PkgSeer

Vulnerabilities

Last updated 30 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
drupal/wordsonline_connector No summary available Unknown 4 hours ago 1 hour ago
ecto Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto Unknown 8 hours ago 7 hours ago
nulio-connector Malicious code in nulio-connector (npm) Unknown 1 day ago 19 hours ago
@goparrot-dashboard/franchise-directory Malicious code in @goparrot-dashboard/franchise-directory (npm) Unknown 2 days ago 1 day ago
@dmangal/curse-dependent-ecto Malicious code in @dmangal/curse-dependent-ecto (npm) Unknown 6 days ago 1 day ago
mysqlconnector MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified) Medium Risk 6.0 7 days ago 7 days ago
postcss-selector-parser PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion Medium Risk 5.9 29 days ago 9 days ago
drupal/sector No summary available Unknown 14 days ago 14 days ago
llama-index-vector-stores-duckdb LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id Critical 9.8 1 year ago 20 days ago
llama-index-vector-stores-duckdb LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id Critical 9.8 20 days ago 20 days ago
snowflake-connector-python Snowflake drivers writes sensitive information to logs Medium Risk 6.5 29 days ago 20 days ago
snowflake-connector-python Snowflake drivers writes sensitive information to logs Medium Risk 6.5 20 days ago 20 days ago
connector-agent Malicious code in connector-agent (npm) Unknown 27 days ago 27 days ago
vectorizers Malicious code in vectorizers (npm) Unknown 28 days ago 28 days ago
cloak_ecto Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds Unknown 29 days ago 29 days ago
github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension Authenticate method auth bypass in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension Unknown 4 months ago 1 month ago
org.geysermc:connector User impersonation due to incorrect handling of the login JWT High Risk 7.4 5 years ago 1 month ago
org.jenkins-ci.plugins:active-directory Jenkins Active Directory Plugin has an LDAP injection vulnerability Low Risk 3.7 4 months ago 1 month ago
rack_envinspector Malicious code in rack_envinspector (RubyGems) Unknown 2 years ago 1 month ago
snowflake-connector-python Snowflake Connector for Python improperly verifies TLS hostnames Critical 9.5 3 months ago 1 month ago
snowflake-connector-python Snowflake Connector for Python improperly verifies TLS hostnames Unknown 1 month ago 1 month ago
org.springframework.ai:spring-ai-advisors-vector-store Spring AI: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage High Risk 7.5 5 months ago 1 month ago
github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay High Risk 8.1 6 months ago 1 month ago
github.com/neuvector/neuvector NeuVector admin account has insecure default password Critical 9.8 1 year ago 1 month ago
redshift-connector Amazon Redshift Python Connector vulnerable to SQL Injection High Risk 8.0 1 year ago 1 month ago
postcss-selector-parser postcss-selector-parser allows denial of service through uncontrolled AST recursion Medium Risk 4.3 5 months ago 1 month ago
redshift-connector amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection Critical 9.8 5 months ago 1 month ago
github.com/neuvector/scanner NeuVector scanner insecurely handles passwords as command arguments Low Risk 3.8 8 months ago 1 month ago
aws-sdk-clouddirectory AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
aws-sdk-directory AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
aws-sdk-directoryservicedata AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
aws-sdk-frauddetector AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
aws-sdk-inspector AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
aws-sdk-inspector2 AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
aws-sdk-inspectorscan AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
aws-sdk-pcaconnectorad AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
aws-sdk-pcaconnectorscep AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
aws-sdk-s3vectors AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 10 months ago 1 month ago
github.com/neuvector/neuvector NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) High Risk 8.8 10 months ago 1 month ago
github.com/neuvector/neuvector NeuVector telemetry sender is vulnerable to MITM and DoS High Risk 8.6 1 year ago 1 month ago
github.com/neuvector/neuvector NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow Critical 9.9 1 year ago 1 month ago
github.com/neuvector/neuvector NeuVector is shipping cryptographic material into its binary Medium Risk 6.5 1 year ago 1 month ago
github.com/neuvector/neuvector NeuVector process with sensitive arguments lead to leakage Medium Risk 5.3 1 year ago 1 month ago
github.com/neuvector/neuvector NeuVector has an insecure password storage and is vulnerable to rainbow attack Medium Risk 5.3 1 year ago 1 month ago
redshift-connector Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin High Risk 7.5 1 year ago 1 month ago
snowflake-connector-python snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache Medium Risk 6.7 1 year ago 1 month ago
snowflake-connector-python snowflake-connector-python vulnerable to insecure cache files permissions Medium Risk 4.4 1 year ago 1 month ago
snowflake-connector-python snowflake-connector-python vulnerable to SQL Injection in write_pandas High Risk 7.0 1 year ago 1 month ago
snowflake-connector-python The Snowflake Connector for Python stores sensitive data in logs Medium Risk 5.5 2 years ago 1 month ago
mysql-connector-python MySQL Connector/Python connector takeover vulnerability High Risk 7.5 2 years ago 1 month ago
Data courtesy of OSV.dev
Page 1