Vulnerabilities (CVE)

Filtered by vendor Is-http2 Project Subscribe
Filtered by product Is-http2
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-25906 1 Is-http2 Project 1 Is-http2 2024-11-21 N/A 7.4 HIGH
All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes being employed to the isH2 function.