Filtered by vendor Eggjs
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-23568 | 1 Eggjs | 1 Extend2 | 2024-11-21 | 7.5 HIGH | 7.3 HIGH |
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge. | |||||
CVE-2018-3786 | 1 Eggjs | 1 Egg-scripts | 2024-11-21 | 10.0 HIGH | 9.8 CRITICAL |
A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument. |