PkgSeer

Vulnerabilities

Last updated 53 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
loofah Loofah: SVG `<textPath>` and `<mpath>` bypass local-reference restriction Medium Risk 4.7 19 hours ago 19 hours ago
loofah Loofah allowed_uri? treats javascript&#x3a alert(1) as safe Medium Risk 6.0 19 hours ago 19 hours ago
loofah Loofah: CSS url() sanitization bypass via escaped parentheses Medium Risk 4.7 19 hours ago 19 hours ago
loofah Loofah: Regular expression denial of service in the SVG local-reference check Medium Risk 5.3 19 hours ago 19 hours ago
loofah Loofah: Mutation XSS in the HTML5 scrubbers through unescaped attribute values Medium Risk 6.1 20 hours ago 19 hours ago
loofah Loofah allowed_uri? treats data:text&sol;html as safe text/plain Medium Risk 6.0 19 hours ago 19 hours ago
loofah Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references Low Risk 3.0 3 months ago 2 months ago
loofah Loofah: SVG `href` attribute bypasses local-reference restriction Medium Risk 4.7 3 months ago 2 months ago
loofah Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons Low Risk 3.0 3 months ago 2 months ago
loofah Loofah has improper detection of disallowed URIs via `allowed_uri?` Low Risk 3.0 7 months ago 2 months ago
loofah Improper detection of disallowed URIs by Loofah `allowed_uri?` Low Risk 3.0 7 months ago 2 months ago
loofah Improper neutralization of data URIs may allow XSS in Loofah Medium Risk 6.1 3 years ago 1 year ago
loofah Inefficient Regular Expression Complexity in Loofah High Risk 7.5 3 years ago 1 year ago
loofah Uncontrolled Recursion in Loofah High Risk 7.5 3 years ago 1 year ago
loofah Cross-site Scripting in loofah Medium Risk 6.1 8 years ago 2 years ago
loofah Loofah Allows Cross-site Scripting Medium Risk 5.4 7 years ago 2 years ago
@loofah/fetlife-assets Malicious code in @loofah/fetlife-assets (npm) Unknown 4 years ago 3 years ago
loofah Loofah Cross-site Scripting vulnerability Medium Risk 5.4 8 years ago 3 years ago
Data courtesy of OSV.dev
Page 1