Vulnerabilities

Last updated 52 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
tough Improper uniqueness verification of signature threshold High Risk 8.6 6 years ago 2 hours ago
tough awslabs/tough is Missing Delegated Metadata Validation Medium Risk 5.9 5 months ago 1 month ago
tough awslabs/tough Delegated Roles have a Signature Threshold Bypass Medium Risk 5.3 5 months ago 1 month ago
tough-cookie tough-cookie Prototype Pollution vulnerability Medium Risk 6.5 3 years ago 1 month ago
tough Improper verification of signature threshold in tough High Risk 8.6 5 years ago 3 months ago
tough Improper sanitization of target names High Risk 8.2 4 years ago 3 months ago
tough Improper sanitization of delegated role names High Risk 8.2 4 years ago 8 months ago
tough_clam_z3n Malicious code in tough_clam_z3n (npm) Unknown 11 months ago 11 months ago
tough_minnow_jade-63 Malicious code in tough_minnow_jade-63 (npm) Unknown 11 months ago 11 months ago
tough_parrotfish_blush-79 Malicious code in tough_parrotfish_blush-79 (npm) Unknown 11 months ago 11 months ago
tough_beetle-appteadev Malicious code in tough_beetle-appteadev (npm) Unknown 11 months ago 11 months ago
tough_bedbug_z3n Malicious code in tough_bedbug_z3n (npm) Unknown 11 months ago 11 months ago
tough_swordfish_z3n Malicious code in tough_swordfish_z3n (npm) Unknown 11 months ago 11 months ago
tough_antelope_replicate_automation Malicious code in tough_antelope_replicate_automation (npm) Unknown 11 months ago 11 months ago
tough_goose_dumbs Malicious code in tough_goose_dumbs (npm) Unknown 11 months ago 11 months ago
tough_condor_z3n Malicious code in tough_condor_z3n (npm) Unknown 11 months ago 11 months ago
tough_krill_z3n Malicious code in tough_krill_z3n (npm) Unknown 11 months ago 11 months ago
tough_louse_z3n Malicious code in tough_louse_z3n (npm) Unknown 11 months ago 11 months ago
tough_tarsier_z3n Malicious code in tough_tarsier_z3n (npm) Unknown 11 months ago 11 months ago
tough_toucan_z3n Malicious code in tough_toucan_z3n (npm) Unknown 11 months ago 11 months ago
tough_wombat_z3n Malicious code in tough_wombat_z3n (npm) Unknown 11 months ago 11 months ago
tough_flyingfish_z3n Malicious code in tough_flyingfish_z3n (npm) Unknown 11 months ago 11 months ago
tough-amber-narwhal Malicious code in tough-amber-narwhal (npm) Unknown 11 months ago 11 months ago
tough-brown-baboon Malicious code in tough-brown-baboon (npm) Unknown 11 months ago 11 months ago
tough-cyan-giraffe Malicious code in tough-cyan-giraffe (npm) Unknown 11 months ago 11 months ago
tough-lime-earthworm Malicious code in tough-lime-earthworm (npm) Unknown 11 months ago 11 months ago
tough-plum-bison Malicious code in tough-plum-bison (npm) Unknown 11 months ago 11 months ago
tough_armadillo_z3n Malicious code in tough_armadillo_z3n (npm) Unknown 11 months ago 11 months ago
tough_booby_z3n Malicious code in tough_booby_z3n (npm) Unknown 11 months ago 11 months ago
tough_gorilla_z3n Malicious code in tough_gorilla_z3n (npm) Unknown 11 months ago 11 months ago
tough_owl_z3n Malicious code in tough_owl_z3n (npm) Unknown 11 months ago 11 months ago
tough_bee_z3n Malicious code in tough_bee_z3n (npm) Unknown 11 months ago 11 months ago
tough_earthworm_z3n Malicious code in tough_earthworm_z3n (npm) Unknown 11 months ago 11 months ago
tough tough timestamp metadata is cached when it fails snapshot rollback check Medium Risk 4.2 1 year ago 12 months ago
tough tough failure to detect delegated target rollback Medium Risk 4.2 1 year ago 12 months ago
tough tough terminating targets role delegations are not respected Medium Risk 4.2 1 year ago 12 months ago
tough tough root metadata version is not checked for sequential versioning Medium Risk 4.2 1 year ago 12 months ago
tough tough cyclic delegation graphs are not detected Low Risk 2.7 1 year ago 1 year ago
tough-cookie Regular Expression Denial of Service in tough-cookie High Risk 7.5 8 years ago 2 years ago
tough-cookie ReDoS via long string of semicolons in tough-cookie Medium Risk 5.3 8 years ago 2 years ago