Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
open-item-validator
|
Malicious code in open-item-validator (npm) | Unknown | 19 days ago | 2 hours ago |
|
ultra-ws
|
Malicious code in ultra-ws (npm) | Unknown | 13 days ago | 2 hours ago |
|
riot-private
|
Malicious code in riot-private (npm) | Unknown | 3 hours ago | 2 hours ago |
|
tanksync
|
Malicious code in tanksync (npm) | Unknown | 3 hours ago | 2 hours ago |
|
uuid-date
|
Malicious code in uuid-date (npm) | Unknown | 2 hours ago | 2 hours ago |
|
vinzzsync-wacli
|
Malicious code in vinzzsync-wacli (npm) | Unknown | 3 hours ago | 2 hours ago |
|
wbnr-probe-visible-check
|
Malicious code in wbnr-probe-visible-check (npm) | Unknown | 2 hours ago | 2 hours ago |
|
swiper_angular
|
Malicious code in swiper_angular (npm) | Unknown | 2 months ago | 2 hours ago |
|
o0o9
|
Malicious code in o0o9 (npm) | Unknown | 1 month ago | 2 hours ago |
|
discord-mfa-solver
|
Malicious code in discord-mfa-solver (npm) | Unknown | 18 days ago | 2 hours ago |
|
@wbnr/design-kit
|
Malicious code in @wbnr/design-kit (npm) | Unknown | 2 hours ago | 2 hours ago |
|
@wbnr/lottiefiles-loader
|
Malicious code in @wbnr/lottiefiles-loader (npm) | Unknown | 2 hours ago | 2 hours ago |
|
kalasnik-npm-simple-test
|
Malicious code in kalasnik-npm-simple-test (npm) | Unknown | 2 hours ago | 2 hours ago |
|
kjj81
|
Malicious code in kjj81 (npm) | Unknown | 2 hours ago | 2 hours ago |
|
capacitor-plugin-service-worker
|
Malicious code in capacitor-plugin-service-worker (npm) | Unknown | 4 months ago | 2 hours ago |
|
api-typings
|
Malicious code in api-typings (npm) | Unknown | 4 months ago | 2 hours ago |
|
seek-pass
|
Malicious code in seek-pass (npm) | Unknown | 4 months ago | 2 hours ago |
|
spotify-url-resolvers
|
Malicious code in spotify-url-resolvers (npm) | Unknown | 1 month ago | 4 hours ago |
|
discord-players
|
Malicious code in discord-players (npm) | Unknown | 12 days ago | 4 hours ago |
|
discord-resolvers
|
Malicious code in discord-resolvers (npm) | Unknown | 12 days ago | 4 hours ago |
|
@consts/links
|
Malicious code in @consts/links (npm) | Unknown | 5 hours ago | 4 hours ago |
|
@digi-kernel/digi-kernel-constrains
|
Malicious code in @digi-kernel/digi-kernel-constrains (npm) | Unknown | 5 hours ago | 4 hours ago |
|
@penpot/mcp
|
PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE | High Risk 8.8 | 4 months ago | 5 hours ago |
|
pnpm
|
pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml | High Risk 7.4 | 26 days ago | 5 hours ago |
github.com/cloudreve/Cloudreve/v4
|
Cloudreve's remote download file paths can escape the selected destination directory | Medium Risk 6.0 | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve
|
Cloudreve's remote download file paths can escape the selected destination directory in github.com/cloudreve/Cloudreve | Unknown | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve/v3
|
Cloudreve's remote download file paths can escape the selected destination directory in github.com/cloudreve/Cloudreve | Unknown | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve/v4
|
Cloudreve's remote download file paths can escape the selected destination directory in github.com/cloudreve/Cloudreve | Unknown | 1 month ago | 5 hours ago |
|
github.com/fleetdm/fleet/v4
|
Fleet: ORDER BY column injection on activity list endpoints | Low Risk 3.1 | 1 month ago | 5 hours ago |
|
github.com/fleetdm/fleet/v4
|
Fleet: ORDER BY column injection on activity list endpoints in github.com/fleetdm/fleet | Unknown | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve/v4
|
Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint | Medium Risk 5.3 | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve
|
Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve | Unknown | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve/v3
|
Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve | Unknown | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve/v4
|
Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve | Unknown | 1 month ago | 5 hours ago |
|
github.com/fleetdm/fleet/v4
|
Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs | Medium Risk 5.3 | 1 month ago | 5 hours ago |
|
github.com/fleetdm/fleet/v4
|
Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs in github.com/fleetdm/fleet | Unknown | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve/v3
|
Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests | Medium Risk 5.4 | 2 months ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve/v4
|
Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests | Medium Risk 5.4 | 2 months ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve
|
Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests in github.com/cloudreve/Cloudreve | Unknown | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve/v3
|
Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests in github.com/cloudreve/Cloudreve | Unknown | 1 month ago | 5 hours ago |
|
github.com/cloudreve/Cloudreve/v4
|
Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests in github.com/cloudreve/Cloudreve | Unknown | 1 month ago | 5 hours ago |
|
github.com/containers/podman/v4
|
podman kube play symlink traversal vulnerability | High Risk 8.1 | 1 year ago | 5 hours ago |
|
github.com/containers/podman/v5
|
podman kube play symlink traversal vulnerability | High Risk 8.1 | 1 year ago | 5 hours ago |
|
@bb1ptest23/test-paket
|
Malicious code in @bb1ptest23/test-paket (npm) | Unknown | 7 hours ago | 7 hours ago |
aseity
|
Malicious code in aseity (PyPI) | Unknown | 19 hours ago | 17 hours ago |
|
scrapetools2
|
Malicious code in scrapetools2 (PyPI) | Unknown | 18 hours ago | 18 hours ago |
|
donutautosellsrc
|
Malicious code in donutautosellsrc (PyPI) | Unknown | 1 day ago | 18 hours ago |
|
metrics-sdk
|
Malicious code in metrics-sdk (PyPI) | Unknown | 1 day ago | 18 hours ago |
|
claudedashbord
|
Malicious code in claudedashbord (PyPI) | Unknown | 1 day ago | 18 hours ago |
|
coinscan
|
Malicious code in coinscan (PyPI) | Unknown | 23 hours ago | 18 hours ago |
Page 1