Agoric

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Agoric records in CISA KEV

No Agoric vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2023-20664 CVE-2023-39532 · GHSA-9c4h-3f7h-322r

HIGH 82

SES is a JavaScript environment that allows safe execution of arbitrary programs in Compartments.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01349 Published 2023-08-08 Fixed in 0.18.7, 0.15.24 +4 CWE-20

TI-2021-06169 CVE-2021-23594 · GHSA-pwm7-qr6j-3vjg

MEDIUM 46

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0182 Published 2022-01-07 No fix listed CWE-1321

TI-2021-06158 CVE-2021-23543 · GHSA-q4j7-v27r-fgcx

MEDIUM 46

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0182 Published 2022-01-07 No fix listed CWE-1321