Cofeescript Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Cofeescript Project records in CISA KEV

No Cofeescript Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Cofeescript · all components

TI-2017-11921 CVE-2017-16202 · GHSA-m6wh-m8m8-6xx5

LOW 35

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01158 Published 2018-06-07 No fix listed CWE-506