TI-2017-11802 CVE-2017-16081 · GHSA-hwhq-3hrj-v6v5
Information disclosure in HackerOne cross-env.js node module
Priority LOW 35
cross-env.js was a malicious module published with the intent to hijack environment variables.
Cross-env.js Project
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Cross-env.js Project records in CISA KEVNo Cross-env.js Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record