Ecosystem
Hackage
36 known vulnerabilities.
Most affected packages
git-annex 5
hackage-server 3
aeson 2
biscuit-haskell 2
x509-validation 2
base 2
cabal-install 2
scientific 2
xmonad-contrib 1
xml-conduit 1
tls-extra 1
toml-reader 1
hledger-web 1
pandoc 1
keter 1
bzlib 1
bz2 1
bzlib-conduit 1
process 1
cryptonite 1
crypton 1
xz-clib 1
spacecookie 1
x509-store 1
crypton-x509-store 1
cmark-gfm 1
Cabal 1
text-iso8601 1
crypton-x509-validation 1
crypton-x509 1
x509 1
jwt 1
warp 1
1 result · Clear filters · Feed
-
Unscored —CVE-2013-1436 Public exploit
code injection in xmonad-contrib
The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag.