Security advisories

medium2017-10-24

CVE-2014-0081-Rails vulnerable to Cross-site Scripting

View chart →

rails/rails · GHSA-m46p-ggm5-5j83

high2017-10-24

CVE-2014-7191-Denial-of-Service Memory Exhaustion in qs

View chart →

visionmedia/node-querystring · GHSA-jjv7-qpx3-h62q

medium2017-10-24

CVE-2015-8859-Root Path Disclosure in send

View chart →

pillarjs/send · GHSA-jgqf-hwc5-hh37

medium2017-10-24

CVE-2015-3227-activesupport vulnerable to Denial of Service via large XML document depth

View chart →

rails/rails · GHSA-j96r-xvjq-r9pg

medium2017-10-24

CVE-2014-0080-Array data injection vulnerability in activerecord

View chart →

rails/rails · GHSA-hqf9-rc9j-5fmj

high2017-10-24

CVE-2015-8854-Regular Expression Denial of Service in marked

View chart →

chjj/marked · GHSA-hjcp-j389-59ff

high2017-10-24

CVE-2014-2322-Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters

View chart →

ozeron/prawn-arabic · GHSA-hgmw-x865-hf9x

medium2017-10-24

CVE-2015-7580-rails-html-sanitizer Cross-site Scripting vulnerability

View chart →

rails/rails-html-sanitizer · GHSA-ghqm-pgxj-37gq

high2017-10-24

CVE-2015-8860-Symlink Arbitrary File Overwrite in tar

View chart →

npm/npm · GHSA-gfjr-3jmm-4g9v

high2017-10-24

CVE-2014-3742-File Descriptor Leak Can Cause DoS Vulnerability in hapi

View chart →

spumko/hapi · GHSA-cqr7-78pj-3g7j

medium2017-10-24

CVE-2015-1370-VBScript Content Injection in marked

View chart →

markedjs/marked · GHSA-cfjh-p3g4-3q2f

medium2017-10-24

CVE-2014-9490-sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number

View chart →

getsentry/raven-ruby · GHSA-c9c5-9fpr-m882

medium2017-10-24

CVE-2013-6459-will_paginate Cross-site Scripting vulnerability

View chart →

mislav/will_paginate · GHSA-8r6h-7x9g-xmw9

medium2017-10-24

CVE-2014-0082-actionpack Improper Input Validation vulnerability

View chart →

rails/rails · GHSA-7cgp-c3g7-qvrw

critical2017-10-24

CVE-2015-7541-colorscore Command Injection vulnerability

View chart →

quadule/colorscore · GHSA-73qw-ww62-m54x

medium2017-10-24

CVE-2015-2963-paperclip Cross-site Scripting vulnerability

View chart →

thoughtbot/paperclip · GHSA-6jvm-3j5h-79f6

medium2017-10-24

CVE-2015-3224-Web Console (Ruby gem) contains whitelisted_ips bypass

View chart →

rails/web-console · GHSA-67j6-xv27-w6ww

critical2017-10-24

CVE-2014-7205-Arbitrary JavaScript Execution in bassmaster

View chart →

hapijs/bassmaster · GHSA-5j3g-jfq3-7jwx

medium2017-10-24

CVE-2015-7578-rails-html-sanitizer Cross-site Scripting vulnerability

View chart →

rails/rails-html-sanitizer · GHSA-59c7-4xj2-hgvw

high2017-10-24

CVE-2014-7192-Potential for Script Injection in syntax-error

View chart →

substack/node-syntax-error · GHSA-5726-g6r9-5f22