Read the docs

Eggjs

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Eggjs records in CISA KEV

No Eggjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Egg-scripts 1 record MEDIUM Extend2 1 record MEDIUM

Records

2 records

TI-2018-02779 CVE-2018-3786 · GHSA-c9j3-wqph-5xx9

Command injection in egg-scripts

Priority MEDIUM 56

A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12283 Published 2018-08-24 Fixed in 2.8.1 CWE-77
TI-2021-06166 CVE-2021-23568 · GHSA-gjm5-83cw-p3p2

Prototype pollution in extend2

Priority MEDIUM 45

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01498 Published 2022-01-07 Fixed in 1.0.1 CWE-1321
Open these records in search →