Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Create-choo-app3 Project records in CISA KEVNo Create-choo-app3 Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 69
All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00951 · Published 2023-02-06 · No fix listed CWE-78
Open these records in search →