Security advisories

medium2020-09-04

yargs-parser Vulnerable to Prototype Pollution

yargs/yargs-parser · GHSA-p9pc-299p-vxgp · CVE-2020-7608

critical2020-09-04

Privilege Escalation in cordova-plugin-inappbrowser

apache/cordova-plugin-inappbrowser · GHSA-c6pw-q7f2-97hv · CVE-2019-0219

high2020-09-04

Cross-Site Scripting in markdown-it-katex

waylonflinn/markdown-it-katex · GHSA-5ff8-jcf9-fw62

critical2020-09-04

Command Injection in traceroute

jaw187/node-traceroute · GHSA-rjvj-673q-4hfw

medium2020-09-04

Cross-Site Scripting in @hapi/boom

hapijs/boom · GHSA-2ggq-vfcp-gwhj

high2020-09-04

Server-Side Request Forgery in ftp-srv

quorumdms/ftp-srv · GHSA-r4m5-47cq-6qg8

high2020-09-04

Cross-Site Scripting in nextcloud-vue-collections

juliushaertl/nextcloud-vue-collections · GHSA-whv6-rj84-2vh2

high2020-09-04

Command Injection in tree-kill

pkrumins/node-tree-kill · GHSA-884p-74jh-xrg2 · CVE-2019-15599

medium2020-09-04

Outdated Static Dependency in vue-moment

brockpetrie/vue-moment · GHSA-hrpp-f84w-xhfg

high2020-09-04

Command Injection in strapi

strapi/strapi · GHSA-9p2w-rmx4-9mw7 · CVE-2019-19609

medium2020-09-04

Cross-Site Scripting in react

facebook/react · GHSA-g53w-52xc-2j85 · CVE-2013-7035

critical2020-09-04

Malicious Package in babel-laoder

babel/babel-loader · GHSA-qp6m-jqfr-2f7v

high2020-09-04

Cross-Site Scripting in react

facebook/react · GHSA-hg79-j56m-fxgv

critical2020-09-04

Sandbox Breakout / Arbitrary Code Execution in localeval

espadrine/localeval · GHSA-mmqv-m45h-q2hp

high2020-09-04

Server-Side Request Forgery in html-pdf-chrome

westy92/html-pdf-chrome · GHSA-5p98-wpc9-g498

low2020-09-04

Regular Expression Denial of Service in markdown

evilstreak/markdown-js · GHSA-wx77-rp39-c6vg

low2020-09-03

Reverse Tabnabbing in showdown

showdownjs/showdown · GHSA-h6mq-3cj6-h738

critical2020-09-03

Cross-Site Scripting in dompurify

cure53/dompurify · GHSA-mjjq-c88q-qhr6

medium2020-09-03

Authentication Bypass in saml2-js

clever/saml2 · GHSA-mfcp-34xw-p57x

medium2020-09-03

Insecure Cryptography Algorithm in simple-crypto-js

danang-id/simple-crypto-js · GHSA-5v7r-jg9r-vq44