Advisories · Weakness

CWE-506.

Every Advisory and CVE whose sources give the weakness CWE-506, newest first.

body-parse-xml npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in body-parse-xml
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-jcmh-9fvm-j39w Not analysed yet 3 Sept 2020
cionstring npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in cionstring
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-xh8g-j88w-6v59 Not analysed yet 3 Sept 2020
coinstirng npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in coinstirng
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-ff6g-gm92-rf32 Not analysed yet 3 Sept 2020
coinpayment npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in coinpayment
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-3h99-v4qw-p2h5 Not analysed yet 3 Sept 2020
coinstrng npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in coinstrng
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-hj5w-xgw9-w4rj Not analysed yet 3 Sept 2020
coinstrig npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in coinstrig
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-4m3j-h8f2-4xh4 Not analysed yet 3 Sept 2020
colne npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in colne
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-mhxg-pr3j-v9gr Not analysed yet 3 Sept 2020
axioss npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in axioss
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-8w9j-6wg6-qv4f Not analysed yet 3 Sept 2020
commandre npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in commandre
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-r8hx-3qx6-hxq9 Not analysed yet 3 Sept 2020
commanedr npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in commanedr
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-xcgx-27q5-7634 Not analysed yet 3 Sept 2020
conistring npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in conistring
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-cfc5-x58f-869w Not analysed yet 3 Sept 2020
crpyto-js npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in crpyto-js
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-73c6-vwjh-g3qh Not analysed yet 3 Sept 2020
axios-http npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in axios-http
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-r2rg-683g-ff96 Not analysed yet 3 Sept 2020
crytpo-js npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in crytpo-js
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-m4fq-xh7w-jhfm Not analysed yet 3 Sept 2020
bb-builder npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in bb-builder
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-vm6v-w6q2-mrrq Not analysed yet 3 Sept 2020
zemen npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in zemen
- CWE-506
>=0.0.5, <0.0.6 · fixed in 0.0.6

GHSA-377f-vvrc-9wgg Not analysed yet 3 Sept 2020
cal_rd npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in cal_rd
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-226w-6hhj-69hp Not analysed yet 3 Sept 2020
anarchy npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in anarchy
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-jjhg-qw5v-r8xx Not analysed yet 3 Sept 2020
fast-requests npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in fast-requests
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-wjf2-7f9g-86f5 Not analysed yet 3 Sept 2020
cage-js npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in cage-js
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-jf8x-wg7f-p3w8 Not analysed yet 3 Sept 2020
rate-map npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in rate-map
- CWE-506
>=1.0.3, <1.0.5 · fixed in 1.0.5

GHSA-x48m-gp6r-gp4v Not analysed yet 3 Sept 2020
load-from-cwd-or-npm npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in load-from-cwd-or-npm
- CWE-506
>=3.0.2, <3.0.4 · fixed in 3.0.4

GHSA-jxf5-7x3j-8j9m Not analysed yet 3 Sept 2020
nodes.js npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in nodes.js
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-38vq-cjh5-vw7x Not analysed yet 3 Sept 2020
deasyncp npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in deasyncp
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-qfc9-x7gv-27jr Not analysed yet 3 Sept 2020
sdfjghlkfjdshlkjdhsfg npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in sdfjghlkfjdshlkjdhsfg
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-gcfc-mgg3-8j2c Not analysed yet 3 Sept 2020
tiar npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in tiar
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-4hjg-w3ww-38c6 Not analysed yet 3 Sept 2020
secure_identity_login_module npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in secure_identity_login_module
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-59x8-7wx6-4hj9 Not analysed yet 3 Sept 2020
river-mock npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in river-mock
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-2h3x-95c6-885r Not analysed yet 3 Sept 2020
retcodelog npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in retcodelog
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-j8hw-49gg-vq3w Not analysed yet 3 Sept 2020
qingting npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in qingting
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-559q-92vx-xvjp Not analysed yet 3 Sept 2020
node-buc npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in node-buc
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-x3m6-rprw-862w Not analysed yet 3 Sept 2020
midway-dataproxy npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in midway-dataproxy
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-mq9h-cwc2-6j5r Not analysed yet 3 Sept 2020
midway-xtpl npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in midway-xtpl
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-w65v-hx54-xrqx Not analysed yet 3 Sept 2020
hsf-clients npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in hsf-clients
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-g5q2-fcg9-j526 Not analysed yet 3 Sept 2020
luna-mock npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in luna-mock
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-qm4q-f956-fg64 Not analysed yet 3 Sept 2020
hpmm npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in hpmm
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-vxfp-qmpq-6826 Not analysed yet 3 Sept 2020
cicada-render npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in cicada-render
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-6m6m-j2hm-pxrg Not analysed yet 3 Sept 2020
diamond-clien npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in diamond-clien
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-86gv-xpwv-jprc Not analysed yet 3 Sept 2020
appx-compiler npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in appx-compiler
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-8q2c-2396-hf7j Not analysed yet 3 Sept 2020
antd-cloud npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in antd-cloud
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-j4vm-hg8g-g9qv Not analysed yet 3 Sept 2020
alipayjsapi npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in alipayjsapi
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-rjhc-w3fj-j6x9 Not analysed yet 3 Sept 2020
alico npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in alico
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-jfx5-7mr2-g8hg Not analysed yet 3 Sept 2020
ali-contributors npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in ali-contributors
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-8m5v-f2wp-wqr9 Not analysed yet 3 Sept 2020
ali-contributor npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in ali-contributor
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-h3m2-h22h-695r Not analysed yet 3 Sept 2020
only-test-not-install npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in only-test-not-install
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-g9wf-393q-4w38 Not analysed yet 3 Sept 2020
my-very-own-package npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in my-very-own-package
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-crr2-ph72-c52g Not analysed yet 3 Sept 2020
maybemaliciouspackage npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in maybemaliciouspackage
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-m9r7-q9fc-qwx5 Not analysed yet 3 Sept 2020
leetlog npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in leetlog
- CWE-506
>=0.1.2 · no fixed version yet

GHSA-gfm8-g3vm-53jh Not analysed yet 3 Sept 2020
malicious-do-not-install npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in malicious-do-not-install
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-6879-xr95-5gf4 Not analysed yet 3 Sept 2020
rpc-websocket npm

CVSS 9.8 CriticalCritical · CVSS 9+

Malicious Package in rpc-websocket
- CWE-506
>=0.7.7 · no fixed version yet

GHSA-x87g-rgrh-r6g3 Not analysed yet 3 Sept 2020
cxt npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in cxt
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-fpgg-r39h-3x5x Not analysed yet 3 Sept 2020
degbu npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in degbu
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-xr3g-4gg5-w3wq Not analysed yet 3 Sept 2020
ecruve npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in ecruve
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-fpf2-pr3j-4cm3 Not analysed yet 3 Sept 2020
dhkey npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in dhkey
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-qxrj-x7rm-2h49 Not analysed yet 3 Sept 2020
ecuvre npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in ecuvre
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-cgvm-rvfv-c92r Not analysed yet 3 Sept 2020
fs-extar npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in fs-extar
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-435c-qcpm-wjw5 Not analysed yet 3 Sept 2020
hdeky npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in hdeky
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-255r-pghp-r5wh Not analysed yet 3 Sept 2020
hdkye npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in hdkye
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-8pwx-j4r6-5v38 Not analysed yet 3 Sept 2020
hw-trnasport-u2f npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in hw-trnasport-u2f
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-4363-x42f-xph6 Not analysed yet 3 Sept 2020
path-to-regxep npm

CVSS 9.1 CriticalCritical · CVSS 9+

Malicious Package in path-to-regxep
- CWE-506
>=0.0.0 · no fixed version yet

GHSA-f7gc-6hcj-wc42 Not analysed yet 3 Sept 2020