6 matches found
CVE-2022-21671
@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...
CVE-2022-21671 Potential exposure of Replit tokens to an Unauthorized Actor in @replit/crosis
@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...
@scoder12/replitcli (>=0.1.0, <=0.1.2), ezcrosis (>=0.0.1, <=0.3.3) +2 more potentially affected by CVE-2022-21671 via @replit/crosis (>=2.3.0, <=6.3.0)
@replit/crosis NPM version =2.3.0, =0.1.0, =0.0.1, =0.1.3, =0.3.1 - replitcli 1.0.3 Source cves: CVE-2022-21671 Source advisory: MEND:CVE-2022-21671...
CVE-2022-21671
@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...
PT-2022-15025 · Replit · @Replit/Crosis
Name of the Vulnerable Software and Affected Versions: @replit/crosis versions prior to 7.3.1 Description: A vulnerability exists that involves exposure of sensitive information. When using the library to communicate with Replit in a standalone fashion, if there are multiple failed attempts to...
CVE-2022-21671: Exposure of Sensitive Information to an Unauthorized Actor
@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...