Read the docs

Muhammara Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Muhammara Project records in CISA KEV

No Muhammara Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Muhammara 3 records HIGH

Records

3 records

TI-2022-09443 CVE-2022-25885 · GHSA-frp9-2v6r-gj97

Denial of service (DoS) in muhammara

Priority HIGH 72

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01492 Published 2022-11-01 Fixed in 2.6.0, 1.0.111 CWE-20
TI-2022-09448 CVE-2022-25892 · GHSA-9cv5-4wqv-9w94

Denial of service (DoS) in muhammara

Priority HIGH 66

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01359 Published 2022-11-01 Fixed in 2.6.1, 3.1.1 +1 CWE-690
Open these records in search →