Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Unsafe deserialization in Yii 2 CVE-2020-15148, GHSA-699q-wcff-g9mj | Critical | 77.5% | 15 Sep, 2020 | Packagist yiisoft/yii2 |
Potential XSS injection In PrestaShop contactform CVE-2020-15178, GHSA-95hx-62rh-gg96 | Critical | 1.2% | 15 Sep, 2020 | Packagist prestashop/contactform |
Integer overflow in the bundled Brotli C library BIT-brotli-2020-8927, BIT-dotnet-2020-8927, BIT-dotnet-sdk-2020-8927, BIT-powershell-2020-8927, CVE-2020-36846, CVE-2020-8927, GHSA-5v8v-66v8-mwm7, GO-2025-3726, PYSEC-2020-29, RUSTSEC-2021-0131, RUSTSEC-2021-0132 | Critical | 3.2% | 15 Sep, 2020 | NuGet Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm NuGet Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 NuGet Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 NuGet Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 +114 more |
Malicious Package in radic-util GHSA-8qh7-xw58-3ww7 | Critical | Not scored | 11 Sep, 2020 | npm radic-util |
Malicious Package in motiv.scss GHSA-2vqq-jgxx-fxjc | Critical | Not scored | 11 Sep, 2020 | npm motiv.scss |
Malicious Package in react-datepicker-plus GHSA-4wcx-c9c4-89p2 | Critical | Not scored | 11 Sep, 2020 | npm react-datepicker-plus |
Malicious Package in precode.js GHSA-5w4r-wwc3-6qcp | Critical | Not scored | 11 Sep, 2020 | npm precode.js |
Malicious Package in scroool GHSA-p7w2-mc6m-mfx2 | Critical | Not scored | 11 Sep, 2020 | npm scroool |
Malicious Package in grunt-radical GHSA-4627-w373-375v | Critical | Not scored | 11 Sep, 2020 | npm grunt-radical |
Malicious Package in ng-ui-library GHSA-2xw5-3767-qxvm | Critical | Not scored | 11 Sep, 2020 | npm ng-ui-library |
Malicious Package in grunt-radic GHSA-9p49-cwh3-4qhf | Critical | Not scored | 11 Sep, 2020 | npm grunt-radic |
Malicious Package in github-jquery-widgets GHSA-c722-pv5w-cfg2 | Critical | Not scored | 11 Sep, 2020 | npm github-jquery-widgets |
Malicious Package in ember-power-timepicker GHSA-28f8-hqmc-7ph8 | Critical | Not scored | 11 Sep, 2020 | npm ember-power-timepicker |
Malicious Package in electron-native-notify GHSA-j8qr-rvcv-crhv | Critical | Not scored | 11 Sep, 2020 | npm electron-native-notify |
Malicious Package in test-module-a GHSA-76xq-58hj-vwm2 | Critical | Not scored | 11 Sep, 2020 | npm test-module-a |
Malicious Package in epress GHSA-vf8q-pw7h-r2x2 | Critical | Not scored | 11 Sep, 2020 | npm epress |
Malicious Package in geoheat GHSA-p32g-242c-76h3 | Critical | Not scored | 11 Sep, 2020 | npm geoheat |
Malicious Package in commmander GHSA-q42c-rrp3-r3xm | Critical | Not scored | 11 Sep, 2020 | npm commmander |
Malicious Package in blubird GHSA-rvww-x6m4-4vc2 | Critical | Not scored | 11 Sep, 2020 | npm blubird |
Malicious Package in angular-location-update GHSA-53jx-4wwh-gcqj | Critical | Not scored | 11 Sep, 2020 | npm angular-location-update |
Malicious Package in commqnder GHSA-4xgp-xrg3-c73w | Critical | Not scored | 11 Sep, 2020 | npm commqnder |
Malicious Package in equest GHSA-mvch-rh6h-2m47 | Critical | Not scored | 11 Sep, 2020 | npm equest |
Malicious Package in angluar-cli GHSA-8mm3-2mcj-cx6r | Critical | Not scored | 11 Sep, 2020 | npm angluar-cli |
Malicious Package in reuest GHSA-r863-p739-275c | Critical | Not scored | 11 Sep, 2020 | npm reuest |
Malicious Package in requst GHSA-8qx4-r7fx-xc4v | Critical | Not scored | 11 Sep, 2020 | npm requst |
Malicious Package in shrugging-logging GHSA-qv78-398w-cxp7 | Critical | Not scored | 11 Sep, 2020 | npm shrugging-logging |
Lack of URL normalization may lead to authorization bypass when URL access rules are used CVE-2020-24660, GHSA-x44x-r84w-8v67 | Critical | 2.5% | 09 Sep, 2020 | npm lemonldap-ng-handler |
WordPress File Manager Plugin Remote Code Execution Vulnerability CVE-2020-25213 | CriticalExploited | 97.3% | 09 Sep, 2020 | |
Command Injection in traceroute GHSA-rjvj-673q-4hfw | Critical | Not scored | 04 Sep, 2020 | npm traceroute |
Insufficient Entropy in parsel GHSA-vjvw-wcmw-pr26 | Critical | Not scored | 04 Sep, 2020 | npm parsel |
Insecure Cryptography Algorithm in parsel GHSA-wqgx-4q47-j2w5 | Critical | Not scored | 04 Sep, 2020 | npm parsel |
Command Injection in npm-git-publish GHSA-49mg-94fc-2fx6 | Critical | Not scored | 04 Sep, 2020 | npm npm-git-publish |
Command Injection in meta-git GHSA-qcff-ffx3-m25c | Critical | Not scored | 04 Sep, 2020 | npm meta-git |
Malicious Package in 1337qq-js GHSA-7wgh-5q4q-6wx5 | Critical | Not scored | 04 Sep, 2020 | npm 1337qq-js |
Authentication Bypass in express-laravel-passport GHSA-v66p-w7qx-wv98 | Critical | Not scored | 04 Sep, 2020 | npm express-laravel-passport |
Remote Code Execution in mongodb-query-parser GHSA-97mg-3cr6-3x4c | Critical | Not scored | 04 Sep, 2020 | npm mongodb-query-parser |
Command Injection in giting GHSA-7r9x-hr76-jr96 | Critical | Not scored | 04 Sep, 2020 | npm giting |
Improper Authorization in passport-cognito CVE-2019-19723, GHSA-v6c5-hwqg-3x5q | Critical | Not scored | 04 Sep, 2020 | npm passport-cognito |
Command Injection in plotter GHSA-65xx-c85x-wg76 | Critical | Not scored | 04 Sep, 2020 | npm plotter |
Command Injection in gnuplot GHSA-cfwc-xjfp-44jg | Critical | Not scored | 04 Sep, 2020 | npm gnuplot |
Malicious Package in bs85check GHSA-4hq8-v42x-9wx3 | Critical | Not scored | 04 Sep, 2020 | npm bs85check |
Malicious Package in bs58chcek GHSA-97mp-9g5c-6c93 | Critical | Not scored | 04 Sep, 2020 | npm bs58chcek |
Malicious Package in bs58chek GHSA-3cpj-mj3q-82wr | Critical | Not scored | 04 Sep, 2020 | npm bs58chek |
Malicious Package in bpi66 GHSA-7xc4-793x-25jp | Critical | Not scored | 04 Sep, 2020 | npm bpi66 |
Malicious Package in bpi39 GHSA-762c-v946-pf25 | Critical | Not scored | 04 Sep, 2020 | npm bpi39 |
Malicious Package in bp66 GHSA-8gc6-65mm-xr6r | Critical | Not scored | 04 Sep, 2020 | npm bp66 |
Malicious Package in bitcroe-lib GHSA-4m3p-x2hp-2pgx | Critical | Not scored | 04 Sep, 2020 | npm bitcroe-lib |
Malicious Package in bitconijs-lib GHSA-74hh-4rcv-pp27 | Critical | Not scored | 04 Sep, 2020 | npm bitconijs-lib |
Malicious Package in bitconi-ops GHSA-w9hw-v97w-g5f5 | Critical | Not scored | 04 Sep, 2020 | npm bitconi-ops |
Malicious Package in bitconid-rpc GHSA-9298-m7jf-55h2 | Critical | Not scored | 04 Sep, 2020 | npm bitconid-rpc |