Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
godotengine records in CISA KEVNo godotengine vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 48
In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03443 · Published 2019-05-31 · No fix listed CWE-502
Priority LOW 39
Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03785 · Published 2018-08-20 · No fix listed CWE-131
Open these records in search →