# CWE-506. Every Advisory and CVE whose sources give the weakness CWE-506, newest first. ## Records, newest first (an older page) - [mongose is malware](https://agentprime.io/advisories/GHSA-894f-rw44-qrw5.md) `GHSA-894f-rw44-qrw5`, `CVE-2017-16077` · npm `mongose`: affected `*`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2018 · Tags: CWE-506 - [node-openssl is malware](https://agentprime.io/advisories/GHSA-j68r-23hj-xf9c.md) `GHSA-j68r-23hj-xf9c`, `CVE-2017-16064` · npm `node-openssl`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2018 · Tags: CWE-506 - [node-opensl is malware](https://agentprime.io/advisories/GHSA-646x-m363-9rh4.md) `GHSA-646x-m363-9rh4`, `CVE-2017-16063` · npm `node-opensl`: affected `*`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2018 · Tags: CWE-506 - [noderequest is malware](https://agentprime.io/advisories/GHSA-5cv7-r488-wc5x.md) `GHSA-5cv7-r488-wc5x`, `CVE-2017-16073` · npm `noderequest`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2018 · Tags: CWE-506 - [babelcli is malware](https://agentprime.io/advisories/GHSA-72hv-rp4q-q7f3.md) `GHSA-72hv-rp4q-q7f3`, `CVE-2017-16060` · npm `babelcli`: affected `<=1.0.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [ffmepg is malware](https://agentprime.io/advisories/GHSA-3wxq-7r8m-qpmg.md) `GHSA-3wxq-7r8m-qpmg`, `CVE-2017-16068` · npm `ffmepg`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [node-opencv is malware](https://agentprime.io/advisories/GHSA-4x37-5rh2-hp8c.md) `GHSA-4x37-5rh2-hp8c`, `CVE-2017-16067` · npm `node-opencv`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [opencv.js is malware](https://agentprime.io/advisories/GHSA-5hxw-r847-qfwp.md) `GHSA-5hxw-r847-qfwp`, `CVE-2017-16066` · npm `opencv.js`: affected `<=1.2.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [openssl.js is malware](https://agentprime.io/advisories/GHSA-22gq-x6pg-752j.md) `GHSA-22gq-x6pg-752j`, `CVE-2017-16065` · npm `openssl.js`: affected `>=0.0.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-433, CWE-506 - [nodemailer.js is malware](https://agentprime.io/advisories/GHSA-j866-8vxx-27hx.md) `GHSA-j866-8vxx-27hx`, `CVE-2017-16072` · npm `nodemailer.js`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [nodemailer-js is malware](https://agentprime.io/advisories/GHSA-xh56-3f5w-9h25.md) `GHSA-xh56-3f5w-9h25`, `CVE-2017-16071` · npm `nodemailer-js`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [nodecaffe is malware](https://agentprime.io/advisories/GHSA-2wpq-vvw6-67wr.md) `GHSA-2wpq-vvw6-67wr`, `CVE-2017-16070` · npm `nodecaffe`: affected `>=0.0.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-433, CWE-506 - [nodeffmpeg is malware](https://agentprime.io/advisories/GHSA-wqh4-27cc-j8f2.md) `GHSA-wqh4-27cc-j8f2`, `CVE-2017-16069` · npm `nodeffmpeg`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [smb is malware](https://agentprime.io/advisories/GHSA-vv6q-9cfw-4c83.md) `GHSA-vv6q-9cfw-4c83`, `CVE-2017-16079` · npm `smb`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [Hijacked Environment Variables in proxy.js](https://agentprime.io/advisories/GHSA-qj73-v688-wqxf.md) `GHSA-qj73-v688-wqxf`, `CVE-2017-16076` · npm `proxy.js`: affected `<=1.0.2`, no fixed version yet · No CVSS score · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [http-proxy.js is malware](https://agentprime.io/advisories/GHSA-4g54-95xv-f353.md) `GHSA-4g54-95xv-f353`, `CVE-2017-16075` · npm `http-proxy.js`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [crossenv is malware](https://agentprime.io/advisories/GHSA-c2m4-w5hm-vqjw.md) `GHSA-c2m4-w5hm-vqjw`, `CVE-2017-16074` · npm `crossenv`: affected `<=1.0.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 29 Aug 2018 · Tags: CWE-506 - [Shadowsock is malware](https://agentprime.io/advisories/GHSA-36vc-cw62-fqvr.md) `GHSA-36vc-cw62-fqvr`, `CVE-2017-16078` · npm `shadowsock`: affected `*`, no fixed version yet · No CVSS score · Not analysed yet · Published 27 Aug 2018 · Tags: CWE-506 - [discordi.js is malware](https://agentprime.io/advisories/GHSA-fv9m-f7w4-889c.md) `GHSA-fv9m-f7w4-889c`, `CVE-2017-16207` · npm `discordi.js`: affected `<=14.0.3`, no fixed version yet · CVSS 7.3 High · Not analysed yet · Published 6 Aug 2018 · Tags: CWE-506 - [jquey is malware](https://agentprime.io/advisories/GHSA-6fjr-m7v6-fpg9.md) `GHSA-6fjr-m7v6-fpg9`, `CVE-2017-16204` · npm `jquey`: affected `=1.0.1`, no fixed version yet · No CVSS score · Not analysed yet · Published 6 Aug 2018 · Tags: CWE-506 - [coffescript is malware](https://agentprime.io/advisories/GHSA-mc9x-v9xg-25pm.md) `GHSA-mc9x-v9xg-25pm`, `CVE-2017-16205` · npm `coffescript`: affected `=1.0.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2018 · Tags: CWE-506 - [coffe-script is malware](https://agentprime.io/advisories/GHSA-j49g-mp79-5vm5.md) `GHSA-j49g-mp79-5vm5`, `CVE-2017-16203` · npm `coffe-script`: affected `=1.0.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2018 · Tags: CWE-506 - [cofeescript is malware](https://agentprime.io/advisories/GHSA-m6wh-m8m8-6xx5.md) `GHSA-m6wh-m8m8-6xx5`, `CVE-2017-16202` · npm `cofeescript`: affected `=1.0.1`, no fixed version yet · No CVSS score · Not analysed yet · Published 6 Aug 2018 · Tags: CWE-506 - [d3.js is malware](https://agentprime.io/advisories/GHSA-qmjg-g86h-6rc9.md) `GHSA-qmjg-g86h-6rc9`, `CVE-2017-16044` · npm `d3.js`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2018 · Tags: CWE-506 - [node-sqlite is malware](https://agentprime.io/advisories/GHSA-x52f-h74p-9jh8.md) `GHSA-x52f-h74p-9jh8`, `CVE-2017-16048` · npm `node-sqlite`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2018 · Tags: Information disclosure, CWE-506 - [jquery.js is malware](https://agentprime.io/advisories/GHSA-jp27-cwp2-5qqr.md) `GHSA-jp27-cwp2-5qqr`, `CVE-2017-16045` · npm `jquery.js`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2018 · Tags: CWE-506 - [sqlite.js is malware](https://agentprime.io/advisories/GHSA-6f34-pq9f-36vf.md) `GHSA-6f34-pq9f-36vf`, `CVE-2017-16050` · npm `sqlite.js`: affected `<=1.0.2`, no fixed version yet · No CVSS score · Not analysed yet · Published 23 Jul 2018 · Tags: CWE-506 - [nodesqlite is malware](https://agentprime.io/advisories/GHSA-wwf2-5cj8-jx6w.md) `GHSA-wwf2-5cj8-jx6w`, `CVE-2017-16049` · npm `nodesqlite`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2018 · Tags: CWE-506 - [fabric-js is malware](https://agentprime.io/advisories/GHSA-v73m-fjxv-w4rh.md) `GHSA-v73m-fjxv-w4rh`, `CVE-2017-16053` · npm `fabric-js`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2018 · Tags: CWE-506 - [node-fabric is malware](https://agentprime.io/advisories/GHSA-gfv4-2vhm-486m.md) `GHSA-gfv4-2vhm-486m`, `CVE-2017-16052` · npm `node-fabric`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2018 · Tags: CWE-506 - [sqliter is malware](https://agentprime.io/advisories/GHSA-22j5-38qv-pxx7.md) `GHSA-22j5-38qv-pxx7`, `CVE-2017-16051` · npm `sqliter`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2018 · Tags: CWE-506 - [nodefabric is malware](https://agentprime.io/advisories/GHSA-8qp3-pvwc-2g4p.md) `GHSA-8qp3-pvwc-2g4p`, `CVE-2017-16054` · npm `nodefabric`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2018 · Tags: CWE-506 - [Withdrawn Advisory: mariadb was malware](https://agentprime.io/advisories/GHSA-85fq-56wq-gmcf.md) `GHSA-85fq-56wq-gmcf`, `CVE-2017-16046` · npm `mariadb`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 18 Jul 2018 · Tags: CWE-506 - [Malicious Package in eslint-scope](https://agentprime.io/advisories/GHSA-hxxf-q3w9-4xgw.md) `GHSA-hxxf-q3w9-4xgw` · npm `eslint-config-eslint` and 1 more: affected `>=5.0.2, <6.0.0`, fixed in `6.0.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jul 2018 · Tags: CWE-506 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .