Read the docs

Klona Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Klona Project records in CISA KEV

No Klona Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Klona 1 record MEDIUM

Records

1 record

TI-2020-06543 CVE-2020-8125 · GHSA-8f89-2fwj-5v5r

Improper input validation in klona npm module

Priority MEDIUM 49

Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04118 Published 2020-02-04 Fixed in 1.1.1 CWE-20
Open these records in search →