Keyget Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Keyget Project records in CISA KEV

No Keyget Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Keyget 2 records MEDIUM

Records

2 records

TI-2020-17166 CVE-2020-28272 · GHSA-8mp8-28xh-r486

Prototype pollution in keyget

MEDIUM 48

Prototype pollution vulnerability in 'keyget' versions 1.0.0 through 2.2.0 allows attacker to cause a denial of service and may lead to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03398 Published 2020-12-02 Fixed in 2.3.0 CWE-1321

TI-2021-06187 CVE-2021-23760 · GHSA-9fp7-4fjm-q3mf

The package keyget from 0.0.0 are vulnerable to Prototype Pollution via the methods set…

MEDIUM 45

The package keyget from 0.0.0 are vulnerable to Prototype Pollution via the methods set, push, and at which could allow an attacker to cause a denial of service and may lead to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01678 Published 2022-01-28 No fix listed CWE-1321

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0