Bmoor Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Bmoor Project records in CISA KEV

No Bmoor Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Bmoor · all components

TI-2021-06161 CVE-2021-23558 · GHSA-4m8h-h59m-m34j

MEDIUM 45

The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01627 Published 2022-01-28 Fixed in 0.10.1 CWE-1321

TI-2020-06254 CVE-2020-7736 · GHSA-h3rx-g5c9-8q4x

MEDIUM 45

The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01469 Published 2020-10-02 Fixed in 0.8.12 CWE-1321