Vendors / Is-http2 Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Is-http2 Project records in CISA KEV No Is-http2 Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 69
All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes being employed to the isH2 function.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01055 · Published 2023-02-01 · No fix listed CWE-78
Open these records in search → All records by CVSS severity
0 1 0 0 0
