graphhopper

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

graphhopper records in CISA KEV

No graphhopper vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Graphhopper · all components

TI-2021-10214 CVE-2021-29506 · GHSA-hf44-3mx6-vhhw

LOW 32

GraphHopper is an open-source Java routing engine.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01404 Published 2021-05-13 Fixed in 2.4 CWE-400

TI-2021-06101 CVE-2021-23408 · GHSA-qhxh-9hhx-6p7v

LOW 27

This affects the package com.graphhopper:graphhopper-web-bundle before 3.2, from 4.0-pre1 and before 4.0.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01401 Published 2021-07-21 Fixed in 3.2, 4.0 CWE-1321