Read the docs

Config-handler Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Config-handler Project records in CISA KEV

No Config-handler Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

TI-2021-06139 CVE-2021-23448 · GHSA-2w3f-9w3q-qw77

Prototype pollution in config-handler

Priority MEDIUM 44

All versions of package config-handler are vulnerable to Prototype Pollution when loading config files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01193 Published 2021-10-11 No fix listed CWE-1321
Open these records in search →