networknt

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

networknt records in CISA KEV

No networknt vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Light-oauth2 · all components

TI-2023-15125 CVE-2023-31580 · GHSA-mx47-h5fv-ghwh

MEDIUM 60

light-oauth2 before version 2.1.27 obtains the public key without any verification.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00686 Published 2023-10-24 Fixed in 2.1.27 CWE-295