Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2018-8288A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "ScriptingNuGet · microsoft.chakracore · fixed in 1.10.1
- CVE-2018-8290A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.10.1
- CVE-2018-8291A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "ScriptingNuGet · microsoft.chakracore · fixed in 1.10.1
- CVE-2018-8294A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.10.1
- CVE-2018-8298A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting EnginNuGet · microsoft.chakracore · fixed in 1.10.1
- CVE-2018-8356A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET FrNuGet · system.private.servicemodel, system.servicemodel.duplex +4 · fixed in 4.1.3, 4.3.3, 4.4.4 and more
- CVE-2017-0929DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class.NuGet · dotnetnuke.core · fixed in 9.2.0
- CVE-2018-8227A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.5
- CVE-2018-8229A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.5
- CVE-2018-8243A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting EnginNuGet · microsoft.chakracore · fixed in 1.8.5
- CVE-2018-7559An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and SampNuGet · opcfoundation.netstandard.opc.ua · fixed in 1.3.352.12
- CVE-2018-0765A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of ServiceNuGet · system.security.cryptography.xml · fixed in 4.4.2
- CVE-2018-0943A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-0945A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "ScriptinNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-0946A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "ScriptinNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-0954A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "ScriptingNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-1022A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "ScriptingNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-8130A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-8133A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-8137A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "ScriptinNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-8139A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "ScriptinNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-8145An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker NuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-8177A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.4
- CVE-2018-0979A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.3
- CVE-2018-0980A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.3
- CVE-2018-0990A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.3
- CVE-2018-0993A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.3
- CVE-2018-0994A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.3
- CVE-2018-0995A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.3
- CVE-2018-1019A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CNuGet · microsoft.chakracore · fixed in 1.8.3