Read the docs

Dependabot Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Dependabot Project records in CISA KEV

No Dependabot Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Dependabot · all components

TI-2020-16043 CVE-2020-26222 · GHSA-23f7-99jx-m54r

Remote code execution in dependabot-core

Priority MEDIUM 44

Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03088 Published 2020-11-13 Fixed in 0.125.1 CWE-74
Open these records in search →