Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2017-18911An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.Go · github.com/mattermost/mattermost-server · fixed in 3.6.7-rc1, 3.7.5, 3.8.2 and more
- CVE-2017-18912An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.Go · github.com/mattermost/mattermost-server · fixed in 3.7.4-0.20170404171331-0b5c0794fdcb
- CVE-2017-18904An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2.Go · github.com/mattermost/mattermost-server · fixed in 3.9.2+incompatible, 3.10.2+incompatible, 3.9.2 and more
- CVE-2017-18903An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2.Go · github.com/mattermost/mattermost-server · fixed in 3.9.2+incompatible, 3.10.2+incompatible, 3.9.2 and more
- CVE-2017-18902An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3.Go · github.com/mattermost/mattermost-server · fixed in 3.10.3+incompatible, 4.0.4+incompatible, 4.1.0+incompatible and more
- CVE-2017-18898An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.Go · github.com/mattermost/mattermost-server · fixed in 4.0.5, 4.1.1, 4.2.0 and more
- CVE-2017-18900An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3.Go · github.com/mattermost/mattermost-server · fixed in 3.10.3, 4.0.3, 3.10.3+incompatible and more
- CVE-2017-18886An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2+incompatible, 4.2.1+incompatible, 4.3.0+incompatible and more
- CVE-2017-18895An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.Go · github.com/mattermost/mattermost-server · fixed in 4.0.5, 4.1.1, 4.2.0 and more
- CVE-2017-18887An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2+incompatible, 4.2.1+incompatible, 4.3.0+incompatible and more
- CVE-2017-18888An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2, 4.2.1, 4.3.0 and more
- CVE-2017-18893An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.Go · github.com/mattermost/mattermost-server · fixed in 4.0.5, 4.1.1, 4.2.0 and more
- CVE-2017-18894An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider.Go · github.com/mattermost/mattermost-server · fixed in 4.0.5+incompatible, 4.1.1+incompatible, 4.2.0+incompatible and more
- CVE-2017-18896An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.Go · github.com/mattermost/mattermost-server · fixed in 4.0.5+incompatible, 4.1.1+incompatible, 4.2.0+incompatible and more
- CVE-2017-18897An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider.Go · github.com/mattermost/mattermost-server · fixed in 4.0.5+incompatible, 4.1.1+incompatible, 4.2.0+incompatible and more
- CVE-2017-18885An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2+incompatible, 4.2.1+incompatible, 4.3.0+incompatible and more
- CVE-2017-18901An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3.Go · github.com/mattermost/mattermost-server · fixed in 3.10.3, 4.0.4
- CVE-2017-18889An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2+incompatible, 4.2.1+incompatible, 4.3.0+incompatible and more
- CVE-2017-18890An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2, 4.2.1, 4.3.0 and more
- CVE-2017-18892An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.Go · github.com/mattermost/mattermost-server · fixed in 4.0.5, 4.1.1, 4.2.0 and more
- CVE-2017-18891An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5.Go · github.com/mattermost/mattermost-server · fixed in 4.0.5+incompatible, 4.1.1+incompatible, 4.2.0+incompatible and more
- CVE-2017-18884An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2, 4.2.1, 4.3.0 and more
- CVE-2017-18883An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2+incompatible, 4.2.1+incompatible, 4.3.0+incompatible and more
- CVE-2017-18879An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2+incompatible, 4.2.1+incompatible, 4.3.0+incompatible and more
- CVE-2017-18878An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.3.0+incompatible, 4.1.2-0.20171004201910-6be8113eb60c, 4.2.1-0.20171004192657-8fbbd688ea24 and more
- CVE-2017-18874An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2-0.20171004201910-6be8113eb60, 4.2.1-0.20171004194140-6d3cb2ce07fc, 4.3.0 and more
- CVE-2017-18873An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2-0.20171013141717-ee57a5829ab1, 4.2.1-0.20171013140502-b3e4b0ac9168, 4.3.0 and more
- CVE-2017-18872An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3.Go · github.com/mattermost/mattermost-server · fixed in 4.3.3+incompatible, 4.4.3+incompatible, 4.3.3 and more
- CVE-2017-18871An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2.Go · github.com/mattermost/mattermost-server · fixed in 4.2.2, 4.3.4, 4.4.5 and more
- CVE-2017-18877An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.Go · github.com/mattermost/mattermost-server · fixed in 4.1.2, 4.2.1, 4.3.0 and more