Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Regular Expression Denial of Service in negotiator CVE-2016-10539, GHSA-7mc5-chhp-fmc3 | High | 1.4% | 31 May, 2018 | npm negotiator |
Timing Attack in csrf-lite CVE-2016-10535, GHSA-hjhr-r3gq-qvp6 | High | 1.3% | 31 May, 2018 | npm csrf-lite |
Private Data Disclosure in express-restify-mongoose CVE-2016-10533, GHSA-cgjx-mwpx-47jv | High | 1.4% | 31 May, 2018 | npm express-restify-mongoose |
No CSRF Validation in droppy CVE-2016-10529, GHSA-rhvc-x32h-5526 | High | 0.5% | 31 May, 2018 | npm droppy |
Regular Expression Denial of Service in riot-compiler CVE-2016-10527, GHSA-pp4v-55vr-9gxh | High | 1.5% | 31 May, 2018 | npm riot-compiler |
grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file CVE-2016-10526, GHSA-rrj3-qmh8-72pf | High | 1.6% | 31 May, 2018 | npm grunt-gh-pages |
Denial of Service and Content Injection in i18n-node-angular CVE-2016-10524, GHSA-97gv-3p2c-xw7j | High | 0.8% | 31 May, 2018 | npm i18n-node-angular |
Denial of Service in mqtt-packet CVE-2016-10523, GHSA-g3r2-65gc-qpqc | High | 2.4% | 31 May, 2018 | npm mqtt-packet |
Regular Expression Denial of Service in jshamcrest CVE-2016-10521, GHSA-xj62-87pg-vcv3 | High | 1.1% | 31 May, 2018 | npm jshamcrest |
Regular Expression Denial of Service in jadedown CVE-2016-10520, GHSA-6354-6mhv-mvv5 | High | 1.1% | 31 May, 2018 | npm jadedown |
Remote Memory Disclosure in bittorrent-dht CVE-2016-10519, GHSA-77g4-36jp-5v3m | High | 1.6% | 31 May, 2018 | npm bittorrent-dht |
Remote Memory Disclosure in ws CVE-2016-10518, GHSA-2mhh-w6q8-5hxw | High | 1.9% | 31 May, 2018 | npm ws |
Regular Expression Denial of Service in ansi2html CVE-2015-9239, GHSA-c2v2-7rcg-2ch7 | High | 1.1% | 31 May, 2018 | npm ansi2html |
Insecure Comparison in secure-compare CVE-2015-9238, GHSA-h9x2-5rm7-x4gm | High | 1.4% | 31 May, 2018 | npm secure-compare |
Directory Traversal in fancy-server CVE-2014-10066, GHSA-m273-wwfv-h6jp | High | 1.6% | 31 May, 2018 | npm fancy-server |
Content Injection in remarkable CVE-2014-10065, GHSA-f9vc-q3hh-qhfv | High | 0.9% | 31 May, 2018 | npm remarkable |
Denial-of-Service Extended Event Loop Blocking in qs CVE-2014-10064, GHSA-f9cm-p3w6-xvr3 | High | 1.4% | 31 May, 2018 | npm qs |
Path Traversal in stattic CVE-2018-3734, GHSA-w4pv-w56c-mg4v | High | 1.9% | 29 May, 2018 | npm stattic |
Path Traversal in crud-file-server CVE-2018-3733, GHSA-vfp9-gwrh-wq9g | High | 2.2% | 29 May, 2018 | npm crud-file-server |
Directory Traversal in gaoxuyan CVE-2017-16153, GHSA-j9wj-26p5-fj2v | High | 1.7% | 29 May, 2018 | npm gaoxuyan |
node-tkinter is malware CVE-2017-16062, GHSA-mwcv-m549-5cm8 | High | 1.1% | 29 May, 2018 | npm node-tkinter |
tkinter is malware CVE-2017-16061, GHSA-rwg6-3fmj-w4wx | High | 1.1% | 29 May, 2018 | npm tkinter |
mysqljs is malware CVE-2017-16047, GHSA-8gv6-g7vp-hr34 | High | 1.2% | 29 May, 2018 | npm mysqljs |
windows-build-tools downloads Resources over HTTP CVE-2017-16003, GHSA-9p47-w5xp-f4xr | High | 2.2% | 29 May, 2018 | npm windows-build-tools |
Downloads Resources over HTTP in mystem-fix CVE-2016-10698, GHSA-j3wh-5m26-2pf7 | High | 1.7% | 29 May, 2018 | npm mystem-fix |
Downloads Resources over HTTP in massif CVE-2016-10682, GHSA-4v2c-g2xc-47fv | High | 1.6% | 29 May, 2018 | npm massif |
Downloads Resources over HTTP in roslib-socketio CVE-2016-10681, GHSA-xq8r-r72r-pqwm | High | 1.7% | 29 May, 2018 | npm roslib-socketio |
Downloads Resources over HTTP in adamvr-geoip-lite CVE-2016-10680, GHSA-h2jv-5v3f-7m7j | High | 0.7% | 29 May, 2018 | npm adamvr-geoip-lite |
Downloads Resources over HTTP in selenium-standalone-painful CVE-2016-10679, GHSA-3x83-p476-vv95 | High | 2.0% | 29 May, 2018 | npm selenium-standalone-painful |
Downloads Resources over HTTP in limbus-buildgen CVE-2016-10674, GHSA-rj38-87f3-93p6 | High | 1.7% | 29 May, 2018 | npm limbus-buildgen |
Downloads Resources over HTTP in tomita-parser CVE-2016-10666, GHSA-722q-3g9x-vp8q | High | 1.6% | 29 May, 2018 | npm tomita-parser |
poco downloads Resources over HTTP CVE-2016-10659, GHSA-f757-9c4x-chff | High | 1.7% | 29 May, 2018 | npm poco |
Downloads Resources over HTTP in native-opencv CVE-2016-10658, GHSA-mpww-j7xj-cj35 | High | 1.7% | 29 May, 2018 | npm native-opencv |
Downloads Resources over HTTP in ntfserver CVE-2016-10650, GHSA-476p-r2wx-2wch | High | 1.7% | 29 May, 2018 | npm ntfserver |
Downloads Resources over HTTP in broccoli-closure CVE-2016-10635, GHSA-vvwp-3f54-xc39 | High | 1.6% | 29 May, 2018 | npm broccoli-closure |
Downloads Resources over HTTP in scala-bin CVE-2016-10627, GHSA-3vv5-42wr-m32g | High | 1.7% | 29 May, 2018 | npm scala-bin |
Downloads Resources over HTTP in strider-sauce CVE-2016-10611, GHSA-8gf4-pcj6-54rp | High | 1.7% | 29 May, 2018 | npm strider-sauce |
Downloads Resources over HTTP in webdrvr CVE-2016-10601, GHSA-wr2c-ppj9-f2fv | High | 1.6% | 29 May, 2018 | npm webdrvr |
ibapi downloads Resources over HTTP CVE-2016-10593, GHSA-92qm-hc53-jjrj | High | 2.3% | 29 May, 2018 | npm ibapi |
Downloads Resources over HTTP in prince CVE-2016-10591, GHSA-cr79-9pwf-r6f5 | High | 1.7% | 29 May, 2018 | npm prince |
Downloads Resources over HTTP in cue-sdk-node CVE-2016-10590, GHSA-p2hm-8725-c8x8 | High | 1.7% | 29 May, 2018 | npm cue-sdk-node |
selenium-binaries downloads resources over HTTP CVE-2016-10589, GHSA-h4mc-r4f4-hcf4 | High | 1.7% | 29 May, 2018 | npm selenium-binaries |
Downloads Resources over HTTP in macaca-chromedriver CVE-2016-10586, GHSA-769c-qphh-g3wm | High | 1.7% | 29 May, 2018 | npm macaca-chromedriver |
Downloads Resources over HTTP in dalek-browser-chrome-canary CVE-2016-10584, GHSA-8mrf-g42m-5qc8 | High | 2.0% | 29 May, 2018 | npm dalek-browser-chrome-canary |
Downloads Resources over HTTP in unicode CVE-2016-10578, GHSA-qjf4-7642-c57p | High | 0.6% | 29 May, 2018 | npm unicode |
ibm_db downloads Resources over HTTP CVE-2016-10577, GHSA-c4qp-h3m6-785f | High | 1.5% | 29 May, 2018 | npm ibm_db |
Downloads Resources over HTTP in baryton-saxophone CVE-2016-10573, GHSA-6pwf-whc8-hjf6 | High | 2.0% | 29 May, 2018 | npm baryton-saxophone |
pngcrush-installer downloads Resources over HTTP CVE-2016-10570, GHSA-g93h-75m9-3qq4 | High | 1.7% | 29 May, 2018 | npm pngcrush-installer |
Downloads Resources over HTTP in geoip-lite-country CVE-2016-10568, GHSA-ff29-f57w-2mm3 | High | 0.6% | 29 May, 2018 | npm geoip-lite-country |
Downloads Resources over HTTP in product-monitor CVE-2016-10567, GHSA-h2r4-4xgf-3865 | High | 1.6% | 29 May, 2018 | npm product-monitor |