Read the docs

Keep-module-latest Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Keep-module-latest Project records in CISA KEV

No Keep-module-latest Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Keep-module-latest 1 record MEDIUM

Records

1 record in Keep-module-latest · all components

TI-2023-11352 CVE-2023-26128 · GHSA-wxrx-pc44-rcgc

OS command injection in keep-module-latest

Priority MEDIUM 41

All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01188 Published 2023-05-27 No fix listed CWE-78
Open these records in search →