Read the docs

nette

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

nette records in CISA KEV

No nette vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Latte · all components

TI-2021-06193 CVE-2021-23803 · GHSA-6pj2-5fqq-xvjc

Access control bypass in latte/latte

Priority MEDIUM 45

This affects the package latte/latte before 2.10.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01628 Published 2021-12-17 Fixed in 2.10.6 CWE-863
TI-2022-06026 CVE-2022-21648 · GHSA-36m2-8rhx-f36j

Sandbox bypass in Latte templates

Priority LOW 37

Latte is an open source template engine for PHP.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00844 Published 2022-01-04 Fixed in 2.10.8, 2.9.6 +1 CWE-79
Open these records in search →