Security advisories

high2017-10-24

CVE-2015-8860-Symlink Arbitrary File Overwrite in tar

View chart →

npm/npm · GHSA-gfjr-3jmm-4g9v

high2017-10-24

CVE-2014-3742-File Descriptor Leak Can Cause DoS Vulnerability in hapi

View chart →

spumko/hapi · GHSA-cqr7-78pj-3g7j

medium2017-10-24

CVE-2015-1370-VBScript Content Injection in marked

View chart →

markedjs/marked · GHSA-cfjh-p3g4-3q2f

medium2017-10-24

CVE-2014-9490-sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number

View chart →

getsentry/raven-ruby · GHSA-c9c5-9fpr-m882

medium2017-10-24

CVE-2013-6459-will_paginate Cross-site Scripting vulnerability

View chart →

mislav/will_paginate · GHSA-8r6h-7x9g-xmw9

medium2017-10-24

CVE-2014-0082-actionpack Improper Input Validation vulnerability

View chart →

rails/rails · GHSA-7cgp-c3g7-qvrw

critical2017-10-24

CVE-2015-7541-colorscore Command Injection vulnerability

View chart →

quadule/colorscore · GHSA-73qw-ww62-m54x

medium2017-10-24

CVE-2015-2963-paperclip Cross-site Scripting vulnerability

View chart →

thoughtbot/paperclip · GHSA-6jvm-3j5h-79f6

medium2017-10-24

CVE-2015-3224-Web Console (Ruby gem) contains whitelisted_ips bypass

View chart →

rails/web-console · GHSA-67j6-xv27-w6ww

critical2017-10-24

CVE-2014-7205-Arbitrary JavaScript Execution in bassmaster

View chart →

hapijs/bassmaster · GHSA-5j3g-jfq3-7jwx

medium2017-10-24

CVE-2015-7578-rails-html-sanitizer Cross-site Scripting vulnerability

View chart →

rails/rails-html-sanitizer · GHSA-59c7-4xj2-hgvw

high2017-10-24

CVE-2014-7192-Potential for Script Injection in syntax-error

View chart →

substack/node-syntax-error · GHSA-5726-g6r9-5f22

medium2017-10-24

CVE-2015-1840-jquery-rails and jquery-ujs subject to Exposure of Sensitive Information

View chart →

rails/jquery-rails · GHSA-4whc-pp4x-9pf3

high2017-10-24

CVE-2013-7463-Aescrypt does not sufficiently use random values

View chart →

gurpartap/aescrypt · GHSA-4c4w-3q45-hp9j

high2017-10-24

CVE-2015-8315-Regular Expression Denial of Service in ms

View chart →

unshiftio/millisecond · GHSA-3fx5-fwvr-xrjg

critical2017-10-24

CVE-2015-8857-Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js

View chart →

mishoo/uglifyjs2 · GHSA-34r7-q49f-h37c

high2017-10-24

CVE-2015-5688-Directory Traversal in geddy

View chart →

geddy/geddy · GHSA-333x-9vgq-v2j4

high2017-10-24

CVE-2013-6421-sprout Arbitrary Code Execution vulnerability

View chart →

lukebayes/project-sprouts · GHSA-229r-pqp6-8w6g

medium2017-10-24

CVE-2016-2097-actionview contains Path Traversal vulnerability

View chart →

rails/rails · GHSA-vx9j-46rh-fqr8

medium2017-10-24

CVE-2016-4442-rack-mini-profiler allows remote attackers to obtain sensitive information about allocated strings and objects

View chart →

miniprofiler/rack-mini-profiler · GHSA-j5hj-fhc9-g24m