Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2020-36433An issue was discovered in the chunky crate through 2020-08-25 for Rust.crates.io · chunky
- CVE-2020-36444An issue was discovered in the async-coap crate through 2020-12-08 for Rust.crates.io · async-coap
- CVE-2020-36445An issue was discovered in the convec crate through 2020-11-24 for Rust.crates.io · convec
- CVE-2020-36446An issue was discovered in the signal-simple crate through 2020-11-15 for Rust.crates.io · signal-simple
- CVE-2020-36448An issue was discovered in the cache crate through 2020-11-24 for Rust.crates.io · cache
- CVE-2020-36450An issue was discovered in the bunch crate through 2020-11-12 for Rust.crates.io · bunch
- CVE-2020-36453An issue was discovered in the scottqueue crate through 2020-11-15 for Rust.crates.io · scottqueue
- CVE-2020-36454An issue was discovered in the parc crate through 2020-11-14 for Rust.crates.io · parc
- CVE-2020-36456An issue was discovered in the toolshed crate through 2020-11-15 for Rust.crates.io · toolshed
- CVE-2020-36458An issue was discovered in the lexer crate through 2020-11-10 for Rust.crates.io · lexer
- CVE-2020-36459An issue was discovered in the dces crate through 2020-12-09 for Rust.crates.io · dces
- CVE-2020-36460An issue was discovered in the model crate through 2020-11-10 for Rust.crates.io · model
- CVE-2020-36461An issue was discovered in the noise_search crate through 2020-12-10 for Rust.crates.io · noise_search
- CVE-2020-36463An issue was discovered in the multiqueue crate through 2020-12-25 for Rust.crates.io · multiqueue
- CVE-2020-36466An issue was discovered in the cgc crate through 2020-12-10 for Rust.crates.io · cgc
- CVE-2020-36467An issue was discovered in the cgc crate through 2020-12-10 for Rust.crates.io · cgc
- CVE-2020-36468An issue was discovered in the cgc crate through 2020-12-10 for Rust.crates.io · cgc
- CVE-2020-36469An issue was discovered in the appendix crate through 2020-11-15 for Rust.crates.io · appendix
- CVE-2021-38187An issue was discovered in the anymap crate through 0.12.1 for Rust.crates.io · anymap
- CVE-2021-38196An issue was discovered in the better-macro crate through 2021-07-22 for Rust.crates.io · better-macro
- CVE-2020-28088An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.Maven · org.jeecgframework.boot:jeecg-boot-parent
- CVE-2020-22392Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file.Packagist · intelliants/subrion
- CVE-2021-3680Missing Cryptographic Step in star7th/showdocPackagist · showdoc/showdoc
- CVE-2021-36157An issue was discovered in Grafana Cortex through 1.9.0.Go · github.com/cortexproject/cortex
- CVE-2021-23416Cross-site Scripting (XSS)npm · curly-bracket-parser
- CVE-2021-23417Prototype Pollutionnpm · deepmergefn
- CVE-2020-17952A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.Packagist · topthink/think
- CVE-2020-23234Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event Packagist · lavalite/cms
- CVE-2021-31292An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of sPyPI · exiv2
- CVE-2021-23412Command Injectionnpm · gitlogplus