Vendors / Querymen Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Querymen Project records in CISA KEV No Querymen Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01185 · Published 2022-06-17 · No fix listed CWE-1321
Priority LOW 26
querymen prior to 2.1.4 allows modification of object properties.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01156 · Published 2020-03-12 · Fixed in 2.1.4 CWE-1321
Open these records in search → All records by CVSS severity
0 1 1 0 0
