PA
Product
Package Analytics
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 7Low 0
Watch
Add Package Analytics to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-58591 | 7.5 | Oct 6 | Path Traversal Affected: All versions, or not specified |
| CVE-2025-58590 | 7.5 | Oct 6 | Path traversal Affected: through 4.6.1 |
| CVE-2025-58585 | 7.5 | Oct 6 | Sensitive Information Disclosure Through Missing Authentication Affected: All versions, or not specified |
| CVE-2025-58584 | 7.5 | Oct 6 | Plain Text Transmission of Username and Password in the URL Affected: All versions, or not specified |
| CVE-2025-9914 | 7.5 | Oct 6 | The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access Affected: All versions, or not specified |
| CVE-2025-49184 | 7.5 | Jun 12 | Information disclosure to unauthorized user Affected: All versions, or not specified |
| CVE-2020-2077 | 7.5 | Jul 29 | SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings Affected: through 04.0.0 |
Showing 7