cross-site Scripting in AdminURLFieldWidget CVE-2019-12308, GHSA-7rp2-fm2h-wchj, PYSEC-2019-79 | Medium | 2.4% | 03 Jun, 2019 | PyPI Django PyPI django |
Memory Exposure in bl GHSA-wrw9-m778-g6mc | Medium | Not scored | 03 Jun, 2019 | npm bl |
Memory Exposure in concat-stream GHSA-g74r-ffvr-5q9f | Medium | Not scored | 03 Jun, 2019 | npm concat-stream |
Memory Exposure in tunnel-agent GHSA-xc7v-wxcw-j472 | Medium | Not scored | 03 Jun, 2019 | npm tunnel-agent |
PyDio Stored XSS Vulnerability CVE-2019-10047, GHSA-5ghg-233h-7j79, PYSEC-2026-902 | Medium | 0.7% | 31 May, 2019 | PyPI Pydio PyPI pydio |
Cross-Site Scripting in bootbox GHSA-87mg-h5r3-hw88 | Medium | Not scored | 30 May, 2019 | npm bootbox |
Reflected Cross-Site Scripting in jquery.terminal GHSA-2hwp-g4g7-mwwj | Medium | Not scored | 29 May, 2019 | npm jquery.terminal |
Out-of-bounds Read in concat-with-sourcemaps GHSA-2xv3-h762-ccxv | Medium | Not scored | 29 May, 2019 | npm concat-with-sourcemaps |
Fortinet FortiOS and FortiProxy Out-of-bounds Write CVE-2018-13383 | MediumExploited | 30.7% | 29 May, 2019 | |
Cross-Site Scripting (XSS) in Verdaccio CVE-2019-14772, GHSA-78j5-gcmf-vqc8 | Medium | 0.9% | 29 May, 2019 | npm verdaccio |
PrestaShop Cross-site Scripting vulnerability CVE-2019-11876, GHSA-6grv-hw8g-4gfm | Medium | 0.9% | 24 May, 2019 | Packagist prestashop/prestashop |
Cross-Site Scripting in shave CVE-2019-12313, GHSA-gh4g-3gm9-5wrq | Medium | 1.3% | 24 May, 2019 | npm shave |
Cryptographically Weak PRNG in generate-password GHSA-6qqf-vvcr-7qrv | Medium | Not scored | 23 May, 2019 | npm generate-password |
mysql Node.JS Module Vulnerable to Remote Memory Exposure GHSA-5f7m-mmpc-qhh4 | Medium | Not scored | 23 May, 2019 | npm mysql |
Cross-Site Scripting in webpack-bundle-analyzer GHSA-pgr8-jg6h-8gw6 | Medium | Not scored | 23 May, 2019 | npm webpack-bundle-analyzer |
Golang/x/crypto message forgery vulnerability CVE-2019-11841, GHSA-x3jr-pf6g-c48f, GO-2023-1992 | Medium | 2.0% | 22 May, 2019 | Go golang.org/x/crypto |
Symfony Cross-site Scripting (XSS) vulnerability CVE-2019-10909, GHSA-g996-q5r8-w7g2 | Medium | 1.0% | 16 May, 2019 | Packagist drupal/core Packagist drupal/drupal Packagist symfony/framework-bundle Packagist symfony/symfony |
ezplatform-admin-ui Cross-site Scripting (XSS) vulnerability CVE-2019-12139, GHSA-99rh-vxmc-7wgf | Medium | 0.8% | 16 May, 2019 | Packagist ezsystems/ezplatform-admin-ui |
Capstone SEGV caused by a read memory access CVE-2016-7151, GHSA-xx4j-rvcc-2vhr, PYSEC-2019-242 | Medium | 1.1% | 15 May, 2019 | PyPI capstone |
Cross-site Scripting in remarkable CVE-2019-12043, GHSA-36m4-6v6m-4vpr | Medium | 0.9% | 13 May, 2019 | npm remarkable |
Cross-Site Scripting in simditor CVE-2018-19048, GHSA-8v67-x8q5-3x3g | Medium | 1.5% | 13 May, 2019 | npm simditor |
Unauthorized File Access in harp CVE-2019-5438, GHSA-6fmm-47qc-p4m4 | Medium | 1.5% | 10 May, 2019 | npm harp |
Unauthorized File Access in harp CVE-2019-5437, GHSA-46hv-7769-j7rx | Medium | 1.3% | 10 May, 2019 | npm harp |
golang.org/x/crypto/salsa20/salsa uses insufficiently random values CVE-2019-11840, GHSA-r5c5-pr8j-pfp7, GO-2022-0209 | Medium | 3.5% | 09 May, 2019 | Go golang.org/x/crypto |
ImpressCMS XSS CVE-2018-13983, GHSA-g32q-4fhf-cq72 | Medium | 1.5% | 06 May, 2019 | Packagist impresscms/impresscms |
phpBB Server side request forgery (SSRF) CVE-2019-11767, GHSA-4hx9-p925-qcv7 | Medium | 1.2% | 05 May, 2019 | Packagist phpbb/phpbb |
Cross-site Scripting in NodeBB CVE-2015-9286, GHSA-72fv-qgj6-2w2p | Medium | 1.4% | 30 Apr, 2019 | npm nodebb |
Mercurial Path Traversal/Link Following vulnerability CVE-2019-3902, GHSA-mq66-vcfc-8246, PYSEC-2019-188 | Medium | 1.4% | 22 Apr, 2019 | PyPI mercurial |
Kubernetes Unsafe Cacheing CVE-2019-11244, GHSA-2575-pghm-6qqx | Medium | 0.5% | 22 Apr, 2019 | Go k8s.io/client-go |
Matrix Sydent mishandles emails CVE-2019-11340, GHSA-q9h8-gpw5-c95c, PYSEC-2026-843 | Medium | 1.8% | 19 Apr, 2019 | PyPI matrix-sydent |
XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358, DRUPAL-CORE-2019-006, GHSA-6c3j-c64m-qhgq, PYSEC-2026-628, SNYK-JS-JQUERY-174006 | Medium | 86.8% | 17 Apr, 2019 | Maven org.webjars.npm:jquery NuGet jQuery Packagist drupal/core Packagist maximebf/debugbar +3 more |
Contao Information Disclosure via Access Control Flaws CVE-2018-20028, GHSA-q99w-j4mj-7hj8 | Medium | 0.9% | 17 Apr, 2019 | Packagist contao/contao |
Improper Neutralization of CRLF Sequences in urllib3 library for Python CVE-2019-11236, GHSA-r64q-w8jr-g9qp, PYSEC-2019-132 | Medium | 2.1% | 15 Apr, 2019 | PyPI urllib3 |
Apache Airflow vulnerable to Stored XSS CVE-2019-0216, GHSA-8p7v-2jvj-v54r, PYSEC-2019-214 | Medium | 2.7% | 10 Apr, 2019 | PyPI apache-airflow |
Cross-Site Scripting in simple-markdown CVE-2019-9844, GHSA-qj3f-9gmq-fwv5 | Medium | 1.3% | 09 Apr, 2019 | npm simple-markdown |
Microsoft Windows SMB Information Disclosure Vulnerability CVE-2019-0703 | MediumExploited | 9.4% | 09 Apr, 2019 | |
Elgg open redirect CVE-2019-11016, GHSA-r6h7-846c-8m78 | Medium | 1.2% | 08 Apr, 2019 | Packagist elgg/elgg |
Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation CVE-2019-11004, GHSA-rg3q-jxmp-pvjj | Medium | 0.8% | 08 Apr, 2019 | npm @materializecss/materialize npm materialize-css |
Materialize-css vulnerable to Cross-site Scripting in autocomplete component CVE-2019-11003, GHSA-7752-f4gf-94gc | Medium | 0.8% | 08 Apr, 2019 | npm @materializecss/materialize npm materialize-css |
Materialize-css vulnerable to Cross-site Scripting in tooltip component CVE-2019-11002, GHSA-98f7-p5rc-jx67 | Medium | 0.8% | 08 Apr, 2019 | npm @materializecss/materialize npm materialize-css |
Moderate severity vulnerability that affects roundup CVE-2019-10904, GHSA-926q-wxr6-3crq, PYSEC-2019-201 | Medium | 1.6% | 06 Apr, 2019 | PyPI roundup |
Jupyter Notebook open redirect vulnerability CVE-2019-10856, GHSA-rcx2-m7jp-p9wj, PYSEC-2019-158 | Medium | 1.3% | 04 Apr, 2019 | PyPI notebook |
Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability CVE-2019-3876, GHSA-jgwg-35hf-xqrr | Medium | 0.7% | 01 Apr, 2019 | Go github.com/openshift/oauth-apiserver |
Symlink Attack in kubectl cp CVE-2019-1002101, GHSA-34jx-wx69-9x8v, GO-2022-0782 | Medium | 12.8% | 01 Apr, 2019 | Go k8s.io/kubernetes |
Kubernetes DoS Vulnerability CVE-2019-1002100, GHSA-q4rr-64r9-fwgf, GO-2023-1946 | Medium | 16.9% | 01 Apr, 2019 | Go k8s.io/kubernetes |
Moderate severity vulnerability that affects total.js CVE-2019-10260, GHSA-72p5-2r6g-fm6v | Medium | 0.9% | 28 Mar, 2019 | npm total.js |