PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
octoprint OctoPrint: Stored XSS via saved connection parameters Low Risk 3.0 13 hours ago 13 hours ago
octoprint OctoPrint Unverified Password Change via Access Control Settings Medium Risk 4.2 2 years ago 2 months ago
octoprint OctoPrint has possible file exfiltration via query parameters on upload endpoints High Risk 8.0 4 months ago 2 months ago
octoprint OctoPrint has XSS in its Suppressed Command Notifications Medium Risk 6.0 4 months ago 2 months ago
octoprint OctoPrint has XSS in its Suppressed Command Notifications Unknown 4 months ago 4 months ago
octoprint OctoPrint has possible file exfiltration via query parameters on upload endpoints Unknown 4 months ago 4 months ago
octoprint OctoPrint vulnerable to XSS in Action Commands Notification and Prompt Medium Risk 6.0 1 year ago 4 months ago
octoprint OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint Medium Risk 6.5 1 year ago 4 months ago
octoprint OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication Medium Risk 5.9 9 months ago 4 months ago
octoprint OctoPrint vulnerable to possible file extraction via upload endpoints Medium Risk 5.4 1 year ago 4 months ago
octoprint OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload High Risk 8.8 1 year ago 4 months ago
octoprint OctoPrint vulnerable to XSS in Action Commands Notification and Prompt Unknown 4 months ago 4 months ago
octoprint OctoPrint vulnerable to possible file extraction via upload endpoints Medium Risk 5.4 4 months ago 4 months ago
octoprint OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication Medium Risk 5.9 4 months ago 4 months ago
octoprint OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload High Risk 8.8 4 months ago 4 months ago
octoprint OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint Medium Risk 6.5 4 months ago 4 months ago
octoprint OctoPrint does not have rate limiting on the login page Low Risk 3.7 4 years ago 4 months ago
octoprint OctoPrint does not have rate limiting on the login page Low Risk 3.7 4 months ago 4 months ago
octoprint No summary available Critical 9.4 2 years ago 5 months ago
octoprint OctoPrint has an Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled High Risk 7.1 2 years ago 5 months ago
octoprint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings Medium Risk 4.0 2 years ago 5 months ago
octoprint No summary available Medium Risk 4.8 2 years ago 5 months ago
octoprint No summary available Unknown 5 years ago 5 months ago
octoprint No summary available Unknown 5 years ago 5 months ago
octoprint No summary available Unknown 4 years ago 5 months ago
octoprint No summary available Unknown 4 years ago 5 months ago
octoprint No summary available Unknown 4 years ago 5 months ago
octoprint No summary available Unknown 4 years ago 5 months ago
octoprint No summary available High Risk 7.8 4 years ago 5 months ago
octoprint OctoPrint Authenticated Reverse Proxy Page Authentication Bypass Medium Risk 4.3 1 year ago 1 year ago
octoprint No summary available Medium Risk 4.3 1 year ago 1 year ago
octoprint OctoPrint has API key access in settings without reauthentication Medium Risk 5.3 2 years ago 1 year ago
octoprint OctoPrint Vulnerable to Reflected XSS in Jinja2 Templates Medium Risk 5.5 2 years ago 1 year ago
octoprint No summary available Medium Risk 6.1 2 years ago 1 year ago
octoprint No summary available Medium Risk 6.5 2 years ago 1 year ago
octoprint Unverified Password Change in OctoPrint Medium Risk 5.3 4 years ago 1 year ago
octoprint OctoPrint vulnerable to Special Element Injection Medium Risk 6.0 4 years ago 2 years ago
octoprint Cross-site Scripting in OctoPrint High Risk 7.5 4 years ago 2 years ago
octoprint OctoPrint Improper Privilege Management vulnerability High Risk 8.8 4 years ago 2 years ago
octoprint OctoPrint vulnerable to Insufficient Session Expiration. Medium Risk 4.4 4 years ago 2 years ago
octoprint OctoPrint Incorrect Access Control Medium Risk 6.5 4 years ago 2 years ago
octoprint OctoPrint API Error Messages vulnerable to XSS Medium Risk 6.1 4 years ago 2 years ago
octoprint OctoPrint vulnerable to Unrestricted Upload of File with Dangerous Type Low Risk 3.7 4 years ago 2 years ago
octoprint Cross-site Scripting in OctoPrint High Risk 7.5 4 years ago 2 years ago
octoprint OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine Medium Risk 6.5 3 years ago 2 years ago
octoprint No summary available Medium Risk 4.9 2 years ago 2 years ago
octoprint-slackbot Malicious code in octoprint-slackbot (npm) Unknown 4 years ago 3 years ago
octoprint No summary available Medium Risk 6.5 3 years ago 3 years ago
octoprint No summary available Unknown 4 years ago 3 years ago
octoprint No summary available Unknown 4 years ago 3 years ago
Data courtesy of OSV.dev
Page 1