Lucene search
+L

6 matches found

OSV
OSV
•added 2021/09/02 5:10 p.m.•37 views

GHSA-9J49-MFVP-VMHM Code Injection in pac-resolver

This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. NOTE: The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer...

8.1CVSS9.3AI score0.02943EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2021/09/02 5:10 p.m.•60 views

Code Injection in pac-resolver

This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. NOTE: The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer...

9.8CVSS2.4AI score0.02943EPSS
SaveExploits1References7Affected Software2
Prion
Prion
•added 2021/08/24 8:15 a.m.•23 views

Input validation

This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. NOTE: The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer...

7.5CVSS9.4AI score0.02943EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2021/08/24 7:45 a.m.•44 views

CVE-2021-23406 Remote Code Execution (RCE)

This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. NOTE: The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer...

8.1CVSS9.7AI score0.02943EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2021/08/24 7:43 a.m.•11 views

CVE-2021-23406

This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. NOTE: The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer...

9.8CVSS5.4AI score0.02943EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/24 12:00 a.m.•5 views

CVE-2021-23406: Undefined Security Weakness

This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. NOTE: The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer...

9.8CVSS5.9AI score0.02943EPSS
SaveExploits1References1
Rows per page
Query Builder