Read the docs

Svix

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Svix records in CISA KEV

No Svix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Svix-webhooks 1 record MEDIUM

Records

1 record

TI-2024-14248 CVE-2024-21491 · GHSA-747x-5m58-mq97

Authentication bypass in svix

Priority MEDIUM 62

Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0041 Published 2024-02-13 Fixed in 1.17.0 CWE-288
Open these records in search →