PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
tuf tuf has platform-dependent delegation path matching Medium Risk 4.0 5 months ago 10 hours ago
omglucidesotuff Malicious code in omglucidesotuff (npm) Unknown 4 months ago 1 month ago
tuftool awslabs/tough is Missing Delegated Metadata Validation Medium Risk 5.9 6 months ago 2 months ago
tuftool awslabs/tough Delegated Roles have a Signature Threshold Bypass Medium Risk 5.3 6 months ago 2 months ago
github.com/theupdateframework/go-tuf/v2 go-tuf improperly validates the configured threshold for delegations Medium Risk 5.9 9 months ago 2 months ago
github.com/theupdateframework/go-tuf/v2 go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names Medium Risk 4.7 9 months ago 2 months ago
github.com/theupdateframework/go-tuf/v2 go-tuf affected by client DoS via malformed server response Medium Risk 5.9 9 months ago 2 months ago
github.com/theupdateframework/go-tuf/v2 Incorrect delegation lookups can make go-tuf download the wrong artifact High Risk 7.5 2 years ago 2 months ago
tuf Invalid root may become trusted root in The Update Framework (TUF) High Risk 8.7 6 years ago 2 months ago
nottuff11 Malicious code in nottuff11 (npm) Unknown 4 months ago 2 months ago
backupsitetuff6 Malicious code in backupsitetuff6 (npm) Unknown 4 months ago 2 months ago
desmosistuff Malicious code in desmosistuff (npm) Unknown 2 months ago 2 months ago
github.com/theupdateframework/go-tuf/v2 Client DoS via malformed server response in github.com/theupdateframework/go-tuf Unknown 9 months ago 3 months ago
timmytuffknuckles9 Malicious code in timmytuffknuckles9 (npm) Unknown 4 months ago 3 months ago
timmytuffknuckles3 Malicious code in timmytuffknuckles3 (npm) Unknown 4 months ago 3 months ago
timmytuffknuckles6 Malicious code in timmytuffknuckles6 (npm) Unknown 4 months ago 3 months ago
nottuff1 Malicious code in nottuff1 (npm) Unknown 4 months ago 3 months ago
nottuff10 Malicious code in nottuff10 (npm) Unknown 4 months ago 3 months ago
nottuff12 Malicious code in nottuff12 (npm) Unknown 4 months ago 3 months ago
nottuff13 Malicious code in nottuff13 (npm) Unknown 4 months ago 3 months ago
nottuff14 Malicious code in nottuff14 (npm) Unknown 4 months ago 3 months ago
nottuff15 Malicious code in nottuff15 (npm) Unknown 4 months ago 3 months ago
nottuff8 Malicious code in nottuff8 (npm) Unknown 4 months ago 3 months ago
nottuff9 Malicious code in nottuff9 (npm) Unknown 4 months ago 3 months ago
nottuff7 Malicious code in nottuff7 (npm) Unknown 4 months ago 3 months ago
nottuff27 Malicious code in nottuff27 (npm) Unknown 4 months ago 3 months ago
nottuff28 Malicious code in nottuff28 (npm) Unknown 4 months ago 3 months ago
nottuff29 Malicious code in nottuff29 (npm) Unknown 4 months ago 3 months ago
nottuff3 Malicious code in nottuff3 (npm) Unknown 4 months ago 3 months ago
nottuff30 Malicious code in nottuff30 (npm) Unknown 4 months ago 3 months ago
nottuff5 Malicious code in nottuff5 (npm) Unknown 4 months ago 3 months ago
nottuff6 Malicious code in nottuff6 (npm) Unknown 4 months ago 3 months ago
nottuff4 Malicious code in nottuff4 (npm) Unknown 4 months ago 3 months ago
nottuff2 Malicious code in nottuff2 (npm) Unknown 4 months ago 3 months ago
nottuff20 Malicious code in nottuff20 (npm) Unknown 4 months ago 3 months ago
nottuff21 Malicious code in nottuff21 (npm) Unknown 4 months ago 3 months ago
nottuff22 Malicious code in nottuff22 (npm) Unknown 4 months ago 3 months ago
nottuff24 Malicious code in nottuff24 (npm) Unknown 4 months ago 3 months ago
nottuff26 Malicious code in nottuff26 (npm) Unknown 4 months ago 3 months ago
nottuff23 Malicious code in nottuff23 (npm) Unknown 4 months ago 3 months ago
nottuff25 Malicious code in nottuff25 (npm) Unknown 4 months ago 3 months ago
nottuff16 Malicious code in nottuff16 (npm) Unknown 4 months ago 3 months ago
nottuff17 Malicious code in nottuff17 (npm) Unknown 4 months ago 3 months ago
nottuff18 Malicious code in nottuff18 (npm) Unknown 4 months ago 3 months ago
nottuff19 Malicious code in nottuff19 (npm) Unknown 4 months ago 3 months ago
backupsitetuff9 Malicious code in backupsitetuff9 (npm) Unknown 4 months ago 3 months ago
backupsitetuff10 Malicious code in backupsitetuff10 (npm) Unknown 4 months ago 3 months ago
backupsitetuff3 Malicious code in backupsitetuff3 (npm) Unknown 4 months ago 3 months ago
tuf Client metadata path-traversal High Risk 7.5 5 years ago 4 months ago
github.com/gittuf/gittuf gittuf's policy can be rolled back to prior valid versions Medium Risk 6.0 6 months ago 4 months ago
Data courtesy of OSV.dev
Page 1