Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
certifi
|
certifi bundles emSign root CAs with compromised intermediate CA keys | Critical 9.5 | 8 hours ago | 5 hours ago |
|
certifi
|
certifi bundles emSign root CAs with compromised intermediate CA keys | Unknown | 6 hours ago | 5 hours ago |
@quasar/ssl-certificate
|
Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions | High Risk 8.0 | 13 days ago | 13 days ago |
steeltoe.security.authorization.certificate
|
Steeltoe: Header-forwarded client cert lacks proof of private-key possession | Medium Risk 6.5 | 1 month ago | 1 month ago |
github.com/smallstep/certificates
|
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) | Critical 10.0 | 7 months ago | 1 month ago |
|
github.com/smallstep/certificates
|
Step CA Has Authorization Bypass in ACME and SCEP Provisioners | Critical 10.0 | 10 months ago | 1 month ago |
|
github.com/smallstep/certificates
|
step-ca Has Improper Authorization Check for SSH Certificate Revocation | Medium Risk 5.0 | 10 months ago | 1 month ago |
|
certifi
|
Certifi removes GLOBALTRUST root certificate | Low Risk 3.0 | 2 years ago | 1 month ago |
|
certifi
|
Removal of e-Tugra root certificate | High Risk 7.5 | 3 years ago | 1 month ago |
|
selfsigned-certificate
|
Malicious code in selfsigned-certificate (npm) | Unknown | 1 month ago | 1 month ago |
|
self-certificates
|
Malicious code in self-certificates (npm) | Unknown | 1 month ago | 1 month ago |
|
certificates-revocation-sw
|
Malicious code in certificates-revocation-sw (npm) | Unknown | 2 months ago | 2 months ago |
|
certificates-revocation-utils
|
Malicious code in certificates-revocation-utils (npm) | Unknown | 2 months ago | 2 months ago |
|
self-certificate
|
Malicious code in self-certificate (npm) | Unknown | 4 months ago | 3 months ago |
|
github.com/smallstep/certificates
|
Step CA affected by an index out of bounds panic in TPM attestation EKU validation | Low Risk 3.7 | 6 months ago | 3 months ago |
|
github.com/smallstep/certificates
|
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates | Unknown | 3 months ago | 3 months ago |
|
certifi
|
No summary available | High Risk 7.5 | 2 years ago | 4 months ago |
|
@cloudplatform-single-spa/certificate-manager
|
Malicious code in @cloudplatform-single-spa/certificate-manager (npm) | Unknown | 4 months ago | 4 months ago |
|
github.com/smallstep/certificates
|
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates | Unknown | 7 months ago | 6 months ago |
|
client-certificate-auth
|
client-certificate-auth Vulnerable to Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect | Medium Risk 6.1 | 8 months ago | 8 months ago |
|
github.com/smallstep/certificates
|
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates | Unknown | 10 months ago | 8 months ago |
|
github.com/smallstep/certificates
|
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates | Unknown | 10 months ago | 8 months ago |
|
certifications
|
Malicious code in certifications (PyPI) | Unknown | 1 year ago | 10 months ago |
|
certifiq
|
Malicious code in certifiq (PyPI) | Unknown | 1 year ago | 1 year ago |
|
certifiy
|
Malicious code in certifiy (PyPI) | Unknown | 1 year ago | 1 year ago |
|
certifii
|
Malicious code in certifii (PyPI) | Unknown | 1 year ago | 1 year ago |
|
certifij
|
Malicious code in certifij (PyPI) | Unknown | 1 year ago | 1 year ago |
|
certifia
|
Malicious code in certifia (PyPI) | Unknown | 1 year ago | 1 year ago |
|
@espace-client-axafr/certificate-auto
|
Malicious code in @espace-client-axafr/certificate-auto (npm) | Unknown | 1 year ago | 1 year ago |
|
gsf.certificate-list
|
Malicious code in gsf.certificate-list (npm) | Unknown | 1 year ago | 1 year ago |
|
certifi
|
Certifi removing TrustCor root certificate | Medium Risk 6.8 | 3 years ago | 1 year ago |
|
oci.dotnetsdk.certificates.net
|
Malicious code in OCI.DotNetSDK.Certificates.Net (NuGet) | Unknown | 2 years ago | 1 year ago |
|
oci.dotnetsdk.certificatesmanagement.net
|
Malicious code in OCI.DotNetSDK.Certificatesmanagement.Net (NuGet) | Unknown | 2 years ago | 1 year ago |
|
azure-keyvault-certificates-ts
|
Malicious code in azure-keyvault-certificates-ts (npm) | Unknown | 4 years ago | 2 years ago |
|
azure-keyvault-certificates
|
Malicious code in azure-keyvault-certificates (npm) | Unknown | 4 years ago | 2 years ago |
|
keyvault-certificates
|
Malicious code in keyvault-certificates (npm) | Unknown | 4 years ago | 2 years ago |
|
azure-keyvault-certificates-samples-ts
|
Malicious code in azure-keyvault-certificates-samples-ts (npm) | Unknown | 4 years ago | 2 years ago |
|
perf-keyvault-certificates
|
Malicious code in perf-keyvault-certificates (npm) | Unknown | 4 years ago | 2 years ago |
|
certificate-maker
|
Malicious code in certificate-maker (npm) | Unknown | 4 years ago | 2 years ago |
|
@azure-tests/perf-keyvault-certificates
|
Malicious code in @azure-tests/perf-keyvault-certificates (npm) | Unknown | 4 years ago | 2 years ago |
|
azure-keyvault-certificates-js
|
Malicious code in azure-keyvault-certificates-js (npm) | Unknown | 4 years ago | 2 years ago |
|
certifi
|
No summary available | Unknown | 3 years ago | 2 years ago |
|
certifi
|
No summary available | Unknown | 3 years ago | 2 years ago |
|
system.security.cryptography.x509certificates
|
Improper Certificate Validation | High Risk 7.5 | 4 years ago | 2 years ago |
Page 1