Hackerone vulnerabilities
470 CVEs and advisories name Hackerone as an affected vendor, newest first. Follow it as a feed.
- CVE-2017-16024The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9.
- CVE-2017-16023Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase.
- CVE-2017-16022Morris.js creates an svg graph, with labels that appear when hovering over a point.
- CVE-2017-16021uri-js is a module that tries to fully implement RFC 3986.
- CVE-2017-16020Summit is a node web framework.
- CVE-2017-16019GitBook is a command line tool (and Node.js library) for building beautiful books using GitHub/Git and Markdown (or AsciiDoc).
- CVE-2017-16018Restify is a framework for building REST APIs.
- CVE-2017-16017sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability.
- CVE-2017-16016Sanitize-html is a library for scrubbing html input of malicious values.
- CVE-2017-16015Forms is a library for easily creating HTML forms.
- CVE-2017-16014Http-proxy is a proxying library.
- CVE-2017-16013hapi is a web and services application framework.
- CVE-2017-16009ag-grid is an advanced data grid that is library agnostic.
- CVE-2017-16008i18next is a language translation framework.
- CVE-2017-16007node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers
- CVE-2017-16006Remarkable is a markdown parser.
- CVE-2017-16005Http-signature is a "Reference implementation of Joyent's HTTP Signature Scheme".
- CVE-2017-0931html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.
- CVE-2017-0930augustine node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read co
- CVE-2017-0928html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable
- CVE-2016-10697react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native.
- CVE-2016-10696windows-latestchromedriver downloads the latest version of chromedriver.exe.
- CVE-2016-10695The npm-test-sqlite3-trunk module provides asynchronous, non-blocking SQLite3 bindings.
- CVE-2016-10694alto-saxophone is a module to install and launch Chromedriver for Mac, Linux or Windows.
- CVE-2016-10693pm2-kafka is a PM2 module that installs and runs a kafka server pm2-kafka downloads binary resources over HTTP, which leaves it vulnerable t
- CVE-2016-10691windows-seleniumjar is a module that downloads the Selenium Jar file windows-seleniumjar downloads binary resources over HTTP, which leaves
- CVE-2016-10690openframe-ascii-image module is an openframe plugin which adds support for ascii images via fim.
- CVE-2016-10689The windows-iedriver module downloads fixed version of iedriverserver.exe windows-iedriver downloads binary resources over HTTP, which leave
- CVE-2016-10688Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vul
- CVE-2016-10687windows-selenium-chromedriver is a module that downloads the Selenium Jar file.