Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Codecept records in CISA KEVNo Codecept vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function (lib/utils.js).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02169 · Published 2025-09-08 · Fixed in 3.7.5 CWE-77
Open these records in search →