Hello.js Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Hello.js Project records in CISA KEV

No Hello.js Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hello.js 2 records HIGH

Records

2 records in Hello.js · all components

TI-2021-08268 CVE-2021-26505 · GHSA-g3vf-47fv-8f3c

Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote…

HIGH 82

Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01144 Published 2023-08-11 Fixed in 1.18.8 CWE-1321

TI-2020-06259 CVE-2020-7741 · GHSA-7jh9-6cpf-h4m7

Cross-site scripting (XSS) in hellojs

MEDIUM 45

This affects the package hellojs before 1.18.6.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.01476 Published 2020-10-06 Fixed in 1.18.6 CWE-79

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0