Data

Tools

Indexes

Applications

Experiments

Open Collective

An open API service for software projects hosted on Open Collective.

Mozilla Corporation

Fuelling the movement for a healthy open internet
Collective - https://opencollective.com/mozilla - Website: https://mozilla.org - Code: https://github.com/mozilla

readability: GSA_kwCzR0hTQS0zcDZ2LWhyZzgtOHFqN84ABF6m

Ecosystems:
Packages:
Source:
grcov: GSA_kwCzR0hTQS1xbTJwLTR3NDUtdjJ2cs4ABEQa

Ecosystems:
Packages:
Source:
High
pdf.js: GSA_kwCzR0hTQS04N2hxLXE0Z3AtOXdyNM4AA70i
react-pdf vulnerable to arbitrary JavaScript execution upon opening a malicious PDF with PDF.js
Ecosystems: npm
Packages: react-pdf
Source: github
Published: over 2 years ago
High
pdf.js: GSA_kwCzR0hTQS13Z3JtLTY3eGYtaGhwcc4AA7z7
PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF
Ecosystems: npm
Packages: pdfjs-dist
Source: github
Published: over 2 years ago
High
sccache: GSA_kwCzR0hTQS14N2ZyLXBnOGYtOTNmNc4AAzhh
sccache vulnerable to privilege escalation if server is run as root
Ecosystems: cargo
Packages: sccache
Source: github
Published: about 3 years ago
Moderate
nunjucks: GSA_kwCzR0hTQS14NzdqLXc3d2YtZmptd84AAy5c
Nunjucks autoescape bypass leads to cross site scripting
Ecosystems: npm
Packages: nunjucks
Source: github
Published: over 3 years ago
High
node-convict: GSA_kwCzR0hTQS00anJtLWMzMngtdzRqZs4AAw3Y
convict vulnerable to Prototype Pollution
Ecosystems: npm
Packages: convict
Source: github
Published: over 3 years ago
High
hawk: GSA_kwCzR0hTQS00NHB3LWgyY3ctdzN2cc4AAgdL
Uncontrolled Resource Consumption in Hawk
Ecosystems: npm
Packages: hawk
Source: github
Published: about 4 years ago
High
pdf.js: GSA_kwCzR0hTQS03amcyLWpndjMtZm1yNM4AAT6A
Malicious PDF can inject JavaScript into PDF Viewer
Ecosystems: npm
Packages: pdfjs-dist
Source: github
Published: over 4 years ago
Critical
node-convict: GSA_kwCzR0hTQS1qamY1LXd4M2otM2Z2N84AATH2
Prototype Pollution in convict
Ecosystems: npm
Packages: convict
Source: github
Published: over 4 years ago
High
node-convict: GSA_kwCzR0hTQS14Mnc1LTcyNWotZ2YyZ809pw
Prototype Pollution in convict
Ecosystems: npm
Packages: convict
Source: github
Published: over 4 years ago
Moderate
PollBot: GSA_kwCzR0hTQS12ZzI3LWhyM3YtM2Nxds0scg
open redirect in pollbot
Ecosystems: pypi
Packages: pollbot
Source: github
Published: over 4 years ago
Moderate
bleach: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ2MngtdnJwai1xcXBx
Cross-site scripting in Bleach
Ecosystems: pypi
Packages: bleach
Source: github
Published: over 5 years ago
High
bleach: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZxaHAtY3hnYy02d21t
regular expression denial-of-service (ReDoS) in Bleach
Ecosystems: pypi
Packages: bleach
Source: github
Published: over 6 years ago
Moderate
bleach: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02eGYtZnE3cS04NzQz
Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag
Ecosystems: pypi
Packages: bleach
Source: github
Published: over 6 years ago
Moderate
bleach: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE2NW0tcHYzZi13cjVy
XSS in Bleach when noscript and raw tag whitelisted
Ecosystems: pypi
Packages: bleach
Source: github
Published: over 6 years ago
Critical
bleach: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW05bXEtcDJmOS1jZnF2
Bleach URI Scheme Restriction Bypass
Ecosystems: pypi
Packages: bleach
Source: github
Published: over 7 years ago
Moderate
nunjucks: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY3cGgtcDVydi1waHcy
Cross-Site Scripting in nunjucks
Ecosystems: npm
Packages: nunjucks
Source: github
Published: almost 8 years ago