Dependabot Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Dependabot Project records in CISA KEV

No Dependabot Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2020-16043 CVE-2020-26222 · GHSA-23f7-99jx-m54r

MEDIUM 44

Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03088 Published 2020-11-13 Fixed in 0.125.1 CWE-74