PkgSeer

Vulnerabilities

Last updated less than a minute ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
bbot BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction Low Risk 3.1 11 hours ago 11 hours ago
bbot No summary available Low Risk 3.1 3 months ago 11 hours ago
bbot No summary available Low Risk 3.1 3 months ago 1 month ago
bbot BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284 Medium Risk 5.3 3 months ago 3 months ago
bbot BBOT: Symlink-Following Arbitrary Write via github_workflows Module Low Risk 2.2 3 months ago 3 months ago
bbot BBOT: Arbitrary File Write in postman_download Module Medium Risk 6.5 3 months ago 3 months ago
bbot BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing Low Risk 3.1 3 months ago 3 months ago
bbot BBOT: Symlink-Following Arbitrary Write via github_workflows Module Low Risk 2.2 3 months ago 3 months ago
bbot BBOT: Arbitrary File Write in postman_download Module Medium Risk 6.5 3 months ago 3 months ago
bbot BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284 Medium Risk 5.3 3 months ago 3 months ago
bbot BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing Low Risk 3.1 3 months ago 3 months ago
bbot BBOT's gitlab.py exposes globally configured "gitlab" API key Medium Risk 4.7 11 months ago 3 months ago
bbot BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver Medium Risk 4.7 1 year ago 3 months ago
bbot BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver Medium Risk 4.7 3 months ago 3 months ago
bbot BBOT's gitlab.py exposes globally configured "gitlab" API key Medium Risk 4.7 3 months ago 3 months ago
bbot BBOT's various issues in unarchive.py can cause arbitrary file write and RCE Critical 9.6 3 months ago 3 months ago
bbot BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE Critical 9.6 3 months ago 3 months ago
bbot BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE Critical 9.6 1 year ago 3 months ago
bbot BBOT's various issues in unarchive.py can cause arbitrary file write and RCE Critical 9.6 1 year ago 3 months ago
test-mlw2-label-spink-snide-abbot Malicious code in test-mlw2-label-spink-snide-abbot (npm) Unknown 1 year ago 1 year ago
@malware-test-abbot-roars-newly-grain/test-mlw3-abbot-roars-newly-grain Malicious code in @malware-test-abbot-roars-newly-grain/test-mlw3-abbot-roars-newly-grain (npm) Unknown 1 year ago 1 year ago
@malware-test-label-spink-snide-abbot/test-mlw3-label-spink-snide-abbot Malicious code in @malware-test-label-spink-snide-abbot/test-mlw3-label-spink-snide-abbot (npm) Unknown 1 year ago 1 year ago
Data courtesy of OSV.dev
Page 1