Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Joplin Vulnerable to Cross-site Scripting in Note Content CVE-2018-1000534, GHSA-m6mf-hmrh-ph4j | Medium | 1.5% | 26 Jun, 2018 | npm joplin |
Galaxy cross-site scripting (XSS) CVE-2018-1000516, GHSA-qqr6-vm23-m488, PYSEC-2018-149 | Medium | 1.1% | 26 Jun, 2018 | PyPI galaxy-app |
Qutebrowser XSS Vulnerability CVE-2018-1000559, GHSA-m4fw-77v7-924m, PYSEC-2018-26 | Medium | 1.5% | 26 Jun, 2018 | PyPI qutebrowser |
Sensitive Data Exposure in baserCMS CVE-2018-0575, GHSA-w935-p7mg-xc96 | Medium | 1.2% | 26 Jun, 2018 | Packagist baserproject/basercms |
XSS in baserCMS CVE-2018-0574, GHSA-6qjv-43mf-rgrh | Medium | 0.8% | 26 Jun, 2018 | Packagist baserproject/basercms |
baserCMS Access Control Bypass CVE-2018-0573, GHSA-33fq-qm4m-cjw3 | Medium | 1.1% | 26 Jun, 2018 | Packagist baserproject/basercms |
baserCMS arbitrary file upload vulnerability CVE-2018-0571, GHSA-3mcp-6rv6-c69g | Medium | 1.1% | 26 Jun, 2018 | Packagist baserproject/basercms |
XSS in baserCMS CVE-2018-0570, GHSA-994g-74gq-5qpr | Medium | 0.7% | 26 Jun, 2018 | Packagist baserproject/basercms |
phpMyAdmin XSS Vulnerability CVE-2018-12581, GHSA-vxj6-pm6r-23hq | Medium | 1.8% | 21 Jun, 2018 | Packagist phpmyadmin/phpmyadmin |
Phusion Passenger incorrect permission assignment CVE-2018-12615, GHSA-4284-jfhc-f854 | Medium | 1.2% | 21 Jun, 2018 | RubyGems passenger |
Auth0 angular-jwt misinterprets allowlist as regex CVE-2018-11537, GHSA-vm2p-f5j4-mj6g | Medium | 1.1% | 19 Jun, 2018 | npm angular-jwt |
Airbnb Knowledge Repo XSS In Comments CVE-2018-12104, GHSA-xmw7-848p-p95w, PYSEC-2018-116 | Medium | 1.3% | 17 Jun, 2018 | PyPI knowledge-repo |
oauth2orize-fprm XSS vulnerability CVE-2018-11647, GHSA-p77r-c6m3-gj2r | Medium | 0.9% | 17 Jun, 2018 | npm oauth2orize-fprm |
Symfony Open Redirect CVE-2018-11408, GHSA-7hwc-2cq4-6x2w | Medium | 1.1% | 13 Jun, 2018 | Packagist symfony/security-bundle Packagist symfony/symfony |
Symfony DoS CVE-2018-11386, GHSA-r2rq-3h56-fqm4 | Medium | 1.6% | 13 Jun, 2018 | Packagist symfony/http-foundation Packagist symfony/symfony |
Symfony Open Redirect CVE-2017-16652, GHSA-r7p7-qr7p-2rrf | Medium | 0.8% | 13 Jun, 2018 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
Yii2-StateMachine extension for Yii2 XSS Vulnerability CVE-2018-12290, GHSA-65qg-f77j-cccf | Medium | 0.7% | 13 Jun, 2018 | Packagist ptheofan/yii2-statemachine |
Openshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) CVE-2018-1103, GHSA-w55j-f7vx-6q37, GO-2020-0026 | Medium | 1.3% | 12 Jun, 2018 | Go github.com/openshift/source-to-image |
Grafana Cross-site Scripting (XSS) CVE-2018-12099, GHSA-v5gq-qvjq-8p53, GO-2024-2510 | Medium | 2.1% | 11 Jun, 2018 | Go github.com/grafana/grafana |
Denial of Service in protobufjs CVE-2018-3738, GHSA-762f-c2wg-m8c8 | Medium | 0.9% | 07 Jun, 2018 | npm protobufjs |
bracket-template vulnerable to reflected XSS CVE-2018-3735, GHSA-488m-6gh8-9j36 | Medium | 0.8% | 07 Jun, 2018 | npm bracket-template |
Cross-site Scripting (XSS) - Stored in crud-file-server CVE-2018-3726, GHSA-h24f-9mm4-w336 | Medium | 1.1% | 07 Jun, 2018 | npm crud-file-server |
Prototype Pollution in lodash CVE-2018-3721, GHSA-fvqr-27wr-82fm | Medium | 2.3% | 07 Jun, 2018 | RubyGems lodash-rails npm lodash |
vercel/serve allows access to restricted files if filename is URL encoded. CVE-2018-3718, GHSA-5rc4-8qqh-vq7f | Medium | 1.3% | 07 Jun, 2018 | npm serve |
Cross-Site Scripting in connect CVE-2018-3717, GHSA-rch9-xh7r-mqgw | Medium | 1.3% | 07 Jun, 2018 | npm connect |
Stored Cross-Site Scripting in simplehttpserver CVE-2018-3716, GHSA-jrhj-2j3q-xf3v | Medium | 0.6% | 07 Jun, 2018 | npm simplehttpserver |
Path Traversal in glance CVE-2018-3715, GHSA-2x4q-6jfv-8h9h | Medium | 1.5% | 07 Jun, 2018 | npm glance |
Path Traversal in node-srv CVE-2018-3714, GHSA-52r9-g5g6-2hjp | Medium | 8.6% | 07 Jun, 2018 | npm node-srv |
Path Traversal in angular-http-server CVE-2018-3713, GHSA-4rvg-955w-h68q | Medium | 1.5% | 07 Jun, 2018 | npm angular-http-server |
Directory Traversal in serve CVE-2018-3712, GHSA-q2qh-cgc2-qhr3 | Medium | 1.8% | 07 Jun, 2018 | npm serve |
Open Redirect in st CVE-2017-16224, GHSA-72fg-jqhx-c68p | Medium | 0.9% | 07 Jun, 2018 | npm st |
Directory Traversal in elding CVE-2017-16222, GHSA-rp28-29ch-gh92 | Medium | 1.7% | 07 Jun, 2018 | npm elding |
Directory Traversal in dasafio CVE-2017-16179, GHSA-8xj3-7258-w4q2 | Medium | 1.7% | 07 Jun, 2018 | npm dasafio |
Regular Expression Denial of Service in debug CVE-2017-16137, GHSA-gxpj-cx7g-858c | Medium | 2.8% | 07 Jun, 2018 | npm debug |
superagent vulnerable to zip bomb attacks CVE-2017-16129, GHSA-8225-6cvr-8pqp | Medium | 1.7% | 07 Jun, 2018 | npm superagent |
Tracking Module in botbait CVE-2017-16126, GHSA-4r5x-qjqc-p579 | Medium | 0.9% | 07 Jun, 2018 | npm botbait |
Directory Traversal in easyquick CVE-2017-16109, GHSA-8h55-49jm-739x | Medium | 1.7% | 07 Jun, 2018 | npm easyquick |
nZEDb Cross-site Scripting (XSS) in the 404 error page CVE-2017-18286, GHSA-h847-63fg-vm6c | Medium | 0.7% | 05 Jun, 2018 | Packagist nzedb/nzedb |
HTML Injection in shout CVE-2017-16043, GHSA-26q7-g57v-mxcp | Medium | 1.0% | 04 Jun, 2018 | npm shout |
Cryptographically Weak PRNG in randomatic CVE-2017-16028, GHSA-6g33-f262-xjp4 | Medium | 1.3% | 04 Jun, 2018 | npm randomatic |
Remote Memory Exposure in request CVE-2017-16026, GHSA-7xfp-9c55-5vqj | Medium | 2.6% | 04 Jun, 2018 | npm request |
Tmp files readable by other users in sync-exec CVE-2017-16024, GHSA-38h8-x697-gh8q | Medium | 2.5% | 04 Jun, 2018 | npm sync-exec |
Cross-Site Scripting in morris.js CVE-2017-16022, GHSA-fwx5-5fqj-jv98 | Medium | 0.9% | 04 Jun, 2018 | npm morris.js |
Regular Expression Denial Of Service in uri-js CVE-2017-16021, GHSA-333w-rxj3-f55r | Medium | 1.3% | 04 Jun, 2018 | npm uri-js |
Cross-Site Scripting in gitbook CVE-2017-16019, GHSA-5h5r-23r4-m87h | Medium | 0.9% | 04 Jun, 2018 | npm gitbook |
Cross-Site Scripting (XSS) in restify CVE-2017-16018, GHSA-qw3g-35hc-fcrh | Medium | 1.0% | 04 Jun, 2018 | npm restify |
Cross-Site Scripting in sanitize-html CVE-2017-16017, GHSA-wg96-3933-j2w5 | Medium | 1.2% | 04 Jun, 2018 | npm sanitize-html |
Cross-Site Scripting in sanitize-html CVE-2017-16016, GHSA-xc6g-ggrc-qq4r | Medium | 1.3% | 04 Jun, 2018 | npm sanitize-html |
Cross-Site Scripting in forms CVE-2017-16015, GHSA-vwjj-2852-3765 | Medium | 0.8% | 04 Jun, 2018 | npm forms |
XSS via Angular Expression in ag-grid CVE-2017-16009, GHSA-wfw3-rgfr-6g67 | Medium | 1.0% | 04 Jun, 2018 | npm ag-grid |