Keep-module-latest Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Keep-module-latest Project records in CISA KEV

No Keep-module-latest Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Keep-module-latest 1 record MEDIUM

Records

1 record

TI-2023-11352 CVE-2023-26128 · GHSA-wxrx-pc44-rcgc

OS command injection in keep-module-latest

MEDIUM 41

All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01188 Published 2023-05-27 No fix listed CWE-78

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0