Read the docs

Taffydb

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Taffydb records in CISA KEV

No Taffydb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Taffy 1 record LOW

Records

1 record

TI-2019-08055 CVE-2019-10790 · GHSA-mxhp-79qh-mcx6

Exposure of resource to wrong sphere in taffy npm module

Priority LOW 37

taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01861 Published 2020-02-17 Partial fix CWE-668
Open these records in search →