Juce

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Juce records in CISA KEV

No Juce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Juce 2 records MEDIUM

Records

2 records

TI-2021-06156 CVE-2021-23520 · GHSA-qpj6-xj62-7c95

Arbitrary File Write via Archive Extraction (Zip Slip)

MEDIUM 44

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01094 Published 2022-01-31 No fix listed CWE-22

TI-2021-06157 CVE-2021-23521 · GHSA-cv9m-jw92-c3v3

This affects the package juce-framework/JUCE before 6.1.5.

LOW 35

This affects the package juce-framework/JUCE before 6.1.5.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00544 Published 2022-01-31 No fix listed CWE-59

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0