Vendors / Haskell Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Haskell records in CISA KEV No Haskell vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06827 · Published 2024-04-10 · No fix listed CWE-77
Priority LOW 35
haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections
CVSS 3.1 HIGH 7.4· Network · No auth · No interaction · EPSS 0.01047 · Published 2019-12-05 · Fixed in 0.6.1 CWE-20
Priority LOW 34
A vulnerability was found in xml-conduit.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00843 · Published 2022-12-18 · No fix listed CWE-404
Priority LOW 30
The aeson library is not safe to use to consume untrusted JSON input.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00852 · Published 2022-10-10 · No fix listed CWE-328
Open these records in search → All records by CVSS severity
1 2 1 0 0
