Aegir Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Aegir Project records in CISA KEV

No Aegir Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aegir 2 records MEDIUM

Records

2 records

TI-2020-08933 CVE-2020-11059 · GHSA-qfcv-5whw-7pcw

Exposure of Sensitive Information to an Unauthorized Actor in AEgir

MEDIUM 43

In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0112 Published 2020-05-27 Fixed in 21.10.1 CWE-200

TI-2017-11944 CVE-2017-16225 · GHSA-6xhf-x49c-m5m6

Information disclosure in HackerOne aegir node module

LOW 35

aegir is a module to help automate JavaScript project management.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01158 Published 2018-06-07 Fixed in 12.0.8 CWE-200

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0