Gfe-sass Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Gfe-sass Project records in CISA KEV

No Gfe-sass Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2017-11761 CVE-2017-16040 · GHSA-72q2-5rxx-xfff

LOW 39

gfe-sass is a library for promises (CommonJS/Promises/A,B,D) gfe-sass downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01656 Published 2018-06-04 No fix listed CWE-311