PkgSeer

Vulnerabilities

Last updated 23 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
rsa Marvin Attack: potential key recovery through timing sidechannels Medium Risk 5.9 2 years ago 1 day ago
@flexmr/survey-conversation Malicious code in @flexmr/survey-conversation (npm) Unknown 24 days ago 11 days ago
azure-ai-language-conversations-authoring Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE Critical 9.8 9 months ago 13 days ago
spectral-corsair Malicious code in spectral-corsair (npm) Unknown 3 months ago 1 month ago
rsa rsa crate has potential panic on a prime being equal to 1 Low Risk 3.0 10 months ago 2 months ago
universal-omega/dynamic-page-list3 DynamicPageList3 vulnerability exposes hidden/suppressed usernames High Risk 8.0 1 year ago 2 months ago
ursa CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential Medium Risk 6.5 2 years ago 2 months ago
rsa Marvin Attack: potential key recovery through timing sidechannels Medium Risk 5.9 2 years ago 2 months ago
ursa Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders Medium Risk 6.5 2 years ago 2 months ago
rsa Marvin Attack: potential key recovery through timing sidechannels Medium Risk 5.9 2 years ago 2 months ago
@versacode/baileys Malicious code in @versacode/baileys (npm) Unknown 2 months ago 2 months ago
@aftersale/react-eva Malicious code in @aftersale/react-eva (npm) Unknown 1 year ago 2 months ago
@examplecorptest/hearsay-design-system-test Malicious code in @examplecorptest/hearsay-design-system-test (npm) Unknown 3 months ago 2 months ago
conversa-sdk Malicious code in conversa-sdk (npm) Unknown 4 months ago 2 months ago
org.sakaiproject.conversations:sakai-conversations-impl Sakai Conversations has a Stored XSS Issue High Risk 8.7 2 months ago 2 months ago
@onereach/step-conversation Malicious code in @onereach/step-conversation (npm) Unknown 3 months ago 3 months ago
@ornikar/babel-preset-kitt-universal Malicious code in @ornikar/babel-preset-kitt-universal (npm) Unknown 3 months ago 3 months ago
jsrsasign jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic High Risk 7.4 7 months ago 3 months ago
jsrsasign jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation Critical 9.1 7 months ago 3 months ago
jsrsasign jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputs High Risk 7.5 7 months ago 3 months ago
jsrsasign jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass High Risk 7.5 7 months ago 3 months ago
ecto-corsair-whisper-6f3b9 Malicious code in ecto-corsair-whisper-6f3b9 (npm) Unknown 5 months ago 4 months ago
azure-ai-language-conversations-authoring Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE Critical 9.8 4 months ago 4 months ago
ecto-corsair-flag-7kq3mz Malicious code in ecto-corsair-flag-7kq3mz (npm) Unknown 4 months ago 4 months ago
@malwguy/ecto-corsair-whisper-3d2a7c Malicious code in @malwguy/ecto-corsair-whisper-3d2a7c (npm) Unknown 5 months ago 5 months ago
ecto-corsair-flag-x9m4 Malicious code in ecto-corsair-flag-x9m4 (npm) Unknown 5 months ago 5 months ago
rsa No summary available Unknown 10 years ago 5 months ago
conversations-embed Malicious code in conversations-embed (npm) Unknown 1 year ago 6 months ago
conversation-relay Malicious code in conversation-relay (npm) Unknown 6 months ago 6 months ago
universal-media-player Malicious code in universal-media-player (npm) Unknown 1 year ago 6 months ago
spectral-corsair-my-backdoor Malicious code in spectral-corsair-my-backdoor (npm) Unknown 8 months ago 6 months ago
ecto-corsair-lwirz Malicious code in ecto-corsair-lwirz (npm) Unknown 7 months ago 7 months ago
corsair-module Malicious code in corsair-module (npm) Unknown 7 months ago 7 months ago
jsrsasign jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations Medium Risk 5.9 7 months ago 7 months ago
jsrsasign jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction High Risk 8.7 7 months ago 7 months ago
ersagent-frontend Malicious code in ersagent-frontend (npm) Unknown 7 months ago 7 months ago
supersafepackage Malicious code in supersafepackage (PyPI) Unknown 1 year ago 7 months ago
kersa Malicious code in kersa (PyPI) Unknown 2 years ago 7 months ago
cloudscrapersafe Malicious code in cloudscrapersafe (PyPI) Unknown 1 year ago 7 months ago
spectral-corsair-navigator Malicious code in spectral-corsair-navigator (npm) Unknown 8 months ago 7 months ago
@nguniversal/common Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline Critical 9.5 8 months ago 8 months ago
@nguniversal/express-engine Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline Critical 9.5 8 months ago 8 months ago
ansi-universal-ui Malicious code in ansi-universal-ui (npm) Unknown 9 months ago 9 months ago
universal-provider Malicious code in universal-provider (npm) Unknown 9 months ago 9 months ago
sd-active-conversation-module-client Malicious code in sd-active-conversation-module-client (npm) Unknown 9 months ago 9 months ago
sd-conversation-history-module-client Malicious code in sd-conversation-history-module-client (npm) Unknown 9 months ago 9 months ago
workvivo-anniversary-automation Malicious code in workvivo-anniversary-automation (npm) Unknown 10 months ago 10 months ago
supersafereverse Malicious code in supersafereverse (PyPI) Unknown 1 year ago 11 months ago
supersafecalc Malicious code in supersafecalc (PyPI) Unknown 1 year ago 11 months ago
tw-webkit-universal Malicious code in tw-webkit-universal (npm) Unknown 1 year ago 11 months ago
Data courtesy of OSV.dev
Page 1