Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 16 of 215.
- GHSA-cg48-9hh2-x6mx HTML Injection in preact
- GHSA-cfwc-xjfp-44jg Command Injection in gnuplot
- GHSA-cfc5-x58f-869w Malicious Package in conistring
- GHSA-cf4g-fcf8-3cr9 `pnet_packet` buffer overrun in `set_payload` setters
- GHSA-ccrp-c664-8p4j Cross-Site Scripting in markdown-to-jsx
- GHSA-c8h6-89q2-mgv8 Malicious Package in dossier
- GHSA-c82c-8pjw-6829 Malicious Package in @impala/bmap
- GHSA-c7pp-x73h-4m2v Cross-Site Scripting in bootstrap-vue
- GHSA-c722-pv5w-cfg2 Malicious Package in github-jquery-widgets
- GHSA-c6f3-3c98-2j2f Malicious Package in jquerz
- GHSA-c5xm-m64m-f2vq Malicious Package in cxct
- GHSA-c53x-wwx2-pg96 Cross-Site Scripting in @berslucas/liljs
- GHSA-c4hh-fg8x-6h9p Malicious Package in buffer-xnr
- GHSA-c4fm-46gm-4469 Malicious Package in sparkies
- GHSA-c3px-v9c7-m734 Prototype Pollution in mithril
- GHSA-c3m8-x3cg-qm2c Configuration Override in helmet-csp
- GHSA-c3hq-7mxh-mqxf Sandbox Breakout / Arbitrary Code Execution in lighter-vm
- GHSA-c2g6-57fp-22wp Malicious Package in fuffer-xor
- GHSA-c27r-x354-4m68 xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion
- GHSA-9xww-fwh9-95c5 Malicious Package in uglyfi-js
- GHSA-9x64-5r7x-2q53 Malicious Package in flatmap-stream
- GHSA-9wjh-jr2j-6r4x Remote Code Execution in pi_video_recording
- GHSA-9w87-4j72-gcv7 Insecure Default Configuration in graphql-code-generator
- GHSA-9vrw-m88g-w75q Denial of Service in @hapi/accept
- GHSA-9v62-24cr-58cx Denial of Service in node-sass
- GHSA-9rwj-8mh9-4876 Malicious Package in carloprojectdiscord
- GHSA-9r3m-mhfm-39cm Incorrect Calculation in bigint-money
- GHSA-9r27-994c-4xch discord-html not escaping HTML code blocks when lacking a language identifier
- GHSA-9qrg-h9g8-c65q Prototype Pollution in deep-setter
- GHSA-9qgh-7pgp-hp7r Cross-Site Scripting in graylog-web-interface
- GHSA-9q9m-m2f6-jr5q Malicious Package in chak
- GHSA-9q64-mpxx-87fg Open Redirect in ecstatic
- GHSA-9px9-f7jw-fwhj Command Injection in priest-runner
- GHSA-9pr3-7449-977r Cross-Site Scripting in express-cart
- GHSA-9pcf-h8q9-63f6 Sandbox Breakout / Arbitrary Code Execution in safe-eval
- GHSA-9p64-h5q4-phpm Remote Code Execution in office-converter
- GHSA-9p49-cwh3-4qhf Malicious Package in grunt-radic
- GHSA-9mmw-3fmh-96g3 Malicious Package in calk
- GHSA-9mjp-gv34-3jcf Malicious Package in aasync
- GHSA-9hqj-38j2-5jgm Command Injection in ascii-art
- GHSA-9hc2-w9gg-q6jw Malicious Package in boogeyman
- GHSA-9gxr-rhx6-4jgv Sandbox Breakout / Prototype Pollution in notevil
- GHSA-9cq4-mhmr-84gm Malicious Package in jasmin
- GHSA-9cph-cqqh-36pw Malicious Package in babel-loqder
- GHSA-992f-wf4w-x36v Prototype Pollution in merge-objects
- GHSA-97mp-9g5c-6c93 Malicious Package in bs58chcek
- GHSA-97mg-3cr6-3x4c Remote Code Execution in mongodb-query-parser
- GHSA-978j-88f3-p5j3 Threshold value is ignored (all shares are n=3)
- GHSA-95cg-3r4g-7w6j Malicious Package in js-rha3
- GHSA-94m7-w873-6wwf Malicious Package in modlibrary
- GHSA-92px-q4w8-hrr5 Malicious Package in impala
- GHSA-9298-m7jf-55h2 Malicious Package in bitconid-rpc
- GHSA-9272-59x2-gwf2 Malicious Package in ripedm160
- GHSA-8xw8-mmqv-frqq fake-static allows converting any reference into a `'static` reference
- GHSA-8xv9-qcr9-ww9j Authenticated XML External Entity Processing
- GHSA-8wgc-jjvv-cv6v Improper Authorization in loopback
- GHSA-8w9j-6wg6-qv4f Malicious Package in axioss
- GHSA-8vj3-jgcf-77jv Malicious Package in requeest
- GHSA-8rxg-9g6f-vq9p Malicious Package in another-date-range-picker
- GHSA-8qx4-r7fx-xc4v Malicious Package in requst
- GHSA-8qm2-24qc-c4qg Malicious Package in freshdom
- GHSA-8qh7-xw58-3ww7 Malicious Package in radic-util
- GHSA-8q2c-2396-hf7j Malicious Package in appx-compiler
- GHSA-8pwx-j4r6-5v38 Malicious Package in hdkye
- GHSA-8pfh-mm2g-hmc3 Authenticated Server Side Request Forgery
- GHSA-8mmf-qp7j-2w24 Malicious Package in colour-string
- GHSA-8mm3-2mcj-cx6r Malicious Package in angluar-cli
- GHSA-8mgg-5x65-m4m4 Command Injection in soletta-dev-app
- GHSA-8m5v-f2wp-wqr9 Malicious Package in ali-contributors
- GHSA-8jf2-cq6v-w234 Malicious Package in uglyfi.js
- GHSA-8j7x-pr59-m5h8 Malicious Package in whiteproject
- GHSA-8j6j-4h2c-c65p Arbitrary Code Execution in require-node
- GHSA-8j49-49jq-vwcq Prototype Pollution in getsetdeep
- GHSA-8hxh-r6f7-jf45 Memory exhaustion in http4s-async-http-client with large or malicious compressed responses
- GHSA-8hrq-9wm7-v3jw Malicious Package in btffer-xor
- GHSA-8hqw-qp6r-vqcm Malicious Package in bitcoin-sweep
- GHSA-8hq2-fcqm-39hq Malicious Package in rimrafall
- GHSA-8hmr-w35f-3qgj Malicious Package in harmlesspackage
- GHSA-8h8v-6qqm-fwpq Path Traversal in express-cart
- GHSA-8gc6-65mm-xr6r Malicious Package in bp66
- GHSA-8g64-9cm2-838j Malicious Package in bugfer-xor
- GHSA-8g3r-968r-c644 Malicious Package in jw-sha3
- GHSA-8fw4-xh83-3j6q Cross-Site Scripting in diagram-js
- GHSA-8c8c-4vfj-rrpc Reflected Cross-Site Scripting in redis-commander
- GHSA-88xx-23mf-rcj2 Malicious Package in bs-sha3
- GHSA-88h9-fc6v-jcw7 Unintended Require in larvitbase-www
- GHSA-87qw-7v97-w34r Malicious Package in asinc
- GHSA-876r-hj45-fw7g Sandbox Breakout / Arbitrary Code Execution in safer-eval
- GHSA-86mr-6m89-vgj3 Buffer Overflow in node-weakauras-parser
- GHSA-86gv-xpwv-jprc Malicious Package in diamond-clien
- GHSA-85q4-v37c-wfpc Malicious Package in bitcion-ops
- GHSA-855m-jchh-9qjc Malicious Package in commnader
- GHSA-8549-p68h-m9mc Malicious Package in buffdr-xor
- GHSA-84qj-9qf2-q92r Malicious Package in pm-controls
- GHSA-83pq-466j-fc6j Prototype Pollution in sahmat
- GHSA-83gg-pwxf-jr89 `array!` macro is unsound in presence of traits that implement methods it calls internally
- GHSA-7xfq-xh6v-4mrm Malicious Package in json-serializer
- GHSA-7xf9-74cp-8hx3 Malicious Package in js-cha3
- GHSA-7xf6-cpxm-5mx9 Malicious Package in bufner-xor
- GHSA-7xcx-6wjh-7xp2 Command Injection in standard-version