Read the docs

Haxe

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Haxe records in CISA KEV

No Haxe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Haxe 2 records LOW Haxe-dev 1 record LOW

Records

2 records in Haxe · all components

TI-2016-08729 CVE-2016-10688 · GHSA-2r9c-46v3-43fc

Cryptographic flaw in HackerOne haxe3 node module

Priority LOW 39

Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01673 Published 2018-06-04 No fix listed CWE-311
TI-2016-08643 CVE-2016-10602 · GHSA-g785-775g-f2g8

Cryptographic flaw in HackerOne haxe node module

Priority LOW 39

haxe is a cross-platform toolkit haxe downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01656 Published 2018-06-01 Fixed in 5.0.10 CWE-311
Open these records in search →