# CWE-506. Every Advisory and CVE whose sources give the weakness CWE-506, newest first. ## Records, newest first (an older page) - [Malicious Package in buffermxor](https://agentprime.io/advisories/GHSA-536f-268f-6gxc.md) `GHSA-536f-268f-6gxc` · npm `buffermxor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-zor](https://agentprime.io/advisories/GHSA-f294-27fc-wgj7.md) `GHSA-f294-27fc-wgj7` · npm `buffer-zor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-yor](https://agentprime.io/advisories/GHSA-g2c4-4m64-vxm3.md) `GHSA-g2c4-4m64-vxm3` · npm `buffer-yor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xoz](https://agentprime.io/advisories/GHSA-j6x7-42x2-hpcf.md) `GHSA-j6x7-42x2-hpcf` · npm `buffer-xoz`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xov](https://agentprime.io/advisories/GHSA-3h9m-9g3g-5wqx.md) `GHSA-3h9m-9g3g-5wqx` · npm `buffer-xov`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xos](https://agentprime.io/advisories/GHSA-h2j3-gg8w-4858.md) `GHSA-h2j3-gg8w-4858` · npm `buffer-xos`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xop](https://agentprime.io/advisories/GHSA-jqjg-v355-hr9q.md) `GHSA-jqjg-v355-hr9q` · npm `buffer-xop`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xob](https://agentprime.io/advisories/GHSA-gpg2-7r7j-4pm9.md) `GHSA-gpg2-7r7j-4pm9` · npm `buffer-xob`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xo2](https://agentprime.io/advisories/GHSA-f72h-wf57-7xwh.md) `GHSA-f72h-wf57-7xwh` · npm `buffer-xo2`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xnr](https://agentprime.io/advisories/GHSA-c4hh-fg8x-6h9p.md) `GHSA-c4hh-fg8x-6h9p` · npm `buffer-xnr`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xmr](https://agentprime.io/advisories/GHSA-5327-gfq5-8f4m.md) `GHSA-5327-gfq5-8f4m` · npm `buffer-xmr`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xkr](https://agentprime.io/advisories/GHSA-rw53-q8x7-ccx8.md) `GHSA-rw53-q8x7-ccx8` · npm `buffer-xkr`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-xgr](https://agentprime.io/advisories/GHSA-mp55-2274-4pj8.md) `GHSA-mp55-2274-4pj8` · npm `buffer-xgr`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-por](https://agentprime.io/advisories/GHSA-6xg2-cf6h-x4v8.md) `GHSA-6xg2-cf6h-x4v8` · npm `buffer-por`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-hor](https://agentprime.io/advisories/GHSA-wh87-3959-vfrq.md) `GHSA-wh87-3959-vfrq` · npm `buffer-hor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffep-xor](https://agentprime.io/advisories/GHSA-73wv-v82c-xmqv.md) `GHSA-73wv-v82c-xmqv` · npm `buffep-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffer-8or](https://agentprime.io/advisories/GHSA-4hm7-73ch-vm59.md) `GHSA-4hm7-73ch-vm59` · npm `buffer-8or`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffe2-xor](https://agentprime.io/advisories/GHSA-3f97-rj68-2pjf.md) `GHSA-3f97-rj68-2pjf` · npm `buffe2-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffeb-xor](https://agentprime.io/advisories/GHSA-5ggx-g294-qj3q.md) `GHSA-5ggx-g294-qj3q` · npm `buffeb-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffdr-xor](https://agentprime.io/advisories/GHSA-8549-p68h-m9mc.md) `GHSA-8549-p68h-m9mc` · npm `buffdr-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bufder-xor](https://agentprime.io/advisories/GHSA-w9q5-mvc6-5cw3.md) `GHSA-w9q5-mvc6-5cw3` · npm `bufder-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffar-xor](https://agentprime.io/advisories/GHSA-f64g-whxf-w8f2.md) `GHSA-f64g-whxf-w8f2` · npm `buffar-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in budfer-xor](https://agentprime.io/advisories/GHSA-6584-gfwm-3vc3.md) `GHSA-6584-gfwm-3vc3` · npm `budfer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bufber-xor](https://agentprime.io/advisories/GHSA-p9g3-vpvp-hcj5.md) `GHSA-p9g3-vpvp-hcj5` · npm `bufber-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bubfer-xor](https://agentprime.io/advisories/GHSA-vm67-mh96-95mq.md) `GHSA-vm67-mh96-95mq` · npm `bubfer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in btffer-xor](https://agentprime.io/advisories/GHSA-8hrq-9wm7-v3jw.md) `GHSA-8hrq-9wm7-v3jw` · npm `btffer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bqffer-xor](https://agentprime.io/advisories/GHSA-pxqp-mv67-g528.md) `GHSA-pxqp-mv67-g528` · npm `bqffer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in beffer-xor](https://agentprime.io/advisories/GHSA-7cvf-p83w-48q6.md) `GHSA-7cvf-p83w-48q6` · npm `beffer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in b5ffer-xor](https://agentprime.io/advisories/GHSA-jvfv-jhw9-jmpp.md) `GHSA-jvfv-jhw9-jmpp` · npm `b5ffer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in uglyfi.js](https://agentprime.io/advisories/GHSA-8jf2-cq6v-w234.md) `GHSA-8jf2-cq6v-w234` · npm `uglyfi.js`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in 8.9.4](https://agentprime.io/advisories/GHSA-725f-3pw7-rq6x.md) `GHSA-725f-3pw7-rq6x` · npm `8.9.4`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in ember_cli_babe](https://agentprime.io/advisories/GHSA-vm7j-4rj6-mw2p.md) `GHSA-vm7j-4rj6-mw2p` · npm `ember_cli_babe`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in harmlesspackage](https://agentprime.io/advisories/GHSA-8hmr-w35f-3qgj.md) `GHSA-8hmr-w35f-3qgj` · npm `harmlesspackage`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in yeoman-genrator](https://agentprime.io/advisories/GHSA-f7g4-fm4c-54m9.md) `GHSA-f7g4-fm4c-54m9` · npm `yeoman-genrator`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in require-port](https://agentprime.io/advisories/GHSA-rrvm-gqq8-q2wx.md) `GHSA-rrvm-gqq8-q2wx` · npm `require-port`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in pizza-pasta](https://agentprime.io/advisories/GHSA-wxrm-2h86-v95f.md) `GHSA-wxrm-2h86-v95f` · npm `pizza-pasta`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in log-symboles](https://agentprime.io/advisories/GHSA-h232-fpqx-mqgr.md) `GHSA-h232-fpqx-mqgr` · npm `log-symboles`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in comander](https://agentprime.io/advisories/GHSA-4xg9-g7qj-jhg4.md) `GHSA-4xg9-g7qj-jhg4` · npm `comander`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bmap](https://agentprime.io/advisories/GHSA-p59g-6cqr-m73w.md) `GHSA-p59g-6cqr-m73w` · npm `bmap`: affected `=1.0.3`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in discord.js-user](https://agentprime.io/advisories/GHSA-69r6-7h4f-9p7q.md) `GHSA-69r6-7h4f-9p7q` · npm `discord.js-user`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in evil-package](https://agentprime.io/advisories/GHSA-p62r-jf56-h429.md) `GHSA-p62r-jf56-h429` · npm `evil-package`: affected `>=0.0.0`, no fixed version yet · No CVSS score · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in sparkies](https://agentprime.io/advisories/GHSA-c4fm-46gm-4469.md) `GHSA-c4fm-46gm-4469` · npm `sparkies`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in serilize](https://agentprime.io/advisories/GHSA-fw76-p9p2-6pvf.md) `GHSA-fw76-p9p2-6pvf` · npm `serilize`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in serializes](https://agentprime.io/advisories/GHSA-j899-348x-h3rq.md) `GHSA-j899-348x-h3rq` · npm `serializes`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in node-spdy](https://agentprime.io/advisories/GHSA-wfjh-3hq2-r276.md) `GHSA-wfjh-3hq2-r276` · npm `node-spdy`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in node-ftp](https://agentprime.io/advisories/GHSA-5jgp-pg4f-q8vj.md) `GHSA-5jgp-pg4f-q8vj` · npm `node-ftp`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in mysql-koa](https://agentprime.io/advisories/GHSA-x45v-pvpg-hcrh.md) `GHSA-x45v-pvpg-hcrh` · npm `mysql-koa`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in mogoose](https://agentprime.io/advisories/GHSA-5mm9-55c9-p5r7.md) `GHSA-5mm9-55c9-p5r7` · npm `mogoose`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in mogodb-core](https://agentprime.io/advisories/GHSA-g4m3-rpxr-h7vg.md) `GHSA-g4m3-rpxr-h7vg` · npm `mogodb-core`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in mogodb](https://agentprime.io/advisories/GHSA-w3pp-wp5v-fjvp.md) `GHSA-w3pp-wp5v-fjvp` · npm `mogodb`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in mogobd](https://agentprime.io/advisories/GHSA-jchg-g94r-64qg.md) `GHSA-jchg-g94r-64qg` · npm `mogobd`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in koa-body-parse](https://agentprime.io/advisories/GHSA-wqgq-mfvj-6qxp.md) `GHSA-wqgq-mfvj-6qxp` · npm `koa-body-parse`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in k0a_multer](https://agentprime.io/advisories/GHSA-v95x-h953-x7fg.md) `GHSA-v95x-h953-x7fg` · npm `k0a_multer`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-regular](https://agentprime.io/advisories/GHSA-qcc9-q247-3m2m.md) `GHSA-qcc9-q247-3m2m` · npm `js-regular`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-base64-int](https://agentprime.io/advisories/GHSA-76qf-6mvw-c5hm.md) `GHSA-76qf-6mvw-c5hm` · npm `js-base64-int`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in import-mysql](https://agentprime.io/advisories/GHSA-whjr-jj69-7prm.md) `GHSA-whjr-jj69-7prm` · npm `import-mysql`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in file-logging](https://agentprime.io/advisories/GHSA-wwwg-6r7f-9c9h.md) `GHSA-wwwg-6r7f-9c9h` · npm `file-logging`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bs85](https://agentprime.io/advisories/GHSA-gvm7-8fq3-qjj2.md) `GHSA-gvm7-8fq3-qjj2` · npm `bs85`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bs58chekc](https://agentprime.io/advisories/GHSA-fwvq-x4j9-hr5f.md) `GHSA-fwvq-x4j9-hr5f` · npm `bs58chekc`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bsae-x](https://agentprime.io/advisories/GHSA-mgff-xpg3-3gwc.md) `GHSA-mgff-xpg3-3gwc` · npm `bsae-x`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .