crcn

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

crcn records in CISA KEV

No crcn vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-58750 CVE-2026-85625 · GHSA-8pfg-3p4c-36vm

sift 17.1.3 Prototype Pollution Remote Code Execution via $where

MEDIUM 43

sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00735 Published 2026-09-04 Fix deferred CWE-1321

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0