Read the docs

hyperium

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

hyperium records in CISA KEV

No hyperium vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

14 records

TI-2023-11846 CVE-2023-26964 · GHSA-f8vr-r385-rh5r

An issue was discovered in hyper v0.13.7.

Priority HIGH 72

An issue was discovered in hyper v0.13.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01121 Published 2023-04-11 Fixed in 0.3.17 CWE-770
Priority HIGH 72

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01076 Published 2023-02-21 No fix listed CWE-770
Priority LOW 37

Tonic is a native gRPC client & server implementation with async/await support.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00622 Published 2024-10-01 Fixed in 0.12.3 CWE-755
Priority LOW 34

util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an initial numeric value on an /etc/passwd line, and then issuing a "docker exec"…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00423 Published 2018-04-09 No fix listed CWE-838
TI-2024-01106 CVE-2024-1191 · GHSA-xpmj-434v-j6xg

Hyper CdCatalog HCF File denial of service

Priority LOW 25

A vulnerability was found in Hyper CdCatalog 2.3.1.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00419 Published 2024-02-02 No fix listed CWE-404
Open these records in search →