Vendors / Shiba Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Shiba Project records in CISA KEV No Shiba Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().
CVSS 3.1 HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.01552 · Published 2020-10-02 · No fix listed CWE-94
Priority LOW 29
Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01108 · Published 2018-01-03 · Fixed in 1.1.1 CWE-79
Open these records in search → All records by CVSS severity
0 1 1 0 0
