Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
@thi.ng/egf Project records in CISA KEVNo @thi.ng/egf Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 41
Potential for arbitrary code execution in npm package @thi.ng/egf `#gpg`-tagged property values (only if `decrypt: true` option is enabled).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01339 · Published 2021-03-30 · Fixed in 0.4.0 CWE-78
Open these records in search →