Skip to contentHackerone vulnerabilities
Newest
- riot.js riot-compiler, hackerone riot-compiler node module +1 moreRegular Expression Denial of Service in riot-compilerCVE-2016-10527Fix available7.5 High
- grunt-gh-pages project grunt-gh-pages, hackerone grunt-gh-pages node module +1 moregrunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log fileCVE-2016-10526Fix available8.6 High
- i18n-node-angular project i18n-node-angular, hackerone i18n-node-angular node module +1 moreDenial of Service and Content Injection in i18n-node-angularCVE-2016-10524Fix available8.2 High
- mqtt-packet project mqtt-packet, hackerone mqtt-packet node module +1 moreDenial of Service in mqtt-packetCVE-2016-10523Fix available7.5 High
- jshamcrest project jshamcrest, hackerone jshamcrest node module +1 moreRegular Expression Denial of Service in jshamcrestCVE-2016-105217.5 High
- jadedown project jadedown, hackerone jadedown node module +1 moreRegular Expression Denial of Service in jadedownCVE-2016-105207.5 High
- webtorrent bittorrent-dht, hackerone bittorrent-dht node module +1 moreRemote Memory Disclosure in bittorrent-dhtCVE-2016-10519Fix available7.5 High
- ws project ws, hackerone ws node module +1 moreRemote Memory Disclosure in wsCVE-2016-10518Fix available7.5 High
- ansi2html project ansi2html, hackerone ansi2html node module +1 moreRegular Expression Denial of Service in ansi2htmlCVE-2015-92397.5 High
- secure-compare project secure-compare, hackerone secure-compare node module +1 moreInsecure Comparison in secure-compareCVE-2015-9238Public exploitFix available5.3 Medium
- hapijs hapi, hackerone hapi node module +1 moreIncorrect handling of CORS preflight request headers in hapiCVE-2015-9236Fix available5.3 Medium
- fancy-server project fancy-server, hackerone fancy-server node module +1 moreDirectory Traversal in fancy-serverCVE-2014-10066Fix available7.5 High
- remarkable project remarkable, hackerone remarkable node module +1 moreContent Injection in remarkableCVE-2014-10065Fix available6.1 Medium
- qs project qs, hackerone qs node module +1 moreDenial-of-Service Extended Event Loop Blocking in qsCVE-2014-10064Fix available7.5 High
- atob project atob, hackerone atob node module +1 moreOut-of-bounds Read in atobCVE-2018-3745Fix available9.1 Critical
- hackerone html-pages node module, html-pages project html-pages +1 morePath Traversal in html-pagesCVE-2018-37449.8 Critical
- hackerone stattic node module, stattic project stattic +1 morePath Traversal in statticCVE-2018-3734Fix available7.5 High
- crud-file-server project crud-file-server, hackerone crud-file-server node module +1 morePath Traversal in crud-file-serverCVE-2018-3733Fix available7.5 High
- gaoxuyan project gaoxuyan, hackerone gaoxuyan node module +1 moreDirectory Traversal in gaoxuyanCVE-2017-161537.5 High
- node-tkinter project node-tkinter, hackerone node-tkinter node module +1 morenode-tkinter is malwareCVE-2017-16062Fix available7.5 High
- tkinter package tkinter, hackerone tkinter node module +1 moretkinter is malwareCVE-2017-160617.5 High
- mysqljs project mysqljs, hackerone mysqljs node module +1 moremysqljs is malwareCVE-2017-160477.5 High
- i18next, hackerone i18next node module +1 moreCross-Site Scripting in i18nextCVE-2017-16010Fix available6.1 Medium
- windows-build-tools project windows-build-tools, hackerone windows-build-tools node module +1 morewindows-build-tools downloads Resources over HTTPCVE-2017-16003Fix available8.1 High
- mystem-fix project mystem-fix, hackerone mystem-fix node module +1 moreDownloads Resources over HTTP in mystem-fixCVE-2016-106988.1 High
- massif project massif, hackerone massif node module +1 moreDownloads Resources over HTTP in massifCVE-2016-106828.1 High
- hackerone roslib-socketio node module, robotwebtools roslibjs +1 moreDownloads Resources over HTTP in roslib-socketioCVE-2016-106818.1 High
- adamvr-geoip-lite project adamvr-geoip-lite, hackerone adamvr-geoip-lite node module +1 moreDownloads Resources over HTTP in adamvr-geoip-liteCVE-2016-106808.1 High
- selenium-standalone-painful project selenium-standalone-painful, hackerone selenium-standalone-painful node module +1 moreDownloads Resources over HTTP in selenium-standalone-painfulCVE-2016-106798.1 High
- limbus-buildgen project limbus-buildgen, hackerone limbus-buildgen node module +1 moreDownloads Resources over HTTP in limbus-buildgenCVE-2016-10674Fix available8.1 High
- yandex tomita-parser, hackerone tomita-parser node module +1 moreDownloads Resources over HTTP in tomita-parserCVE-2016-106668.1 High
- macchina poco, hackerone poco node module +1 morepoco downloads Resources over HTTPCVE-2016-106598.1 High
- native-opencv project native-opencv, hackerone native-opencv node module +1 moreDownloads Resources over HTTP in native-opencvCVE-2016-106588.1 High
- shutterstock ntfserver, hackerone ntfserver node module +1 moreDownloads Resources over HTTP in ntfserverCVE-2016-106508.1 High
- broccoli-closure project broccoli-closure, hackerone broccoli-closure node module +1 moreDownloads Resources over HTTP in broccoli-closureCVE-2016-10635Fix available8.1 High
- scala-bin project scala-bin, hackerone scala-bin node module +1 moreDownloads Resources over HTTP in scala-binCVE-2016-106278.1 High
- strider-sauce project strider-sauce, hackerone strider-sauce node module +1 moreDownloads Resources over HTTP in strider-sauceCVE-2016-106118.1 High
- uxebu webdrvr, hackerone webdrvr node module +1 moreDownloads Resources over HTTP in webdrvrCVE-2016-106018.1 High
- interactivebrokers ibapi, hackerone ibapi node module +1 moreibapi downloads Resources over HTTPCVE-2016-105938.1 High
- prince project prince, hackerone prince node module +1 moreDownloads Resources over HTTP in princeCVE-2016-10591Fix available8.1 High
- cue-sdk-node project cue-sdk-node, hackerone cue-sdk-node node module +1 moreDownloads Resources over HTTP in cue-sdk-nodeCVE-2016-105908.1 High
- spunjs selenium-binaries, hackerone selenium-binaries node module +1 moreselenium-binaries downloads resources over HTTPCVE-2016-10589Fix available8.1 High
- macacajs macaca-chromedriver, hackerone macaca-chromedriver node module +1 moreDownloads Resources over HTTP in macaca-chromedriverCVE-2016-10586Fix available8.1 High
- dalekjs, hackerone dalek-browser-chrome-canary node module +1 moreDownloads Resources over HTTP in dalek-browser-chrome-canaryCVE-2016-105848.1 High
- unicode project unicode, hackerone unicode node module +1 moreDownloads Resources over HTTP in unicodeCVE-2016-10578Fix available8.1 High
- ibm db, hackerone ibm db node module +1 moreibm_db downloads Resources over HTTPCVE-2016-10577Fix available8.1 High
- baryton-saxophone project baryton-saxophone, hackerone baryton-saxophone node module +1 moreDownloads Resources over HTTP in baryton-saxophoneCVE-2016-10573Fix available8.1 High
- pngcrush-installer project pngcrush-installer, hackerone pngcrush-installer node module +1 morepngcrush-installer downloads Resources over HTTPCVE-2016-10570Fix available8.1 High
- geoip-lite-country project geoip-lite-country, hackerone geoip-lite-country node module +1 moreDownloads Resources over HTTP in geoip-lite-countryCVE-2016-10568Fix available8.1 High
- product-monitor project product-monitor, hackerone product-monitor node module +1 moreDownloads Resources over HTTP in product-monitorCVE-2016-10567Fix available8.1 High
- Show moreLoading…