Read the docs

Devcert Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Devcert Project records in CISA KEV

No Devcert Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Devcert 2 records MEDIUM

Records

2 records

TI-2020-06604 CVE-2020-8186 · GHSA-4228-7qvx-f4rq

Command injection in devcert

Priority MEDIUM 47

A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02774 Published 2020-07-10 Fixed in 1.1.2 CWE-77
TI-2022-01788 CVE-2022-1929 · GHSA-fp36-299x-pwmw

Exponential ReDoS in devcert

Priority LOW 34

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00641 Published 2022-06-01 Fixed in 1.2.1 CWE-1333
Open these records in search →