Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2017-16094iter-http is a server for static files.npm · iter-http
- CVE-2017-16095serverliujiayi1 is a simple http server.npm · serverliujiayi1
- CVE-2017-16096serveryaozeyan is a simple HTTP server.npm · serveryaozeyan
- CVE-2017-16097tiny-http is a simple http server.npm · tiny-http
- CVE-2017-16101serverwg is a simple http server.npm · serverwg
- CVE-2017-16102serverhuwenhui is a simple http server.npm · serverhuwenhui
- CVE-2017-16103serveryztyzt is a simple http server.npm · serveryztyzt
- CVE-2017-16104citypredict.whauwiller is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the urlnpm · citypredict.whauwiller
- CVE-2017-16105serverwzl is a simple http server.npm · serverwzl
- CVE-2017-16106tmock is a static file server.npm · tmock
- CVE-2017-16108gaoxiaotingtingting is an HTTP server.npm · gaoxiaotingtingting
- CVE-2017-16109easyquick is a simple web server.npm · easyquick
- CVE-2017-16110weather.swlyons is a simple web server for weather updates.npm · weather.swlyons
- CVE-2017-16113The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.npm · parsejson
- CVE-2017-16115The timespan module is vulnerable to regular expression denial of service.npm · timespan
- CVE-2017-16116The string module is a module that provides extra string operations.npm · string
- CVE-2017-16120liyujing is a static file server.npm · liyujing
- CVE-2017-16121datachannel-client is a signaling implementation for DataChannel.js.npm · datachannel-client
- CVE-2017-16122cuciuci is a simple fileserver.npm · cuciuci
- CVE-2017-16123welcomyzt is a simple file server.npm · welcomyzt
- CVE-2017-16124node-server-forfront is a simple static file server.npm · node-server-forfront
- CVE-2017-16125rtcmulticonnection-client is a signaling implementation for RTCMultiConnection.js, a multi-session manager.npm · rtcmulticonnection-client
- CVE-2017-16126The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem.npm · botbait
- CVE-2017-16127The module pandora-doomsday infects other modules.npm · pandora-doomsday
- CVE-2017-16128The module npm-script-demo opened a connection to a command and control server.npm · npm-script-demo
- CVE-2017-16130exxxxxxxxxxx is an Http eX Frame Google Style JavaScript Guide.npm · exxxxxxxxxxx
- CVE-2017-16131unicorn-list is a web framework.npm · unicorn-list
- CVE-2017-16132simple-npm-registry is a local npm package cache.npm · simple-npm-registry
- CVE-2017-16133goserv is an http server.npm · goserv
- CVE-2017-16134http_static_simple is an http server.npm · http_static_simple