Skip to contentHackerone vulnerabilities
Newest
- jser-stat project jser-stat, hackerone jser-stat node module +1 moreDownloads Resources over HTTP in jser-statCVE-2016-105928.1 High
- nwjs nw, hackerone nw node module +1 moreDownloads Resources over HTTP in nwCVE-2016-10588Fix available8.1 High
- wasdk project wasdk, hackerone wasdk node module +1 moreDownloads Resources over HTTP in wasdkCVE-2016-105878.1 High
- libxl project libxl, hackerone libxl node module +1 moreDownloads Resources over HTTP in libxlCVE-2016-105858.1 High
- closurecompiler project closurecompiler, hackerone closurecompiler node module +1 moreclosurecompiler downloads Resources over HTTPCVE-2016-105828.1 High
- appgyver steroids, hackerone steroids node module +1 moresteroids downloads resources over HTTPCVE-2016-105818.1 High
- nodewebkit project nodewebkit, hackerone nodewebkit node module +1 moreDownloads Resources over HTTP in nodewebkitCVE-2016-105808.1 High
- chromedriver project chromedriver, hackerone chromedriver node module +1 morechromedriver Downloads Resources over HTTPCVE-2016-10579Fix available8.1 High
- fuseki project fuseki, hackerone fuseki node module +1 morefuseki downloads Resources over HTTPCVE-2016-10576Fix available8.1 High
- hakatashi kindlegen, hackerone kindlegen node module +1 moreDownloads Resources over HTTP in kindlegenCVE-2016-10575Fix available8.1 High
- apk-parser3 project apk-parser3, hackerone apk-parser3 node module +1 moreDownloads Resources over HTTP in apk-parser3CVE-2016-10574Fix available8.1 High
- hackerone sexstaticCross-Site Scripting in sexstaticCVE-2018-37556.1 Medium
- hackerone pdfinfojsCommand Injection in pdfinfojsCVE-2018-3746Fix available9.8 Critical
- hackerone hektoOpen Redirect in hektoCVE-2018-3743Fix available6.1 Medium
- mongodb-instance project mongodb-instance, hackerone mongodb-instance node module +1 moreDownloads Resources over HTTP in mongodb-instanceCVE-2016-10572Fix available8.1 High
- bkjs-wand project bkjs-wand, hackerone bkjs-wand node module +1 moreDownloads Resources over HTTP in bkjs-wandCVE-2016-10571Fix available8.1 High
- embedza project embedza, hackerone embedza node module +1 moreDownloads Resources over HTTP in embedzaCVE-2016-10569Fix available8.1 High
- cnpmjs operadriver, hackerone operadriver node module +1 moreDownloads Resources over HTTP in operadriverCVE-2016-10565Fix available8.1 High
- apk-parser project apk-parser, hackerone apk-parser node module +1 moreDownloads Resources over HTTP in apk-parserCVE-2016-10564Fix available8.1 High
- ipfs go-ipfs-dep, hackerone go-ipfs-dep node module +1 moreDownloads Resources over HTTP in go-ipfs-depCVE-2016-10563Fix available8.1 High
- iedriver project iedriver, hackerone iedriver node module +1 moreDownloads Resources over HTTP in iedriverCVE-2016-10562Fix available8.1 High
- bitty project bitty, hackerone bitty node module +1 moreDirectory Traversal in bittyCVE-2016-105615.3 Medium
- galenframework galenframework-cli, hackerone galenframework-cli node module +1 moreDownloads Resources over HTTP in galenframework-cliCVE-2016-10560Fix available8.1 High
- appium appium-chromedriver, hackerone appium-chromedriver node module +1 moreappium-chromedriver downloads Resources over HTTPCVE-2016-10557Fix available8.1 High
- jwt-simple project jwt-simple, hackerone jwt-simple node module +1 moreForgeable Public/Private Tokens in jwt-simpleCVE-2016-10555Public exploitFix available6.5 Medium
- sequelizejs sequelize, hackerone sequelize node module +1 moreSQL Injection in sequelizeCVE-2016-10554Fix available9.8 Critical
- sequelizejs sequelize, hackerone sequelize node module +1 morePotential SQL Injection in sequelizeCVE-2016-10553Fix available9.8 Critical
- infragistics igniteui, hackerone igniteui node module +1 moreResources Downloaded over Insecure Protocol in igniteuiCVE-2016-105527.4 High
- sequelizejs sequelize, hackerone sequelize node module +1 moreSQL Injection in sequelizeCVE-2016-10550Fix available9.8 Critical
- sailsjs sails, hackerone sails node module +1 moreSails before 0.12.7 vulnerable to Broken CORSCVE-2016-10549Fix available4.4 Medium
- hackerone reduce-css-calc node module, reduce-css-calc project reduce-css-calc +1 moreArbitrary Code Injection in reduce-css-calcCVE-2016-10548Fix available6.1 Medium
- mozilla nunjucks, hackerone nunjucks node module +1 moreCross-Site Scripting in nunjucksCVE-2016-10547Fix available6.1 Medium
- pouchdb, hackerone pouchdb node module +1 moreArbitrary Code Injection in pouchdbCVE-2016-10546Fix available9.8 Critical
- uws project uws, hackerone uws node module +1 moreDenial of Service in uwsCVE-2016-10544Fix available5.9 Medium
- call project call, hackerone call node module +1 moreRoute Validation Bypass in callCVE-2016-10543Fix available5.3 Medium
- ws project ws, hackerone ws node module +1 moreDoS due to excessively large websocket message in wsCVE-2016-10542Fix available7.5 High
- shell-quote project shell-quote, hackerone shell-quote node module +1 morePotential Command Injection in shell-quoteCVE-2016-10541Fix available9.8 Critical
- minimatch project minimatch, hackerone minimatch node module +1 moreRegular Expression Denial of Service in minimatchCVE-2016-10540Fix available7.5 High
- negotiator project negotiator, hackerone negotiator node module +1 moreRegular Expression Denial of Service in negotiatorCVE-2016-10539Fix available7.5 High
- cli project cli, debian linux, hackerone cli node module +2 moreArbitrary File Write in cliCVE-2016-10538Fix available3.5 Low
- backbone project backbone, hackerone backbone node module +1 moreCross-Site Scripting in backboneCVE-2016-10537Fix available5.4 Medium
- socket engine.io-client, hackerone engine.io-client node module +1 moreInsecure Defaults Allow MITM Over TLS in engine.io-clientCVE-2016-10536Fix available5.9 Medium
- csrf-lite project csrf-lite, hackerone csrf-lite node module +1 moreTiming Attack in csrf-liteCVE-2016-10535Fix available5.9 Medium
- electron-packager project electron-packager, hackerone electron-packager node module +1 moreSSL Validation Defaults to False in electron-packagerCVE-2016-10534Fix available5.9 Medium
- express-restify-mongoose project express-restify-mongoose, hackerone express-restify-mongoose node module +1 morePrivate Data Disclosure in express-restify-mongooseCVE-2016-10533Fix available8.8 High
- console-io project console-io, hackerone console-io node module +1 moreAuthentication Bypass in console-ioCVE-2016-10532Fix available9.8 Critical
- marked project marked, hackerone marked node module +1 moreSanitization bypass using HTML Entities in markedCVE-2016-10531Fix available6.1 Medium
- airbrake, hackerone airbrake node module +1 moreInsecure Default Configuration in airbrakeCVE-2016-10530Fix available5.9 Medium
- droppy project droppy, hackerone droppy node module +1 moreNo CSRF Validation in droppyCVE-2016-10529Fix available8.8 High
- restafary project restafary, hackerone restafary node module +1 moreDirectory Traversal in restafaryCVE-2016-10528Fix available4.9 Medium
- Show moreLoading…