Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 13 of 215.
- GHSA-w65v-hx54-xrqx Malicious Package in midway-xtpl
- GHSA-w5q7-3pr9-x44w Denial of Service in serialize-to-js
- GHSA-w4vp-3mq7-7v82 Cross-Site Scripting in lazysizes
- GHSA-w42g-7vfc-xf37 Introspection in schema validation in Apollo Server
- GHSA-w3pp-wp5v-fjvp Malicious Package in mogodb
- GHSA-w3f3-4j22-2v3p Malicious Package in destroyer-of-worlds
- GHSA-w32g-5hqp-gg6q Cross-Site Scripting in mermaid
- GHSA-vxfp-qmpq-6826 Malicious Package in hpmm
- GHSA-vx5w-cxch-wwc9 Path Traversal in f-serv
- GHSA-vw7g-jq9m-3q9v Unauthorized File Access in glance
- GHSA-vvfh-mvjv-w38q Malicious Package in babel-loadre
- GHSA-vv7g-pjw9-4qj9 Malicious Package in scrytsy
- GHSA-vv52-3mrp-455m Malicious Package in m-backdoor
- GHSA-vrxj-4qhw-5vwq Malicious Package in scryptys
- GHSA-vpj4-89q8-rh38 Cross-Site Scripting in bpmn-js-properties-panel
- GHSA-vpgc-7h78-gx8f personnummer/js vulnerable to Improper Input Validation
- GHSA-vp9c-fpxx-744v personnummer/ruby vulnerable to Improper Input Validation
- GHSA-vp93-gcx5-4w52 Cross-Site Scripting in swagger-ui
- GHSA-vp8g-53fw-r9f2 Malicious Package in dynamo-schema
- GHSA-vmh4-322v-cfpc Cross-Site Scripting in cmmn-js-properties-panel
- GHSA-vm7j-4rj6-mw2p Malicious Package in ember_cli_babe
- GHSA-vm6v-w6q2-mrrq Malicious Package in bb-builder
- GHSA-vm67-mh96-95mq Malicious Package in bubfer-xor
- GHSA-vjvw-wcmw-pr26 Insufficient Entropy in parsel
- GHSA-vg44-fw64-cpjx Incorrect Account Used for Signing
- GHSA-vf8q-pw7h-r2x2 Malicious Package in epress
- GHSA-vf5m-q45w-8mh9 Malicious Package in js-qha3
- GHSA-vcg5-9xw6-r56c Malicious Package in logsymbles
- GHSA-v9wp-8r97-v6xg Cross-Site Scripting in jquery.json-viewer
- GHSA-v99v-xgjx-7m7g Malicious Package in asnyc
- GHSA-v95x-h953-x7fg Malicious Package in k0a_multer
- GHSA-v8gq-5grq-9728 mozjpeg DecompressScanlines::read_scanlines is Unsound
- GHSA-v8g7-9qv2-j865 Malicious Package in bitcoin-osp
- GHSA-v86x-f47q-f7f4 Unauthorized File Access in atompm
- GHSA-v7cp-5326-54fh Path Traversal in bruteser
- GHSA-v73w-r9xg-7cr9 Use of insecure jQuery version in OctoberCMS
- GHSA-v6vv-hhqc-6hh2 Malicious Package in pyramid-proportion
- GHSA-v6gv-fg46-h89j Sensitive Data Exposure in put
- GHSA-v66p-w7qx-wv98 Authentication Bypass in express-laravel-passport
- GHSA-v4x8-gw49-7hv4 Path Traversal in swagger-injector
- GHSA-v45m-2wcp-gg98 Global node_modules Binary Overwrite in bin-links
- GHSA-rxq3-5249-8hgg personnummer/python vulnerable to Improper Input Validation
- GHSA-rwmv-c7v8-v9vf Malicious Package in bitcoimd-rpc
- GHSA-rwcq-qpm6-7867 Malicious Package in riped160
- GHSA-rw53-q8x7-ccx8 Malicious Package in buffer-xkr
- GHSA-rw4r-h883-8pf9 Malicious Package in reequest
- GHSA-rvww-x6m4-4vc2 Malicious Package in blubird
- GHSA-rvg8-pwq2-xj7q Out-of-bounds Read in base64url
- GHSA-rv6q-p3x7-43fx Malicious Package in bitcoimjs-lib
- GHSA-rrvm-gqq8-q2wx Malicious Package in require-port
- GHSA-rmmc-8cqj-hfp3 Authentication Bypass in otpauth
- GHSA-rm7c-x424-g2mw Malicious Package in asyync
- GHSA-rjvj-673q-4hfw Command Injection in traceroute
- GHSA-rjhc-w3fj-j6x9 Malicious Package in alipayjsapi
- GHSA-rhc3-76jw-4f2x Denial of Service in @commercial/ammo
- GHSA-rggq-f2wf-m6cp Malicious Package in jajajejejiji
- GHSA-rffp-mc78-wjf7 Command Injection in cocos-utils
- GHSA-rcv7-4w2m-gj9v Malicious Package in sj-tw-test-security
- GHSA-r9q4-w3fm-wrm2 Cross-Site Scripting in google-closure-library
- GHSA-r9cj-xj33-4q42 Malicious Package in buffgr-xor
- GHSA-r8hx-3qx6-hxq9 Malicious Package in commandre
- GHSA-r863-p739-275c Malicious Package in reuest
- GHSA-r82c-j4mq-5xfw Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs
- GHSA-r742-7j4h-hjr8 Malicious Package in arsenic-tabasco-cyborg-peanut-butter
- GHSA-r5xw-q988-826m Remote Memory Exposure in mongoose
- GHSA-r587-7jh2-4qr3 Server secret was included in static assets and served to clients
- GHSA-r4m5-47cq-6qg8 Server-Side Request Forgery in ftp-srv
- GHSA-r3xc-47qg-h929 Cross-Site Scripting in @ionic/core
- GHSA-r32x-jhw5-g48p Cross-Site Scripting in eco
- GHSA-r2vw-jgq9-jqx2 Improper Authorization in @sap-cloud-sdk/core
- GHSA-r2rg-683g-ff96 Malicious Package in axios-http
- GHSA-qxrj-x7rm-2h49 Malicious Package in dhkey
- GHSA-qvhr-55hg-3qwv Non-persistent XSS in the Storefront in Shopware
- GHSA-qvc5-cfrr-384v RCE in Third Party Library in Shopware
- GHSA-qv8q-v995-72gr personnummer/csharp vulnerable to Improper Input Validation
- GHSA-qv78-398w-cxp7 Malicious Package in shrugging-logging
- GHSA-qp6m-jqfr-2f7v Malicious Package in babel-laoder
- GHSA-qmxf-fxq7-w59f Malicious Package in angular-material-sidenav-rnd
- GHSA-qmgf-fp85-55gr Malicious Package in bitcionjs
- GHSA-qm4q-f956-fg64 Malicious Package in luna-mock
- GHSA-qjfh-xc44-rm9x Path Traversal in file-static-server
- GHSA-qj3g-wfr7-3cv7 Malicious Package in require-ports
- GHSA-qj2g-642f-4jrv Malicious Package in carloprojectlesang
- GHSA-qfc9-x7gv-27jr Malicious Package in deasyncp
- GHSA-qcff-ffx3-m25c Command Injection in meta-git
- GHSA-qccf-q7p4-3q3j Prototype Pollution in safe-object2
- GHSA-qcc9-q247-3m2m Malicious Package in js-regular
- GHSA-q9wr-gcjc-hq52 Prototype Pollution in reggae
- GHSA-q6j3-c4wc-63vw CSRF tokens leaked in URL by canned query form
- GHSA-q643-w9jp-q2qg Hardcoded Initialization Vector in parsel
- GHSA-q42c-rrp3-r3xm Malicious Package in commmander
- GHSA-q3w9-g74q-vp5f Denial of Service in express-fileupload
- GHSA-q3vw-4jx3-rrr2 personnummer/java vulnerable to Improper Input Validation
- GHSA-q2c6-c6pm-g3gh Arbitrary Code Execution in handlebars
- GHSA-pxqp-mv67-g528 Malicious Package in bqffer-xor
- GHSA-pxmp-fwjc-4x7q HTML Injection in marky-markdown
- GHSA-pv6r-vchh-cxg9 Denial of Service in apostrophe
- GHSA-pv55-r6j3-wp94 Malicious Package in eslint-config-eslint
- GHSA-pqpp-2363-649v Cross-Site Scripting in buttle
- GHSA-pmgv-94f5-6w7w Malicious Package in eact